EP4694713A1

EP4694713A1 - Unlocking an aerosol-generating system for use

Info

Publication number: EP4694713A1
Application number: EP24717230.7A
Authority: EP
Inventors: Karl Baumgartner; Andrew James MCLAUCHLAN; Loic SAMSON
Original assignee: Philip Morris Products SA
Current assignee: Philip Morris Products SA
Priority date: 2023-04-13
Filing date: 2024-04-12
Publication date: 2026-02-18
Also published as: JP2026509880A; CN120916659A; WO2024213727A1; KR20250165679A

Abstract

There is provided an aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol, the aerosol-generating system configured to determine whether at least one unlocking condition is fulfilled, and maintain the aerosol-generating system in the unlocked state upon confirming that the unlocking condition is met.

Description

UNLOCKING AN AEROSOL-GENERATING SYSTEM FOR USE

The present disclosure generally relates to the field of aerosol-generating systems and devices for generating aerosol. In particular, the present disclosure relates to electronic aerosol-generating devices and systems configured to generate aerosol inhalable by a user, for example based on heating at least a part of an aerosol-generating article or substrate. The present disclosure further relates to use of an aerosol-generating device or system, to a method of controlling an aerosol-generating device or system, to a corresponding computer program and to a computer-readable medium storing such computer program.

The aerosol-generating system may comprise an aerosol-generating device and optionally also a companion device for storing and/or charging the aerosol-generating device. The aerosol-generating device may be designed as a handheld device that can be used by a user for consuming, for instance in one or more usage sessions, aerosol generated by an aerosol-generating article. The aerosol-generating article may comprise an aerosol-forming substrate, such as a tobacco or nicotine containing substrate, often in the form of a stick. The stick can be configured in shape and size to be inserted at least partially into the aerosol - generating device, which may comprise a heating element for heating the aerosol-forming substrate to generate aerosol, for example nicotine-containing aerosol. Other exemplary aerosol-generating articles may comprise a cartridge containing a liquid, optionally nicotine- containing liquid, that can be vaporized based on heating the liquid to generate aerosol, for example nicotine-containing aerosol. Such cartridges can also be configured in shape and size to be inserted at least partially into the aerosol-generating device. Alternatively, the cartridge may be fixedly mounted to the aerosol-generating device and refillable with liquid.

It may be desirable to limit or restrict use of an aerosol-generating system or aerosolgenerating device to generate aerosol to one or more particular users, for example to authorized users. In particular, it may be desirable to perform user access prevention (UAP) and/or youth access prevention (YAP) methods to prevent unauthorized or underage users from accessing and using such aerosol-generating devices or systems. Existing UAP and YAP methods commonly require a Bluetooth Low Energy (BLE) connection or wired connection, for example via USB, to unlock an aerosol-generating system for use. The aerosol-generating system must pair correctly with an external computing device such as a smartphone or PC, which exchanges information with a server to obtain an unlock grant for unlocking the aerosolgenerating system. To identify a user of the smartphone and/or to check their age or authorization, dedicated means at the computing device like fingerprint sensor or camera for picture identification, or e.g. an additional secure code given only to the computing device’s owner or user, can be used. Corresponding data related to the user and/or aerosol-generating system can, for example, be stored in a database at a server to associate the aerosolgenerating system with the computing device, such as the smartphone of the user. When purchased by a user, an aerosol-generating system or device can be in a locked state, in which the device cannot be operated by the user to generate aerosol. UAP and/or YAP control of the aerosol-generating device or system is usually performed once at the beginning of the lifetime of the aerosol-generating system, for example when purchased at a retail store, to ensure it is purchased by an authorized user, for example a user of legal age. Optionally, such aerosol-generating system may require re-authorization via BLE pairing or wired connection of the aerosol-generating system or device to the associated computing device before or at the start of a usage session in order to generate aerosol.

Establishing wired connection between the aerosol-generating system and the computing to system may be inconvenient for users, and may not even be available with some computing devices. Regarding unlocking based on BLE pairing, on the other hand, observations have shown that some computing devices, and thus also aerosol-generating systems, have difficulty in successfully completing the BLE pairing process, particularly with Android-based external computing devices or smartphones. Prior to the commercial launch of the aerosol-generating system, exhaustive testing is usually performed to identify and resolve any BLE incompatibilities. However, new external computing devices are released throughout the lifetime of the aerosol-generating system, while even previously compatible devices can become incompatible after firmware updates. Undertaking action to resolve such incompatibilities can be time consuming and expensive and typically require modification of the firmware of the aerosol-generating system. Until the new firmware is released, affected systems cannot be unlocked using BLE. Even once a firmware update for the aerosolgenerating system is released, affected systems may not be updated using BLE due to the pairing issue.

It is therefore preferable to provide for an improved aerosol-generating system and device, for example with improved user access prevention and/or youth access prevention means or control. In particular, it may be preferable to provide for an improved aerosolgenerating system and device that allows to mitigate or overcome the issues described above caused by BLE pairing incompatibilities with various external computing devices, the issues related to wired connections and/or the issues related to potentially loose access permissions at computing devices.

Aspects of the present disclosure relate to aerosol-generating systems, aerosolgenerating devices, and corresponding methods of controlling such systems or devices, for example allowing to limit, restrict and/or prevent use or operation of the aerosol-generating system or device to generate aerosol. Further aspects of the present disclosure relate to corresponding computer programs and computer-readable mediums storing such programs. Yet further aspects of the present disclosure relate to a computing device, a method of operating a computing device, a corresponding computer program and computer-readable medium storing such program. It is noted that any disclosure presented herein with reference to one or an aspect of the present disclosure, equally applies to any other aspect of the present disclosure, unless explicitly stated otherwise.

According to an aspect, there is provided an aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol. The aerosol-generating system is configured to determine whether at least one unlocking condition is fulfilled, and to maintain the aerosol-generating system in the unlocked state upon confirming that the unlocking condition is met.

Based on the at least one unlocking condition and based on determining whether it is met or fulfilled, while the aerosol-generating system is or remains in the unlocked state, comprehensive and improved UAP and/or YAP control can be implemented, which can mitigate or overcome the issues related to existing methods described above. In particular, maintaining the aerosol-generating system in the unlocked state upon confirming that the unlocking condition is met can avoid the need to continually toggle the aerosol-generating system between the unlocked state and the locked state using a respective unlocking and locking command. This improves the usability of the aerosol-generating system, for instance, by reducing the number of user control interactions needed for the aerosol-generating system to be activated. Also, this can reduce the computing burden and/or energy consumption.

For instance, UAP and/or YAP control or corresponding policy can be implemented or realized at the aerosol-generating system, which can allow to limit, restrict and/or prevent use or operation of the aerosol-generating system to generate aerosol without relying on a wired connection or BLE pairing between the aerosol-generating system or device and a computing device, such as a smartphone or PC. Specifically, the unlocking condition may comprise receiving a broadcast and/or advertising packet (also referred to herein as advertising broadcast, advertising signal, advertising message, broadcast message or advertisement). For example, the unlocking condition may comprise receiving a BLE advertising packet comprising an unlocking code, such as a one-time password (OTP). The advertising packet and/or BLE advertising packet may be received from a computing device separate from the aerosol-generating device or system.

The aerosol-generating system may have two different states or modes: an unlocked state, in which the aerosol-generating system is usable or operable by a user to generate aerosol, and a locked state, in which the aerosol-generating system is prevented from generating aerosol or inoperable by a user to generate aerosol.

As used herein, the aerosol-generating system being in the unlocked state may mean or include the aerosol-generating system being configured to remain initially in the unlocked state. Therein, “initially” may mean prior to or before determining whether the at least one unlocking condition is fulfilled or met.

Optionally, the aerosol-generating system being configured to remain initially in the unlocked state may comprise transitioning the aerosol-generating system from a locked state to the unlocked state, wherein the aerosol-generating system is prevented from generating aerosol in the locked state.

The aerosol-generating system may be configured to determine whether or if at least one unlocking condition is fulfilled or met, in particular while being in the unlocked state. The term “determining”, as used herein, can encompass a wide variety of actions, and may comprise, for example, calculating, computing, processing, deriving, investigating, evaluating, looking up (e.g., looking up in a table, a database or another data structure), ascertaining, checking and the like. Also, “determining” may comprise receiving (e.g., receiving information), accessing (e.g., accessing data in a memory), analysing information or data, and the like. Also, “determining” may comprise resolving, selecting, choosing, establishing and the like.

The aerosol-generating system may further be configured to maintain or keep the aerosol-generating system in the unlocked state upon or based on confirming that the at least one unlocking condition is fulfilled or met. As used herein, “confirming” may include positively determining, ascertaining, and/or concluding that the at least one unlocking condition is fulfilled. For example, confirming may include evaluating or analysing data or information with respect to or in terms of the at least one unlocking condition. Alternatively or additionally, “confirming” may include coming to a conclusion as to whether the at least one unlocking condition is met or fulfilled.

The at least one unlocking condition may refer to or be considered as indicator to indicate whether the aerosol-generating system should be kept in the unlocked state, for example when used or operated by an authorized user, and/or whether utilization of the aerosol-generating system should be limited based on configuring or transitioning the aerosol-generating system into the locked state. As will be described in more detail hereinbelow, the at least one unlocking condition can be embodied in different forms, for example related to different features or functions of the aerosol-generating system. Also, a plurality of different unlocking conditions may be considered.

As used herein, the term “transitioning” may mean entering, configuring and/or switching the aerosol-generating device into the locked or unlocked state, which may mean or comprise actuating and/or configuring the aerosol-generating device such that the aerosolgenerating device is in the locked or unlocked state.

The aerosol-generating system may be configured to one or more of identifying a user, authenticating a user and authorizing a user. As used herein, identifying the user may include determining an identity of the user. As used herein, the term “authentication” can refer to verifying the identity of the user. As used herein, the term “authorization” can refer to determining the user’s access rights, for example their right to operate the aerosolgenerating system to generate aerosol and/or their right to transition the aerosol-generating device from the locked state to the unlocked state. Since, in the context of UAP or YAP methods, the user’s identity may inherently be bound to their access rights, the terms “authentication” and “authorization” may be used interchangeably in the present disclosure.

As used herein, the term “authorized user” (also referred to as a “verified user”) can refer to or denote a proprietor of the aerosol-generating device, an adult, an adult individual, a user of full age, a legal age user, a user having reached the age threshold, a user having reached majority age, and/or a user that has been authorized to configure the aerosolgenerating device by another authorized user, such as by the proprietor. Further, an unauthorized user can refer to or denote an underage user, a user not having reached an age threshold, a child, or any other user who is unauthorized to configure the aerosolgenerating device, in particular unauthorized to operate the aerosol-generating system to generate aerosol and/or to transition the aerosol-generating device into the unlocked state for aerosol consumption.

The aerosol-generating system may comprise an aerosol-generating device. The aerosol-generating device may be configured or designed as a hand-held device usable by the authorized user to consume an aerosol-generating article, for example during one or more usage sessions. For instance, an aerosol-generating article usable with the aerosolgenerating device can comprise an aerosol-forming substrate, such as a tobacco containing substrate, which may be assembled, optionally with other elements or components, in the form of a stick at least partially insertable into the aerosol-generating device. Additionally or alternatively, an aerosol-generating article usable with the aerosol-generating device can comprise at least one cartridge containing a liquid that can be vaporized during aerosol consumption by the user. Such cartridge can be a refillable cartridge fixedly mounted at the aerosol-generating device or the cartridge can be at least partially inserted into the aerosolgenerating device. The aerosol-generating device may alternatively be referred to as a reduced risk device (RRD).

The aerosol-generating system may further comprise a companion device. The companion device may comprise a charging case. The companion device, also describable as an auxiliary device, receiving device, or supporting device, may be configured to store and/or charge the aerosol-generating device. The companion device may be portable. The companion device may be configured for at least partially receiving the aerosol-generating device. For example, the companion device may be configured for being physically coupled to the aerosol-generating device. Such physical coupling can, for example, comprise a mechanical coupling based on an attachment means, such as a hook mechanism, a latch mechanism, a snap-fit mechanism or the like, based on which the aerosol-generating device can be mechanically coupled to the companion device and/or a housing thereof. Additionally or alternatively, the aerosol-generating device can be physically coupled to the companion device based on a magnetic or electromagnetic coupling. Additionally or alternatively, the aerosol-generating device can be at least partially inserted into the companion device, for example, into an opening of the companion device.

For communicating with each other and/or with a computing device and/or for exchanging data, information or signals, the aerosol-generating device and/or the companion device may comprise at least one communications interface. The communications interfaces can be configured for wireless communication, for wired communication, or both. For instance, the communications interfaces can be configured for communicative coupling via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection including BLE, a mobile phone network, a 3G/4G/5G connection and so on, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a near field connection, an loT connection or any other connection using any appropriate communication protocol.

It is noted that any of the features, functionalities and configurations of the aerosolgenerating system described herein can be implemented in one of the aerosol-generating device and the companion device, or both. This particularly includes determining whether the at least one unlocking condition is met, confirming that the at least one unlocking condition is met, and maintaining the aerosol-generating system in the unlocked state.

The aerosol-generating device and/or the companion device may include a control circuitry with one or more processors for data processing, and in particular for one or more of determining whether the at least one unlocking condition is met, confirming that the at least one unlocking condition is met, and maintaining the aerosol -generating system in the unlocked state. Any functional feature described herein with reference to the aerosolgenerating system can be performed or controlled by one or both the control circuitry of the aerosol-generating device and the companion device, unless explicitly stated otherwise.

The term “circuitry”, as used herein, may comprise, for example, singly or in any combination, hardwired circuitry, programmable circuitry such as computer processors comprising one or more individual instruction processing cores, state machine circuitry, and/or firmware that stores instructions executed by programmable circuitry. Modules may, collectively or individually, be embodied as circuitry that forms a part of one or more devices or systems as described herein.

The aerosol-generating device and/or the companion device may include at least one energy storage for storing electrical energy and/or for supplying the aerosol-generating device with electrical energy. For example, the companion device may be configured to supply electrical energy to the aerosol-generating device to charge the at least one energy storage of the aerosol-generating device. In other words, the companion device may be configured to charge the aerosol-generating device and/or the at least one energy-storage thereof. The at least one energy storage of the aerosol -generating device may, for example, comprise at least one battery, at least one accumulator, at least one capacitor or any other energy storage.

For generating aerosol during use or consumption, for example in one or more usage sessions, a user typically actuates a user interface of the aerosol-generating device or system, thereby triggering supply of one or more aerosol-generating means with electrical energy, such as one or more heating elements or heat sources, for example to heat at least a portion of the aerosol-generating substrate or article couplable to the aerosol-generating device. At least a part of the aerosol-generating means, for example at least a part of the heating element, can be arranged in the aerosol-generating device. Alternatively or additionally, at least a part of the aerosol-generating means, for example at least a part of the heating element, can be arranged in the aerosol-generating article. Exemplary heating elements can be based on one or more of resistive heating, inductive heating and microwave heating using electrical energy supplied via, drawn from or stored in an energy storage of the aerosol -generating system, or received from an external power or energy source.

It is noted that alternatively or additionally other aerosol generating means can be used, for example a non-thermal aerosol generator. For example, the aerosol-generating system can be configured to generate aerosol from at least a part of an aerosol-generating article couplable to the aerosol-generating system, and wherein the aerosol-generating system can be configured to determine whether the at least one unlocking condition is met upon or at initiation of an aerosol generating cycle.

A usage session, also referred to as an “experience” or an “experience session”, may have a particular start, an end and a duration. The start and/or end may be initiated or triggered by the user, for example based on actuating a user interface of the aerosol -generating system. A usage session may generally be characterized by the aerosol-generating device being operated to heat at least a part of an aerosol-generating article, for example above a threshold temperature or heating temperature sufficient to release aerosol, for example nicotine- containing aerosol, from the aerosol-generating article, which may be inhaled by the user. Optionally, a usage session may be interrupted or paused by a user, for example based on actuating a user interface of the aerosol-generating system.

As mentioned above, the aerosol-generating system comprises at least two different states, the unlocked state and the locked state. As used herein, the term “locked state” may refer to a locked configuration of the aerosol-generating device or system and the term “unlocked state” may refer to an unlocked configuration of the aerosol -generating device or system. In the locked state or configuration, the aerosol-generating device or system is prohibited from delivering and/or generating aerosol. This may mean that the aerosolgenerating device is locked for aerosol consumption by the user in the locked state and/or that the aerosol-generating device is configured in the locked state, such that no aerosol can be delivered and/or generated. Alternatively or additionally, no usage session may be initiated in the locked state. On the other hand, in the unlocked state or configuration, the aerosol-generating device is permitted or allowed to deliver and/or generate aerosol, for example based on heating at least a part of an aerosol-generating article. This may mean that the aerosol-generating device is unlocked for consumption of aerosol by the user in the unlocked state and/or that the aerosol-generating device is configured in the unlocked state, such that aerosol can be delivered and/or generated, for example in one or more usage sessions. Accordingly, when the aerosol-generating device is in the locked state, the aerosolgenerating device may not be actuatable or operable by the user to deliver and/or generate aerosol, and, when the aerosol-generating device is in the unlocked state, the aerosolgenerating device may be actuatable or operable by the user to deliver and/or generate aerosol. In other words, in the locked state of the aerosol-generating device, access to one or more functions or functionalities of the aerosol-generating device, including aerosol delivery and/or generation, may be prohibited for the user, and in the unlocked state of the aerosol-generating device, access to one or more functions or functionalities of the aerosolgenerating device, including aerosol delivery and/or generation, may be permitted for the user. Alternatively or additionally, initiation of a usage session and/or heating of an aerosolgenerating article to generate aerosol may be allowed in the unlocked state, and prevented in the locked state.

Additionally or alternatively, the companion device may be configured to charge the energy storage of the aerosol-generating device upon confirming that the at least one unlocking condition is met. In this example, the locked state may be considered as the state in which the energy storage of the aerosol-generating device does not contain enough charge to cause aerosol to be generated, and the unlocked state may be considered as the state in which the energy storage contains enough charge to cause aerosol to be generated. Alternatively or additionally, upon switching or transitioning the aerosol-generating system or companion device from the locked state into the unlocked state, the companion device may be configured to transmit a corresponding control signal to the aerosol-generating device to switch or transition the aerosol-generating device from the locked state into the unlocked state. Alternatively or additionally, upon switching or transitioning the aerosol-generating system or companion device from the unlocked state into the locked state, the companion device may be configured to transmit a corresponding control signal to the aerosol- generating device to switch or transition the aerosol-generating device from the unlocked state into the locked state.

The aerosol-generating system may be configured to evaluate, for example repeatedly evaluate, the at least one unlocking condition while being already configured in and/or while being switched into the unlocked state, and to confirm, for example repeatedly confirm, fulfilment of the unlocking condition. In other words, the aerosol-generating system may be configured to evaluate the at least one unlocking condition and to positively determine its fulfilment while already being configured in and/or being switched into the unlocked state. Such positive determination or confirmation may include an analysis of the aerosol-generating system as to whether the at least one unlocking condition is fulfilled. Such analysis or evaluation as to whether the at least one unlocking condition is fulfilled, however, may not be equated with a failure to meet a locking condition.

For instance, the aerosol-generating system in the unlocked state may be configured to evaluate or re-evaluate an unlocking condition, based on which unlocking condition it has been switched into the unlocked state, and to maintain the aerosol-generating system in the unlocked state based on re-confirming fulfilment of said unlocking condition while being configured in the unlocked state.

In an example, the aerosol-generating system may be configured in the locked state. The aerosol-generating system may be configured to evaluate at least one unlocking condition and switch or configure the aerosol-generating system into the unlocked state upon confirming fulfilment of the at least one unlocking condition. Once switched or configured from the locked state into the unlocked state, the aerosol-generating system may be configured to evaluate or re-evaluate said unlocking condition, based on which it has been switched into the unlocked state, and to maintain the aerosol-generating system in the unlocked state based on re-confirming fulfilment of said unlocking condition while being configured in the unlocked state.

The aerosol-generating system, in the unlocked state, may be configured to repeatedly determine whether the at least one unlocking condition is fulfilled during operation of the aerosol-generating system. For example, the aerosol-generating system may be configured to repeatedly determine whether or if the at least one unlocking condition is met during one or more of: operating of the aerosol-generating device to generate aerosol, a usage session, generating aerosol that is inhalable by the user, heating an aerosolgenerating article, a heating cycle for heating at least a part of an aerosol-generating article to generate aerosol, supplying electrical energy to a heating element of the aerosolgenerating system to heat at least a part of an aerosol-generating article.

By such repeated check if the at least one unlocking condition is met, misuse of an aerosol-generating system by an unauthorized user can be effectively avoided. For example, existing systems may allow to unlock a device via BLE pairing, and after unlocking, the aerosol-generating system may be carried away and used by the unauthorized user. Such scenario can efficiently be avoided based on the repeated check if the at least one unlocking condition is met during operation of the aerosol-generating system.

As used herein, “repeatedly determining” may include determining two or more times. For example, it can be determined or checked at two or more different points in time whether the at least one unlocking condition is met.

The aerosol-generating system may further be configured to maintain the aerosolgenerating system in the unlocked state upon or only when confirming that the at least one unlocking condition is met. For example, the aerosol-generating system may be configured to maintain the aerosol-generating system in the unlocked state upon or only when confirming that the at least one unlocking condition is met for multiple times. Therein, “confirming multiple times” may include a determination whether the at least one unlocking condition is met at at least two different points in time.

The aerosol-generating system may further be configured to transition the aerosolgenerating system into a locked state, in which the aerosol-generating system is prevented from generating aerosol, upon determining that the unlocking condition is violated or not fulfilled. The aerosol-generating system may be configured to transition or switch the aerosolgenerating system into the locked state upon determining a violation of the at least one unlocking condition at least one time or multiple times, for example at different points in time.

For example, the aerosol-generating system may further be configured to transition the aerosol-generating system into the locked state upon determining a predefined number of times, optionally in or within a predefined period of time, that the unlocking condition is violated. The predefined or predetermined number of times may be, for example, stored at a data storage of the aerosol-generating system, optionally along with the predetermined period of time. The predetermined number of times can relate to a plurality of times, this is two or more times.

The aerosol-generating system may be configured to determine whether the at least one unlocking condition is met at a plurality of different points in time corresponding to the predetermined number of times. For example, the aerosol-generating system may be configured to repeatedly determine multiple times, as defined by the predetermined number of times, whether or not the at least one unlocking condition is met, optionally within a time window, as defined or given by the predetermined period of time. For instance, the aerosolgenerating system may perform a check of whether the at least one unlocking condition is met for two or more times within a time window or predetermined period of time of about 10 seconds or more, for example about 10 seconds to about 60 minutes. Other time periods are possible. The aerosol-generating system may further be configured to continually or continuously determine whether the at least one unlocking condition is met during operation of the aerosol-generating system to generate aerosol.

As used herein, “continually” may include a repeated determination for multiple times, for example more than two times, optionally within a predetermined period of time or time window. Accordingly, the determination may be performed by the aerosol-generating system multiple times, for example within a predetermined period of time or time window, with an interruption between consecutive checks or determinations. On the other hand, “continuously” may refer to a determination that is performed by the aerosol-generating system all the time, without interruption, for example within a predetermined period of time or time window.

The aerosol-generating system may be configured to generate aerosol based on heating at least a part of an aerosol-generating article couplable to the aerosol-generating system. Alternatively or additionally, the aerosol-generating system may be configured to determine whether the at least one unlocking condition is met upon or at initiation of a usage session and/or a heating cycle, for example a heating cycle performed by the aerosolgenerating system during a usage session.

The aerosol-generating system may comprise at least one heating element configured to heat at least a part of an aerosol-generating article couplable to an aerosolgenerating device of the aerosol-generating system. The heating element may be part of a heating circuitry of the aerosol-generating system. The heating element may be supplied with electrical energy, for example from an internal energy storage of the aerosol-generating system and/or from an external power source, during at least a part of the usage session. When a usage session is initiated by a user and performed by the aerosol-generating system, the aerosol-generating system may perform a heating cycle which may refer to or include a controlled elevation of a temperature of at least a part of an aerosol-generating article above a predefined threshold temperature or heating temperature sufficient to release aerosol from the aerosol-generating article or substrate contained therein, which aerosol may optionally be inhaled by the user. Hence, by checking whether the at least one unlocking condition is met upon initiation of a usage session and/or corresponding heating cycle, it may be ensured that only authorized users can use the system for aerosol consumption.

Depending on the type and composition of the specific aerosol -generating article or substrate to be used with the device, the threshold temperature or heating temperature may be in a range between 200 degree Celsius and 500 degree Celsius, particularly between 250 degree Celsius and 450 degree Celsius, particularly between 270 degree Celsius and 430 degree Celsius, particularly between 315 degree Celsius and 355 degree Celsius, or between 240 degree Celsius and 280 degree Celsius. These temperatures may be suitable operating or heating temperatures sufficient to allow volatile compounds to be released from the aerosol - generating article or substrate, for example during one or more usage sessions. For example, the first temperature level and/or heating temperature for liquid aerosol-generating articles or substrates may be lower than the first temperature level for solid aerosol -generating articles or substrates.

Alternatively or additionally, the aerosol-generating system may be configured to prohibit initiation of a heating cycle and/or usage session to generate aerosol upon determining that the at least one unlocking condition is violated, for example violated one or multiple times. Prohibiting initiation of the heating cycle may include preventing or blocking the aerosol-generating system from performing the heating cycle.

The aerosol-generating system may, for example, be configured to turn off an aerosol-generating device of the aerosol-generating system in response to or upon determining that the unlocking condition is violated, for example one or more times. Alternatively or additionally, the aerosol-generating system may be configured to transition the aerosol-generating device into a low-power mode, for example a sleep mode, a stop mode or standby mode, in response to determining that the unlocking condition is violated. Alternatively or additionally, the aerosol-generating device may be configured to enter or transition into the low-power mode in response to determining, for example at the aerosolgenerating device and/or a companion device of the aerosol-generating system, that the unlocking condition is violated.

In an example, the aerosol-generating system may be configured to reduce, limit and/or cut an energy supply of the aerosol-generating system in response to determining that the at least one unlocking condition is violated or not met. In other words, transitioning the aerosol-generating system into the locked state may include reducing, limiting and/or cutting an energy supply of the aerosol-generating system and/or a heating element thereof. For instance, the aerosol-generating system may be configured to control one or more of a heating element and an energy storage of the aerosol-generating system, such that an aerosol-generating article may not be heated above a threshold temperature for generating aerosol. Alternatively or additionally, the aerosol-generating system may prevent the heating element from being powered and/or prevent an energy storage from powering the heating element.

As mentioned above, the at least one unlocking condition can be embodied in various forms and/or can be related to one or more functions or features of the aerosol-generating system. In the following, exemplary unlocking conditions are listed. In particular, the at least one unlocking condition can relate to or be indicative of one or more of: a predetermined period of time; a number of consecutive puffs allowed; an amount of energy usable to generate aerosol; a number of usage sessions the aerosol-generating system is operable to generate aerosol; a number of aerosol-generating articles usable with the aerosol-generating system; presence of one or more computing devices in a vicinity of the aerosol-generating system; presence of one or more computing devices within a communication range of the aerosol-generating system; a distance between one or more computing devices and the aerosol-generating system; a distance between an aerosol-generating device and a companion device of the aerosol-generating system; presence of a companion device in a vicinity of an aerosol-generating device of the aerosol-generating system; establishing a communication with one or more external computing devices or a companion device; establishing a connectionless communication with one or more external computing devices or a companion device; receiving one or more messages from at least one external computing device; detecting at least one external computing device known or trusted to the aerosol-generating system; confirming authorization of a user of at least one external computing device in communication range of the aerosol-generating system to operate the aerosol-generating system for aerosol generation; determining an identity of a user of the aerosol-generating system.

Alternatively or additionally, the aerosol-generating system may be configured to determine one or more of: a time the aerosol-generating system has been operated by the user; a number of consecutive puffs a user has taken; an amount of energy used to generate aerosol; a number of usage sessions the aerosol-generating system has been operated to generate aerosol; a number of aerosol-generating articles used with the aerosol-generating system to generate aerosol in one or more usage sessions; presence of one or more computing devices in a vicinity of the aerosol-generating system; presence of one or more computing devices within a communication range of the aerosol-generating system; a distance between one or more computing devices and the aerosol-generating system: a distance between an aerosol-generating device and a companion device of the aerosolgenerating system; presence of a companion device in a vicinity of an aerosol-generating device of the aerosol-generating system; establishment of a communication with one or more external computing devices or a companion device; establishment of a connectionless communication with one or more external computing devices or a companion device; receipt of one or more messages from at least one external computing device; at least one external computing device known or trusted to the aerosol-generating system; authorization of a user of at least one external computing device in communication range of the aerosol-generating system to operate the aerosol-generating system for aerosol generation; and identity of a user.

The aerosol-generating system may be configured to determine one or more of the aforementioned conditions, such as a detected presence of an external computing device, and/or parameter values, such as the number of usage sessions the aerosol-generating system has been operated. Depending on the condition or parameter value, one or more dedicated sensors of the aerosol-generating system may be involved and the determination may include acquiring one or more corresponding sensor signals of one or more sensors. For example, a dedicated distance sensor of the aerosol-generating system may be used to detect presence and/or determine a distance to an external computing device. Alternatively or additionally, a communication interface of the aerosol-generating system may be used to detect presence of the computing device, and optionally a distance.

The aerosol-generating system may further be configured to intercompare or compare the determined one or more conditions and/or parameter values to one or more unlocking conditions corresponding thereto. For instance, one or more determined or detected conditions or parameter values may be evaluated or analysed with respect to one or more corresponding unlocking conditions. Such analysis may include determining whether the detected one or more conditions or parameter values match the one or more corresponding unlocking conditions. Upon determining a violation of or a mismatch for one or more unlocking conditions, the aerosol-generating system may be transitioned into the locked state.

The one or more unlocking conditions may, for example, be stored at the aerosolgenerating system, e.g. in a memory or data storage of the aerosol -generating system, or may be retrieved from an external data storage. Depending on the actual unlocking condition, for example a numerical value may be stored, as may be the case for an unlocking condition defining a number of usage sessions, a binary value, as may be the case for presence detection, a string or other data may be stored, as may be the case for an unlocking condition related to detecting a known or trusted computing device. For example, one or more numerical values, one or more device names or IDs, one or more codes, one or more flags or binary values may be stored as unlocking conditions at the aerosol-generating system or retrieved from an external data storage.

According to a further aspect of the present disclosure, there is provided an aerosolgenerating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol. The aerosol-generating system may be configured to maintain the aerosolgenerating system in or transition the aerosol-generating system into the unlocked state based on determining that the at least one unlocking condition is fulfilled, wherein the at least one unlocking condition comprises or relates to detecting presence of one or more external computing devices in a communication range. In this context, transitioning the aerosolgenerating system from the unlocked state into the unlocked state may include confirming or ascertaining that the aerosol-generating system is in the unlocked state. Alternatively or additionally, the aerosol-generating system may be re-transitioned into the unlocked state. The computing device, as used herein, may be configured to communicate with the aerosol-generating device and/or the companion device, for example based on exchanging data or information. Generally, the external computing device may be a handheld or portable device. Alternatively, the external computing device may be a stand-alone or fixedly installed device. Further, the external computing device may be in possession of or may be installed at the user or another entity or individual, such as a retail shop. By way of example, the external computing device may refer to a handheld, a smart phone, a personal computer (“PC”), a tablet PC, a notebook, or a computer. The external computing device may comprise a user interface. The external computing device may comprise one or more processors for data processing, such as for processing one or more user inputs received at the user interface. Additionally or alternatively, the external computing device may comprise a data storage and/or memory for storing data, such as for example software instructions, a computer program, and/or other data. Further, the external computing device may comprise a communications interface, communications module and/or communications circuitry for communicatively coupling the external computing device with the aerosol-generating device and/or the companion device, for example via the communications interface thereof. Thus, the external computing device may be configured for wireless and/or wired communication with the aerosol-generating device, with the companion device, or both. For instance, the external computing device may be configured for being communicatively coupled with the aerosol-generating device and/or companion device via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection, BLE, a mobile phone network, a 3G/4G/5G connection and so on, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a near field connection, an loT connection or any other connection using any appropriate communication protocol.

The at least one unlocking condition can relate to detecting presence of a computing device, synonymously used herein with external computing device, within a communication range of the aerosol-generating system, the aerosol-generating device and/or of the companion device. Alternatively or additionally, the aerosol-generating system may be configured to detect presence of one or more computing devices within the communication range of the aerosol-generating system. Corresponding data or information may be obtained from a dedicated sensor, for example a distance sensor, or from a communications interface or circuitry of the aerosol-generating system, which may be configured to communicatively couple the aerosol-generating system to the one or more computing devices. The communications circuitry or interface may be a wired or wireless interface. A signal strength of a signal transmitted between the aerosol-generating system and the computing device may optionally be used to determine a distance between the aerosol-generating system and the computing device.

According to another aspect of the present disclosure, there is provided an aerosolgenerating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol. The aerosol-generating system may be configured to maintain the aerosolgenerating system in or transition the aerosol-generating system into the unlocked state based on detecting presence of one or more external computing devices in a communication range, for example based on or using connectionless communications. Optionally, the aerosol-generating system may be configured to determine whether at least one unlocking condition related to presence of an external computing device is fulfilled.

For example, the detection, by the aerosol-generating system, of an external computing device in a communication range of the aerosol-generating system may cause, or trigger the aerosol-generating system to maintain in or transition into the unlocked state.

In an example, the aerosol-generating system is configured to maintain in or transition into the unlocked state upon detecting a computing device associated with the aerosolgenerating system within the communication range of the aerosol-generating system. For instance data or information uniquely related to the computing device, such as a device name, ID or certificate, may be used to determine whether the computing device is associated with the aerosol-generating system.

In an example, the at least one unlocking condition can relate to detection of presence of an external computing device associated with the aerosol -generating system within a communication range of the aerosol-generating system, such as for example a WiFi communication range, a Bluetooth communication range and/or a Bluetooth Low-Energy communication range. The aerosol-generating system may be configured to receive from the computing device data uniquely associated with and/or uniquely identifying the computing device, and to detect presence of the computing device based on said data received from the computing device. For instance, the aerosol-generating system may be configured to receive one or more messages (also referred to herein as packages or data packages) via wireless communication, such as Bluetooth, Bluetooth Low-Energy and/or WiFi communication, wherein the received one or more messages may contain the data uniquely associated with and/or uniquely identifying the computing device.

In a non-limiting example, a communication address, such as a Media-Access- Control, MAC, address of the computing device may be used as data uniquely associated with and/or uniquely identifying the computing device. Alternatively or additionally, the computing device may act as access point and provide a communication network, to which the aerosol-generating system can connect based on a Service Set Identifier (SSID) indicative of a network name and optionally a password, e.g., in the form of a WiFi-protected access key (WPA key), wherein the SSID may be used as data uniquely associated with and/or uniquely identifying the computing device. Accordingly, the aerosol-generating system may be configured to maintain the aerosol-generating system in the unlocked state upon or based on receiving a message or data from the computing device indicative of or containing, for example, a communication address, such as a MAC address, of the computing device and/or a network name, such as an SSID of an access point provided by the computing device. For example, the aerosol-generating system may be configured to detect the communication address, MAC address, network name and/or SSID in a network traffic and/or communication traffic between the aerosol-generating system and the computing device.

In such exemplary implementation, the unlocking condition may refer to the communication address, the MAC address, the network name and/or the SSID being detected by the aerosol-generating system in the network traffic and/or communication traffic. The communication address, the MAC address, the network name and/or the SSID may be associated with the computing device of a user who is known to be authorized to use the aerosol-generating system, for example an adult user. Hence, receipt or detection of a message or packet comprising the communication address, the MAC address, the network name and/or the SSID, is suggestive or indicative of presence of the (external) computing device and/or is indicative of the computing device being associated with the aerosol - generating system, such that the aerosol-generating device can be maintained in the unlocked state or be transitioned from the locked into the unlocked state.

Optionally, a signal strength or signal power of the communication between the computing device and the aerosol-generating system can be determined by the aerosolgenerating system and compared to a predefined minimum value of the signal power or strength to ensure that the computing device is close enough to the aerosol-generating system.

The aerosol-generating system may be configured to detect one or more of the communication address, the MAC address, the network name and/or the SSID in network traffic and/or communication traffic using packet analysis, for example when being operated in a monitoring mode for monitoring network traffic, for example using packet analysis.

In an example, the aerosol-generating system may be configured to maintain the unlocked state or transition from the locked state to the unlocked state in response to receiving the communication address, the MAC address, the network name and/or the SSID of the computing device, which is known by or pre-stored at the aerosol-generating system. For instance, the aerosol-generating system may be configured to validate the received communication address, MAC address, network name and/or SSID, based on comparing the received communication address, MAC address, network name and/or SSID with a communication address, MAC address, network name and/or SSID pre-stored on the aerosol-generating system, which is preferably associated with an authorised user, such as an adult user. Matching of the pre-stored communication address, MAC address, network name and/or SSID with a detected communication address, MAC address, network name and/or SSID, may thus cause the aerosol-generating system to maintain the unlocked state or transition from the locked state to the unlocked state.

Further, the aerosol-generating system may be configured to detect presence of the external computing device based on receiving a broadcasting signal or message from the computing device, preferably via connectionless communications. Optionally, the received broadcast signal or message includes an unlocking code to unlock the aerosol-generating system and/or an unlock instruction causing the aerosol-generating system to unlock.

Further optionally, the aerosol-generating system may be configured to one or more of repeatedly determine whether an external computing device is present in the communication range of the aerosol-generating system; and maintain the aerosol-generating system in the unlocked state based on confirming and/or detecting presence of the external computing device. For instance, the aerosol-generating system may be configured to maintain or keep the aerosol-generating system in the unlocked state only when or as long as presence of the external computing device within a communication range of the aerosolgenerating system is detected by the aerosol-generating system, for example using the communications interface or circuitry of the aerosol-generating system.

The aerosol-generating system, in the unlocked state, may be configured to determine whether the at least one unlocking condition is fulfilled based on communicating with an external computing device using connectionless communication, for example based on repeatedly, continually or continuously communicating with the external computing device, preferably using connectionless communication. Alternatively or additionally, the aerosol-generating system, in the unlocked state, may be configured to repeatedly, continually or continuously determine whether the at least one unlocking condition is fulfilled based on communicating with an external computing device, preferably using connectionless communication.

The aerosol-generating system may, in an example, include a wireless communication circuitry for wireless communication with an external computing device. For instance, the wireless communication circuitry may be configured for Bluetooth Low Energy, BLE, communication.

As used herein, the term “connectionless communications” refers in particular to communications which take place without pairing of devices and/or without association to one or more access points, e.g. WiFi access points. Connectionless communications may take place between two end points with messages being sent from one end point to another without prior arrangement, i.e., without first ensuring that the recipient is available and ready to receive data. The term “connectionless communications” is used herein in contrast to communications using a prearranged, fixed data channel, as in the case of connection- oriented communication, referred to herein also as a “connectable” mode. Connectionless communications may comprise multicast and/or broadcast operations in which the same data are transmitted to several recipients in a single transmission. For example, connectionless communications may comprise communications using at least one broadcast/advertising beacon, and/or using at least one broadcast/advertising packet, as in the case of Bluetooth or Bluetooth Low Energy, and as such may be referred to in terms of communications using an advertising mode. In order to be able to both send and receive data using connectionless communications, the aerosol-generating system may be configured to switch between operation in a peripheral mode and operation in a central mode. The aerosol-generating system may be configured to transmit data when operating in a peripheral mode and to receive data when operating in a central mode. Similarly, the computing device may be further configured to switch between operation in a peripheral mode and operation in a central mode. The computing device may be further configured to receive data when operating in a central mode and to transmit data when operating in a peripheral mode. Connectionless communications may alternatively comprise monitoring network traffic using e.g. network sniffing and/or packet analysis, which can take place without any association between the aerosol-generating system and an access point.

As used herein, the term “peripheral mode”, also referred to as “peripheral role”, refers to a mode or role in which the device advertises its presence and waits for a device operating in central mode to connect to it, whereas the term “central mode” or “central role” refers to a mode or role in which the device scans for or discovers other devices. The terms “central mode” and the “peripheral mode” may refer to pre-connection modes or roles. Post connection, the device operating in central mode may operate as a master and the device operating in peripheral mode may operate as a slave. Also, upon connecting devices may be “paired”, whereas they may not be paired when exchanging information using connectionless communications. The peripheral and central mode are also referred to as Generic Attribute Profile roles a device can operate in, in particular when using BLE functionality.

The aerosol-generating system may be configured to maintain the aerosol-generating system in the unlocked state based on receiving one or more messages or data from an external computing device, preferably via connectionless communications. Alternatively or additionally, the aerosol-generating system may be configured to determine or detect presence of the computing device within the aerosol-generating system’s communication range based on receiving one or more messages or data from the external computing device, preferably via connectionless communications. For example, the aerosol-generating system may be in the peripheral mode and receive one or more advertising or broadcast packages from the external computing device, which may include the one or more messages. Successful receipt of the one or more messages at the aerosol-generating system may in this context indicate that the external computing device is within the aerosolgenerating system’s communication range.

As used herein, a “message” may refer to a data package including one or more values. The one or more values may be numerical values, binary values, and/or string values. Optionally, a message, respectively information or data contained therein, may be cyphered or encrypted. Optionally, a message referred to herein can include a broadcasting and/or advertising packet, for example a BLE broadcasting and/or advertising packet.

The aerosol-generating system may be configured to determine authorization of a user of the aerosol-generating system to generate aerosol based on determining whether the external computing device is associated with the aerosol-generating system. As will be further described hereinbelow, such “association” of the aerosol-generating system with the external computing device can be implemented in various forms, including one or more of sharing data or information between the computing device and aerosol-generating system, applying the same data conversion to one or more values exchanged between or shared among the computing device and the aerosol-generating system, obtaining, retrieving or accessing data uniquely related to one or more of the computing device and the aerosolgenerating system, and others.

The aerosol-generating system may for example be configured to receive confirmation from a server or the external computing device that the external computing device is associated with the aerosol-generating system.

For instance, the aerosol-generating system may be configured to obtain a device identifier of the external computing device, for example from the aerosol-generating system and/or a server, and to determine whether the external computing device is associated with the aerosol-generating system based on the obtained device identifier. For example, the obtained device identifier may be compared with a reference identifier stored at a data storage of the aerosol-generating system or obtained from an external data source, for example a database at a server. In an example, the device identifier may be indicative of one or more of a unique device identifier, a device name, a communication address, a device code, a device certificate and a software application identifier of the external computing device. Other information or data uniquely identifying the external computing device can be used instead or in addition.

The aerosol-generating system may further be configured to maintain the aerosolgenerating system in the unlocked state based on detecting, for example within a communication range of the aerosol-generating system, at least one external computing device known or trusted by the aerosol-generating system. This may include determining whether the external computing device is trusted or known. For instance, an obtained device identifier may be compared to a reference identifier, and if the identifiers match, the aerosolgenerating system may confirm or determine that the computing device is known or trusted, and hence associated with the aerosol-generating system. Upon such confirmation, the aerosol-generating system may be transitioned into the unlocked state or may be kept in the unlocked state, thereby allowing a user to use or operate the aerosol-generating system to generate aerosol in one or more usage sessions.

In order to detect presence of one or more external computing devices within a communication range or in vicinity of the aerosol-generating system, the aerosol-generating system may be configured to receive one or more messages from the external computing device, preferably as broadcast or advertising message via connectionless communications.

Optionally, the received message may include at least one cyphered value. As used herein, a “cyphered value” may refer to one or more values, in particular one or more numerical values, which have been cyphered or converted based on applying a cypher function, and optionally using other information, such as e.g. a secret. Such cypher function may for example be hash-based and compute a hash value of a plurality of other values, e.g. numerical values. Alternatively or additionally, such cypher function can be encryption -based and encrypt one or more values, e.g. numerical values.

One or more cyphered values may be received by the aerosol-generating system from the computing device. Alternatively or additionally, one or more cyphered values may be generated or computed at the aerosol-generating system to detect presence of the computing device in the communication range of the aerosol-generating system.

The cyphered value can, for example, include one or more of time information, counter information, and a numerical value generated at the aerosol-generating system or generated at the computing device. Counter information as used herein can refer to or include a counter value provided by an electronic counter, for example an electronic counter of the aerosol-generating system or the computing device, which may periodically change the counter value. Time information may be provided by an internal clock of the aerosolgenerating system and/or the computing device, or obtained from another device. For instance, time information of an internal clock and/or counter information of the aerosolgenerating system may be converted into one or more cyphered values by the aerosol - generating system based applying one or more cypher functions. Alternatively or additionally, time information of an internal clock and/or counter information of the computing device may be converted into one or more cyphered values by the computing device and transmitted as one or more cyphered values to the aerosol-generating system. Alternatively or additionally, time information of an internal clock and/or counter information of the computing device may be transmitted in clear text or as clear values to the aerosol-generating system, and optionally corresponding one or more cyphered values may be computed at the aerosolgenerating system.

The aerosol-generating system may be configured to detect presence of the external computing device based on successfully de-cyphering a cyphered value received from the computing device. De-cyphering may include applying a cypher function to the cyphered value to convert into one or more clear or human-readable values. Successful de-cyphering may include applying the same cypher function as was used to generate the received cyphered value. Accordingly, by successfully de-cyphering a value obtained from the computing device, it may be ensured that the computing device has used the same cypher function for cyphering as the aerosol-generating system has used for de-cyphering, thereby confirming that the computing device is associated with the aerosol-generating system.

Alternatively or additionally, the aerosol-generating system may be configured to detect presence of the external computing device based on computing a cyphered value of a value stored at the aerosol-generating system, and optionally based on comparing the computed cyphered value to a cyphered value received from the external computing device. In particular, the aerosol-generating system may be configured to determine identity or a matching of the cyphered value generated at the aerosol-generating system and the one received from the aerosol-generating system, thereby detecting presence of the computing device and/or confirming that the computing device is associated with the aerosol-generating system. For example, a prestored or shared value may be cyphered by the aerosol - generating system applying a cypher function, and the same value may be stored at the aerosol-generating system and used to generate the cyphered value by applying the same cypher function. The computing device may then transmit the cyphered value to the aerosolgenerating system to compare it to its own cyphered value and confirm that the aerosol - generating system is associated with that particular computing device. Alternatively or additionally, time information and/or counter information of clocks or counters of the aerosol - generating system and the computing device may be used to obtain the corresponding cyphered values. Thereby, the counters and/or internal clocks may optionally be synchronized.

In an example, the aerosol-generating system may be configured to detect presence of the computing device based on computing a cyphered value, and based on determining that the computed cyphered value matches a cyphered value received from the external computing device. Therein, the cyphered value computed at the aerosol-generating system and the cyphered value received from the computing device may both be based on the same initial value and e.g. obtained by applying the same cypher function to that initial value. Such initial value for the cyphering may be generated at the aerosol -generating system and transmitted to the computing device. For instance, a sensor value, a Bluetooth Low-Energy characteristic, an identifier of the aerosol-generating system, a characteristic of the aerosolgenerating system, a time information of an internal clock, an initial counter value or any other numerical value generated at the aerosol-generating system and/or stored at the aerosol-generating system may be read by the computing device, preferably using connectionless communication and/or without pairing the aerosol -generating system and the computing device.

In a non-limiting example, a sensor value measured with one or more sensors of the aerosol-generating system may be used as initial value, such as e.g. a temperature value measured with a temperature sensor of the aerosol-generating system.

In an example, the computing device may retrieve or read the initial value from the aerosol-generating system using connectionless communication and/or without pairing the aerosol-generating system and the computing device, such that both the computing device and the aerosol-generating system have the same initial value. The computing device may apply the cypher function, optionally using a secret (also referred to herein as secret key) pre-shared among the aerosol-generating system and the computing device. Likewise, the aerosol-generating system may apply the cypher function to the initial value to generate a cyphered value, optionally using the pre-shared secret key. The aerosol-generating system may then receive one or more messages from the computing device via connectionless communication, which one or more messages include the cyphered value generated at the computing device. The aerosol-generating system may further be configured to compare the received cyphered value with the one generated at the aerosol -generating system, and to maintain the aerosol-generating system in the unlocked state based on confirming that the received cyphered value matches the cyphered value computed at the aerosol -generating system. Further optionally, the initial value may be modified, for example increased by a predefined value, at the computing device and at the aerosol-generating system, and the procedure can be repeated using this modified value as new initial value for the cyphering. In this example, the cyphered values generated at the aerosol -generating system and at the computing device can be regarded as one-time passwords that are uniquely shared between the aerosol-generating system and the computing device.

The aerosol-generating system may be configured to detect presence of the external computing device based on cyclically, repeatedly or periodically receiving messages from the external computing device. Messages received from the computing device may have the same or different content. For instance, presence of the external computing device may be detected by the aerosol-generating system based on cyclically, repeatedly or periodically receiving messages including changing content, in particular including updated cyphered values, from the external computing device. Such changing content may for example refer to or include updated time information and/or updated counter information.

In an example, the aerosol-generating system may be configured to detect presence of the external computing device based on receiving a series or sequence of messages in one or more predetermined time intervals or periods of time. The aerosol-generating system may maintain the unlocked state if messages are received in accordance with a predefined pattern, for example defining a predetermined minimum number of messages that should be received within a predetermined period of time. Alternatively or additionally, the aerosolgenerating system may transition into the locked state if no message or less messages are received.

In an exemplary implementation, the aerosol-generating system may further be configured to apply a modification function to at least one value contained in a message received from the external computing device or stored at the aerosol -generating system, the modification function preferably including conversion of the at least one value into a numerical value. In a non-limiting example, a modification function may be applied to time information of an internal clock of the aerosol-generating system or the computing device to convert this time information into a sequence of numerical values or multi-digit number. Other modification functions may include adding one or more values, removing one or more values, and modifying one or more values.

Optionally, the aerosol-generating system may be further configured to recursively apply the modification function in accordance with a counter value of a counter of the external computing device or the aerosol-generating system. For example, the aerosolgenerating system may be configured to recursively apply the modification function a number of times indicated by the counter value, in order to determine that the computing device is associated with the aerosol-generating system.

In yet another implementation, the one or more messages received from the external computing device include a clear value and a cyphered value, wherein the aerosolgenerating system may be configured to compare the received cyphered value to a cyphered value generated by the aerosol-generating system based on the received clear value to confirm application of the same cypher function at the aerosol-generating system and the external computing device. Again, this may enable the aerosol-generating system to reliably determine that the computing device is present and associated with the aerosol-generating system.

Generally, the aerosol-generating system may be configured to compute one or more of a cyphered value using a cypher function or a modified value using a modification function based on one or more of a time information of the aerosol-generating system, a time information received from the external computing device, a value received from the external computing device, and a value generated at the aerosol-generating system.

In a further optional implementation, the aerosol-generating system may be configured to confirm or detect presence of the external computing device and/or association of the computing device with the aerosol-generating system based on receiving a value from the computing device and applying a cypher function to the received value using a secret shared between the aerosol-generating system and the external computing device. The secret may, for example, be a pre-shared secret. Optionally, the aerosol-generating system may be configured to repeatedly confirm presence of the external computing device based on confirming successful application of a cypher function to a value received from the external computing device or stored at the aerosol-generating system using a secret shared among the aerosol-generating system and the external computing device.

The cypher function applied by the aerosol-generating system and/or the computing device to generate one or more cyphered values may be hash-based or encryption-based, in particular using symmetric encryption. Optionally, the cypher function may include a One- Time- Password.

Further optionally, applying the cypher function may involve a secret or pre-shared secret, which may be unique to the aerosol-generating system. The secret may for example be based on a random-like generation process, in particular applying a Hash-based Key Derivation Function. Alternatively or additionally, the secret may be based on a random-like generation process using a seed indicative of data uniquely related to the aerosol-generating system, such as for example a device ID and/or Device Unique Serial Number, DUSN, of the aerosol-generating system.

Alternatively or additionally, the secret may be unique to the computing device. For example, the secret may be based on a random-like generation process using a seed indicative of data uniquely related to the external computing device, such as an International Mobile Equipment Identity, IMEI and/or a secret numerical code of an app running on the computing device and optionally configured to communicate with the aerosol-generating system.

Further optionally, the secret may be generated at the external computing device and the aerosol-generating system may be configured to obtain the secret from the external computing device. Alternatively or additionally, the secret may be generated at a manufacturer and optionally stored in a data storage of the aerosol-generating system. The secret may be stored in a database at a server of the manufacturer, and for example obtained by the computing from this database upon request or once the computing device is associated for the first time with the aerosol-generating system. Alternatively or additionally, the secret may be obtained from the server by the aerosol-generating system during operation of the aerosol-generating system, for example in order to unlock it.

According to a further aspect of the present disclosure, there is provided a method of controlling and/or operating an aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol. The method comprises determining whether at least one unlocking condition is fulfilled, and maintaining the aerosolgenerating system in the unlocked state upon positive confirmation that the unlocking condition is met.

According to a further aspect of the present disclosure, there is provided a method of controlling and/or operating an aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol. The method comprises maintaining the aerosol-generating system in the unlocked state based on detecting presence of one or more external computing devices in a communication range of the aerosol-generating system.

According to a further aspect of the present disclosure, there is provided a method of controlling and/or operating an aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol. The method comprises maintaining the aerosol-generating system in the unlocked state based on determining whether at least one unlocking condition is fulfilled, wherein the at least one unlocking condition relates to presence of one or more external computing devices in a communication range of the aerosol-generating system.

Any feature function and/or step described herein with respect to one or more methods of controlling an aerosol-generating system can be a feature or function of the aerosol-generating system, and vice versa.

Yet another aspect of the present disclosure relates to a computer program, which when executed by an aerosol-generating system, instructs the aerosol-generating system to perform steps of one or more methods of controlling an aerosol-generating system as described herein.

Yet another aspect of the present disclosure relates a computer-readable medium, for example a non-transitory computer-readable medium, storing a computer program, which when executed by an aerosol-generating system, instructs the aerosol-generating system to perform steps of one or more methods of controlling an aerosol-generating system as described herein.

According to a further aspect of the present disclosure, there is provided a computing device, configured to generate a cyphered value by applying a cypher function to a clear value, and authorize a user of an aerosol-generating system to operate the aerosol- 1 generating system based on transmitting the cyphered value to the aerosol-generating system.

As mentioned above, the computing device can, for example, be a mobile device, a smart device, a smart phone, a Bluetooth device, a server, a tablet, or a personal computer.

The computing device may be configured to transmit the cyphered value to the aerosol-generating system using connectionless communications, for example connectionless BLE communication. Optionally, the computing device may further be configured to generate the cyphered value based on receiving a request from the aerosolgenerating system.

The computing device may further be configured to enforce a UAP and/or YAP control or policy at the aerosol-generating system based on requesting a user of the aerosolgenerating system in the unlocked state of the aerosol-generating system to authorize or identify at the computing device.

The computing device may further be configured to transmit a message to the aerosol-generating system, the message including the cyphered value. Alternatively or additionally, the computing device may be configured to transmit a message to the aerosolgenerating system, the message including the cyphered value and a clear value. For example, the computing device may be configured to broadcast a message with the cyphered value to the aerosol-generating system using connectionless communications, preferably using Bluetooth Low Energy communication.

Alternatively or additionally, the computing device may be configured to receive one or more of time information, counter information and a numerical value generated at the aerosol-generating system, and to compute the cyphered value based thereon. Optionally, the computing device may be configured to cypher the received value received using a cypher function shared among the aerosol-generating system and the computing device.

Further optionally, the computing device may be configured to convert the received value based on applying a modification function, preferably a modification function shared among the aerosol-generating system and the computing device.

The computing device may also be configured to generate the cyphered value using a secreted shared among the aerosol-generating system and the computing device, the secret being preferably based on data uniquely related to the aerosol-generating system and/or data uniquely related to the computing device. For instance, the computing device may be configured to obtain data uniquely related to the aerosol-generating system from the aerosolgenerating system and/or a server. Alternatively or additionally, the computing device may be configured to obtain a secret for generating the cyphered value from a server database. Alternatively or additionally, the computing device may be configured to generate a secret for a cypher function based on data uniquely related to the computing device, and optionally to transmit the secret to aerosol-generating system.

Further, the computing device may be configured to transmit one or more of a modification function, a cypher function, a secret, and data uniquely related to the computing device to the aerosol-generating system.

In an example, the computing device may be configured to generate the cyphered value using a dedicated background task, process and/or app.

Moreover, while a computing device’s user’s identity can be checked accurately at least once, for example when purchased at a retail store, the computing device’s user identification and authorization means, on the other hand, could depend on the users’ personal rules and preferences. For example, some users may decide not to prevent access to the computing device or apps thereon, at all. Other users may limit access to the computing device via an unlock code, which can be very basic or very complex, and/or additional identification means such as a biometric sensor may be used. Accordingly, depending on the user-specific rules and settings, an unauthorized user, for example an underage user, could have access to the computing device and an app running thereon to authorize the wrong user allowing to use the aerosol-generating system. In other words, even if an app on a smartphone or computing device is used to control an aerosol-generating system to unlock it, for example to allow the start of a usage session in accordance with a UAP or YAP policy, loose permission regarding the launching of such app and so the start of a usage session could weaken the actual UAP or YAP policy.

Therefore, the computing device can be configured to perform a user authentication process before launching the app used to generate or transmit the cyphered value. If the user authentication process is not passed successfully, the computing device can be configured to prevent the app from launching. If the user authentication process is passed successfully, the computing device can be configured to allow the app to launch or automatically launch the app.

In another example, the computing device may be configured to cyclically apply a modification function and/or a cypher function and to cyclically provide an updated cyphered value based thereon to the aerosol-generating system. For example, the computing device may be configured to cyclically generate and/or transmit an updated cyphered value based on time information or counter information of the computing device.

Yet another aspect of the present disclosure relates to a method of operating a computing device. The method comprises generating a cyphered value by applying a cypher function to a clear value, and authorizing a user of an aerosol-generating system to operate the aerosol-generating system based on transmitting the cyphered value to the aerosolgenerating system. Yet another aspect of the present disclosure relates to a computer program, which when executed by a computing device, instructs the computing device to perform steps of the method of operating a computing device as described herein.

Yet another aspect of the present disclosure relates to a computer-readable medium, for example a non-transitory computer-readable medium, storing a computer program , which when executed by a computing device, instructs the computing device to perform steps of the method of operating a computing device as described herein.

The term “obtaining”, as used herein, may comprise, for example, receiving from another system, device, or process; receiving via an interaction with a user; loading or retrieving from storage or memory; measuring or capturing using sensors or other data acquisition devices.

The indefinite article “a” or “an” does not exclude a plurality. In addition, the articles “a” and “an” as used herein should generally be construed to mean “one or more” unless specified otherwise or clear from the context to be directed to a singular form.

Unless specified otherwise, or clear from the context, the phrases “one or more of A, B and C”, “at least one of A, B, and C”, and “A, B and/or C” as used herein are intended to mean all possible permutations of one or more of the listed items. That is, the phrase “A and/or B” means (A), (B), or (A and B), while the phrase “A, B, and/or C” means (A), (B), (C), (A and B), (A and C), (B and C), or (A, B, and C).

The term “comprising” does not exclude other elements or steps. Furthermore, the terms “comprising”, “including”, “having” and the like may be used interchangeably herein.

The invention is defined in the claims. However, below there is provided a non- exhaustive list of non-limiting examples. Any one or more of the features of these examples may be combined with any one or more features of another example, embodiment, or aspect described herein.

Example 1A: An aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol, the aerosol -generating system configured to: determine whether at least one unlocking condition is fulfilled; and maintain the aerosol-generating system in the unlocked state upon confirming that the unlocking condition is met.

Example 1 B: An aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol, the aerosol -generating system configured to: maintain the aerosol-generating system in or transition the aerosol-generating system into the unlocked state based on determining that the at least one unlocking condition is fulfilled, wherein optionally the at least one unlocking condition comprises or relates to detecting presence of one or more external computing devices in a communication range, in particular a communication range of the aerosol-generating system. Example 1 C: An aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol, the aerosol -generating system configured to: maintain the aerosol-generating system in or transition the aerosol-generating system into the unlocked state based on detecting presence of one or more external computing devices in a communication range, in particular a communication range of the aerosol-generating system, preferably using connectionless communications.

Example 2: An aerosol-generating system according to any one of the preceding examples, configured to remain initially in the unlocked state.

Example 3: An aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating device being configured to remain initially in the unlocked state comprises transitioning the aerosol-generating device from a locked state to the unlocked state, wherein the aerosol-generating system is prevented from generating aerosol in the locked state.

Example 4: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system, in the unlocked state, is configured to repeatedly determine whether the at least one unlocking condition is fulfilled during operation of the aerosol-generating system.

Example 5: The aerosol-generating system according to any one of the preceding examples, further configured to transition the aerosol-generating system into a locked state, in which the aerosol-generating system is prevented from generating aerosol, upon determining that the unlocking condition is violated.

Example 6: The aerosol-generating system any one of the preceding examples, further configured to transition the aerosol-generating system into a locked state, in which the aerosol-generating system is prevented from generating aerosol, upon determining a predefined number of times, optionally in a predefined period of time, that the unlocking condition is violated.

Example 7: The aerosol-generating system according to example 6, wherein the predefined number of times is at least two.

Example 8: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system, in the unlocked state, is configured to repeatedly, continually or continuously determine whether the at least one unlocking condition is met during operation of the aerosol-generating system to generate aerosol.

Example 9: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system is configured to generate aerosol based on heating at least a part of an aerosol-generating article couplable to the aerosol-generating system, and wherein the aerosol-generating system is configured to determine whether the at least one unlocking condition is met upon or at initiation of a heating cycle. Example 9A: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system is configured to generate aerosol from at least a part of an aerosol-generating article couplable to the aerosol-generating system, and wherein the aerosol-generating system is configured to determine whether the at least one unlocking condition is met upon or at initiation of an aerosol generating cycle and/or heating cycle.

Example 10: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system is configured to determine whether the at least one unlocking condition is met upon or at initiation of a usage session to generate aerosol.

Example 11 : The aerosol-generating system according to any one of the preceding examples, further configured to prohibit initiation of a heating cycle or usage session to generate aerosol upon determining that the at least one unlocking condition is violated.

Example 12: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system is configured to generate aerosol based on heating at least a part of an aerosol-generating article couplable to the aerosol-generating system, and wherein the aerosol-generating system is configured to repeatedly, continually or continuously determine whether the at least one unlocking condition is met during heating of the at least part of the aerosol-generating article to generate aerosol.

Example 12A: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system is configured to generate aerosol from at least a part of an aerosol-generating article couplable to the aerosol-generating system, and wherein the aerosol-generating system is configured to repeatedly, continually or continuously determine whether the at least one unlocking condition is met while generating aerosol from the aerosol-generating article.

Example 13: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system is further configured to turn off an aerosolgenerating device of the aerosol-generating system, or the aerosol-generating device is configured to enter a low-power mode in response to determining that the unlocking condition is violated.

Example 14: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system is further configured to reduce, limit or cut an energy supply of the aerosol-generating system in response to determining that the unlocking condition is violated.

Example 15: The aerosol-generating system according to any one of the preceding examples, wherein the at least one unlocking condition relates to or is indicative of one or more of: - a predetermined period of time,

- a number of consecutive puffs allowed,

- an amount of energy usable to generate aerosol,

- a number of usage sessions the aerosol-generating system is operable to generate aerosol,

- a number of aerosol-generating articles usable with the aerosol-generating system,

- presence of one or more computing devices in a vicinity of the aerosol-generating system,

- presence of one or more computing devices within a communication range of the aerosol-generating system,

- a distance between one or more computing devices and the aerosol-generating system,

- a distance between an aerosol-generating device and a companion device of the aerosol-generating system,

- presence of a companion device in a vicinity of an aerosol-generating device of the aerosol-generating system,

- establishing a communication with one or more external computing devices or a companion device,

- establishing a connectionless communication with one or more external computing devices or a companion device,

- receiving one or more messages from at least one external computing device,

- detecting at least one external computing device known or trusted to the aerosol - generating system,

- confirming authorization of a user of at least one external computing device in communication range of the aerosol-generating system to operate the aerosol-generating system for aerosol generation,

- an identity of a user.

Example 16: The aerosol-generating system according to any one of the preceding examples, further configured to determine one or more of:

- a time the aerosol-generating system has been operated by the user,

- a number of consecutive puffs a user has taken,

- an amount of energy used to generate aerosol,

- a number of usage sessions the aerosol-generating system has been operated to generate aerosol,

- a number of aerosol-generating articles used with the aerosol-generating system to generate aerosol in one or more usage sessions, - presence of one or more computing devices in a vicinity of the aerosol-generating system,

- establishment of a communication with one or more external computing devices or a companion device,

- establishment of a connectionless communication with one or more external computing devices or a companion device,

- receipt one or more messages from at least one external computing device,

- at least one external computing device known or trusted to the aerosol -generating system,

- authorization of a user of at least one external computing device in communication range of the aerosol-generating system to operate the aerosol-generating system for aerosol generation,

- an identity of a user.

Example 17: The aerosol-generating system according to any one of the preceding examples, configured to determine whether at least one unlocking condition related to presence of an external computing device is fulfilled.

Example 18: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system is configured to: repeatedly determine whether an external computing device is present in the communication range of the aerosol-generating system; and maintain the aerosol-generating system in the unlocked state based on confirming presence of the external computing device.

Example 19: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system, in the unlocked state, is configured to repeatedly determine whether the at least one unlocking condition is fulfilled based on communicating with an external computing device using connectionless communication.

Example 20: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system includes a wireless communication circuitry for wireless communication with an external computing device. Example 21 : The aerosol-generating system according to the preceding examples, wherein the wireless communication circuitry is configured for Bluetooth Low Energy, BLE, communication.

Example 22: The aerosol-generating system according to any one of the preceding examples, wherein the aerosol-generating system is configured to maintain the aerosolgenerating system in the unlocked state based on receiving one or more messages from an external computing device, preferably via connectionless communications.

Example 23: The aerosol-generating system according to any one of the preceding examples, further configured to determine authorization of a user of the aerosol-generating system to generate aerosol based on determining whether the external computing device is associated with the aerosol-generating system.

Example 24: The aerosol-generating system according to the preceding example, further configured to receive confirmation from a server or the external computing device that the external computing device is associated with the aerosol-generating system.

Example 25: The aerosol-generating system according to any one of the preceding examples, further configured to obtain a device identifier of the external computing device and to determine whether the external computing device is associated with the aerosolgenerating system based on the obtained device identifier.

Example 26: The aerosol-generating system according to the preceding example, further configured to determine whether the external computing device is associated with the aerosol-generating system based on comparing the obtained device identifier with a reference identifier stored at a data storage of the aerosol -generating system.

Example 27: The aerosol-generating system according to the preceding example, wherein the device identifier is indicative of one or more of a unique device identifier, a device name, a communication address, a MAC address, a network name, an SSID, a device code, a device certificate and a software application identifier of the external computing device.

Example 28: The aerosol-generating system according to any one of the preceding examples, further configured to maintain the aerosol-generating system in the unlocked state based on detecting at least one external computing device known or trusted by the aerosolgenerating system.

Example 29: The aerosol-generating system according to any one of the preceding examples, further configured to receive one or more messages from the external computing device, preferably as broadcast message via connectionless communications.

Example 30: The aerosol-generating system according to any one of the preceding examples, wherein the received message includes at least one cyphered value. Example 31 : The aerosol-generating system according to any one of the preceding examples, wherein the cyphered value includes one or more of time information, counter information, and a numerical value generated at the aerosol -generating system.

Example 32: The aerosol-generating system according to any one of the preceding examples, wherein the cyphered value includes one or more of time information, a sensor value, counter information, and a numerical value generated at the external computing device.

Example 33: The aerosol-generating system according to any one of the preceding examples, wherein the received message is encrypted.

Example 34: The aerosol-generating system according to any one of the preceding examples, configured to detect presence of the external computing device based on successfully de-cyphering a cyphered value received from the computing device.

Example 35: The aerosol-generating system according to any one of the preceding examples, configured to detect presence of the external computing device based on computing a cyphered value of a value stored at the aerosol-generating system, and optionally based on comparing the computed cyphered value to a cyphered value received from the external computing device.

Example 36: The aerosol-generating system according to any one of the preceding examples, configured to detect presence of the external computing device based on cyclically or periodically receiving messages from the external computing device.

Example 37: The aerosol-generating system according to any one of the preceding examples, configured to detect presence of the external computing device based on cyclically or periodically receiving messages including changing content, in particular including updated cyphered values, from the external computing device.

Example 38: The aerosol-generating system according to any one of the preceding examples, configured to detect presence of the external computing device based on receiving a series of messages in predetermined time intervals.

Example 39: The aerosol-generating system according to any one of the preceding examples, further configured to apply a cypher function to generate a cyphered value based on a value received from the external computing device or a value stored at the aerosolgenerating system to confirm that the received message was cyphered by the external computing device using the same cypher function.

Example 40: The aerosol-generating system according to any one of the preceding examples, further configured to apply a modification function to at least one value contained in a message received from the external computing device or stored at the aerosol - generating system, the modification function preferably including conversion of the at least one value into a numerical value. Example 41 : The aerosol-generating system according to any one of the preceding examples, further configured to recursively apply the modification function in accordance with a counter value of a counter of the external computing device or the aerosol-generating system.

Example 42: The aerosol-generating system according to any one of the preceding examples, wherein the message received from the external computing device includes a clear value and a cyphered value, and wherein the aerosol-generating system is configured to compare the received cyphered value to a cyphered value generated by the aerosolgenerating system based on the received clear value to confirm application of the same cypher function at the aerosol-generating system and the external computing device.

Example 43: The aerosol-generating system according to any one of the preceding examples, further configured to compute one or more of a cyphered value using a cypher function or a modified value using a modification function based on one or more of a time information of the aerosol-generating system, a time information received from the external computing device, a value received from the external computing device, and a value generated at the aerosol-generating system.

Example 44: The aerosol-generating system according to any one of the preceding examples, further configured to confirm presence of the external computing device based on receiving a value from the computing device and applying a cypher function to the received value using a secret shared between the aerosol-generating system and the external computing device.

Example 45: The aerosol-generating system according to any one of the preceding examples, configured to repeatedly confirm presence of the external computing device based on confirming successful application of a cypher function to a value received from the external computing device or stored at the aerosol-generating system using a secret shared among the aerosol-generating system and the external computing device.

Example 46: The aerosol-generating system according to the preceding example, wherein the cypher function is hash-based or encryption -based, in particular using symmetric encryption, optionally wherein the cypher function includes a One-Time-Password.

Example 47: The aerosol-generating system according to any one of the preceding examples, wherein the secret is based on a random-like generation process, in particular applying a Hash-based Key Derivation Function.

Example 48: The aerosol-generating system according to any one of the preceding examples, wherein the secret is based on a random-like generation process using a seed indicative of data uniquely related to the aerosol-generating system. Example 49: The aerosol-generating system according to any one of the preceding examples, wherein the secret is based on a random-like generation process using a seed indicative of data uniquely related to the external computing device.

Example 50: The aerosol-generating system according to any one of the preceding examples, wherein the secret is generated at the external computing device and wherein the aerosol-generating system is configured to obtain the secret from the external computing device.

Example 51 : The aerosol-generating system according to any one of the preceding examples, further configured to transmit one or more of time information, counter information, a numerical value, a sensor value, and data uniquely related to or associated with the aerosol-generating system to the external computing device.

Example 52: The aerosol-generating system according to any one of the preceding examples, further configured to determine receipt of a predefined number of messages from the external computing device within a predefined period of time, to confirm presence of the external computing device in a communication range of the aerosol-generating system.

Example 53: The aerosol-generating system according to any one of the preceding examples, further configured to transition the aerosol-generating system into the locked state if no message was received for a predetermined period of time or a predetermined number of time intervals.

Example 54: The aerosol-generating system according to any one of the preceding examples, configured to generate nicotine-containing aerosol.

Example 55: The aerosol-generating system according to any one of the preceding examples, comprising one or more of: an aerosol-generating device configured to generate aerosol and a companion device for storing and/or charging an aerosol-generating device.

Example 56: The aerosol-generating system according to any one of the preceding examples, further comprising an aerosol-generating article.

Example 57A: A method of controlling an aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol, the method comprising: determining whether at least one unlocking condition is fulfilled; and maintaining the aerosol-generating system in the unlocked state upon positive confirmation that the unlocking condition is met.

Example 57B: A method of controlling an aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol, the method comprising: maintaining the aerosol-generating system in or transitioning the aerosolgenerating system into the unlocked state based on determining whether at least one unlocking condition is fulfilled, wherein optionally the at least one unlocking condition relates to presence of one or more external computing devices in a communication range of the aerosol-generating system.

Example 57C: A method of controlling an aerosol-generating system in an unlocked state, in which the aerosol-generating system is enabled to generate aerosol, the method comprising: maintaining the aerosol-generating system in the unlocked state based on detecting presence of one or more external computing devices in a communication range of the aerosol-generating system.

Example 58: A computer program, which when executed by an aerosol -generating system, instructs the aerosol-generating system to perform steps of the method according to any one of examples 57A to 57C.

Example 58: A non-transitory computer-readable medium storing a computer program according to the preceding example.

Example 59: A computing device, configured to generate a cyphered value by applying a cypher function to a clear value, and authorize a user of an aerosol-generating system to operate the aerosol-generating system based on transmitting the cyphered value to the aerosol-generating system.

Example 60: The computing device according to the preceding example, further configured to transmit the cyphered value to the aerosol-generating system using connectionless communications.

Example 61 : The computing device according to examples 59 to 60, further configured to generate the cyphered value based on receiving a request from the aerosolgenerating system.

Example 62: The computing device according to examples 59 to 61 , further configured to enforce a Youth Access Prevention policy at the aerosol-generating system based on requesting a user of the aerosol-generating system in the unlocked state to authorize or identify at the computing device.

Example 63: The computing device according to examples 59 to 62, further configured to transmit a message to the aerosol-generating system, the message including the cyphered value.

Example 64: The computing device according to examples 59 to 63, further configured to transmit a message to the aerosol-generating system, the message including the cyphered value and a clear value.

Example 65: The computing device according to examples 59 to 64, further configured to broadcast a message with the cyphered value to the aerosol-generating system using connectionless communication, preferably using Bluetooth Low Energy communication. Example 66: The computing device according to examples 59 to 65, further configured to receive one or more of time information, counter information and a numerical value generated at the aerosol-generating system, and to compute the cyphered value based thereon.

Example 67: The computing device according to examples 59 to 66, further configured to convert the received value based on applying a modification function, preferably a modification function shared among the aerosol-generating system and the computing device.

Example 68: The computing device according to examples 59 to 67, further configured to cypher the received value received using a cypher function shared among the aerosol-generating system and the computing device.

Example 69: The computing device according to examples 59 to 68, further configured to generate the cyphered value using a secreted shared among the aerosolgenerating system and the computing device, the secret being based on data uniquely related to the aerosol-generating system and/or data uniquely related to the computing device.

Example 70: The computing device according to examples 59 to 69, further configured to obtain data uniquely related to the aerosol-generating system from the aerosolgenerating system and/or a server.

Example 71 : The computing device according to examples 59 to 70, further configured to obtain a secret for generating the cyphered value from a server database.

Example 72: The computing device according to examples 59 to 71 , further configured to generate a secret for a cypher function based on data uniquely related to the computing device, and optionally to transmit the secret to aerosol-generating system.

Example 73: The computing device according to examples 59 to 72, further configured to transmit one or more of a modification function, a cypher function, a secret, and data uniquely related to the computing device to the aerosol-generating system.

Example 74: The computing device according to examples 59 to 73, further configured to generate the cyphered value using a dedicated background task.

Example 75: The computing device according to examples 59 to 74, further configured to cyclically apply a modification function and/or a cypher function and to cyclically provide an updated cyphered value based thereon.

Example 76: The computing device according to examples 59 to 75, further configured to cyclically generate and/or transmit an updated cyphered value based on time information or counter information of the computing device. Example 77: The computing device according to examples 59 to 76, wherein the computing device is a mobile device, a smart device, a Bluetooth device, a server, a tablet, or a personal computer.

Example 78: A method of operating a computing device, comprising: generating a cyphered value by applying a cypher function to a clear value, and authorizing a user of an aerosol-generating system to operate the aerosol-generating system based on transmitting the cyphered value to the aerosol-generating system.

Example 78: A computer program, which when executed by a computing device, instructs the computing device to perform steps of the method according to the preceding example.

Example 79: A non-transitory computer-readable medium storing a computer program according to the preceding example.

The invention may include one or more aspects, examples or features in isolation or combination whether specifically disclosed in that combination or in isolation. Any optional feature or sub-aspect of one of the above aspects applies as appropriate to any of the other aspects.

A detailed description will now be given, by way of example only, with reference to the accompanying drawings, in which:

FIG. 1 illustrates an aerosol-generating system and a computing device that can be used in accordance with the systems and methods disclosed herein ;

FIG. 2 illustrates an aerosol-generating system and a computing device that can be used in accordance with the systems and methods disclosed herein;

FIG. 3 illustrates an aerosol-generating system and a computing device that can be used in accordance with the systems and methods disclosed herein;

FIG. 4 illustrates an aerosol-generating system and a computing device that can be used in accordance with the systems and methods disclosed herein; and

FIG. 5 illustrates an aerosol-generating system and a computing device that can be used in accordance with the systems and methods disclosed herein .

The drawings are schematic only and not true to scale. In principle, identical or like parts, elements and/or steps are provided with identical or like reference numerals in the drawings.

FIG. 1 shows an exemplary aerosol-generating system 1000 with an aerosol-generating device 100. The aerosol-generating system 1000 of FIG. 1 is exemplary shown with optional components, such as an aerosol-generating article 200 at least partly insertable into the aerosol-generating device100, and a companion device 300 configured to store and/or charge the aerosol-generating device 100. Further, FIG. 1 illustrates schematically a computing device 400, exemplary shown in FIG. 1 in the form of a mobile device 400 or smartphone 400. The aerosol-generating device 100 includes one or more energy storages 102 for storing electrical energy and/or for providing electrical energy to generate aerosol. The one or more energy storages 102 may be one or more batteries (e.g. a lithium-ion battery) or accumulators. When the energy storage(s) 102 is/are a battery/batteries the cathode material may comprise lithium-cobalt-oxide (LCO), lithium-manganese-oxide (LMO), lithium-nickel-manganese- cobalt-oxide (NMC), lithium-iron-phosphate (LFP), and/or lithium-nickel-cobalt-aluminium- oxide (NCA). The anode material may comprise carbon (e.g. graphite), silicon and/or lithium - titanate-oxide (LTO).

The exemplary aerosol-generating device 100 shown in FIG. 1 includes at least a part of a heating circuit 104 with at least one heating element 106 for heating at least a part of an aerosol-generating article 200 couplable to the aerosol-generating device 100. It should be noted that the heating circuit 104 and heating element 106 are optional only. Alternatively or additionally, at least a part of or the entire heating circuit 104, heating arrangement 104 and/or heating element 106 may be integrated or arranged in the aerosol-generating article 200.

Also, it should be noted that the heating element 106 is merely for illustrative purposes shown in figure 1 as an inductive coil configured to inductively heat at least a part of the aerosol-generating article 200, for example a susceptor material arranged in an aerosol - generating substrate 202 of the aerosol-generating article 200. Alternatively or additionally, the at least one heating element 106 may be configured for one or more of resistive heating and microwave heating. In another example, the aerosol-generating device 100 generates aerosol using a non-thermal aerosol-generating arrangement or aerosol generator, e.g., an ultrasonic aerosol-generating arrangement or aerosol generator.

Further, it should be noted that the aerosol-generating article 200 is only exemplary shown in FIG. 1 as having a stick-like or tubular shape and as being at least partially insertable through an opening 105 of a housing 107 of the aerosol-generating device 100, for example into a heating chamber 109 of the aerosol-generating device 100. In other exemplary designs, the aerosol-generating article 200 may be shaped as container or cartridge that may be fixedly integrated in the aerosol-generating device 100 or that may be couplable to the device 100.

The aerosol-generating device 100 further comprises control circuitry 1 10 or device control circuitry 110 operatively coupled to the energy storage 102. The control circuitry 110 may optionally include one or more processors 112 for data processing. The control circuitry 1 10 may comprise a microcontroller comprising a processor, memory and input/output means.

Further optionally, the aerosol-generating device 100 and/or the control circuitry 1 10 includes a data storage 1 14 for storing data, such as for example one or more unlocking conditions, as described in more detail hereinabove and hereinbelow.

Alternatively or additionally, software instructions may be stored in the data storage 114, which when executed by the control circuitry 1 12 instruct the aerosol-generating device 100 to perform one or more functions of the device 100, as described hereinabove and hereinbelow. The aerosol-generating device 100 optionally includes a user interface 120 for receiving one or more user inputs from a user, for example to operate the aerosol-generating device 100 to generate aerosol. The user interface 120 is exemplary shown as button in FIG. 1. Any other type of user interface 120, such as an acoustic interface, a haptic interface, a touch interface, a display, an arrangement of one or more LEDs or the like can be optionally included in the aerosol-generating device 100 in the alternative or in addition.

Further optionally, the aerosol-generating device 100 includes a communication interface or circuitry 130 for communicatively coupling the aerosol-generating device 100 to one or more optional components of the aerosol-generating system 1000, in particular to one or more of the companion device 300 and/or the computing device 400.

One or more communication interface types or communication protocols may be implemented in the aerosol-generating device 100 and its communication interface or circuitry 130. In particular, the communication interface or circuitry 130 may be configured for one or both wired and wireless communication with one or more of the computing device 400 and the companion device 300. For example, the communication interface 130 may be based on one or more of a BUS communication, a cable communication, a Bluetooth communication, a Wireless Local Area Network communication, an infrared communication, a nearfield communication, an internet communication or any other suitable type of communication or communication protocol.

The aerosol-generating device 100 may optionally be coupled to, for example at least partly inserted into, the companion device 300 for charging the energy storage 102 and/or for storing the aerosol-generating device 100. Charging may, for example, be based on inductive charging or via electrical connections.

The aerosol-generating device 100 and/or the control circuitry 110 is configured to supply electrical energy to the at least one heating element 106 to heat at least a portion of the aerosol-generating article 200.

The companion device 300 of the aerosol-generating system 1000 may include at least one control circuitry 310, one or more energy storages 320, and one or more communication interfaces 330. Functions and components of the control circuitry 310 of the companion device 300 may correspond to the functions and components described above with reference to the control circuitry 110 of the aerosol-generating device 100. Alternatively or additionally, functions and components of the energy storage 320 of the companion device 300 may correspond to the functions and components described above with reference to the energy storage 120 of the aerosol-generating device 100. Alternatively or additionally, functions and components of the communication interface 330 of the companion device 300 may correspond to the functions and components described above with reference to the communication interface of the aerosol-generating device 100.

Also the computing device 400 may include at least one control circuitry 410, one or more energy storages 420, and one or more communication interfaces 430 for communicating with the companion device 300 and/or the aerosol-generating device 100, optionally a memory and input/output means.

The aerosol-generating system 1000, the aerosol-generating device 100, and/or the companion device 300 in an unlocked state of the aerosol-generating device 100, in which the aerosol-generating system is enabled to generate aerosol, is configured to determine whether at least one unlocking condition is fulfilled, and maintain the aerosol-generating system 100, the aerosol-generating device 100, and/or the companion device 300 in the unlocked state upon confirming that, until and/or as long as the unlocking condition is met.

Alternatively or additionally, the aerosol-generating system 1000, the aerosol-generating device 100, and/or the companion device 300 in an unlocked state of the aerosol-generating device 100, in which the aerosol-generating system is enabled to generate aerosol, may be configured to maintain the aerosol-generating system 100, the aerosol-generating device 100, and/or the companion device 300 in or transition the aerosol-generating system 1000, the aerosol-generating device 100 and/or the companion device 300 into the unlocked state based on determining that the at least one unlocking condition is fulfilled, wherein the at least one unlocking condition comprises or relates to detecting presence of one or more external computing devices 400 in a communication range.

Alternatively or additionally, the aerosol-generating system 1000, the aerosol-generating device 100, and/or the companion device 300 in an unlocked state of the aerosol-generating device 100, in which the aerosol-generating system is enabled to generate aerosol, may be configured to maintain the aerosol-generating system in or transition the aerosol-generating system into the unlocked state based on detecting presence of one or more external computing devices 400 in a communication range, in particular using connectionless communication via the communications interface 130 of the aerosol-generating device 100 and/or the communication interface 330 of the companion device 300, as well as the communication interface 410 of the computing device 400.

For example, the aerosol-generating system 1000 may be configured to repeatedly, continually or continuously determine whether the at least one unlocking condition is fulfilled during operation of the aerosol-generating system 1000, in particular during operation to generate inhalable aerosol, for example during one or more usage sessions. The aerosolgenerating system 100 may be configured to transition the aerosol-generating system 1000 into a locked state, in which the aerosol-generating system 1000 is prevented from generating aerosol, upon determining that the unlocking condition is violated, optionally upon determining a predefined number of times, further optionally in a predefined period of time, that the unlocking condition is violated.

Further, upon determining a violation of the at least one unlocking condition, the aerosolgenerating system 1000 may be configured to prohibit initiation of a heating cycle or usage session to generate aerosol. For instance, the aerosol-generating system 1000 may be configured to turn off the aerosol-generating device 100 of the aerosol-generating system 1000 or enter a low-power mode in response to determining that the unlocking condition is violated. Alternatively or additionally, the aerosol-generating system 1000 can be further configured to reduce, limit or cut an energy supply of the aerosol-generating system 1000, the aerosolgenerating device 100 and/or the companion device 300 in response to determining that the unlocking condition is violated.

As mentioned above, the at least one unlocking condition can be implemented in various forms. For example, the at least one unlocking condition can relate to or be indicative of one or more of a predetermined period of time, a number of consecutive puffs allowed, an amount of energy usable to generate aerosol, a number of usage sessions the aerosol-generating system 1000 is operable to generate aerosol, a number of aerosol-generating articles 200 usable with the aerosol-generating system 1000, presence of one or more computing devices 400 in a vicinity of the aerosol-generating system 1000, presence of one or more computing devices 400 within a communication range of the aerosol-generating system 1000, a distance between one or more computing devices 400 and the aerosol-generating system 1000, a distance between an aerosol-generating device 100 and a companion device 300 of the aerosol-generating system 1000, presence of a companion device 300 in a vicinity of an aerosol-generating device 100 of the aerosol-generating system 1000, establishing a communication with one or more external computing devices 400 or a companion device 300, establishing a connectionless communication with one or more external computing devices 400 or a companion device 300, receiving one or more messages from at least one external computing device 400, detecting at least one external computing device 400 known or trusted to the aerosol-generating system 1000, confirming authorization of a user of at least one external computing device 400 in communication range of the aerosol-generating system 1000 to operate the aerosol-generating system 1000 for aerosol generation, and an identity of a user.

Alternatively or additionally, the aerosol-generating system may be configured to determine, for example in order to detect presence of the computing device 400 in the communication range of the aerosol-generating system 1000, one or more of: a time the aerosol-generating system 100 has been operated by the user, a number of consecutive puffs a user has taken, an amount of energy used to generate aerosol, a number of usage sessions the aerosol-generating system 1000 has been operated to generate aerosol, a number of aerosol-generating articles 200 used with the aerosol-generating system 1000 to generate aerosol in one or more usage sessions, presence of one or more computing devices 400 in a vicinity of the aerosol-generating system 1000, presence of one or more computing devices 400 within a communication range of the aerosol-generating system 1000, a distance between one or more computing devices 400 and the aerosol-generating system 1000, a distance between an aerosol-generating device 400 and a companion device 300 of the aerosolgenerating system 1000, presence of a companion device 300 in a vicinity of an aerosolgenerating device 100 of the aerosol-generating system 1000, establishment of a communication with one or more external computing devices 400 or a companion device 300, establishment of a connectionless communication with one or more external computing devices 400 or a companion device 300, receipt one or more messages from at least one external computing device 400, preferably using connectionless communications, at least one external computing device 400 known to, associated with or trusted by the aerosol-generating system 1000, authorization of a user of at least one external computing device 400 in a communication range of the aerosol-generating system 100 to operate the aerosol-generating system 1000 for aerosol generation, and an identity of a user.

In an illustrative and non-limiting example, the aerosol-generating system 1000, aerosolgenerating device 100 and/or companion device 300 can utilize one or more of a communication address of the computing device’s 400 communication interface 430, a MAC address of the computing device’s 400 communication interface 430, a network name and an SSID of a network provided by the computing device 400 operated as WiFi access point, in order to detect presence of the computing device 400.

In the example using a communication or MAC address, the aerosol-generating system 1000, aerosol-generating device 100 and/or companion device 300 monitors or ‘sniffs’ network traffic for at least one packet or message from a specific communication or MAC address, for example that of the computing device 400, in order to maintain the aerosol-generating system 1000 in the unlocked state. Thus, connectionless communications can be implemented in this example using network sniffing, i.e., packet analysis. Detection of the MAC address indicates that the computing device 400 is sufficiently close to the aerosol-generating system 1000 to confirm that the aerosol-generating system can be maintained in the unlocked state. The MAC address, which is unique for each TCP/IP device, may be pre-stored for this purpose on the aerosol-generating system 1000. In this way, the packet or message including the MAC address of the computing device 400 of an authorised user can be taken as implicit permission to maintain the aerosol-generating system 1000 in the unlocked state.

In this example, the aerosol-generating system 1000 is configured to use WiFi communication, i.e., communication based on the IEEE 802.11 family of standards. Such communication typically involves a centralized access point (AP) that coordinates all communication, with it being necessary for a WiFi-enabled device to associate with the AP in order to receive packets from it. In this example, the aerosol-generating system 1000 is configured to receive the MAC address using connectionless communications by operating its WiFi-enabled communication interface 130 in monitor mode, in which the aerosol-generating system 1000 receives all packets in a given frequency range. In monitor mode, the aerosolgenerating system 1000 is able to monitor MAC addresses of devices that are currently communicating with the AP, even when the aerosol-generating system 1000 is not itself associated with the AP.

Optionally, the aerosol-generating system 1000 may enforce a minimum signal strength (of the signal comprising the pre-stored MAC address) to ensure that the computing device 400 of the authorized user is sufficiently close. Since multiple WiFi channels may exist, the aerosol-generating system 1000 may be configured to monitor them sequentially for a predetermined time period (e.g., 100ms) to detect the pre -registered MAC address.

In this way, the aerosol-generating system 1000 is able to implement UAP and/or YAP using proximity or presence detection without the need for user intervention or app installation.

It will be appreciated that the use of the MAC address is described for illustrative purposes only and that any address, data or code which uniquely identifies, and indicates the proximity of, the computing device 400 of an authorized user may be used instead of, or in addition to, the MAC address, such as a device identifier as used for example in Bluetooth.

In the example using a network name or SSID to detect presence of the computing device, the aerosol-generating system 1000 can be configured to monitor presence of access points or communication networks in its vicinity by monitoring SSID’s of networks. Thus, connectionless communications can be implemented in this example using network sniffing, i.e. , packet analysis, and/or detection of SSID’s being broadcast or provided by one or more access points, such as e.g. by the computing device 400.

FIG. 2 illustrates an aerosol-generating system 1000 and a computing device 400 that can be used in accordance with the systems and methods disclosed herein. In particular, the computing device 400 is illustrated as a block diagram on the left-hand side of FIG. 2, and the aerosol-generating system 1000 is illustrated as block diagram on the right-hand side of FIG. 2.

Generally, the present disclosure pertains to or describes an “on-going” control process in which it is mandatory for the aerosol-generating system 1000 (or, in general, any device having BLE functionality) to remain within a communication range (or BLE range) of the aerosol-generating system 1000 in order for at least one of the functionalities of the aerosolgenerating system to continue to be activated, without having to pair the computing device 400 and the aerosol-generating system 1000. This allows, for example, that, if a computing device’s 400 owner keeps their smartphone close to them , then the smartphone’s or computing device’s 400 owner could notice unauthorized use of the aerosol-generating system 1000. The “ongoing” process may be performed at least for a certain period of time.

As mentioned above, for the aerosol-generating system 1000, one or more of the aerosol-generating device 100 and the companion device 300 can provide BLE functionality and be equipped with a corresponding communication interface 130, 330. The functionality to be activated or suppressed in dependence of whether the computing device 400 is in the communication range of the aerosol-generating system 1000 can be an aerosol-generating function (e.g. a heating function of the aerosol-generating system 1000 to heat at least a part of the aerosol-generating article 200 to generate aerosol). Generally, the activation of the heating function of the aerosol-generating system 1000 may be supposed to have been checked (or not) by a UAP/YAP control, for example while purchasing the system 100 at a retail store.

The aerosol-generating system 1000 may be configured to repeatedly, continually or continuously control the heating function and/or heating circuitry 104 of the aerosol-generating system 100 during a usage session, for which start-up has been authorized (or not) by a UAP/YAP policy. For simplicity’s sake, when indicating actions or functions done by the computing device 400 this means actions done by an app running on the computing device 400. Similarly, when indicating actions or functions done by the aerosol-generating system 1000 this means actions done by a process of the aerosol-generating system 1000.

The aerosol-generating system 1000 and the computing device 400 may have BLE functionality or corresponding communication interfaces 430, 130 and both may be able to use central and peripheral roles or modes (also referred to as central or peripheral GAP role).

Optionally, for example in a process or procedure for exchanging and/or sharing parameters, settings or information, which is referred to herein as “P-secret process”, the aerosol-generating system 1000 and the computing device 400 may share a secret S, for instance a random 32-byte value, a function C to cypher, for example hash or encrypt, a value using the secret S, a time interval T which can optionally be small relative to the duration of a usage session, for instance 30 seconds, and a modification function F used to modify a value upon which the cypher function may be applied. By sharing these values, the aerosolgenerating system 1000 and the computing device 400 may become associated, linked, trusted and/or known to each other. However, as described herein, other ways of associating the computing device 400 and aerosol-generating system 1000, e.g. based on sharing device names, interface addresses and the like, are possible. Sharing the above parameters or information may only be done once in a lifetime of the aerosol-generating system 1000. The sharing of the parameters or information may be accurately UAP/YAP controlled. Further, in another optional process or procedure, which is referred to herein as “P- setting process”, the actual presence of the computing device 400 in the communication range of the aerosol-generating system 100 may be detected based on sharing a value V between the aerosol-generating system 1000 and the computing device 400, as illustrated in FIG. 2.

FIG. 2 illustrates one example of detecting presence of the computing device 400 in the communication range of the aerosol-generating system 1000. Unless stated otherwise, the aerosol-generating system 1000 and computing device 400 of FIG. 2 have the same functions, features, and elements as the aerosol-generating system 1000 and computing device 400 described with reference to FIG. 1 .

As described above, the aerosol-generating system 1000 and the computing device 400 may share the secret S, cypher function C, time duration or information T and a modification function F.

The aerosol-generating system 1000 may operate in BLE central role or mode. The computing device 400 may include an internal clock, and each time its clock goes into a new time interval T, the computing device 400 may create a value V’ which comes from the cyphering or application of cypher function C, optionally using secret S, and optionally of the result of the application of the modification function F on a value V. The value V may be shared among the aerosol-generating system 1000 and computing device 400 or the aerosolgenerating system 100 may use its own time of an internal clock of the aerosol-generating system 100 to determine the value V. It is noted that application of the modification function is optional only.

The computing device 400 may operate in peripheral role or mode and broadcast or transmit a message including V’ using the advertisement of the peripheral GAP (Generic Access Profile) or BLE role. Afterwards, the computing device 400 may set V to F(V) by applying the modification function F to V, and can leave the peripheral role or the enter central role.

If the aerosol-generating system 1000 does not receive a new value V’ each time its own clock goes into a new time interval T, then the aerosol-generating system 1000 may consider that the associated computing device 400 is out of the communication range, and may transition the aerosol-generating system 100 into the locked state in response.

If the aerosol-generating system 100 receives V’, then it checks if V’ matches its own cyphering or application of cypher function C, optionally using secret S, and optionally of the result of the function F applied on the same value V (V”=C(F(V))). If so, the aerosol-generating system 1000 may set V to F(V) and consider the associated computing device 400 in communications range, and may maintain the aerosol-generating system 1000 in the unlocked state. If not, then the aerosol-generating system 1000 may consider that the associated computing device 400 is out of communication range and may transition into the locked state. Optionally, in case the aerosol-generating system 1000 considers that the associated computing device 400 is out of communication range a certain number of times, then the aerosol-generating system 1000 may stop the heating process, heating cycle or usage session, and/or transition into the locked state. Otherwise, the aerosol-generating system 1000 may carry on the heating process, heating cycle, or usage session, and/or maintain the unlocked state.

In the following, various examples of the present disclosure are summarized. The cypher function C can be a known symmetric encrypting method, for instance AES (Advanced Encryption Standard), that can encrypt/decrypt a message using a secret S as key or seed. Optionally, the app running on the computing device 400 can require for a user authentication (e.g. fingerprint, biometric sensor and/or extra code) before the computing device 400 allows the app to be launched. This increases the overall security and UAP/YAP control. Optionally, the app running on the computing device 400 can stop after some minutes corresponding to the estimated maximum duration of a usage session, e.g. 3 to 10 minutes, for example 5 minutes.

The process running on the aerosol-generating system 1000 can preferably be started when the aerosol-generating system 1000 starts the functionality to control, here the heating of the heating element. Optionally, the app running on the computing device 400 could be started using by performing a user authentication, or an accurate user UAP/YAP control, (e.g. fingerprint, biometric sensor, YAP/extra code provided only to authorized users, etc.). Optionally, the app running on the computing device 400 could be started by a signal emitted by the aerosol-generating system 1000 when starting the heating cycle, or the app could be running continuously on the computing device 400.

Optionally, the aerosol-generating system 1000 could have rules regarding the number of out of range events it could accept before stopping its function, as well as how a computing device in range event could cancel/suppress previous out of range events. These rules could be set by the user in the app for instance or on the aerosol-generating system 1000 manufacturer website or via the communication interface 130 of the aerosol-generating system 1000.

Also, instead of using a smart phone or computing device 400, a standalone simple Bluetooth authenticator device that generates the advertising could be used as computing device 400.

The cypher function C can be the cypher function HOTP (e.g. providing a One Time Password based on a Hash-based Message Authentication Code (HMAC) or “HMAC-based One Time Password, HOTP”, having for instance SHA-1 for the Hash function), using the secret S, to generate a code comprising a certain number of digits from a numerical input value, for example the number of digits can be a parameter of the HOTP. The certain number of digits may be 3 or more, 5 or more, and preferably 5 to 10 digits.

Various different variants of the concept described herein, in particular described with reference to FIG. 2, can be used to advantage to detect presence of the computing device 400 in the communication range of the aerosol-generating system 1000 using connectionless communications. With reference to the following figures, three exemplary variants are described.

FIG. 3 illustrates an aerosol-generating system 1000 and a computing device 400 that can be used in accordance with the systems and methods disclosed herein . Unless stated otherwise, the aerosol-generating system 1000 and computing device 400 of FIG. 3 have the same functions, features, and elements as the aerosol-generating system 1000 and computing device 400 described with reference to FIG. 1 and FIG.2.

In one variant, the computing device 400 may be in peripheral role, and may broadcast in the advertisement packet only the cypher value of F(V), i.e. the value obtained by applying the cypher function C to the result of the application of the modification function F on value V. Also, the computing device 400 may address the advertisement packets to only one of its associated aerosol-generating systems 1000.

Therein, the secret S may be determined by the aerosol-generating system 1000 manufacturer. The generation of the secret could be done using a random-like generation process, for instance a HKDF - Hash-based Key Derivation Function - using as seeds a unique data related to aerosol-generating system 1000, for instance the DUSN (Device Unique Serial Number) and/or another seed kept secret by the aerosol-generating system 1000 manufacturer. During manufacturing time, the secret of an aerosol-generating system 1000 is generated and then embedded (and kept secret) in the data storage 120 of the aerosolgenerating system 1000 to be accessible to its firmware.

The secret S can be transmitted to an app on the computing device 400, e.g. an app running the P-secret process. The activation of such process should be strictly UAP/YAP controlled. This process connects, for example, to a web server of the aerosol-generating system 1000 manufacturer and provide the aerosol-generating system’s DUSN. To do so, the aerosol-generating system’s DUSN could be for instance embedded in a QR-code on the aerosol-generating system 1000 that could be flashed or captured by the computing device 400 (or it could be a code to input manually). This QR-code can include furthermore an identification code of the aerosol-generating system 1000 manufacturer. The app could use these data to first identify the aerosol-generating system 1000 manufacturer web server and then to transmit it the DUSN. The aerosol-generating system 1000 manufacturer can then, after making sure that all mandatory UAP/YAP control policy has been done regarding the identified aerosol-generating system 1000 during the purchase of the aerosol-generating system 1000, extract from its database the secret associated to the DUSN and transmit it to the app using secured transmission.

There are various possible embodiments regarding the “P-secret” process and the app running on the computing device 400. For instance, the P-secret process can belong to the app made by the aerosol-generating system 1000 manufacturer or could be a third-party app. The P-secret may be run only once, and there can be a secure process allowing the app on the aerosol-generating system 1000 to communicate with the app on the computing device 400 process, so that the cyphering of the value F(V) could be realized: either the secret could be communicated between the apps, or the value F(V) can be provided by the aerosolgenerating system 1000 to the computing device that can get in return the cypher of F(V), wherein the secret may remain in the app running the P-secret process.

In an example, the secret can be determined by the aerosol-generating system 1000 manufacturer, and the “P-secret” process may be part of a third-party app, for example an app for BLE One Time Password App. Further, an age control can be proceeded, providing the user of the computing device 400 a PIN code. This PIN code could be mandatory (or not) to download the app for BLE One Time Password. Once done, the computing device’s 400 user can scan the QR-code on the aerosol-generating system 1000, which includes the device DUSN and a manufacturer code, then validates the user’s age by entering the UAP/YAP PIN code received previously. The app may then contact the app manufacturer which, in turn, identifies the aerosol-generating system 1000 manufacturer, and then transmits to the aerosolgenerating system 1000 manufacturer the DUSN. In return, and after having checked that the UAP/YAP was correctly done when purchasing the aerosol-generating system 1000 and the PIN code was provided, the aerosol-generating system 1000 manufacturer can provide the aerosol-generating system 1000 secret to the computing device 400 corresponding to the DUSN, such that presence detection may be performed by the aerosol-generating system 1000, for example as described with reference to FIG. 2.

To detect presence of the computing device 400 in the communication range of the aerosol-generating system 1000, the initial broadcasting time may be used as initial value V, which may preferably be determined by the aerosol-generating system 1000 associated with the computing device 4000, for example using a P-setting process or similar, as described above. Such process may be triggered by the aerosol-generating system 1000, and may allow for the aerosol-generating system 1000 to transmit to the computing device 400 an initial value V, on which will be applied successively afterwards the modification function F at each time duration T. This initial value V, determined on the aerosol-generating system 1000 side, could be a counter value, a sensor value, counter information, or the current time of the aerosolgenerating system 1000. For instance, a sensor value, such as e.g. a temperature value, measured with one or more sensors of the aerosol-generating system 1000 may be used as initial value V. Therein, the initial value V may be received by the computing device 400 via connectionless communication and/or without pairing the aerosol-generating system 1000 and the computing device 400.

The aerosol-generating system 1000 may transmit to the computing device 400 a unique ID of the aerosol-generating system 1000, for instance its DUSN. The computing device 400 could be associated with several aerosol-generating systems 1000 and so may have their DllSNs recorded. However, knowing which aerosol-generating system 1000 is activated allows the computing device 400 to use the Secret associated with the DUSN for the cyphering, as well as to address, in the advertisement packets, the aerosol-generating system 1000 with the DUSN.

The P-setting process may further allow to set the initial broadcasting time, to the computing device 400 and the aerosol-generating system 1000, to the time when the “P- setting” occurs, so this initial time may be determined by the aerosol-generating system 1000.

Preferably, the P-setting can be triggered each time the aerosol-generating system 100 starts a heating process or cycle or usage session.

After a first P-setting, as long as the aerosol-generating system 1000 and the computing device 400 remain synchronized, there should be no need to activate again the P-setting. However, by activating the P-setting when the aerosol-generating system 1000 starts a new heating process or cycle, it may give the computing device 400 a time window, e.g. the maximum estimated time of a usage session, during which the computing device 400 should be broadcasting an advertisement for the aerosol-generating system 1000, after which the computing device 400 will stop advertising, for example to save battery.

Such P-setting process could be executed without the BLE pairing of the aerosolgenerating system 1000 and the computing device 400 by the aerosol-generating system 1000 going into peripheral mode, to send to the computing device 4000, which most often is in central mode, in which the payload may contain a specific agreed code indicating that this is a P-process, the initial value V and its DUSN.

Regarding the size of this signal, the maximum size of a usual advertisement payload is 31 bytes and the DUSN is usually about 10 to 15 bytes, so the initial value and the agreed code indicating a P-process may have more than 15 bytes left, which should be more than enough assuming the size of a large counter looping every 1000 years when increasing every second is less than 5 bytes.

The time of this broadcast would be used as the initial broadcasting time. The aerosolgenerating system 1000 then may switch into and remain in central mode, and the computing device 400 may start advertising the cypher value of F(V) at this initial broadcasting time plus time interval T. Such P-setting could then trigger the launch of the app running on the computing device

400.

After the P-setting process, the computing device 400 may periodically go in peripheral role to broadcast the cypher value of F(V) and the ID of the aerosol-generating system 1000, for instance its DUSN. Further, among several possible activated aerosol-generating systems 1000 in central role that will read this advertisement broadcast, only the aerosol-generating system 1000 with the same ID or DUSN will read this cypher value and check if its own cyphering of F(V) matches the cypher value of the broadcast.

Hence, in this scenario or variant, only the aerosol-generating system 1000 identified in the computing device’s 400 broadcast will try to decipher and could achieve so, as the cyphering by the computing device 400 has used the secret S associated with the particular aerosol-generating system 1000.

The variant described above is illustrated in FIG. 3, which shows a smartphone 400 or computing device 400 broadcasting an advertisement including a cypher value of a timestamp and a DUSN associated with the aerosol-generating system 1000, the secret having been used to cypher the value being associated with the DUSN.

By receiving such broadcast, the aerosol-generating system 1000 with the DUSN, in case its own cyphering of the timestamp matches the cypher value of the broadcast, will continue its heating process, heating cycle and/or maintain the unlocked state. Conversely, in case there are no advertising broadcasts with its DUSN or if there is no match of the cypher values, the aerosol-generating system 1000 will transition into the locked state and stop its heating process.

FIG. 3 illustrates two aerosol-generating systems both in proximity to (or within communication range of) the computing device 400. Each one of the aerosol-generating system stores a unique DUSN as well as a Unique Secret Code. As described above, the computing device 400 broadcasts a signal including a DUSN and a Unique Secret Code. Only the aerosol-generating system which stores the DUSN and the Unique Secret Code will be unlocked by the signal broadcast by the computing device. The aerosol-generating system with the DUSN or Unique Secret Code that does not match the corresponding DUSN or Unique Secret Code broadcast by the computing device 400 will not be unlocked, or will remain in the locked state. In other words, both the DUSN and the Unique Secret Code stored at the aerosolgenerating system 1000 must match the respective DUSN and the Unique Secret Code broadcast by the computing device 400 in order for the aerosol-generating system to be unlocked, or to remain in or transition to the unlocked state. If the DUSN stored at the aerosolgenerating system 1000 does not match the DUSN broadcast by the computing device 400, the aerosol-generating 1000 remains in the locked state, or transitions to the locked state. If the Unique Secret Code stored at the aerosol-generating system 1000 does not match the Unique Secret Code broadcast by the computing device 400, the aerosol-generating 1000 remains in the locked state, or transitions to the locked state.

According to other optional variants, the computing device 400 may use for V a timestamp and the aerosol-generating system 1000 may receive, at least from time to time, an information about the current time, for instance in case the aerosol-generating system 1000 could connect to the Internet when plugged to a computer via USB for recharging its battery. In such case, the aerosol-generating system 1000 could calculate the cypher value of its own timestamp and check if this cypher value matches the one broadcasted by the computing device 400. However, such correct matching would work as long as the aerosol-generating system 1000 time is synchronized with the computing device’s 400 time. After this, the aerosolgenerating system’s 1000 time should be resynchronized.

According to another variant, the computing device 400 may send the cypher value of a counter or numerical counter that is supposed to continuously increase, although the initial value of the counter may be unknown to the aerosol-generating system 1000, as there may be no P-setting process. The aerosol-generating system 1000 then should be able to decrypt the cypher value of a first broadcast of the computing device 400, so the cyphering of the value should not be a truncated hash value, but a cypher that could be decrypted for instance by a symmetric encryption process, in order to get an initial value of the counter. The aerosolgenerating system 1000 may then check if the decrypted value of the counter appearing in the next broadcast has increased reported to this initial value.

FIG. 4 illustrates an aerosol-generating system 1000 and a computing device 400 that can be used in accordance with the systems and methods disclosed herein . Unless stated otherwise, the aerosol-generating system 1000 and computing device 400 of FIG. 4 have the same functions, features, and elements as the aerosol-generating system 1000 and computing devices 400 described with reference to FIG. 1 to FIG. 3. The computing device 400 is illustrated as a block diagram on the left-hand side of FIG. 4, and the aerosol-generating system 1000 is illustrated as block diagram on the right-hand side of FIG. 4.

In the example of FIG. 4, the computing device 400 can determine the first or initial value V. Afterwards, the values can be determined by the modification function F applied on this first value as many times as there are time periods of duration T up to the current time. The computing device 400 may further determine the first broadcast time. Afterwards, the broadcast time is this initial time plus as many times as there are time periods of duration T up to the current time. When in peripheral role, the computing device 400 broadcasts in the advertisement packets F(V) which is a message in clear, and V’ which is the cypher value of this message, e.g. a signature.

Any aerosol-generating system 1000 associated with the computing device 400, and in the BLE communication range of the broadcast, can read the advertisement, retrieve from it the message in clear (F(V)), and the cypher value V’, and check if the cypher value of F(V) the aerosol-generating system 1000 can generate, V”, matches the cypher value V’ broadcasted in the advertisement. If not, then computing device 400 is considered out of range and the aerosol-generating system 1000 may transition into the locked state.

In the example shown in FIG. 4, the secret S may be a unique value generated by the app of the computing device 4000 or it can be generated by the app manufacturer and transmitted securely to the app or computing device 400 by the web server of the app manufacturer when installing the app on the computing device 400.

The secret can be a value determined by a random-like generation process, for instance a HKDF - Hash-based Key Derivation Function - using as seeds a unique data related to the computing device 400 and/or the app, for instance a smartphone IMEI combined with a secret numerical code of the app.

The same secret S can be used by the computing device 400 and all its associated aerosol-generating systems 1000. This secret should be securely transmitted to the aerosolgenerating systems 1000, e.g. during the P-secret process. The P-secret process may be executed only once for each aerosol-generating system 1000 associated with the computing device 400, and as indicated, its activation should be strictly UAP/YAP controlled as the secret or elements allowing to generate the secret may be transmitted. The P-secret could be using a BLE communication, e.g. using pairing, to transmit the indicated data.

To avoid BLE pairing, the IMEI of the computing device 400 and the app secret code can be transmitted by the computing device 400 to the aerosol-generating system 1000 using BLE advertisement so that a HKDF or an adequate process in the aerosol-generating system 1000 can generate the secret.

If the aerosol-generating system 1000 has an interface with digits, the P-secret could also display on the computing device 400, after UAP/YAP control of the computing device’s 400 user, the app secret numerical code as well as the other data used as seeds of the HKDF that can be then input in an aerosol-generating system 1000 through the aerosol-generating system 1000 interface120.

The other values, C, T and F can be embedded in the app of the computing device 400 as well as in the similar process running in the aerosol-generating system 1000.

Because the computing device 400 is fully determining the broadcasted data as well as the time of broadcasting, enabling it to have an on-going control over several aerosolgenerating systems 1000, the computing device 400 can continuously be broadcasting the ongoing control signal, becoming a kind of UAP/YAP beacon for aerosol-generating systems 1000.

Further, the message in clear can change every T period, as per clock of the computing device 400 according to the function F. For instance, T can be a 30 seconds duration. The message could be the current date and time, transformed in a numerical value. In such case, the function F changes the date and time of the previous time slot to the date and time of the current time slot. The message could be a numerical counter. In such case, the function F changes the value of the counter. For instance, F can add “1” to the counter. For instance, and if the current date and time is used as the message in clear, the date and time could be coded as YYYMMDDHHmmss, where:

YYY is the current year (without the millennium digit). The values go from 0 to 999, which can be coded in 10 bits (1024 values).

MM is the current month, which values go from 1 to 12, and can be coded in 4 bits (16 values).

DD is the current day, which values go from 1 to 31 , and can be coded in 5 bits (32 values).

HH is the current hour, which values go from 0 to 23, and can be coded in 5 bits (32 values). mm is the current minute, which values go from 0 to 59, and can be coded in 6 bits (64 values).

- ss is the current second, which values go from 0 to 59, and can be coded in 6 bits (64 values).

Accordingly, the total date and time in clear can be coded in 36 bits, so less than 5 bytes.

The HOTP can generate from this value a 6 digits code (0-999999) which can be coded in 20 bits (1 048 576 values), so less than 3 bytes.

All in all, in such example, the payload size to advertise by the computing device 400 can be put in 5 bytes of message in clear (date and time) and 3 bytes of code (signature), so 8 bytes, when the maximum size of the payload for an advertisement is about 31 bytes.

In such variant, several aerosol-generating systems 1000 can use simultaneously the computing device’s 400 on-going control signal broadcasted. In other words, several aerosolgenerating systems 1000 or BLE devices can be controlled simultaneously by a single computing device 400. Further, the value F(V) is in clear in the advertisement broadcasted by the computing device 400. Accordingly, there is no need to use, at a moment or another, a specific process (“P-setting”) to share the value V between the aerosol-generating system 1000 and the computing device 400, in case the aerosol-generating system 1000 has lost the correct value V. A aerosol-generating system 1000 has just to read the advertisement signal and apply the cypher function to check if it can carry on the heating and remain in the unlocked state.

The successive values of V have only to be unique on a somehow long period of time to prevent an attacker (sometimes referred to as a “Man in the Middle”) to easily catch a loop in the values of V, allowing the attacker to broadcast from a non-secured BLE device the records of previous signals broadcasted by the smartphone, leveraging on the fact that T is the unit of time, as V will change only every T unit of time. For instance, if T is 30 seconds, then one year of broadcast of different values of a numerical counter represents 1 051 200 different values, so a counter of less than 3 bytes. As seen, these values could be the current date and time, assuring in the provided example, different values every second for 1000 years coded in less than 5 bytes.

There is no real synchronization issue between the computing device 400 and the aerosol-generating system 1000, as the aerosol-generating system 1000 has just to check when an advertising signal is received, then the aerosol-generating system knows that the next advertisement signal should arrive after a delay of T. Every new incoming advertisement signal of the computing device 400 could be used by the aerosol-generating system 1000 to resynchronize the expected time of the next incoming message. Because the duration T is usually small (T should be small reported to the duration of the aerosol-generating system 1000 heating process), a slight time tolerance of for instance 1 second could be used, so the aerosol-generating system 1000 should expect the next incoming broadcast in T +/- 1 second.

When starting the heating function, the aerosol-generating system 1000 may only wait at most T (plus the time tolerance), to expect a first “on-going” control signal or message coming from the computing device 400. No other action is expected from the aerosolgenerating system 1000 at this stage of the process.

Optionally, the computing device 400 can calculate in advance several successive values of V, then the cyphering of these values, so that afterwards, it can just quickly switch in peripheral mode, broadcast the adequate values, then come back to other tasks.

FIG. 5 illustrates an aerosol-generating system 1000 and a computing device 400 that can be used in accordance with the systems and methods disclosed herein . Unless stated otherwise, the aerosol-generating system 1000 and computing device 400 of FIG. 5 have the same functions, features, and elements as the aerosol-generating system 1000 and computing devices 400 described with reference to FIG. 1 to FIG. 4. The computing device 400 is illustrated as a block diagram on the left-hand side of FIG. 5, and the aerosol-generating system 1000 is illustrated as block diagram on the right-hand side of FIG. 5.

In the example shown in FIG. 5, the computing device 400 may broadcast a cypher value to several aerosol-generating systems 1000 simultaneously. In this option, the computing device 400, in peripheral role, can broadcast in the advertisement packets only the cypher value of F(V).

Similar to the example of FIG. 4, the computing device 400 can address several aerosolgenerating systems 1000 simultaneously, the secret S can be generated by the computing device 400 and securely transmitted to the aerosol-generating system 1000 during the P- secret process, which may associate them to the computing device 400. The computing device 400 can determine the initial value V as well as the first broadcasting time.

In contrast to the example of FIG. 4, however, there is no value in clear in the advertisement broadcasted by the computing device 400. Accordingly, an aerosol-generating system 1000 should use at first (and from time to time) acquire the current value V that will be used by the computing device 400 in the next time slot T to calculate F(V) which cypher value will then be broadcasted.

Afterwards, the aerosol-generating system 1000, knowing F, would be able to calculate the values of V by applying F recursively to V and should no longer need any P-setting. Such P-setting process could use for instance a BLE communication with pairing between the RRD and the smartphone.

To avoid pairing the aerosol-generating system 1000 and the computing device, the aerosol-generating system 1000 could also go into peripheral mode, to send to the computing device 400, which most often is in central mode, a specific signal in the payloads indicating that the current V value is requested. The aerosol-generating system 1000 then goes and remains in central mode. The computing device 400 then, the next time it goes in peripheral mode, can modify its next advertisement broadcast so that it includes in clear the current value F(V) along with its cypher value, having then a broadcast similar to the ones described with reference to FIG. 4. Alternatively, the computing device 400 can directly go in peripheral mode and broadcast the current value V only, as shown in FIG. 5.

In such case, the P-setting process could be triggered by the aerosol-generating system 1000 for instance when the aerosol-generating system 1000 starts or the first time the heating process or cycle of the aerosol-generating system 1000 is activated after a restart of the aerosol-generating system 1000 or when the aerosol-generating system 1000 deciphering of the value broadcasted by the computing device 400 is not successful.

The interest of this option is that there is not simultaneously the clear message and its cypher value in the same broadcast.

Th examples and variants described with reference to FIG. 5 to FIG. 3, are summarized and contrasted below.

The computing device 400 can address one or multiple aerosol-generating systems 1000 simultaneously. A message transmitted by the computing device 400 (referred to herein as broadcast) can include a cypher value and the aerosol-generating system’s 1000 ID (for instance DUSN), alternatively can include a message in clear with its cypher signature, and alternatively can include only a cypher value.

The secret S can be generated either at the computing device 400 or at the aerosolgenerating system 1000. A P-Secret process can be used between the computing device 400 and a server, or alternatively between the computing device 400 and the aerosol-generating system 1000. Such P-setting may not be required, e.g. as is the case in the example of FIG. 4, or can be used to transmit a value to be cyphered to the computing device 400. This process is preferably triggered when the aerosol-generating system 1000 starts a heating process.

While the invention has been illustrated and described in detail in the drawings and foregoing description, such illustration and description are to be considered exemplary and not restrictive. The invention is not limited to the disclosed embodiments. Other variations to the disclosed embodiments can be understood and effected by those skilled in the art, from a study of the drawings, the disclosure, and the appended claims.

The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used advantageously.

Any reference signs in the claims should not be construed as limiting the scope.

Claims

1 . An aerosol-generating system in an unlocked state, in which the aerosolgenerating system is enabled to generate aerosol, the aerosol-generating system configured to: determine whether at least one unlocking condition is fulfilled; and maintain the aerosol-generating system in the unlocked state upon confirming that the unlocking condition is met.

2. The aerosol-generating system according to the preceding claim, wherein the aerosol-generating system, while being configured in the unlocked state, is configured to evaluate the at least one unlocking condition, and to confirm fulfilment of the at least one unlocking condition.

3. The aerosol-generating system any one of the preceding claims, further configured to transition the aerosol-generating system into a locked state, in which the aerosol-generating system is prevented from generating aerosol, upon determining a predefined number of times, optionally in a predefined period of time, that the unlocking condition is violated.

4. The aerosol-generating system according to any one of the preceding claims, wherein the aerosol-generating system, in the unlocked state, is configured to repeatedly, continually or continuously determine whether the at least one unlocking condition is met during operation of the aerosol-generating system to generate aerosol.

5. The aerosol-generating system according to any one of the preceding claims, wherein the aerosol-generating system is configured to determine whether the at least one unlocking condition is met upon or at initiation of a usage session to generate aerosol; and/or wherein the aerosol-generating system is further configured to prohibit initiation of a heating cycle or usage session to generate aerosol upon determining that the at least one unlocking condition is violated.

6. The aerosol-generating system according to any one of the preceding claims, wherein the at least one unlocking condition relates to or is indicative of one or more of:

- a predetermined period of time,

- a number of consecutive puffs allowed,

- an amount of energy usable to generate aerosol, - a number of usage sessions the aerosol-generating system is operable to generate aerosol,

- receiving one or more messages from at least one external computing device,

- an identity of a user.

7. The aerosol-generating system according to any one of the preceding claims, wherein the at least one unlocking condition is indicative of establishing a connectionless communication with one or more external computing devices or a companion device.

8. The aerosol-generating system according to any one of the preceding claims, configured to determine whether at least one unlocking condition related to presence of an external computing device is fulfilled.

9. The aerosol-generating system according to any one of the preceding claims, configured to maintain the aerosol-generating system in the unlocked state based on detecting presence of one or more external computing devices in a communication range of the aerosol-generating system using connectionless communications; and/or wherein the aerosol-generating system, in the unlocked state, is configured to repeatedly determine whether the at least one unlocking condition is fulfilled based on communicating with an external computing device using connectionless communication.

10. The aerosol-generating system according to any one of the preceding claims, wherein the aerosol-generating system is configured to: repeatedly determine whether an external computing device is present in the communication range of the aerosol-generating system; and maintain the aerosol-generating system in the unlocked state based on confirming presence of the external computing device.

11 . The aerosol-generating system according to any one of the preceding claims, further configured to receive one or more messages from the external computing device as broadcast message via connectionless communications, preferably wherein the received message includes at least one cyphered value.

12. The aerosol-generating system according to any one of the preceding claims, configured to: determine whether at least one unlocking condition related to presence of an external computing device is fulfilled; and detect presence of the external computing device based on periodically receiving messages with updated cyphered values from the external computing device.

13. The aerosol-generating system according to any one of the preceding claims, comprising one or more of: an aerosol-generating device configured to generate aerosol and a companion device for storing and/or charging an aerosol-generating device; wherein the aerosol-generating device or the companion device is configured to: determine whether at least one unlocking condition is fulfilled; and maintain the aerosol-generating system in the unlocked state upon confirming that the unlocking condition is met, optionally wherein the aerosol-generating system further comprises an aerosol-generating article.

14. A method of operating a computing device, comprising: generating a cyphered value by applying a cypher function to a clear value, and authorizing a user of an aerosol-generating system to operate the aerosol-generating system based on transmitting the cyphered value to the aerosol-generating system.

15. A computer program, which when executed by a computing device, instructs the computing device to perform steps of the method according to the preceding claim.