KR20240052341A - Aerosol-generating device and system that authenticate with an identity module - Google Patents

Abstract

Embodiments relate to an aerosol-generating device and system that authenticates with an identity module. More specifically, the effectiveness of authentication is increased by performing age authentication through a certified authentication system, and the authentication information is stored in the identity module to replace the device. Despite this, it relates to a convenient aerosol generating device and system in which only authentication information can be transferred to a new device.
The aerosol generating device of the embodiment includes an identity module that stores authentication information for user authentication, which is transmitted from an external device through a short-distance communication means, and a control unit that controls the operation of the aerosol generating unit, and the control unit sends a request for use of the aerosol generating device. When received, it is determined whether authentication information is stored in the identity module, and only when authentication information is stored in the identity module, power is applied to the aerosol generator to control aerosol generation.

Description

AEROSOL-GENERATING DEVICE AND SYSTEM THAT AUTHENTICATE WITH AN IDENTITY MODULE}

Embodiments relate to an aerosol-generating device and system that authenticates with an identity module. More specifically, the effectiveness of authentication is increased by performing age authentication through a certified authentication system, and the authentication information is stored in the identity module to replace the device. Despite this, it relates to a convenient aerosol generating device and system in which only authentication information can be transferred to a new device.

Inhalation of hedonic substances, commonly referred to as smoking, can be achieved by inhaling fine particles in the air, i.e. aerosols. Previously, cigarette-type tobacco was almost the only means of inhaling these substances, but recently, aerosol generating devices such as electronic cigarettes are also being used. Electronic cigarettes generate aerosol by vaporizing the inhaled material into vapor by applying heat or ultrasonic waves to a cartridge containing the inhaled material in liquid form, so it is completely different from the conventional cigarette type of cigarette that generates smoke by combustion. It has the advantage of being able to prevent the generation of various harmful substances that may occur due to combustion.

Because of the possibility of inhaling nicotine, aerosol generating devices are subject to restrictions such as restrictions on sales and use, like regular cigarettes. Nevertheless, teenagers can easily acquire and use them through proxy purchases and second-hand transactions, and problems of unauthorized use by family members may arise. Republic of Korea Patent No. 10-2222248 discloses an electronic cigarette user authentication system and method. Additionally, Republic of Korea Patent No. 10-2325372 discloses a method of authenticating a user through an external device and determining the operation of an aerosol generating device according to the authentication result. Republic of Korea Patent Publication No. 10-2021-0080943 discloses a means of adding a biometric authentication function to an aerosol generating device so that only users who have obtained user authentication can use it.

These conventional methods can still avoid age-restricted authentication or user authentication, so there is a need to utilize a recognized authentication system to prevent authentication bypass, which is a limitation of the prior art. If an aerosol generating device has a biometric authentication function, it is difficult to prevent use by youth because it is possible to reset the device and re-register biometric information. Additionally, when an aerosol generating device is authenticated by an external device, it is intended to provide additional functions to the user and can be used even without authentication.

In embodiments, even if the aerosol generating device does not have a terminal function that can connect to the Internet, the age is authenticated upon first use of the aerosol generating device by linking with an authorized authentication system using an external device, and the device is used only if the age is available. The purpose is to provide an aerosol generating device and system that can prevent minor use by youth by allowing the lock to be unlocked.

In addition, embodiments provide an aerosol-generating device and system that stores age authentication information in the identity module of the aerosol-generating device, so that only the identity module can be moved and installed without re-authentication, or only the authentication information can be moved and used, despite replacement of the device. The purpose.

Additionally, the embodiments aim to provide an aerosol-generating device and system that can improve security by performing periodic loss checks in preparation for the loss of the aerosol-generating device or the identity module.

The aerosol generating device of one embodiment of the present invention includes a housing for accommodating internal components, a battery for applying power to the components, an aerosol generator, a short-range communication means for communicating with an external device that performs age authentication of the user, It includes a control unit that controls the operation of an identity module and an aerosol generator that stores authentication information for user authentication transmitted from an external device through a short-distance communication means, and the control unit authenticates to the identity module when receiving a request for use of the aerosol generator. It is characterized by determining whether information is stored and controlling the aerosol generation by applying power to the aerosol generator only when authentication information is stored in the identity module.

Additionally, the aerosol generating device of one embodiment is characterized in that the authentication information stored in the identity module is an encrypted authentication key.

In addition, the aerosol generating device of one embodiment is characterized in that the short-distance communication means is a communication module that transmits and receives data using any one of Bluetooth, NFC, Zigbee, wireless LAN, or IrDA.

In addition, in the aerosol generating device of one embodiment, the identity module may additionally store control information including at least a manner in which the control unit controls the operation of the aerosol generating unit, and the control unit stores the stored control information when the control information is stored in the identity module. It is characterized in that the operation of the aerosol generator can be controlled using control information.

In addition, the aerosol generating device of one embodiment is characterized in that the identity module is capable of accumulating and storing the usage history of the aerosol generating device.

In addition, the aerosol generating device of one embodiment is characterized in that the identity module can be mounted and detached on one side of the housing.

In addition, the authentication system of the aerosol generating device of one embodiment of the present invention is paired and communicates with the aerosol generating device and the aerosol generating device of any of the above embodiments through short-distance communication, and includes an authentication unit that authenticates the user's age, and a user that the authentication unit performs. When age authentication is successful, it includes an authentication information generation unit that generates authentication information, and an authentication information transmission unit that transmits the generated authentication information to the aerosol generating device, wherein the control unit transmits the authentication information to the identity module. It is characterized by determining whether the authentication information is stored in the identity module and requesting the authentication unit to perform an age authentication process.

In addition, the authentication system of the aerosol generating device according to an embodiment of the present invention is characterized in that the authentication unit is connected to a public authentication system and an Internet network during the age authentication process to request age authentication and receive the age authentication result.

In addition, the authentication system for the aerosol generating device according to an embodiment of the present invention calculates the degree of use of the aerosol generating device when control information is stored in the identity module, and when the calculated degree of use exceeds a predetermined threshold, the control unit calculates the degree of use of the aerosol generating device. It is characterized by deleting authentication information stored in the identity module.

In addition, in the authentication system for the aerosol generating device of one embodiment of the present invention, when receiving a request for use of the aerosol generating device, the control unit requests the authentication department to perform a loss report confirmation process, and the authentication unit confirms the loss during the loss report confirmation process. The system is connected to the Internet network to request confirmation of a loss report and receive the results. If it is confirmed that the loss has been reported based on the results of the confirmation of the loss report, the authentication information stored in the identity module is deleted and the age verification process is performed. It is characterized by

The aerosol generating device and system provided by the present invention authenticates users using a public authentication system, making it impossible to bypass age restrictions or use restriction functions.

In addition, the aerosol generating device and system provided by the present invention stores authentication information separately in the identity module, so that after one authentication, the authentication information can be transferred even if the device is replaced, eliminating the need for re-authentication.

Additionally, the aerosol generating device and system provided by the present invention can further strengthen security by periodically requesting re-authentication or checking for loss.

1 is a block diagram illustrating the functional configuration of an aerosol generating device according to an embodiment of the present invention;
Figure 2 is a conceptual plan view to explain the external configuration of an aerosol generating device according to an embodiment of the present invention;
Figure 3 is a flowchart showing a control method after the control unit 120 of the aerosol generating device 100 according to an embodiment of the present invention receives a user's request for use;
Figure 4 is a configuration diagram of an authentication system for an aerosol generating device including the aerosol generating device 100 of an embodiment of the present invention;
FIG. 5 is a block diagram illustrating the components of the authentication providing device 200 by way of example.
6 is a conceptual diagram illustrating a method of operating an authentication system for an aerosol generating device according to an embodiment of the present invention;
Figure 7 is a flowchart for explaining the age authentication process of the authentication system for the aerosol generating device according to an embodiment of the present invention;
Figure 8 is a flowchart showing a control method after the control unit 120 of the aerosol generating device 100 receives a user's request for use according to another embodiment of the present invention.

Hereinafter, the present invention will be described in more detail with reference to the drawings.

Figure 1 is a block diagram for explaining the functional configuration of an aerosol generating device according to an embodiment of the present invention. Figure 2 is a conceptual plan view to explain the external configuration of an aerosol generating device according to an embodiment of the present invention. In this embodiment, the aerosol generating device 100 may include a housing 110, a control unit 120, an aerosol generating unit 130, a battery 140, a short-distance communication means 150, and an identity module 160. .

The control unit 120 may include, for example, a Micro-Controller Unit (MCU) that can perform command processing, various operations, and device control. The control unit 120 controls the operation of the aerosol generating unit 130. In particular, the control unit 120 determines whether authentication information is stored in the identity module 160, and if stored, the aerosol generating device 100 performs age authentication. It is determined that this is the case, and the user is allowed to use the aerosol generating device 100. On the other hand, if authentication information is not stored in the identity module 160, the control unit 120 may determine that the aerosol generating device 100 is in an age-unverified state and may not allow use of the aerosol generating device 100. there is.

The aerosol generating unit 130 includes a substrate supply unit into which an aerosol-forming substrate (smoking article), such as a liquid cartridge or cigarette, is inserted or fixedly mounted, and a substrate supply portion or aerosol-forming substrate that generates energy through resistance heating, induction heating, high-frequency heating, etc. It may include a heating member that generates aerosol by supplying it to the. The aerosol generator 130 corresponds to a technology easily recognized by those skilled in the art to which the present invention pertains, and its detailed description is omitted. The battery 140 applies power necessary for operation to all or part of the components such as the control unit 120, the aerosol generator 130, the short-range communication means 150, and the identity module 160.

Components of aerosol-generating device 100 may be housed within housing 110 . The housing 110 has a size that can be carried and held and protects the components accommodated therein. A mounting portion 111 on which the identity module 160 is mounted may be formed on one side of the housing 110.

The short-range communication means 150 is an element for receiving predetermined data, that is, authentication information, from an external device that performs age authentication (eg, an authentication providing device to be described later). For the purpose of the present invention, the short-range communication means 150 is preferably a communication module for short-range communication. For example, the short-range communication means 150 may be a communication module that transmits and receives data using any one of Bluetooth, NFC, ZigBee, wireless LAN, or IrDA.

The short-range communication means 150 stores the authentication information received from an external device (for example, an authentication providing device to be described later) that performs user age authentication directly or through the control unit 120 in the identity module 160. The control unit 120 can refer to this when the aerosol generating device starts operating later.

The identity module 160 is a module included in the aerosol generating device 100 and, depending on the embodiment, may be mounted on and detached from the aerosol generating device 100. In an embodiment in which the identity module 160 is mounted and detached, it may be mounted on or separated from the mounting portion 111 formed on one side of the housing 110, as shown in the example of FIG. 2. The identity module 160 is an element that stores data that can be recognized by a computer, including at least a memory device. For example, a solid-state disk (SSD), etc., where data can continue to be stored even when power is turned off. It may include a non-volatile memory device. The identity module 160 is an element that stores authentication information for user authentication, which is transmitted from an external device through the short-distance communication means 150.

Figure 3 is a flowchart showing a control method after the control unit 120 of the aerosol generating device 100 receives a user's request for use according to an embodiment of the present invention. In this embodiment, when the control unit 120 receives a user's request to use the aerosol generating device 100, it determines whether authentication information is stored in the identity module 160 included therein (step s110). The user's request for use may be regarded as a request for use, for example, turning on the power of the aerosol generating device 100 or turning it on and pressing an operation button. If the control unit 120 determines that authentication information is stored in the identity module 160 included or mounted, the control unit 120 may operate the aerosol generator 130 in response to the use request (step s120). On the other hand, if it is determined that the authentication information is not stored in the identity module 160 included or equipped with the control unit 120, the aerosol generator 130 is not operated and the paired external device is connected to the paired external device through the short-range communication means 150. It is possible to request the performance of an age authentication process, which will be explained later, and to request age authentication from the user (step s130).

The authentication information stored in the identity module 160 and used before operation of the aerosol generating device 100 may be, for example, an encrypted authentication key that can be verified and confirmed by the control unit 120. Authentication information may be generated by a paired external device (authentication providing device), which will be described later, transmitted to the aerosol generating device 100 through short-distance communication means 150, and stored in the identity module 160.

Depending on the embodiment, in addition to authentication information, the identity module 160 may store control information including at least a method by which the control unit 120 controls the operation of the aerosol generator 130. Control information may include, for example, a temperature profile, which is a temperature change scenario according to a preset time. In this case, the control unit 120 may control the operation of the aerosol generator 130 to follow the temperature profile stored in the identity module 160.

Additionally, depending on the embodiment, the identity module 160 may cumulatively store the usage history of the aerosol generating device 100. The use history may include, for example, one or more of the number of puffs the user takes, the average interval between each puff, and the use time in one use cycle of the aerosol generating device 100.

In embodiments, the aerosol generator 130 is controlled to operate only when authentication information is stored in the identity module 160, thereby preventing unauthorized use by users who have not gone through the age authentication process, which will be described later. In addition, depending on the embodiment, the identity module 160 can be mounted on and detached from the aerosol generating device 100, so the user can verify age by moving and mounting only the identity module 160 even when using multiple aerosol generating devices. The inconvenience of having to re-implement disappears. Additionally, when control information is stored in the identity module 160, a temperature profile considering the user's preference can be stored and the temperature profile can be continuously used despite changes in the aerosol generating device 100. In addition, when the usage history is accumulated and stored in the identity module 160, the user can use it as statistics, or the control unit 120 can perform automatic control based on the usage history.

Figure 4 shows a configuration diagram of an authentication system for an aerosol generating device including the aerosol generating device 100 according to an embodiment of the present invention. In this embodiment, the authentication system of the aerosol generating device performs age authentication through interaction between the aerosol generating device 100 of an embodiment of the present invention and the authorized authentication system 300, and if the age authentication result is successful. In this case, it is characterized by including an authentication providing device 200 that generates authentication information and transmits it to the paired aerosol generating device 100. The authentication providing device 200 receives the age authentication result performed by the authorized authentication system 300 as input and transmits the generated authentication information to the aerosol generating device 100 as output.

In addition, according to the embodiment, the authentication providing device 200 performs a loss report confirmation process through interaction with the loss confirmation system 400 at the request of the aerosol generating device 100, and sends the result to the aerosol generating device 100. It is transmitted to (100) so that the control unit 200 can perform control according to the result.

FIG. 5 is a block diagram illustrating the components of the authentication providing device 200 by way of example. The authentication providing device 200 includes an authentication unit 210 that verifies the user's age through interaction with the certified authentication system 300, and when the authentication of the user's age performed by the authentication unit 210 is successful. , It may include an authentication information generation unit 220 that generates authentication information, and an authentication information transmission unit 230 that transmits the generated authentication information to the aerosol generating device 100.

The authentication providing device 200 may be, for example, a conventional PC or a terminal device such as a smartphone or tablet, except that it performs a process specific to embodiments of the present invention. The authentication providing device 200 is a terminal device that is connected to the authorized authentication system 300 and the loss confirmation system 400 through an Internet network, and can request user age authentication and loss report confirmation and receive the results. desirable.

Referring to FIG. 5 , which is shown for illustrative purposes, the authentication unit 210 of the authentication providing device 200 allows the user to enter personal information for age authentication and interact with the authentication providing device 200. It may include a user interface 211, a public authentication system 300, and a communication unit 212 for connecting the loss confirmation system and the authentication providing device 200 over the Internet. Therefore, the authentication unit 210 authenticates the user's age through the accredited authentication system 300, and in this process, receives the user's input when necessary and transmits it to the accredited authentication system 300. In addition, the age authentication result can be received from the authorized authentication system 300, and accordingly it can be determined whether the user is of an age at which the aerosol generating device 100 can be used.

The authentication information generation unit 220 generates authentication information when the age authentication result of the authentication unit 210 is successful, that is, when the user is certified as being of age suitable for use of the aerosol generating device 100. For example, the authentication information generator 220 may generate an authentication key using an encryption method that can be deciphered by the control unit 120 of the aerosol generating device 100.

Depending on the embodiment, the authentication unit 210 and the authentication information generation unit 220 may be physically one component and perform various command processing and calculations, and also enable various apps to be executed, for example. For example, it could be a microprocessor. Additionally, the authentication providing device 200 may include a power supply 240 that supplies power to the components.

The authentication information transmission unit 230 transmits the authentication information generated by the authentication information generation unit 220 to the nearby aerosol generating device 100. That is, the authentication information transmission unit 230 is a means for transmitting data to the short-distance communication means 150 of the aerosol generating device 100. For example, the authentication information transmission unit 230 may be a communication module that transmits and receives data using any one of Bluetooth, NFC, ZigBee, wireless LAN, or IrDA. Alternatively, the communication unit 212 may replace the role of the authentication information transmission unit 230.

The authorized authentication system 300 may be, for example, a variety of identity authentication services capable of at least age authentication provided by a credit information company that can be accessed through an app running on the authentication providing device 200. there is. This identity authentication service authenticates date of birth, gender, and name through, for example, mobile phone authentication, PASS app authentication, joint certificate authentication, ID authentication, or authentication using an OTP generator, and sends the authentication result to the authentication providing device 200. You can at least verify your age by sending it back through the app.

For example, the loss confirmation system 400 reports the loss of the aerosol generating device 100 including the identity module 160, or, in an embodiment in which the identity module 160 is removable, the loss of the identity module 160 itself. It may be a server connected to the Internet that receives the report along with the unique identification information of the relevant identity module and stores the contents.

Figure 6 is a conceptual diagram for explaining the operation method of the authentication system for the aerosol generating device according to an embodiment of the present invention, and Figure 7 illustrates the age authentication process for the authentication system for the aerosol generating device according to an embodiment of the present invention. This is the flowchart for doing so. For example, when purchasing the aerosol generating device 100 for the first time, a user who wishes to use the aerosol generating device 100 without authentication information stored in the identity module 160 uses the authentication providing device 200. Thus, age authentication can be requested by entering the information required for age authentication into the public authentication system 300.

The authentication providing device 200 transmits the age authentication information entered by the user to the authorized authentication system 300 and then receives the age authentication result again from it. If the age authentication result transmitted from the accredited authentication system 300 is authentication success, the authentication providing device 200 generates authentication information, and uses the authentication information transmission unit 230 to create the paired user's aerosol generating device. Send to (100).

This is explained in more detail using the example flowchart in FIG. 7. When the age authentication process that can be performed by the authentication providing device 200 begins, the authentication unit 210 of the authentication providing device 200 provides information necessary for the user, for example, which can be implemented in the form of an app. , provides an interface, and receives user information required for age authentication (step s210). Thereafter, the authentication unit 210 transmits age authentication required information to the authorized authentication system 300 through the communication unit 212 for Internet connection and requests age authentication (step s220). Thereafter, the authentication unit 210 receives the age authentication result responded by the authorized authentication system 300 (step s230). The authentication unit 210 determines whether the user is of an age at which the aerosol generating device 100 can be used based on the received age authentication result (step s240). If it is determined that the age is not usable, the age authentication process may be terminated without generating authentication information (step s250). On the other hand, if the age is determined to be usable in step s240, the authentication information generation unit 220 generates authentication information, and the authentication information transmission unit 230 transmits the generated authentication information to the user's aerosol generating device 100 ( s260 step).

Depending on the embodiment, the aerosol generating device 100 of the present invention may be converted from the age authentication state to the age non-authentication state by the control unit 120 when a predetermined condition is satisfied. For example, the control unit 120 accumulates and calculates the user's usage time with authentication information stored in the identity module 160 of the aerosol generating device 100, or uses a means such as a puff sensor (not shown). The degree of use of the aerosol generating device 100 is calculated by accumulating and calculating the number of puffs (inhalation) of the user. If this exceeds a predetermined threshold, the authentication information stored in the identity module 160 is deleted and the aerosol generating device ( 100) can be converted back to the age-unverified state. By requesting re-verification of age according to predetermined conditions, the effectiveness of age authentication can be further increased.

Figure 8 is a flowchart showing a control method after the control unit 120 of the aerosol generating device 100 receives a user's request for use according to another embodiment of the present invention. In this embodiment, the control unit 120 requests the authentication unit 210 to perform a loss report confirmation process.

In this embodiment, when the control unit 120 receives a user's request to use the aerosol generating device 100, it determines whether authentication information is stored in the included or installed identity module 160 (step s310). If it is determined that authentication information is not stored in the identity module 160 included or equipped with the control unit 120, the aerosol generating unit 130 is not operated and the paired authentication providing device ( 200), the age authentication process may be requested, and the user may be requested to verify age (step s320).

On the other hand, if it is determined that authentication information is stored in the identity module 160 included or equipped with the control unit 120, the authentication unit 210 of the currently paired authentication providing device 200 is requested to perform a loss report confirmation process. (step s330).

Thereafter, the loss report confirmation process may be performed by the authentication providing device 200. In the process of confirming the loss report, the authentication unit 210 of the authentication providing device 200 transmits information required to confirm the loss report to the loss confirmation system 400 through the communication unit 212 for Internet connection (step s340). For example, the information required to confirm a loss report may be identification information such as a unique identification number of the aerosol generating device 100 or the identity module 160. Thereafter, the authentication unit 210 receives the loss report confirmation result responded by the loss confirmation system 400 (step s350).

Based on the received results, the authentication unit 210 determines whether the aerosol generating device 100 or the identity module 160 has been reported as lost (step s360). In this step, the authentication unit 210 transmits the received result to the aerosol generating device 100, and the control unit 120 of the aerosol generating device 100 may perform the above determination. If it is confirmed that the loss has been reported, the authentication information stored in the identity module 160 can be deleted, the aerosol generating device 100 can be converted to an age-unverified state, and the user can re-perform the age authentication process again ( s380 step). On the other hand, if it is not confirmed that the loss has been reported, the control unit 120 may operate the aerosol generator 130 in response to the user's first use request (step s370).

As explained above, the present invention is not limited to the specific preferred embodiments described above, and anyone skilled in the art can use various Of course, modifications are possible, and such modifications fall within the scope of the claims.

100: Aerosol generating device 110: Housing
120: Control unit 130: Aerosol generating unit
140: Battery 150: Short-distance communication means
160: Identity module 200: Authentication providing device
210: authentication unit 220: authentication information generation unit
230: Authentication information transmission unit 300: Certified authentication system
400: Loss confirmation system

Claims (10)

a housing to accommodate internal components;
a battery to power the components;
Aerosol generating unit;
Short-range communication means for communicating with an external device that performs age authentication of the user;
an identity module that stores authentication information for user authentication, which is transmitted from an external device through short-distance communication means; and
It includes a control unit that controls the operation of the aerosol generator,
When receiving a request to use the aerosol generating device, the control unit determines whether authentication information is stored in the identity module and controls the aerosol generation by turning on the aerosol generator only when authentication information is stored in the identity module. An aerosol generating device. According to paragraph 1,
An aerosol generating device wherein the authentication information stored in the identity module is an encrypted authentication key. According to paragraph 1,
An aerosol generating device, wherein the short-range communication means is a communication module that transmits and receives data using any one of Bluetooth, NFC, ZigBee, wireless LAN, or IrDA. According to paragraph 1,
The identity module may further store control information including at least the manner in which the control unit controls operation of the aerosol generator,
An aerosol generating device, wherein when control information is stored in the identity module, the control unit can control the operation of the aerosol generator using the stored control information. According to paragraph 1,
The identity module is an aerosol generating device characterized in that it can additionally accumulate and store the usage history of the aerosol generating device. According to paragraph 1,
The identity module is an aerosol generating device that can be mounted and detached on one side of the housing. An aerosol generating device according to any one of claims 1 to 6; and
It communicates by pairing with an aerosol generating device through short-distance communication, and includes an authentication unit that verifies the user's age, an authentication information generation unit that generates authentication information when the user's age authentication performed by the authentication unit is successful, and the generated authentication information. It includes an authentication providing device including an authentication information transmission unit that transmits to the aerosol generating device,
An authentication system for an aerosol generator, wherein the control unit determines whether authentication information is stored in the identity module and, if authentication information is not stored in the identity module, requests the authentication unit to perform an age authentication process. . In clause 7,
An authentication system for an aerosol generating device, wherein the authentication unit is connected to a public authentication system and an Internet network during the age authentication process, requests age authentication, and receives age authentication results. In clause 7,
The control unit calculates the degree of use of the aerosol generating device when control information is stored in the identity module, and deletes the authentication information stored in the identity module when the calculated degree of use exceeds a predetermined threshold. Device. In clause 7,
When the control department receives a request to use an aerosol generating device, it requests the authentication department to perform a loss report verification process,
During the loss report confirmation process, the authentication department is connected to the loss confirmation system and the Internet network to request confirmation of the loss report and receive the results. If it is confirmed that the loss has been reported according to the loss report confirmation result, the authentication information stored in the identity module is An authentication system for an aerosol generating device, characterized in that it performs an age authentication process.