RU2841054C1 - Systems, devices and methods for unlocking aerosol-generating devices - Google Patents

Abstract

FIELD: smoking accessories; data processing.

SUBSTANCE: method involves maintenance of a database of user accounts and aerosol-generating devices associated with user accounts. Method further includes receiving a request for unlocking from said aerosol-generating device for unlocking an unlocked parameter of said aerosol-generating device. Unblocking request includes unique identification information about the user, which identifies the account of this user, which is associated with this aerosol-generating device. Method further includes determining whether said aerosol-generating device is already associated with any user accounts in the database, transmitting unlocking authorization to the aerosol-generating device to unlock the parameter to be unlocked in response to determining that the aerosol-generating device is no longer associated with any user accounts in the database, and updating the database to associate the user account with the aerosol-generating device in response to a determination that the aerosol-generating device is no longer associated with any user accounts in the database.

EFFECT: systems, devices and methods for unlocking aerosol-generating devices are disclosed.

36 cl, 7 dwg

Description

The present invention relates to systems, devices and methods for use in unblocking aerosol generating devices.

It may be difficult to restrict or prohibit unauthorized use of aerosol-generating devices, such as by minors (e.g., users who are not legally permitted to use aerosol-generating devices), especially when reselling aerosol-generating devices between third parties, such as users or unauthorized retail outlets. For example, if the first user purchases an aerosol-generating device from a legitimate retail outlet, the first user may resell the purchased aerosol-generating device to a second user, who may be a minor.

In addition, unauthorized users may use authorized users' aerosol-generating devices without the authorized users' knowledge. For example, if an authorized user leaves his or her aerosol-generating device unattended, an unauthorized user may use the unattended aerosol-generating device without the authorized user's knowledge. Moreover, for example, if an authorized user loses his or her aerosol-generating device, an unauthorized user may use the lost aerosol-generating device without the authorized user's knowledge.

Aerosol generating devices and related systems may provide limited blocking functionality. Published International Patent Application WO-2019/126805 A1 describes vaporizers and vaporizer systems that can unlock the vaporizer to activate the vaporizer based on a certain age of the user meeting a specified threshold (e.g., adulthood). The vaporizer may determine the age or receive an age determination from a server and/or an application. Furthermore, binding, blocking and/or unlocking the vaporizer may be available by authorizing the application to the user account linked to the vaporizer. In addition, a shared private key generated by the application, which is transmitted to the vaporizer during the blocking request, may be used to lock/unlock the vaporizer. And, in addition, the vaporizer may be designed such that authorized ownership prohibits vaporizers belonging to another account owner from being linked to other accounts without the device owner explicitly unlinking the vaporizer from the original account, thereby making theft more difficult by signaling that the vaporizer is linked to another account user. And, in addition, the vaporizer may be designed such that linked users of the vaporizer may only link a certain number of vaporizers for a certain period of time to prevent exploitation by minors.

U.S. Patent No. 9,763,478 describes electronic vaping devices comprising a locking mechanism that can be controlled by at least one of a voice profile module, a password or access password module, a physical key, a fingerprint scanner, an iris scanner, third-party device authorization, or other biometric data for locking or unlocking. Moreover, a central server can receive both usage information and location information, unified access account information, and tracking information to determine that both the vaping device and the electronic communication device are associated with the same user.

U.S. Patent Application Publication No. 2015/0181945 A1 describes an electronic vaping device that can provide a vapor that can be modified (e.g., turned off, reduced, turned on, or increased) by the electronic vaping device in certain situations (e.g., to prevent unauthorized vaping by a child, teenager, or other person). A mobile communication device can run a software application that relates to the electronic cigarette and receives authorization information from a user and provides the ability to provide vapor from the electronic cigarette if it determines that the authorization information is valid and indicates that the user is authorized to vape the electronic cigarette. The mobile communication device can send the authentication information (or a number of parameters thereof) to a remote server (e.g., a web server) for authentication, which can be particularly useful if a third party has influenced the user's ability to vape the electronic cigarette.

It can be difficult to ensure that only authorized users use the functionality of aerosol-generating devices, especially if authorized users resell their aerosol-generating devices. Additionally, the various resolutions of the locking and unlocking issue can be cumbersome for the user and sellers to implement. For example, the fair resale of aerosol-generating devices between users can be difficult if the unlocking and locking functionality is too cumbersome and complicated. Moreover, it can be difficult for manufacturers to provide various resolutions of the locking and unlocking issue. Additionally, some solutions may not provide reliable unlocking and locking functionality (e.g., improperly encrypted unlocking and locking function), which can be bypassed by an advanced unauthorized user (e.g., a hacker), so that they can still access aerosol-generating devices that they are not authorized to use.

It would be useful to prevent minors from using aerosol-generating devices in a simple, reliable and straightforward manner. Furthermore, it would be useful to prevent third parties from reselling unlocked aerosol-generating devices to unauthorized users. Furthermore, it would be useful to provide a reliable, counterfeit-proof, unique and one-time process for locking or unlocking aerosol-generating devices using cryptographic secret information that is known only to the manufacturer's internal server. And furthermore, it would be useful to prevent a unilateral unlock command from being sent to aerosol-generating devices in order to maliciously unlock aerosol-generating devices.

The present invention may be described as providing exemplary aerosol-generating devices, user interface devices, and servers for use in unlocking unlockable parameters of aerosol-generating devices when linked to a single user account. Moreover, the present invention may be described as further providing exemplary devices, systems, and methods for use in unlocking unlockable parameters of aerosol-generating devices using server-based cryptographic authentication. Exemplary user interface devices may be used to initiate unlocking processes between aerosol-generating devices and a server, and data transmitted between aerosol-generating devices and a server may be transmitted via the user interface devices. For example, a user may connect an exemplary aerosol-generating device to an exemplary server, such as in a retail store or via a mobile application, and after the user has been verified, the unlocking process may be initiated.

Additionally, the present invention may also be described as providing exemplary aerosol-generating devices, user interface devices, and servers for use in locking already unlocked parameters of aerosol-generating devices (e.g., re-locking unlocked parameters), when unlinking from a user account or deregistering it. Moreover, the present invention may be described as further providing exemplary devices, systems, and methods for use in locking already unlocked parameters of aerosol-generating devices using server-based cryptographic authentication. Exemplary user interface devices may be used to initiate locking processes between aerosol-generating devices and a server, and data transmitted between aerosol-generating devices and a server may be transmitted via the user interface devices. For example, a user may connect an illustrative aerosol generating device to an illustrative server, such as in a retail store or via a mobile application, and when the user is disconnected from the aerosol generating device, a locking process may be initiated.

According to one aspect of the present invention, an illustrative aerosol generating device is proposed, comprising a controller, wherein the controller comprises one or more processors. The controller is configured to provide an unlockable parameter, transmit an unlocking request to the server to unlock the unlockable parameter, receive an unlocking permission from the server in response to the transmitted unlocking request, and unlock the unlockable parameter in response to receiving the unlocking permission.

According to another aspect of the present invention, an illustrative user interface device is proposed, comprising a display comprising a graphical user interface allowing a user to interact with it to unlock an unlockable parameter of an aerosol-generating device, a communication interface for transmitting data to and from the aerosol-generating device and a server, and a controller comprising one or more processors and operatively connected to the display and the communication interface. The controller is configured to receive an unlocking request from the aerosol-generating device to unlock the unlockable parameter, transmit the unlocking request to the server, receive an unlocking permission from the server in response to the transmitted unlocking request, and transmit the unlocking permission to the aerosol-generating device to unlock the unlockable parameter.

According to another aspect of the present invention, an illustrative server for unlocking an unlockable parameter of an aerosol-generating device is proposed, comprising a communication interface for transmitting data to and from the aerosol-generating device and a controller comprising one or more processors and operatively connected to the communication interface. The controller is configured to receive an unlocking request from the aerosol-generating device for unlocking the unlockable parameter and to transmit an unlocking permission to the aerosol-generating device for unlocking the unlockable parameter in response to the transmitted unlocking request. Additionally, before initiating the unlocking or blocking process, the illustrative server can request information from the aerosol-generating device for initiating the blocking/unblocking process, and if the server request is valid, the aerosol-generating device can send the blocking or unblocking request to the server.

Additionally, it should be understood that the same or similar processes may be used in this document to block (e.g., re-block) already unlocked parameters of aerosol-generating devices when, for example, a user is unlinked from an aerosol-generating device or its registration is de-registered.

The exemplary aerosol generating device, the user interface device, and the server may advantageously cooperate or "work together" to prevent minors from using the aerosol generating device in a simple, reliable, and straightforward manner and to prevent third parties from reselling unlocked aerosol generating devices to unauthorized users. In particular, for example, transmitting unlocking permissions from one or both of the server and the user interface device to the aerosol generating device may provide for a simple, reliable, and straightforward unlocking of aerosol generating devices for authorized users and may assist in preventing third parties from reselling unlocked aerosol generating devices to unauthorized users. Moreover, it can be described that the present invention solves the problem of ensuring that only the manufacturer of an aerosol generating device, or electronic smoking device, can unlock a certain parameter or function of the aerosol generating device for users who have been verified as owners of aerosol generating devices prior to first use or prior to resale.

As described in this document, the aerosol generating device may contain or have one or more unlockable parameters. For example, the aerosol generating device may have one unlockable parameter. In this example, preferably, the unlockable parameter of the aerosol generating device is the ability to use the heating element to heat the aerosol generating article to generate an aerosol from it. In other words, the unlockable parameter is the ability of the user to inhale or puff the aerosol from the aerosol generating device.

In other examples, the unlockable parameter of the aerosol generating device may be any of a plurality of different functions provided by the aerosol generating device. For example, the unlockable parameter may be the ability to configure one or more options associated with the aerosol generating device, such as the puff concentration, the color of the light emitting elements thereon, sound output options, heater temperature, display options, puff limit, and haptic feedback options (e.g., vibration generation).

Accordingly, the exemplary aerosol generating device, the user interface device and the server may allow one or more unlockable parameters of the aerosol generating device to be unlocked. According to one aspect of the present invention, the exemplary aerosol generating device comprises a cavity for accommodating an aerosol generating article, a heating element for heating the aerosol generating article to generate an aerosol from it and a power source operatively connected to the heating element.

It should be understood that exemplary aerosol-generating devices may be supplied from the manufacturer in a locked state such that one or more unlockable parameters are locked prior to initial purchase or sale. Exemplary methods, processes, and systems described herein may allow one or more unlockable parameters to be unlocked only after a rigorous verification procedure has been completed. Additionally, such exemplary aerosol-generating devices may be re-locked prior to or during resale.

The aerosol generating device may comprise a communication interface for transmitting data to and from the user interface device, a server and a controller comprising one or more processors. The communication interface may, for example, include at least a telemetry circuit and an antenna for two-way communication with other devices, such as user interface devices, servers, network devices, personal computers, etc., and with other networks, such as the Internet, etc. More specifically, data and commands may be transmitted and received during uplink and downlink telemetry between the user interface device and other devices and/or networks using the communication interface. In at least one embodiment, the communication interface is a wireless interface using one or more wireless (e.g., radio frequency) data transmission protocols, such as, for example, BLUETOOTH, WI-FI, any protocol in the ultra-high frequency (UHF) range, any protocol in the super-high frequency (SHF) range, low frequencies, etc.

The controller of the aerosol generating device may comprise one or more processors (e.g., microprocessors) that can operate with a corresponding storage medium or memory device to access processing programs or repeatedly repeating sequences and one or more types of data that can be used to perform exemplary methods. For example, the processing programs or repeatedly repeating sequences stored in the storage medium may include programs or repeatedly repeating sequences for performing statistics, matrix mathematics (e.g., data compression algorithms), standardization algorithms, comparison algorithms, or any other processing used to perform one or more exemplary methods and processes described in this document. Moreover, for example, the processing programs or repeatedly repeating sequences stored in the storage medium may include processes and functions for wirelessly transmitting data and commands between the user interface device and the aerosol generating device and for wirelessly transmitting data and commands between the user interface device and the server. The data carrier or storage device may be further configured to store data relating to blocking and unblocking one or more unblockable parameters of the aerosol generating device and transmit requests for permission to block and unblock between the aerosol generating device, the user interface device and the server, and any other data and/or formulas necessary to perform the processes and methods described in this document.

In one or more embodiments, the aerosol generating device and its controller may be described as being implemented using one or more computer programs running on one or more programmable processors that include data processing capabilities (e.g., microcontrollers, programmable logic devices, etc.), data storage devices (e.g., volatile or non-volatile memory and/or memory elements), input devices, and output devices. The program code and/or logic described herein may be applied to input data to implement the functionality described herein and generate the desired output information. The output information may be applied as input to one or more other devices and/or processes as described herein or as would be applied in a known manner.

Computer program products used to implement the processes described in this document may be provided using any programmable language, such as a high-level procedural and/or object-oriented programming language, which is suitable for communication with a computer system. Any such program products may, for example, be stored on any suitable device, such as a data storage medium, readable by a general-purpose or specialized program, a control and measuring device for configuring and controlling a computer when reading a suitable device for performing the procedures described in this document. In other words, in at least one embodiment, the user interface device may be implemented using a non-transitory computer-readable storage medium implemented with a computer program, wherein the storage medium implemented in this way causes the computer to operate in a specific and specified manner to perform the functions described in this document.

The precise configuration of the aerosol generating device controller is not limited, and essentially any device capable of providing suitable computing and control capabilities for implementing the exemplary methods described herein may be used. In view of the above, it will be readily apparent that the functionality described in one or more embodiments according to the present invention may be implemented in any manner known to a person skilled in the art. Accordingly, the computer language, controller, or any other software/hardware that is to be used to implement the processes described herein should not limit the scope of the systems, processes, or programs (e.g., the functionality provided by such processes or programs) described herein. The methods and processes described in the present invention, including those related to systems or various constituent components, may be implemented at least in part in hardware, software, firmware, or any combinations thereof. For example, various aspects of such techniques may be implemented in one or more processors, including one or more microprocessors, DSPs, ASICs, FPGAs, CPLDs, microcontrollers, or any other equivalent integrated or discrete logic circuits, as well as any combinations of such components. When implemented in software, the functionality associated with the systems, devices, and methods described in the present invention may be implemented as instructions on a machine-readable medium, such as RAM, ROM, NVRAM, EEPROM, flash memory, magnetic storage media, optical storage media, or the like. The instructions may be executed by one or more processors to support one or more aspects of the functionality described in this disclosure.

As described in this document, the unlocking request is transmitted from the aerosol generating device to the server. In one example, the unlocking request may be transmitted directly to the server. More specifically, the aerosol generating device may be wirelessly connected to the Internet to communicate with the server, and the user may use a user interface (e.g., a graphical user interface, buttons, etc.) on the aerosol generating device to transmit the unlocking request to the server using the Internet. In another example, the unlocking request may be transmitted from the aerosol generating device to a user interface device, which in turn may transmit the unlocking request to the server. The user interface device may be wirelessly connected to the Internet to communicate with the server.

In one or more aspects of the present invention, the user interface device is a cellular telephone. In one or more aspects, the user interface device is a smart watch. In general, the user interface device can be described as any electronic device that includes a display to provide a graphical user interface with which a user can interact. The user interface device can include a controller and a communication interface similar to those of the aerosol generating device described in this document.

In one or more aspects of the present invention, an exemplary user interface device comprises a display comprising a graphical user interface allowing a user to attempt to unlock an unlockable parameter. Moreover, in one or more aspects of the present invention, a controller of the exemplary user interface device displays on the graphical user interface a graphical area of the unlockable parameter and allows the user to select the graphical area of the unlockable parameter to initiate the aerosol generating device to transmit thereto a request for unlocking.

The display may be operatively connected to the controller for outputting data via the display for display and for use as a graphical user interface providing the ability to interact with the user. The graphical user interface and the display may comprise a touch screen. The graphical user interface may be described as providing the ability to interact with the user, since the graphical user interface may be configured to allow the user to view data and/or operate data on the display to provide the user with the ability to interact with the user interface device, etc. The graphical user interface may be configured to perform any of the functionalities described in this document with respect to unlocking or locking one or more unlockable parameters of the aerosol generating devices.

An unlock request that can be sent from one or both of the aerosol-generating device and the user interface device includes such data or information to provide the server with the functionality to unlock the aerosol-generating device. Similarly, a block request that can be sent from one or both of the aerosol-generating device and the user interface device includes such data or information to provide the server with the functionality to lock the aerosol-generating device (e.g., when the user is unlinked from the aerosol-generating device or deregistered). The block request can use the same or similar processes as those described herein with respect to the unlock request. In one or more aspects of the present invention, the unlock request includes unique device identification information identifying the aerosol-generating device and nonce information with a limited-time validity corresponding to the parameter to be unlocked. In other words, the unlocking request may contain both unique information about the aerosol-generating device and a random value (nonce) with a limited validity period. The unique identification information about the device may be information or data that identifies this aerosol-generating device and is unique for each specific aerosol-generating device. In other words, each aerosol-generating device may contain unique identification information about the device that is specific only to it and not to any other aerosol-generating device. Thus, the unique identification information about the device is different for each aerosol-generating device. The unique identification information about the device may be a string of alphanumeric characters, a string of hexadecimal digits, etc. In one or more aspects of the present invention, the unique identification information about the device is a serial number. Unique device identification information is used, among other things, to ensure that received messages or data transmissions are intended for the intended aerosol-generating devices.

The nonce information corresponding to the unlock parameter may be any data or information that can be used only once in a cryptographic communication with the server to stop or prevent the unlock request from being used in the future. In other words, the use of the nonce information prevents the unlock request or the message to unlock the aerosol generating device from being repeated in the future. Moreover, it can be described as follows: the nonce information is an arbitrary number that can be used only once in a cryptographic communication and is often a random or pseudo-random number that is issued in the authentication protocol to ensure that old communications cannot be reused in "replay attacks". The nonce information may be valid for the duration of its validity. If the unlocking permission or message received from the server is valid and the time-limited nonce information is still valid (e.g., has not expired), the aerosol generating device can change the status of the unlocked parameter (e.g., unlock the unlocked parameter).

For example, the validity period may be 5 minutes. In this example, if the aerosol-generating device does not receive permission to unlock within 5 minutes, the nonce information with a limited validity period that was sent in the unlock request will be determined to be invalid, and therefore the unlock permission, which may include the nonce information with a limited validity period or its derivative, will be invalid. In contrast, if the unlock permission was received within the 5-minute validity period, the unlock permission will be valid and will result in permission for the aerosol-generating device to unlock the unlocked parameter. In other examples, the validity period may be greater than or equal to about 7 minutes, greater than or equal to about 10 minutes, less than or equal to about 60 seconds, less than or equal to about 30 seconds, less than or equal to about 20 seconds, or less than or equal to 5 seconds.

Thus, in one or more aspects of the present invention, the controller of the exemplary aerosol generating device or the exemplary user interface device is further configured to stop unlocking the unlockable parameter if the unlocking permission is not received by the expiration of the validity period after the unlocking request is transmitted to the server. Moreover, in one or more aspects of the present invention, the validity period is less than or equal to 5 minutes.

After the server has received an unlock request from one or both of the aerosol generating device and the user interface device, the server may transmit an unlock permission to one or both of the aerosol generating device and the user interface device depending on whether the server has determined whether or not to unlock the aerosol generating device. The unlock permission may be transmitted or communicated to one or both of the aerosol generating device and the user interface device in a secure and private manner. In one or more aspects of the present invention, the unlock permission is encrypted. For example, the unlock permission may be encrypted with a private key known only to the server. Moreover, the unlock permission may include, among other things, unique identification information about the device and information with a nonce with a limited validity period. The unique device identification information may be used to ensure that the correct aerosol generating device has received the unlocking permission or unlocking message, and the nonce information with a limited validity period may be used, as described herein, to determine whether the unlocking permission has been received within the validity period. In other words, the exemplary server may create or generate a lock/unlocking message based on information from the aerosol generating device.

In one or more aspects of the present invention, the controller of the exemplary server is further configured to limit the number of unblocking permissions transmitted to the aerosol generating device. In one or more aspects of the present invention, the number of unblocking permissions for each unique aerosol generating device is less than or equal to 1, less than or equal to 3, or less than or equal to 10.

In one or more aspects of the present invention, in response to receiving an unlocking permission, the controller of the exemplary aerosol generating device decrypts the unlocking permission. The unlocking permission may be decrypted by the aerosol generating device using a public key located on all aerosol generating devices. Thus, in one or more aspects of the present invention, the unlocking permission may be decryptable using a public key stored on this aerosol generating device. The use of asymmetric cryptography ensures that only the manufacturer's servers can lock/unlock the unlockable parameter of the aerosol generating devices, and eliminates any dependence and knowledge of unique keys on each aerosol generating device.

Moreover, in one or more aspects of the present invention, the controller of the exemplary aerosol-generating device determines whether the decrypted unlocking permission contains unique identification information about the device and information with a non-recurring number with a limited validity period, and unlocks the unlockable parameter in response to determining that the decrypted unlocking permission contains unique identification information about the device and said non-recurring information. Thus, the present invention advantageously provides reliable, non-forgery, unique and one-time processes for locking or unlocking the functionality of the aerosol-generating device using cryptographic secret information known only to the manufacturer's server (e.g., an "internal" server), which can limit or stop third parties from hacking and maliciously unlocking aerosol-generating devices.

The aerosol generating device may also be temporarily locked by the user, for example, if the user knows that the aerosol generating device will not be in his possession for a certain period of time. In this way, the user can protect the aerosol generating device from being used by other people when the user is away from the aerosol generating device. In one or more aspects of the present invention, the controller of the exemplary aerosol generating device or the exemplary user interface device is further configured to temporarily re-lock the unlockable parameter for the period of temporary locking. Moreover, in one or more aspects of the present invention, the period of temporary locking is less than or equal to 24 hours. Furthermore, in one or more aspects of the present invention, the controller of the exemplary aerosol generating device or the exemplary user interface device is further configured to allow the user to select a period of time in the period of temporary locking and to initiate the temporary re-locking. For example, the graphical user interface may be represented by a user interface device such that a user may interact with the graphical user interface to select a time period in a time-out period and initiate or start a time-out period. In other examples, the aerosol generating device interface itself (e.g., buttons, display, etc.) may be used to configure and initiate a time-out period.

An exemplary server may perform one or more different processes to ensure that only one user is associated with each aerosol-generating device, to prevent unauthorized users from using already unlocked aerosol-generating devices, to limit the number of aerosol-generating devices that can be unlocked by one user. To do this, the server may include or use a database that includes information about the user account and information about the aerosol-generating device. According to one aspect of the present invention, an exemplary method is provided (e.g., for use by a server), including maintaining a database of user accounts and aerosol-generating devices associated with the user accounts. Each aerosol-generating device is associated with only one user account. The exemplary method further includes receiving an unlocking request from the aerosol-generating device to unlock an unlockable parameter of the aerosol-generating device. The unlock request includes unique user identification information identifying the user account associated with the aerosol-generating device. The exemplary method further includes determining whether the aerosol-generating device is already associated with any user accounts in the database, and transmitting an unlock permission to the aerosol-generating device to unlock the unlock parameter in response to determining that the aerosol-generating device is no longer associated with any user accounts in the database. The exemplary method further includes updating the database to associate the user account with the aerosol-generating device in response to determining that the aerosol-generating device is no longer associated with any user accounts in the database.

According to one aspect of the present invention, an illustrative computer program product is proposed, comprising a non-transitory machine-readable medium with parts of program code stored thereon, wherein, when said program product is launched on a computer or a network device (for example, a server), parts of the program code are configured to maintain a database of user accounts and aerosol-generating devices linked to user accounts. Each aerosol-generating device is linked to only one user account. Parts of the program code are further configured to receive an unlocking request from the given aerosol-generating device to unlock an unlockable parameter of the given aerosol-generating device. The unlocking request includes unique identification information about the user, identifying the account of the given user linked to the given aerosol-generating device. The portions of the program code are further configured to determine whether the aerosol generating device is already linked to any user accounts in the database and to transmit an unlocking permission to the aerosol generating device to unlock the unlockable parameter in response to determining that the aerosol generating device is no longer linked to any user accounts in the database. The portions of the program code are further configured to update the database to link the user account to the aerosol generating device in response to determining that the aerosol generating device is no longer linked to any user accounts in the database.

According to another aspect of the present invention, an illustrative system (e.g., a server) for unlocking unlockable parameters of aerosol-generating devices is proposed, comprising a communication interface for transmitting data to and from the aerosol-generating devices and a controller comprising one or more processors and operatively connected to the communication interface. The controller is configured to maintain a database of user accounts and aerosol-generating devices linked to user accounts. Each aerosol-generating device is linked to only one user account. The controller is further configured to receive an unlocking request from the aerosol-generating device for unlocking the unlockable parameter. The unlocking request includes unique user identification information identifying the user account linked to the aerosol-generating device. The controller is further configured to determine whether the aerosol-generating device is already linked to any user accounts in the database, and to transmit the permission to unlock the aerosol-generating device to unlock the unlockable parameter in response to determining that the aerosol-generating device is no longer linked to any user accounts in the database. The controller is further configured to update the database with linking the user account to the aerosol-generating device in response to determining that the aerosol-generating device is no longer linked to any user accounts in the database.

The described database may include a set of user data, such as, for example, a user account associated with each verified user. In one or more aspects of the present invention, each user account in the database is associated with a person who is verified as being of legal age to use aerosol-generating devices. The described database may further include a set of data on aerosol-generating devices, such as, for example, unique device identification information identifying each aerosol-generating device (e.g., a serial number). The user account and the unique device identification information may be associated with each other in the database when the user unlocks one or more unlockable parameters of the aerosol-generating device, such as when purchasing the aerosol-generating device. In contrast, the user account and the unique device identification information may be unassociated from each other in the database when the user re-locks one or more unlockable parameters of the aerosol-generating device, such as when selling or otherwise disposing of the aerosol-generating device. In other words, a unique device identifier (e.g., serial number) can only be linked to one user account, and an aerosol-generating device can only be unlocked (e.g., one or more unlockable parameters will be unlocked) when the unique device identifier has been linked to a user account. Furthermore, when an aerosol-generating device is unlinked from a linked user account, the aerosol-generating device will automatically be locked (e.g., one or more unlockable parameters will be locked).

By using the described database, the exemplary method, program code and system can prevent or stop a user from unlocking a device that is already linked to another user, thereby preventing other users from unlocking locked aerosol-generating devices. Moreover, by using the described database, the exemplary method, program code and system can limit the number of aerosol-generating devices that any single user can unlock, thereby solving the problem that an authorized buyer can buy multiple devices, unlock these multiple devices using his authorized account, and resell the unlocked devices, for example, to minors. In other words, unscrupulous sellers will be prevented from buying hundreds of aerosol-generating devices, linking them to his account (his account), and then selling the aerosol-generating devices to minors. Moreover, if the seller did so, minors would not be able to use the user interface device application to configure such improperly acquired aerosol-generating devices (e.g., because minors would not be able to obtain a user account to use with the software application on the user interface device). In addition, if an aerosol-generating device is confiscated from a minor, it would be possible to discover which account was used to unlock the aerosol-generating device that was sold to the minor.

In one or more aspects of the present invention, each user account from the database is linked only to an allowed (permitted) number of aerosol-generating devices, and the exemplary method further comprises implementing, parts of the program code are further configured to issue commands to implement, or the controller is further configured to perform the termination of the transmission of permission to unlock and update the database, if the account of this user is already linked to an allowed number of aerosol-generating devices. Moreover, in one or more aspects of the present invention, the allowed number of aerosol-generating devices is less than or equal to 10. In other examples, the allowed number of aerosol-generating devices is less than or equal to 25, less than or equal to 15, less than or equal to 5, or less than or equal to 2. In other words, only a limited number of devices can be linked to an account.

As described herein, a user may re-lock his aerosol-generating device if, for example, he intended to sell the aerosol-generating device or otherwise dispose of it. Thus, in one or more aspects of the present invention, an exemplary method further comprises implementing, portions of the program code are further configured to issue commands to implement, or the controller is further configured to implement, to receive a locking request from the aerosol-generating device to re-lock the unlockable parameter. The re-locking request may be substantially similar to the unlocking request, except that the opposite result is desired. Thus, the re-locking request includes unique user identification information identifying the user's account associated with the aerosol-generating device. The database is then updated to unlink the user's account from the aerosol generating device in response to receiving the blocking request, and the aerosol generating device may be given a blocking permission to re-block the unlocked parameter in response to receiving the blocking request.

If an unauthorized user attempts to connect to or configure (e.g., using a user interface device) an aerosol-generating device with which the user is not associated (and therefore is not authorized), such an aerosol-generating device may be transmitted a blocking permission to block one or more unlockable parameters of the aerosol-generating device. In this way, unauthorized users may be blocked from using the aerosol-generating device that they attempted to configure. For example, in one or more aspects of the present invention, an exemplary method further comprises implementing, portions of the program code are further configured to issue commands to implement, or the controller is further configured to perform, transmitting a blocking permission to the aerosol-generating device to re-block an unlockable parameter in response to the fact that a user interface device not associated with the user account attempts to configure the aerosol-generating device. Additionally, in some examples, before the automatic blocking of the aerosol-generating device and in response to an attempt of unauthorized access, a warning message may be transmitted to the user interface device or the aerosol-generating device, indicating to the user that he is not authorized to configure or connect to the aerosol-generating device, since he is not associated with it in the database. For example, in one or more aspects of the present invention, an exemplary method further includes implementing, portions of the program code are further configured to issue commands to implement, or the controller is further configured to implement, transmitting a warning message to the user interface device in response to the fact that a user interface device not associated with this user account attempts to configure this aerosol-generating device.

The term "aerosol-generating article" or "aerosol-forming substrate" refers to a substrate that is capable of releasing volatile compounds that can form an aerosol when heated. Aerosols generated from aerosol-forming substrates of smoking articles according to the present invention may be visible or invisible and may include vapors (e.g., finely dispersed particles of substances that are in a gaseous state and that are usually liquid or solid at room temperature), as well as gases and liquid droplets of condensed vapors. One example of an aerosol-generating article of the heated type are the IQOS heated sticks, also known as Marlboro heated sticks (MARLBORO HEATSTICKS), from Phillip Morris International for use in the IQOS, an aerosol-generating device with heat instead of combustion, also from Phillip Morris International.

The term "aerosol generating device" refers to a device configured to use or employ an aerosol generating article that releases volatile compounds to form an aerosol that can be inhaled by a user.

The term "controller" and "processor" refer to any device or apparatus capable of providing suitable computing and control capabilities, such as, for example, microprocessors, digital signal processors (DSP), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), equivalent discrete or integrated logic circuits, or any combinations thereof, and of providing suitable data storage capabilities, which includes any medium (e.g., volatile or non-volatile memory, CD-ROM, magnetic recordable medium such as disk or tape, etc.) containing digital bits (e.g., encoded in binary, ternary, etc.) that can be read and/or written.

The term "communication interface" refers to any device or apparatus capable of providing suitable data transfer capabilities between the aerosol generating device and the user interface device, such as, for example, various telemetry circuits and antennas, and may use one or more wired or wireless (e.g., radio frequency) data transfer protocols, such as, for example, BLUETOOTH, WI-FI, any protocol in the ultra-high frequency (UHF) range, any protocol in the microwave range, at low frequencies, or combinations thereof.

The term "database" refers to a collection, set, or repository of queryable, linkable data, such as a relational database.

The invention is characterized in the claims. However, a non-exhaustive list of non-limiting examples is provided below. Any one or more of the features of these examples can be combined with any one or more features of another example, embodiment or aspect described herein.

Example Ex1: A method comprising:

maintaining a database of user accounts and aerosol generating devices linked to user accounts, with each aerosol generating device linked to only one user account;

receiving an unlock request from the aerosol generating device to unlock an unlock parameter of the aerosol generating device, wherein the unlock request contains unique user identification information identifying the account of the user associated with the aerosol generating device;

determining whether the aerosol generating device is already linked to any user accounts in the database;

transmitting an unlock permission to the aerosol generating device to unlock the unlockable parameter in response to determining that the aerosol generating device is no longer associated with any user accounts in the database; and

updating the database to associate the given user account with the given aerosol generating device in response to determining that the given aerosol generating device is no longer associated with any user accounts in the database.

Example Ex2: A computer software product containing a non-temporary machine-readable medium with parts of the program code stored thereon, wherein, when said software product is launched on a computer or network device, the parts of the program code are designed with the ability to:

maintaining a database of user accounts and aerosol-generating devices linked to user accounts, with each aerosol-generating device linked to only one user account;

receiving an unlock request from the aerosol generating device to unlock an unlock parameter of the aerosol generating device, wherein the unlock request contains unique user identification information identifying the account of the user associated with the aerosol generating device;

determining whether the aerosol generating device is already linked to any user accounts in the database;

transmitting an unlock permission to the aerosol generating device to unlock the unlockable parameter in response to determining that the aerosol generating device is no longer associated with any user accounts in the database; and

updating the database to associate the given user account with the given aerosol generating device in response to determining that the given aerosol generating device is no longer associated with any user accounts in the database.

Example Ex3: A system for unlocking unlockable parameters of aerosol generating devices, comprising:

a communication interface for transmitting data to and from the aerosol generating devices; and

a controller comprising one or more processors and operatively connected to a communication interface, wherein the controller is configured to:

maintaining a database of user accounts and aerosol-generating devices linked to user accounts, with each aerosol-generating device linked to only one user account;

receiving an unlock request from the aerosol generating device to unlock the unlocked parameter, wherein the unlock request includes unique user identification information identifying the account of the user associated with the aerosol generating device;

determining whether the aerosol generating device is already linked to any user accounts in the database;

transmitting an unlock permission to the aerosol generating device to unlock the unlockable parameter in response to determining that the aerosol generating device is no longer associated with any user accounts in the database; and

updating the database to associate the given user account with the given aerosol generating device in response to determining that the given aerosol generating device is no longer associated with any user accounts in the database.

Example Ex4: The method, computer program product or system set out in any of examples Ex1-Ex3, wherein the aerosol generating device comprises:

a cavity for placing an aerosol-generating product;

a heating element for heating the aerosol-generating article to generate an aerosol therefrom; and

a power source operatively connected to the heating element, wherein the unlockable parameter is the ability to use the heating element to heat the aerosol-generating article to generate an aerosol therefrom.

Example Ex5: The method, computer software product or system set forth in any of the examples Ex1-Ex4, wherein each user account from the database is linked only to an admissible number of aerosol-generating devices, wherein the method additionally includes the implementation, parts of the program code are additionally configured with the possibility of issuing commands for the implementation, or the controller is additionally configured with the possibility of implementing: terminating the transmission of permission to unblock and update the database, if this user account is already linked to an admissible number of aerosol-generating devices.

Example Ex6: The method, computer software product or system according to example Ex5, wherein the permissible number of aerosol generating devices is less than or equal to 10.

Example Ex7: The method, computer software product or system set forth in any of Examples Ex1-Ex6, wherein each user account in the database is linked to a person who has been verified as being of legal age to use aerosol generating devices.

Example Ex8: The method, computer program product or system set out in any of the examples Ex1-Ex7, wherein the method additionally includes the implementation, the parts of the program code are additionally configured to issue commands for the implementation, or the controller is additionally configured to implement:

receiving a blocking request from the aerosol generating device to re-block the parameter to be unblocked, wherein the re-blocking request includes unique user identification information identifying the account of the user associated with the aerosol generating device;

updating the database to unlink the user's account from the aerosol generating device in response to receiving a blocking request;

transmitting a blocking permission to the aerosol generating device to re-block the parameter to be unblocked in response to receiving the blocking request.

Example Ex9: The method, computer program product or system set out in any of the examples Ex1-Ex8, wherein the method further comprises implementing, parts of the program code further configured to issue commands for implementing, or the controller further configured to implement: transmitting a blocking permission to the given aerosol-generating device for re-blocking the unlockable parameter in response to the fact that a user interface device not linked to the given user account attempts to configure the given aerosol-generating device.

Example Ex10: The method, computer program product or system set out in any of the examples Ex1-Ex9, wherein the method further comprises implementing, parts of the program code further configured to issue commands for implementing, or the controller further configured to implement: transmitting a warning message to the user interface device in response to the fact that a user interface device not linked to the given user account is attempting to configure the given aerosol generating device.

Example Ex11: The method, computer program product or system set forth in any of examples Ex1-Ex10, wherein the unlocking request comprises unique device identification information identifying the aerosol generating device and information with a one-time number with a limited validity period corresponding to the parameter to be unlocked.

Example Ex12: A method, computer program product or system according to example Ex11, wherein the unique identification information about the device is a serial number.

Example Ex13: The method, computer program product or system set forth in any of Examples Ex1-Ex12, wherein the unlocking permission is encrypted.

Example Ex14: The method, computer program product or system set out in any of the examples Ex1-Ex13, wherein the unlocking permission is decryptable using a public key stored on the aerosol generating device.

Reference is now made to the drawings, which illustrate one or more aspects described in the present invention. However, it will be understood that other aspects not shown in the drawings are within the scope and spirit of the present invention. Like numerals used in the figures refer to similar components, steps, etc. However, it will be understood that the use of a numeral to designate a component in a given figure is not intended to limit the component in another figure marked with the same numeral. In addition, the use of different numerals to designate components in different figures is not intended to indicate that components with different numerals may not be the same as components with other numerals or similar. The schematic drawings are not necessarily drawn to scale and are provided for purposes of illustration and not limitation. The drawings depict one or more aspects described in the present invention. However, it will be understood that other aspects not shown in the drawings are within the scope and spirit of the present invention.

Below, the examples will be further described with reference to figures in which:

Fig. 1 shows a block diagram of an exemplary system 200 for use in locking and unlocking one or more parameters of aerosol generating devices 102;

Fig. 2 is a schematic cross-sectional view of an illustrative aerosol generating device 102;

Fig. 3 shows a flow chart of an exemplary unlocking process 300; and

Fig. 4-7 shows views of an illustrative graphical user interface 250 for use with the user interface device 201 for locking and unlocking the aerosol generating device.

Referring to Fig. 1, there is shown a functional diagram of an exemplary system 200 according to the present invention. The system 200 comprises a user interface device 201, an aerosol generating device 100 and a server 50. The user interface device 201, the aerosol generating device 100 and the server 50 are physically separate devices, but they are functionally connected to each other for transmitting data between them, as indicated by bidirectional lines passing between them. The user interface device 201 is a general-purpose computer (in this example, a smartphone or a tablet computer) and comprises a controller 202 and a corresponding data carrier 203. The data carrier 203 contains programs and repetitive sequences 204, such as, for example, programs and repetitive sequences for receiving and transmitting data or messages to and from the aerosol generating device 100 and the server 50 and any other programs or repetitive sequences for executing the illustrative methods and processes described herein. For example, data or messages related to blocking and unblocking one or more unblockable parameters of the aerosol generating device 102 can be transmitted between the user interface device 201, the aerosol generating device 102 and the server 50. The data carrier 203 further comprises data 205, such as unique user identification information identifying the account of this user associated with this aerosol generating device 102, unique device identification information identifying the aerosol generating device 102, and various temporary data used during the blocking and unblocking processes described herein.

The user interface device 201 further comprises a display 206 comprising a graphical user interface with which a user can interact. The user interface device comprises a communication connection to the Internet, such as a wireless local area network (e.g. Wi-Fi) transceiver. Still referring to Fig. 1, the user interface device 201 may be a portable device that is configured to establish a connection with the server 50 for transmitting/receiving data, such as, for example, data related to blocking and unblocking one or more unblockable parameters of the aerosol generating device 102. The data may be transmitted and/or received via the Internet via the Wi-Fi transceiver of the user interface device 201.

As noted herein, the system 200 may comprise an aerosol generating device 102, described in more detail with reference to Fig. 2. Preferably, the aerosol generating device 102 comprises a cavity 132 for receiving an aerosol generating article 104, such as a heated wand, and a heater 134 that is configured to provide a heat source for the aerosol generating article 104, thereby producing an inhalable aerosol. The aerosol generating device 102 further includes a controller 128 that includes one or more processors and a corresponding memory. The controller 128 may include functionality for locking or unlocking various unlockable parameters of the aerosol generating device 102. For example, the controller 128 may be capable of locking or unlocking the ability to use the heating element 134 to heat the aerosol generating article 104 to generate an aerosol therefrom.

The controller 128 may further comprise a communication interface, such as, for example, a wireless communication interface, for example, for communication with the user interface device 201 and/or the server 50 to provide the functionality of unlocking and locking one or more unlockable parameters described in this document. The communication interface of the controller 128 may preferably comprise a BLUETOOH interface or may comprise a WI-FI interface. The aerosol generating device 102 further comprises a power source 126, for example, for providing electrical energy to the aerosol generating device 102, among other things, for heating the heater for generating the aerosol and communicating with the user interface device 201 and the server 50.

A flow chart of an exemplary unlocking process 300 is shown in Fig. 3. The aerosol generating device 102, indicated by the leftmost straight vertical line, may have a locked/unlocked status 150, and at the beginning of this example, the locked/unlocked status 150 indicates that the aerosol generating device 102 is locked. Device discovery processes 302, shown by the middle straight vertical line, may continuously occur between the aerosol generating device 102 and the user interface device 201, which may allow the user interface device 201 to discover and connect with the aerosol generating device 102, regardless of whether the aerosol generating device is locked or unlocked, or whether the aerosol generating device is paired or associated with the user interface device 201. The device discovery processes 302 may allow the user interface device 201 to pair or communicate with the aerosol generating device 102. Moreover, the device discovery processes 302 may allow the aerosol generating device 102 to be connected to the user interface device 201 or, more specifically, a software application running on the user interface device 201 that provides the blocking and unblocking functionality described in this document. The device discovery processes 302 may exchange information, such as unique device identification information (e.g., a serial number), identifying the aerosol generating device 102.

The user interface device 201 can send a query 304 to the aerosol generating device 102 to determine the current locked/unlocked status 150 of the aerosol generating device 102. In one aspect, the query 304 can be a read command to request data of a portion of the memory of the aerosol generating device 102 that indicates the current locked/unlocked status 150. In response, the aerosol generating device 102 can send back 305 the locked/unlocked status 150, an error message, or a busy message. In other words, the user interface device 201 or the server 50 can send a query 304 about the current status of the unlockable parameter that it wants to lock or unlock, and the aerosol generating device 102 can respond 305, among other things, with the current locked/unlocked status 150.

The unlocking process 300 may be initiated by the aerosol generating device 102, the user interface device 201, or the server 50. The server 50 is indicated by the rightmost vertical line. Regardless of where the unlocking process 300 is initiated, the unlocking request must ultimately be transmitted to the server 50. In this example, the user interface device 201 initiates the unlocking by issuing a read command 306 to the aerosol generating device 102. In response, the aerosol generating device 102 may send an unlocking request 308A to the user interface device 201. The unlocking request 308A may include at least information with a nonce with a limited lifetime and unique identification information about the device. The information with a nonce with a limited lifetime may be a 16-byte integer. Additionally, the unlocking request 308A may include a response value. In one or more aspects, this may be described in such a way that if the server 50 or the user interface device 201 wants to change the current locked/unlocked status 150, it or it requests unique information about the aerosol generating device 102, such as its serial number and a unique value (for example, a nonce value). In response, the aerosol generating device 102 will send such information to one or both of the user interface device 201 and the server 50.

The user interface device 201 may receive the unlock request 308A and modify the unlock request 308A, for example, by including unique user identification information identifying the user account associated with the aerosol generating device 102. The modified unlock request 308B may be transmitted to the server 50.

The server 50 may include and maintain a database 54, as shown in Fig. 1. The database 54 may include a collection of user account information and device information that may be used by the blocking and unblocking processes described herein. Although it may be described as the server 50 including or having a database 54, it should be understood that the database 54 may not physically reside on the server 50, but may instead be on another server that the server 50 has access to. Additionally, the server 50 may not be a single computer server, but may instead be a plurality of servers or server clusters. Additionally, the server 50 may simply be a virtual server running on various hardware platforms or cloud services.

The server 50 may receive the unlocking request 308A and perform one or more processes with respect to it 52 according to the present invention. For example, the server 50 may determine whether the aerosol-generating device 102 is already bound to another user 52 (for example, by querying the database 54). If it is determined that the aerosol-generating device 102 is already bound to another user, based on the unique identification information about the device, the server 50 will not issue an unlocking permission. Moreover, for example, the server 50 may determine whether the given user has already been bound to an allowed number of aerosol-generating devices 52 (for example, by querying the database 54). If it is determined that the given user has already been bound to an allowed number of aerosol-generating devices, the server 50 will not issue an unlocking permission (for example, it will stop transmitting the unlocking permission). In addition, the server 50 may update the database by linking the user account to the aerosol generating device 102 if the aerosol generating device is not already linked to any user accounts in the database.

If the server 50 determines that the aerosol generating device 102 should be unlocked, the server 50 can generate an unlocking authorization 310 and transmit the unlocking authorization 310 to the user interface device 201. Additionally, in some examples, the unlocking authorization 310 can be transmitted directly to the aerosol generating device 102 from the server 50. The unlocking authorization 310 can be encrypted using a private key known only to the server 50 and can include information with a nonce with a limited validity period and unique identification information about the device. In other words, the server 50 creates a string (i.e., an unlocking permission) consisting of a lock/unlock request, unique information about the aerosol generating device, a nonce, and some additional padding, then encrypts this string using an asymmetric private key and sends the result (i.e., the encrypted string) to one or both of the user interface device 201 and the aerosol generating device 102. The user interface device 201, in turn, can transmit an unlocking permission 312 to the aerosol generating device 102. In this example, the user interface device 201 transmits an unlocking permission 312 a plurality of times, as indicated by the letters that follow the unlocking permission: 312A, 312B, . . . 312 n .

If the unlocking permission 312 is not accepted within the validity period 199, the unlocking process 300 will expire, the aerosol generating device 102 will not be unlocked, and the unlocking process 300 will need to be re-initiated. In this example, the unlocking permission 312 was accepted within the validity period 199, which resulted in the aerosol generating device 102 becoming unlocked, as indicated by the current locked/unlocked status 150. In other words, the aerosol generating device 102 can initiate a validity timer during which the unlocking process must be performed, and if the procedure fails or is not performed within the validity period, the current process 300 is invalid and must be restarted from the beginning.

For example, the aerosol generating device 102 may receive an encrypted string (i.e., an unlocking permission) and decrypt it using the public key of the server 50, which may be stored on all the aerosol generating devices 102. The aerosol generating device 102 may check whether the decrypted string complies with a predetermined format and contains the original nonce, unique information about the device, and request a change in the status of the current status 150 blocked/unlocked associated with the nonce. If such conditions are met and the validity period has not expired, then the aerosol generating device 102 changes the current status 150 blocked/unlocked.

Additionally, the user interface device 201 may continue to periodically retrieve 290 the status of the aerosol generating device 102 by sending a request 304 to the aerosol generating device 102 to determine its current locked/unlocked status 150. In particular, the periodic retrieval 290 may include sending a request 304 from the user interface device 201 and, in response, a locked/unlocked status 150, an error message, or a busy message may be returned 305 from the aerosol generating device 102.

It should be understood that although Fig. 3 shows the process of unblocking 300, the process of blocking and re-blocking can be performed in a similar manner. For example, the user interface device 201 can initiate a blocking request that collects the same or similar information, such as unique identification information about the device, unique identification information about the user, information with a nonce with a limited validity period, etc., to send to the server 50. In turn, the server 50 will issue a blocking permission to block the aerosol generating device 102.

An exemplary user interface device 201 comprising a display 206 displaying a graphical user interface 250 is shown in Fig. 4-7. In Fig. 4, the graphical user interface 250 includes a lock status graphical element 251 which is configured to indicate whether the connected aerosol generating device is in a locked or unlocked state (e.g., one or more unlockable parameters of the aerosol generating device are in a locked or unlocked state). As shown in Fig. 4, the lock status graphical element 251 displays an unlocked state, as shown by a graphical representation of an unlocked padlock. Thus, the connected aerosol generating device is unlocked, and if the unlocked parameter is the ability to use the heating element to heat the aerosol generating article to generate an aerosol from it, then the user can use the aerosol generating device by using the heating element to heat the aerosol generating article to generate an aerosol from it.

The graphical user interface 250 further comprises a device status message 252 that indicates whether the aerosol-generating device is connected. As shown, the device status message 252 states "Device connected", which indicates that the aerosol-generating device is currently connected to the user interface device 201, so that the aerosol-generating device can be configured or locked/unlocked using the user interface device 201. In contrast, the device status message 252 may state "Device not connected", indicating that the aerosol-generating device is not currently connected to the user interface device 201. The graphical user interface 250 further comprises a graphical representation 254 of the aerosol generating device that displays the associated aerosol generating device, for example, indicating the type of aerosol generating device that is currently connected to the user interface device 201.

The graphical user interface 250 of the user interface device 201 can be used to configure the aerosol-generating device and to lock/unlock the unlockable parameters of the aerosol-generating device. For this, the user can select (e.g., tap, click, etc.) to change the settings of the graphical area 256, which is represented by the word "Settings" with an arrow pointing to the right. Moreover, the graphical user interface 250 can comprise an action bar area 258 that includes a plurality of selectable areas for navigating around the graphical user interface 250 (e.g., for navigating around the aerosol-generating device, a software application running on the graphical user interface 250). For example, the action bar area 258 can include, among other things, a devices area and a user account area. The devices area can allow the user to configure the connected aerosol-generating device, and the user account area can allow the user to configure his or her user account.

The user may want to temporarily lock his aerosol generating device using the user interface device 201. To do this, the user may select the lock status graphical element 251 or the text located next to it that says "Lock". When the lock status graphical element 251 is selected, the lock graphical area 260 may be displayed in the graphical user interface 250, as shown in Fig. 5. The user may use the lock graphical area 260 to select a period of time in or during the temporary lock period. In this example, a lock period selection area 262 may be displayed that includes a list of scrollable time values. Currently, 10 o'clock, 15 o'clock and 21 o'clock are shown, with 15 o'clock currently selected, which is displayed in the center and in bold. In one aspect, the user may "swipe up" or "swipe down" on the lock period selection area 262 to display other time values arranged in sequential order. After the user has found and selected the desired blocking period using the blocking period selection section 262, the user can select the blocking initiation graphic element 264 to initiate a temporary blocking or a repeated blocking.

Additionally, the user may wish to lock his aerosol-generating device using the user interface device 201 before reselling or transferring his aerosol-generating device, which may also be accomplished by selecting the lock status graphical element 251 and using the lock graphical area 260 to lock the aerosol-generating device for an indefinite period of time until another user attempts to unlock the aerosol-generating device using the authorized user account. For example, instead of selecting a lock period, the user may use the lock period selection area 262 to select an indefinite period until another authorized user unlocks the aerosol-generating device.

When the graphical element 264 for initiating a blocking initiation to initiate a temporary blocking or a repeated blocking is selected, a temporary blocking status message 270 may be displayed in the graphical user interface 250, as shown in Fig. 6. The temporary blocking status message 270 may indicate in text form that the associated aerosol-generating device is blocked. As shown, the temporary blocking status message 270 reads "The device is blocked." Additionally, the temporary blocking status message 270 may also indicate the length of time remaining until the end of the temporary blocking period. As shown, the temporary blocking status message 270 reads "It will be unlocked in 15 hours," indicating that the temporary blocking status of the aerosol-generating device will end in 15 hours.

Moreover, since the linked aerosol-generating device is currently locked (e.g., one or more of its unlockable parameters are temporarily locked), the lock status graphic element 251 now displays a locked state, as shown by a graphical representation of a closed padlock. Thus, the connected aerosol-generating device is locked, and if the unlockable parameter is the ability to use the heating element to heat the aerosol-generating article to generate an aerosol from it, then the user cannot use the aerosol-generating device by using the heating element to heat the aerosol-generating article to generate an aerosol from it.

When the associated aerosol-generating device is locked, the user may want to unlock the aerosol-generating device (e.g., unlock one or more unlockable parameters thereof). To do so, the user may select the lock status graphical element 251 or the text located next to it that says "Unlock". When the lock status graphical element 251 is selected, the unlock graphical area 280 may be displayed in the graphical user interface 250, as shown in Fig. 7. The user may use the unlock graphical area 280 to select either the unlock initiation graphical element 282 (e.g., a button) or the unlock cancel graphical element 284. Selecting the unlock initiation graphical element 282 initiates the unlock process as described herein. For example, an unlock request may be generated by the aerosol-generating device and the user interface device 201 and transmitted to the server in an attempt to obtain permission to unlock.

For the purposes of the present specification and the appended claims, except where otherwise indicated, all numbers expressing quantities, amounts, percentages, etc., are to be understood as modified in all instances by the term "about". Also, all ranges include the maximum and minimum points disclosed and include any intermediate ranges therebetween that may or may not be specifically listed herein. In addition, all scientific and technical terms used herein have the meanings commonly used in the art, unless otherwise indicated. The definitions provided herein are intended to facilitate the understanding of certain terms frequently used herein. As used herein, the singular forms "a", "an", "an", and "the" include embodiments with the referenced items in the plural, unless the context clearly dictates otherwise. As used herein, the conjunction "or" is generally used in its meaning including "and/or", unless the context clearly dictates otherwise. The term "and/or" means one or all of the listed elements, or a combination of any two or more of the listed elements. As used herein, the words "have," "having," "include," "including," "contain," "comprising," or the like are used in their broad, open-ended sense and generally mean "including, but not limited thereto." It will be understood that the expressions "consisting essentially of," "consisting of," and the like are included within "comprising," and the like. The words "preferred" and "preferably" refer to embodiments of the invention that may provide certain advantages under certain circumstances. However, other embodiments may also be preferred under the same or other circumstances. Furthermore, the disclosure of one or more preferred embodiments does not imply that other embodiments are not useful, and is not intended to exclude other embodiments from the scope of the invention disclosed herein, including the claims.

Claims (87)

1. A method for unlocking unlockable parameters of aerosol generating devices, comprising: maintaining a database of user accounts and aerosol generating devices linked to user accounts, with each aerosol generating device linked to only one user account; receiving an unlock request from the aerosol generating device to unlock an unlock parameter of the aerosol generating device, wherein the unlock request contains unique user identification information identifying the account of the user associated with the aerosol generating device; determining whether the aerosol generating device is already linked to any user accounts in the database; transmitting an unlock permission to the aerosol generating device to unlock the unlockable parameter in response to determining that the aerosol generating device is no longer associated with any user accounts in the database; and updating the database to associate the given user account with the given aerosol generating device in response to determining that the given aerosol generating device is no longer associated with any user accounts in the database. 2. The method according to claim 1, wherein the aerosol generating device comprises: a cavity for placing an aerosol-generating product; a heating element for heating the aerosol-generating article to generate an aerosol therefrom; and a power source operatively connected to the heating element, wherein the unlocked parameter is the ability to use the heating element to heat the aerosol generating article to generate an aerosol from it. 3. The method according to paragraph 1 or 2, wherein each user account from the database is linked only to the permitted number of aerosol-generating devices, and the method additionally includes: Stopping the transfer of permission to unlock and update the database if the user's account is already linked to the allowed number of aerosol-generating devices. 4. The method according to paragraph 3, wherein the permissible number of aerosol generating devices is less than or equal to 10. 5. The method according to any of paragraphs 1-4, wherein each user account from the database is linked to a person who has been verified as having reached the age of majority to use aerosol generating devices. 6. The method according to any one of paragraphs 1-5, wherein the method additionally includes: receiving a blocking request from the aerosol generating device to re-block the parameter to be unblocked, wherein the re-blocking request includes unique user identification information identifying the user account of the user associated with the aerosol generating device; updating the database to unlink the user's account from the aerosol generating device in response to receiving the blocking request; and transmitting a blocking permission to the aerosol generating device to re-block the unblocked parameter in response to receiving the blocking request. 7. The method according to any one of paragraphs 1-6, wherein the method additionally comprises: transmitting the blocking permission to this aerosol-generating device to block the unblockable parameter again in response to a user interface device not associated with this user account attempting to configure this aerosol-generating device. 8. The method according to any one of paragraphs 1-7, wherein the method additionally comprises: transmitting a warning message to the user interface device in response to a user interface device that is not associated with the user account attempting to configure the aerosol generating device. 9. The method according to any of paragraphs 1-8, wherein the unblocking request contains: unique device identification information identifying the aerosol generating device; and information with a one-time limited-time number corresponding to the parameter being unlocked. 10. The method according to claim 9, wherein the unique identification information about the device is a serial number. 11. The method according to any of paragraphs 1-10, wherein the permission to unblock is encrypted. 12. The method according to any one of paragraphs 1-11, wherein the unlocking permission is decryptable using a public key stored on the given aerosol generating device. 13. A non-temporary machine-readable medium with instructions stored thereon for unlocking unlockable parameters of aerosol-generating devices, wherein said instructions, when executed on a computer or network device, are configured to: maintaining a database of user accounts and aerosol-generating devices linked to user accounts, with each aerosol-generating device linked to only one user account; receiving an unlock request from the aerosol generating device to unlock an unlock parameter of the aerosol generating device, wherein the unlock request contains unique user identification information identifying the account of the user associated with the aerosol generating device; determining whether the aerosol generating device is already linked to any user accounts in the database; transmitting an unlock permission to the aerosol generating device to unlock the unlockable parameter in response to determining that the aerosol generating device is no longer associated with any user accounts in the database; and updating the database to associate the given user account with the given aerosol generating device in response to determining that the given aerosol generating device is no longer associated with any user accounts in the database. 14. The machine-readable medium according to claim 13, wherein the aerosol generating device comprises: a cavity for placing an aerosol-generating product; a heating element for heating the aerosol-generating article to generate an aerosol therefrom; and a power source operatively connected to the heating element, wherein the unlockable parameter is the ability to use the heating element to heat the aerosol-generating article to generate an aerosol therefrom. 15. A machine-readable medium according to paragraph 13 or 14, wherein each user account from the database is linked only to an acceptable number of aerosol-generating devices, and the instructions are additionally designed with the ability to issue commands to: Stopping the transfer of permission to unlock and update the database if the user's account is already linked to the allowed number of aerosol-generating devices. 16. A machine-readable medium according to claim 15, wherein the permissible number of aerosol generating devices is less than or equal to 10. 17. A machine-readable medium according to any one of paragraphs 13-16, wherein each user account from the database is linked to a person who has been verified as having reached the age of majority to use aerosol-generating devices. 18. A machine-readable medium according to any one of paragraphs 13-17, wherein the instructions are additionally configured to issue commands to: receiving a blocking request from the aerosol generating device to re-block the parameter to be unblocked, wherein the re-blocking request includes unique user identification information identifying the user account of the user associated with the aerosol generating device; updating the database to unlink the user's account from the aerosol generating device in response to receiving the blocking request; and transmitting a blocking permission to the aerosol generating device to re-block the unblocked parameter in response to receiving the blocking request. 19. A machine-readable medium according to any one of paragraphs 13-18, wherein the instructions are additionally configured to issue commands to: transmitting the blocking permission to this aerosol-generating device to block the unblockable parameter again in response to a user interface device not associated with this user account attempting to configure this aerosol-generating device. 20. A machine-readable medium according to any one of paragraphs 13-19, wherein the instructions are additionally configured to issue commands to: transmitting a warning message to the user interface device in response to a user interface device that is not associated with the user account attempting to configure the aerosol generating device. 21. A machine-readable medium according to any one of paragraphs 13-20, wherein the unlocking request comprises: unique device identification information identifying the aerosol generating device; and information with a one-time number with a limited validity period corresponding to the parameter being unlocked. 22. The machine-readable medium according to claim 21, wherein the unique identification information about the device is a serial number. 23. A machine-readable medium according to any one of paragraphs 13-22, wherein the permission to unlock is encrypted. 24. A machine-readable medium according to any one of paragraphs 13-23, wherein the unlocking permission is decryptable using a public key stored on the aerosol generating device. 25. A system for unlocking unlockable parameters of aerosol generating devices, comprising: a communication interface for transmitting data to and from the aerosol generating devices; and a controller comprising one or more processors and operatively connected to a communication interface, wherein the controller is configured to: maintaining a database of user accounts and aerosol-generating devices linked to user accounts, with each aerosol-generating device linked to only one user account; receiving an unlock request from the aerosol generating device to unlock the unlocked parameter, wherein the unlock request contains unique user identification information identifying the account of the user associated with the aerosol generating device; determining whether the aerosol generating device is already linked to any user accounts in the database; transmitting an unlock permission to the aerosol generating device to unlock the unlockable parameter in response to determining that the aerosol generating device is no longer associated with any user accounts in the database; and updating the database to associate the given user account with the given aerosol generating device in response to determining that the given aerosol generating device is no longer associated with any user accounts in the database. 26. The system according to claim 25, wherein the aerosol generating device comprises: a cavity for placing an aerosol-generating product; a heating element for heating the aerosol-generating article to generate an aerosol therefrom; and a power source operatively connected to the heating element, wherein the unlockable parameter is the ability to use the heating element to heat the aerosol-generating article to generate an aerosol therefrom. 27. The system according to paragraph 25 or 26, wherein each user account from the database is linked only to the permissible number of aerosol-generating devices, and the controller is additionally configured with the ability to: stop transmitting permission to unlock and update the database if the user's account is already linked to the allowed number of aerosol-generating devices. 28. The system according to item 27, wherein the permissible number of aerosol generating devices is less than or equal to 10. 29. The system of any of paragraphs 25-28, wherein each user account from the database is linked to a person who has been verified as being of legal age to use aerosol generating devices. 30. The system according to any one of paragraphs 25-29, wherein the controller is additionally configured to: receiving a blocking request from the aerosol generating device to re-block the parameter to be unblocked, wherein the re-blocking request includes unique user identification information identifying the account of the user associated with the aerosol generating device; updating the database to unlink the user's account from the aerosol generating device in response to receiving the blocking request; and transmitting a blocking permission to the aerosol generating device to re-block the parameter to be unblocked in response to receiving the blocking request. 31. The system according to any one of paragraphs 25-30, wherein the controller is additionally configured to: transmitting the blocking permission to this aerosol-generating device to re-block the unblockable parameter in response to a user interface device not associated with this user account attempting to configure this aerosol-generating device. 32. The system according to any one of paragraphs 25-31, wherein the controller is additionally configured to: transmitting a warning message to the user interface device in response to a user interface device that is not associated with the user account attempting to configure the aerosol generating device. 33. The system according to any of paragraphs 25-32, wherein the request for unblocking comprises: unique device identification information identifying the aerosol generating device; and information with a one-time number with a limited validity period corresponding to the parameter being unlocked. 34. The system of claim 33, wherein the unique identification information about the device is a serial number. 35. The system according to any of paragraphs 25-34, wherein the permission to unlock is encrypted. 36. The system according to any one of paragraphs 25-35, wherein the unlocking permission is decryptable using a public key stored on the given aerosol generating device.