Data encryption for a hearing device

1 . A method for sharing data generated by a hearing device, comprising

providing an encryption key in the hearing device;

providing a decryption key in an external entity separate from the hearing device;

generating data by a sensor of the hearing device, encrypting the data with the encryption key and storing the encrypted data on the hearing device;

reading the encrypted data from the hearing device; and

decrypting the read encrypted data with the decryption key in the external entity,

wherein a user authorizes access to the sensor generated data by the external entity;

wherein the encryption key is externally provided to the hearing device;

wherein the hearing device accepts the encryption key only if a user of the hearing device has authorized access of the external entity to the data generated by the hearing device sensor.

2 . The method of claim 1 , wherein the encryption key is established in the hearing device using a key agreement method.

3 . The method of claim 2 , wherein the encryption key is not authenticated, and wherein the hearing device accepts the encryption key only if the user of the hearing device has authorized access of the external entity to the data generated by the hearing device sensor.

4 . The method of claim 3 , wherein the data used to establish the encryption key is signed based on the authentication key, only if the user has authorized access of the external entity to the data generated by the hearing device sensor.

5 . The method of claim 3 , wherein the authentication key is provided as a private part of a root key pair and wherein the encryption key is accepted by the hearing device only if the hearing device can verify a signature based on the authentication key using a public part of the root key pair.

6 . The method of claim 1 , wherein the user authorizes access of the external entity to the data generated by the hearing device sensor by user interaction with the hearing device or wherein the user authorizes access of the external entity to the data generated by the hearing device sensor by user interaction with an external agent trusted by the hearing device.

7 . The method of claim 6 , wherein the external agent is a trusted application on a device directly connected to hearing device and possessing an external agent authentication key which can be verified by the hearing device or wherein the external agent is a trusted online service possessing an external agent authentication key which can be verified by the hearing device.

8 . The method of claim 1 , wherein the external entity is a consumer client connected to the hearing device or wherein the external entity is an online service.

9 . A method for sharing data generated by a hearing device comprising:

providing an encryption key in the hearing device;

providing a decryption key in an external entity separate from the hearing device;

generating data by a sensor of the hearing device, encrypting the data with the encryption key and storing the encrypted data on the hearing device;

reading the encrypted data from the hearing device; and

decrypting the read encrypted data with the decryption key in the external entity,

wherein a user authorizes access to the sensor generated data by the external entity;

wherein the encryption key is signed by using an authentication key;

wherein the encryption key is signed based on the authentication key only if the user has authorized access of the external entity to the data generated by the hearing device sensor.

10 . The method of claim 9 , wherein the authentication key is provided as a private part of a root key pair, and wherein the encryption key is accepted by the hearing device only if the hearing device can verify a signature based on the authentication key using a public part of the root key pair.