Hearing device with communication protection and related method

1. A hearing device comprising:

a processing unit configured to compensate for hearing loss of a user of the hearing device; and

an interface;

wherein the processing unit is configured to:

receive a session request for a session via the interface,

obtain and store a session key,

encrypt the session key based on a hearing device key,

send a session response comprising the encrypted session key, and

receive session data in the session via the interface;

wherein the hearing device key is stored in a permanent memory of the hearing device.

2. The hearing device according to claim 1 , wherein the processing unit is configured to verify an integrity of the session data.

3. The hearing device according to claim 2 , wherein the processing unit is configured to terminate the session if the integrity of the session data is corrupted.

4. The hearing device according to claim 2 , wherein the session data comprises a message authentication code, and wherein the processing unit is configured to verify the integrity of the session data by verifying the message authentication code with the stored session key.

5. The hearing device according to claim 2 , wherein the session data comprises a digital signature, and wherein the processing unit is configured to verify the integrity of the session data by verifying the digital signature.

6. The hearing device according to claim 1 , further comprising a memory unit, and wherein the processing unit is configured to:

decrypt the session data with the session key, and

store at least a part of the decrypted session data in the memory unit.

7. The hearing device according to claim 6 , wherein the processing unit is configured to terminate the session if decryption of the session data fails.

8. The hearing device according to claim 1 , wherein the session data comprises fitting data, hearing device operating parameters, and/or firmware data.

9. The hearing device according to claim 1 , wherein the processing unit is configured to compensate for the hearing loss of the user of the hearing aid according to the received session data.

10. The hearing device according to claim 1 , wherein the session key is a symmetric key.

11. The hearing device according to claim 1 , wherein the processing unit is configured to obtain the session key by generating a random or pseudo-random number with a number generator contained in the hearing device.

12. The hearing device according to claim 1 , wherein the hearing device key is a symmetric key or a public key of a private-public key pair.

13. The hearing device according to claim 1 , wherein the processing unit is configured to send a hearing device identifier in the session response.

14. A method for communication with a hearing device comprising a processing unit and an interface, the method comprising:

receiving a session request for a session via the interface;

obtaining and storing a session key;

encrypting the session key based on a hearing device key, wherein the hearing device key is stored in a permanent memory of the hearing device;

sending a session response comprising the encrypted session key; and

receiving session data in the session via the interface.

15. The method according to claim 14 , further comprising verifying an integrity of the session data.

16. The method according to claim 15 , further comprising terminating the session if the integrity of the session data is corrupted.

17. The method according to claim 14 , further comprising:

decrypting the session data with the session key; and

storing at least a part of the decrypted session data in a memory unit of the hearing device.