Hearing device with communication protection and related method

1. A hearing device comprising:

a processing unit configured to compensate for hearing loss of a user of the hearing device; and

an interface;

wherein the processing unit is configured to:

receive a session request for a session via the interface,

obtain and store a session key,

encrypt the session key based on a hearing device key,

send a session response comprising the encrypted session key, and

receive session data in the session via the interface,

wherein the hearing device key is in a memory of the hearing device.

2. The hearing device according to claim 1 , wherein the processing unit is configured to verify an integrity of the session data.

3. The hearing device according to claim 2 , wherein the processing unit is configured to terminate the session if the integrity of the session data is corrupted.

4. The hearing device according to claim 3 , wherein the processing unit comprises a terminator configured to terminate the session.

5. The hearing device according to claim 3 , wherein the processing unit comprises a verifier configured to determine if the integrity of the session data is corrupted.

6. The hearing device according to claim 2 , wherein the session data comprises a message authentication code, and wherein the processing unit is configured to verify the integrity of the session data by verifying the message authentication code with the stored session key.

7. The hearing device according to claim 2 , wherein the session data comprises a digital signature, and wherein the processing unit is configured to verify the integrity of the session data by verifying the digital signature.

8. The hearing device according to claim 1 , further comprising a memory unit, and wherein the processing unit is configured to:

decrypt the session data with the session key, and

store at least a part of the decrypted session data in the memory unit.

9. The hearing device according to claim 8 , wherein the processing unit is configured to terminate the session if decryption of the session data fails.

10. The hearing device according to claim 1 , wherein the session data comprises fitting data, hearing device operating parameters, and/or firmware data.

11. The hearing device according to claim 1 , wherein the processing unit is configured to compensate for the hearing loss of the user of the hearing aid according to the received session data.

12. The hearing device according to claim 1 , wherein the session key is a symmetric key.

13. The hearing device according to claim 1 , wherein the processing unit comprises an obtainer configured to obtain the session key.

14. The hearing device according to claim 13 , wherein the obtainer is configured to obtain the session key by generating the session key.

15. The hearing device according to claim 1 , wherein the processing unit is configured to obtain the session key by generating a random or pseudo-random number with a number generator contained in the hearing device.

16. The hearing device according to claim 1 , wherein the hearing device key is (1) a symmetric key, or (2) a public key of a private-public key pair.

17. The hearing device according to claim 1 , wherein the processing unit is configured to send a hearing device identifier in the session response.

18. The hearing device according to claim 1 , wherein the hearing device key is associated with a manufacturing of the hearing device or a fitting of the hearing device.

19. A method for communication with a hearing device comprising a processing unit and an interface, the method comprising:

receiving a session request for a session via the interface;

obtaining and storing a session key;

encrypting the session key based on a hearing device key;

sending a session response comprising the encrypted session key; and

receiving session data in the session via the interface;

wherein the hearing device key is associated with a manufacturing of the hearing device or a fitting of the hearing device.

20. The method according to claim 19 , further comprising verifying an integrity of the session data.

21. The method according to claim 20 , further comprising terminating the session if the integrity of the session data is corrupted.

22. The method according to claim 19 , further comprising:

decrypting the session data with the session key; and

storing at least a part of the decrypted session data in a memory unit of the hearing device.

23. A hearing device comprising:

a processing unit configured to compensate for hearing loss of a user of the hearing device; and

an interface;

wherein the processing unit is configured to:

receive a session request for a session via the interface,

obtain a session key,

encrypt the session key based on a hearing device key,

send a session response comprising the encrypted session key, and

receive session data in the session via the interface; and

wherein the hearing device key is associated with a manufacturing of the hearing device or a fitting of the hearing device.

24. The hearing device according to claim 23 , wherein the processing unit is configured to verify an integrity of the session data.

25. The hearing device according to claim 24 , wherein the processing unit is configured to terminate the session if the integrity of the session data is corrupted.

26. The hearing device according to claim 25 , wherein the processing unit comprises a terminator configured to terminate the session.

27. The hearing device according to claim 25 , wherein the processing unit comprises a verifier configured to determine if the integrity of the session data is corrupted.

28. The hearing device according to claim 24 , wherein the session data comprises a message authentication code, and wherein the processing unit is configured to verify the integrity of the session data by verifying the message authentication code with the stored session key.

29. The hearing device according to claim 24 , wherein the session data comprises a digital signature, and wherein the processing unit is configured to verify the integrity of the session data by verifying the digital signature.

30. The hearing device according to claim 23 , further comprising a memory unit, and wherein the processing unit is configured to:

decrypt the session data with the session key, and

store at least a part of the decrypted session data in the memory unit.

31. The hearing device according to claim 30 , wherein the processing unit is configured to terminate the session if decryption of the session data fails.

32. The hearing device according to claim 23 , wherein the session data comprises fitting data, hearing device operating parameters, and/or firmware data.

33. The hearing device according to claim 23 , wherein the processing unit is configured to compensate for the hearing loss of the user of the hearing aid according to the received session data.

34. The hearing device according to claim 23 , wherein the session key is a symmetric key.

35. The hearing device according to claim 23 , wherein the processing unit comprises an obtainer configured to obtain the session key.

36. The hearing device according to claim 35 , wherein the obtainer is configured to obtain the session key by generating the session key.

37. The hearing device according to claim 23 , wherein the processing unit is configured to obtain the session key by generating a random or pseudo-random number with a number generator contained in the hearing device.

38. The hearing device according to claim 23 , wherein the hearing device key is (1) a symmetric key, or (2) a public key of a private-public key pair.

39. The hearing device according to claim 23 , wherein the processing unit is configured to send a hearing device identifier in the session response.