Fitting devices, server devices and methods of remote configuration of a hearing device

1. A method performed by a fitting device, the fitting device being a part of a hearing system configured for remotely configuring a hearing device, the method comprising:

obtaining hearing device data comprising a hearing device identifier of the hearing device;

obtaining a session key;

generating a configuration initiation request based on the session key and the hearing device identifier;

transmitting the configuration initiation request to a server device;

receiving a configuration initiation response from the server device, the configuration initiation response comprising configuration keying material;

generating a configuration package based on configuration data for the hearing device and based on the configuration keying material, the configuration package comprising configuration package data; and

transmitting the configuration package to the server device;

wherein the method further comprises obtaining a configuration data integrity indicator based on the configuration data;

wherein the act of generating the configuration package comprises encrypting the configuration data and/or the configuration data integrity indicator, and wherein the configuration package data is based on the encrypted configuration data and/or the encrypted configuration data integrity indicator; and

wherein the configuration package data comprises a configuration payload block and a control block, and wherein the configuration payload block comprises the encrypted configuration data and/or the encrypted configuration data integrity indicator.

2. The method according to claim 1 , wherein the act of generating the configuration initiation request comprises encrypting the session key using a configuration initiation public key, and including the encrypted session key in the configuration initiation request.

3. The method according to claim 1 , wherein the hearing device data comprises a shared index, a fitting device key identifier, an address identifier, fitting information, or any combination of the foregoing.

4. The method according to claim 1 , wherein the configuration keying material is encrypted, and wherein the method further comprises decrypting the configuration keying material.

5. The method according to claim 1 , wherein the act of generating the configuration package comprises encrypting the configuration package data.

6. The method according to claim 1 , further comprising:

sending an access request to the server device; and

receiving an access response from the server device.

7. The method according to claim 1 , further comprising deleting the session key and the configuration keying material after the configuration package is transmitted.

8. A method, performed by a server device, the server device being a part of a hearing system configured for remotely configuring a hearing device, the method comprising:

receiving a configuration initiation request from a fitting device, the configuration initiation request comprising a hearing device identifier, and a session key;

generating configuration keying material based on the session key;

generating configuration authentication material;

transmitting a configuration initiation response to the fitting device, the configuration initiation response comprising the configuration keying material;

receiving a configuration package from the fitting device, the configuration package comprising a configuration payload block and a control block;

calculating an integrity indicator set based on the configuration payload block and the control block;

generating a configuration block based on at least a part of the integrity indicator set;

generating a configuration verification package based on the configuration block;

generating a configuration authentication package based on the configuration authentication material; and

transmitting the configuration package, the configuration verification package, and the configuration authentication package.

9. The method according to claim 8 , wherein the act of generating the configuration keying material based on the session key comprises encrypting a configuration session key using the session key, and including the encrypted configuration session key into the configuration keying material.

10. The method according to claim 8 , further comprising:

receiving an access request at the server device, the access request comprising a dispenser identifier; and

sending an access response to the fitting device.

11. The method according to claim 8 , further comprising:

obtaining a first digital signature associated with the configuration block;

wherein the configuration verification package is generated based on the first digital signature.

12. The method according to claim 11 , further comprising:

obtaining a second digital signature associated with the configuration authentication material;

wherein the configuration authentication package is generated based on the second signature.

13. The method according to claim 8 , wherein the act of generating the configuration authentication material comprises:

obtaining a certificate key based on the hearing device identifier;

obtaining a dispenser certificate using the dispenser identifier;

encrypting the dispenser certificate using the certificate key; and

including the encrypted dispenser certificate in the configuration authentication material.

14. The method according to claim 8 , wherein the configuration package comprises encrypted configuration package data, and wherein the method further comprises decrypting the encrypted configuration package data using the session key.

15. A fitting device configured to perform the method of claim 1 .

16. A server device configured to perform the method of claim 8 .