Fitting devices, server devices and methods of remote configuration of a hearing device

1. A method performed by a fitting device, the fitting device being a part of a hearing system configured for remotely configuring a hearing device, the method comprising:

obtaining hearing device data comprising a hearing device identifier of the hearing device;

obtaining a session key;

generating a configuration initiation request based on the session key and the hearing device identifier;

transmitting the configuration initiation request to a server device;

receiving a response from the server device, the response comprising configuration keying material;

generating a configuration package based on configuration data for the hearing device and based on the configuration keying material, the configuration package comprising a payload block; and

transmitting the configuration package to the server device.

2. The method according to claim 1 , wherein the act of generating the configuration initiation request comprises encrypting the session key using a configuration initiation public key, and including the encrypted session key in the configuration initiation request.

3. The method according to claim 1 , wherein the hearing device data comprises a shared index, a fitting device key identifier, an address identifier, fitting information, or any combination of the foregoing.

4. The method according to claim 1 , wherein the configuration keying material is encrypted, and wherein the method further comprises decrypting the configuration keying material.

5. The method according to claim 1 , wherein the act of generating the configuration package comprises obtaining a configuration data integrity indicator.

6. The method according to claim 1 , wherein the act of generating the configuration package comprises encrypting the configuration data and/or configuration data integrity indicator.

7. The method according to claim 1 , wherein the payload block comprises the configuration data in encrypted form and/or another encrypted data.

8. The method according to claim 1 , wherein the configuration package also comprises a control block.

9. The method according to claim 6 , wherein the configuration data and/or the configuration data integrity indicator is encrypted using the configuration keying material.

10. The method according to claim 1 , wherein the act of generating the configuration package comprises performing data encryption.

11. The method according to claim 1 , further comprising:

sending an access request to the server device; and

receiving an access response from the server device.

12. The method according to claim 1 , further comprising deleting the session key and the configuration keying material after the configuration package is transmitted.

13. A fitting device configured to perform the method of claim 1 .