Hearing device and method of hearing device communication

1. A hearing device comprising:

a processing unit comprising at least some hardware, the processing unit configured to compensate for hearing loss of a user of the hearing device;

a memory unit; and

an interface;

wherein the processing unit is configured to:

receive a connection request for a session via the interface;

obtain a session identifier;

transmit, via the interface, a connection response comprising a hearing device identifier and the session identifier, wherein the hearing device identifier is for uniquely identifying the hearing device;

receive, via the interface, an authentication message comprising an authentication key identifier and client device data, wherein the client device data comprises encrypted data;

obtain a hearing device key from the memory unit based on the authentication key identifier; and

verify the client device data by decrypting the encrypted data of the client device data;

wherein the processing unit is configured to decrypt the encrypted data to obtain decrypted data based on a secret key, the secret key being based on the hearing device key and/or the session identifier.

2. The hearing device of claim 1 , wherein the session identifier is for a session, and wherein the processing unit is configured to terminate the session if a verification of the client device data fails.

3. The hearing device according to claim 1 , wherein the authentication message comprises an authentication type identifier, and wherein the processing unit is configured to obtain the hearing device key by selecting the hearing device key from a plurality of hearing device keys based on the authentication type identifier.

4. A hearing device comprising:

a processing unit comprising at least some hardware, the processing unit configured to compensate for hearing loss of a user of the hearing device;

a memory unit; and

an interface;

wherein the processing unit is configured to:

receive a connection request for a session via the interface;

obtain a session identifier;

transmit, via the interface, a connection response comprising a hearing device identifier and the session identifier, wherein the hearing device identifier is for uniquely identifying the hearing device;

receive, via the interface, an authentication message comprising an authentication key identifier and client device data;

select a hearing device key from a plurality of hearing device keys in the memory unit based on the authentication key identifier; and

verify the client device data based on the selected hearing device key;

wherein the client device data comprises an encrypted client device certificate;

wherein the processing unit is configured to generate a certificate key based on a common secret that is different from the session identifier; and

wherein the processing unit is configured to verify the client device data by decrypting the encrypted client device certificate with the certificate key to obtain a decrypted version of the encrypted client device certificate.

5. The hearing device according to claim 4 , wherein the common secret is based on the selected hearing device key and/or the session identifier.

6. The hearing device according to claim 4 , wherein the processing unit is configured to verify the client device data by determining whether the authentication key identifier matches a client device key identifier of the client device certificate.

7. The hearing device according to claim 4 , wherein the processing unit is configured to verify the client device data by determining whether a client device type identifier of the client device certificate is valid.

8. The hearing device according to claim 4 , wherein the processing unit is configured to verify the client device data by verifying a digital signature of the client device certificate.

9. The hearing device according to claim 4 , wherein the client device certificate comprises a signing device identifier and/or a client device identifier, and wherein the processing unit is configured to verify the client device data by determining whether the signing device identifier and/or the client device identifier is valid.

10. The hearing device according to claim 1 , wherein the processing unit is configured to generate a session key based on the session identifier and the hearing device key, and wherein the processing unit is configured to receive and authenticate session data based on the session key.

11. A method of operating a hearing device comprising a processing unit configured to compensate for hearing loss of a user of the hearing device, a memory unit, and an interface, the method comprising:

receiving a connection request for a session via the interface;

obtaining a session identifier;

transmitting, via the interface, a connection response comprising a hearing device identifier and the session identifier, wherein the hearing device identifier is for uniquely identifying the hearing device;

receiving, via the interface, an authentication message comprising an authentication key identifier and client device data, wherein the client device data comprises encrypted data;

obtaining a hearing device key based on the authentication key identifier; and

verifying the client device data by decrypting the encrypted data of the client data;

wherein the acts of selecting and verifying are performed by the processing unit that includes at least some hardware; and

wherein act of decrypting the encrypted data is performed by the processing unit based on a secret key, the secret key being based on the hearing device key and/or the session identifier.

12. The hearing device according to claim 1 , wherein the client device data comprises a digital signature.

13. The hearing device according to claim 1 , wherein the client device data comprises a client device type identifier.

14. The hearing device according to claim 1 , wherein the client device data comprises a client device identifier.

15. The hearing device according to claim 1 , wherein the client device data comprises a client device key identifier.

16. The hearing device according to claim 1 , wherein the client device data comprises a hardware identifier identifying a hardware.

17. The hearing device according to claim 1 , wherein the client device data comprises a Bluetooth address.

18. The hearing device according to claim 1 , wherein the client device data comprises a certificate type identifier for a client device certificate.

19. The hearing device according to claim 1 , wherein the memory unit comprises a non-volatile memory.

20. The hearing device according to claim 19 , wherein the hearing device key is stored in the non-volatile memory during manufacturing of the hearing device.

21. The hearing device according to claim 4 , wherein the client device data comprises a digital signature.

22. The hearing device according to claim 4 , wherein the client device data comprises a client device type identifier.

23. The hearing device according to claim 4 , wherein the client device data comprises a client device identifier.

24. The hearing device according to claim 4 , wherein the client device data comprises a client device key identifier.

25. The hearing device according to claim 4 , wherein the client device data comprises a hardware identifier identifying a hardware.

26. The hearing device according to claim 4 , wherein the client device data comprises a Bluetooth address.

27. The hearing device according to claim 4 , wherein the client device data comprises a certificate type identifier for a client device certificate.

28. The hearing device according to claim 4 , wherein the memory unit comprises a non-volatile memory, and wherein the hearing device keys are stored in the non-volatile memory.

29. The hearing device according to claim 28 , wherein the hearing device keys are stored in the non-volatile memory during manufacturing of the hearing device.