Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; a memory unit; and an interface; wherein the processing unit is configured to: receive a connection request for a session via the interface; obtain a session identifier; transmit, via the interface, a connection response comprising a hearing device identifier and the session identifier; receive, via the interface, an authentication message comprising an authentication key identifier and client device data; select a hearing device key from a plurality of hearing device keys in the memory unit based on the authentication key identifier; and verify the client device data based on the selected hearing device key.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; and a memory unit; wherein the processing unit is configured to: obtain an access right certificate, the access right certificate comprising an access right identifier, verify the access right certificate, and if the access right certificate is verified, provide an access right according to the access right identifier.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; and an interface; wherein the processing unit is configured to: receive a session request for a session via the interface, obtain and store a session key, encrypt the session key based on a hearing device key, send a session response comprising the encrypted session key, and receive session data in the session via the interface.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; and a memory unit; wherein the processing unit is configured to: obtain an access right certificate, the access right certificate comprising an access right identifier, verify the access right certificate, and if the access right certificate is verified, provide an access right according to the access right identifier.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; a memory unit; and an interface; wherein the hearing device is configured to operate according to one or more security settings of the hearing device, the one or more security settings of the hearing device being stored in the memory unit; and wherein the processing unit is configured to obtain one or more new security settings via the interface, the one or more new security settings comprising a new first hearing device key identifier indicative of a hearing device key, verify the one or more new security settings, and updating the hearing device based on the one or more new security settings if the one or more new security settings are verified.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; and an interface; wherein the processing unit is configured to: receive a session request for a session via the interface, obtain and store a session key, encrypt the session key based on a hearing device key, send a session response comprising the encrypted session key, and receive session data in the session via the interface.

Abstract: A method, performed by a user application, of creating a trusted bond between a hearing device and the user application is disclosed, wherein the method comprises obtaining first authentication material; transmitting a first authentication request comprising a first authentication type identifier and first authentication data to the hearing device; receiving a first authentication response comprising a sound signal from the hearing device; deriving second authentication material based on the sound signal; determining second authentication data based on the second authentication material; transmitting a second authentication request comprising the second authentication data to the hearing device; receiving a second authentication response comprising an authentication key identifier from the hearing device; storing an authentication key and the authentication key identifier, wherein the authentication key is based on the first authentication material; and connecting the user application to the hearing device us

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; a memory unit; and an interface; wherein the processing unit is configured to: receive a connection request for a session via the interface; obtain a session identifier; transmit, via the interface, a connection response comprising a hearing device identifier and the session identifier; receive, via the interface, an authentication message comprising an authentication key identifier and client device data; select a hearing device key from a plurality of hearing device keys in the memory unit based on the authentication key identifier; and verify the client device data based on the selected hearing device key.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; a memory unit; and an interface; wherein the hearing device is configured to operate according to one or more security settings of the hearing device, the one or more security settings of the hearing device being stored in the memory unit; and wherein the processing unit is configured to obtain one or more new security settings via the interface, the one or more new security settings comprising a new first hearing device key identifier indicative of a hearing device key, verify the one or more new security settings, and updating the hearing device based on the one or more new security settings if the one or more new security settings are verified.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; a memory unit; and an interface; wherein the processing unit is configured to obtain one or more security settings via the interface, the one or more security settings comprising a hearing device key identifier, verify the one or more security settings, and update the hearing device based on the one or more security settings if the one or more security settings are verified.

Abstract: The disclosure provides a client device for hearing device communication and related method. The client device comprises a processing unit, a memory unit, and an interface. The processing unit is configured to send a session request for a session to the hearing device via the interface. The processing unit is configured to receive a session response from the hearing device via the interface. The processing unit is configured to obtain a session key based on e.g. the session response. The processing unit is configured to determine hearing device data and/or to generate session data e.g. based on the session key and the hearing device data. The processing unit is configured to send the session data to the hearing device via the interface.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; and an interface; wherein the processing unit is configured to: receive a session request for a session via the interface, obtain and store a session key, encrypt the session key based on a hearing device key, send a session response comprising the encrypted session key, and receive session data in the session via the interface.

Abstract: A method performed by a fitting device, the fitting device being a part of a hearing system configured for remotely configuring a hearing device, the method includes: obtaining hearing device data comprising a hearing device identifier of the hearing device; obtaining a session key; generating a configuration initiation request based on the session key and the hearing device identifier; transmitting the configuration initiation request to a server device; receiving a configuration initiation response from the server device, the configuration initiation response comprising configuration keying material; generating a configuration package based on configuration data for the hearing device and based on the configuration keying material, the configuration package comprising configuration package data; and transmitting the configuration package to the server device.

Abstract: A method of securing communication for a user application on a user accessory device of a hearing system comprising a hearing device is disclosed. Securing communication for the user application comprises obtaining challenge data in a server device; transmitting the challenge data from the server device to the user application; transmitting a challenge request comprising the challenge data from the user application to the hearing device; receiving a challenge response comprising response data from the hearing device; forwarding the response data from the user application to the server device; verifying the response data in the server device based on the challenge data; and approving the user application in the server device if verifying the response data is successful.

Abstract: This disclosure provides a method, performed at a hearing device, for updating a hearing device configuration at the hearing device of a hearing system. The hearing system comprises the hearing device, a fitting device configured to be controlled by a dispenser and a server device. The method comprises receiving a configuration package and a configuration authentication package, the configuration authentication package comprising a dispenser certificate. The method comprises determining if an update criterion is fulfilled. The update criterion is based on verifying the configuration authentication package. The method comprises updating the hearing device configuration based on the configuration package if the update criterion is fulfilled.

Abstract: Methods and devices are disclosed. A method, performed in a user application, of creating a trusted bond between a hearing device and the user application is disclosed, wherein the method comprises obtaining first authentication material; transmitting a first authentication request comprising a first authentication type identifier and first authentication data to the hearing device; receiving an authentication response comprising an authentication key identifier; storing an authentication key and the authentication key identifier, wherein the authentication key is based on the first authentication material; and connecting the user application to the hearing device using the authentication key and the authentication key identifier.

Abstract: A method for communication in a hearing system comprising the server device and a hearing device system, the hearing device system comprising a hearing device and a user accessory device with a user application installed thereon, the method includes: obtaining hearing device data for the hearing device; securing the hearing device data using a first security scheme to obtain a first output; securing the first output using a second security scheme to obtain a second output, wherein the second security scheme is different from the first security scheme; and transmitting the second output to the user accessory device.

Abstract: The present disclosure relates to methods and devices for a hearing system. A method of retrieval of hearing device data from a hearing device of a hearing system is provided, wherein retrieval of hearing device data comprises obtaining challenge data in a server device of the hearing system; transmitting the challenge data from the server device to a user application of a user accessory device; transmitting a challenge request comprising the challenge data from the user application to the hearing device; receiving a challenge response comprising response data from the hearing device; forwarding the response data from the user application to the server device; verifying the response data in the server device based on the challenge data; and optionally deriving the hearing device data from the response data, if verifying the response data is successful.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; and a memory unit, wherein the memory unit is configured to store model data comprising model information data indicative of available models for the hearing device, the model information data comprising first model information; wherein the processing unit is configured to: verify the model data, and reject the model data if verification of the model data fails.

Abstract: A hearing device includes: a processing unit configured to compensate for hearing loss of a user of the hearing device; and a memory unit, wherein the memory unit is configured to store model data comprising model information data indicative of available models for the hearing device, the model information data comprising first model information; wherein the processing unit is configured to: verify the model data, and reject the model data if verification of the model data fails.