Hearing Device Secure Data Sharing via Local Key and URI
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for securing data sharing between hearing care professionals and hearing device users are inadequate, as they are susceptible to attacks and improper access due to reliance on passwords and lack of robust encryption solutions.
Innovation Solution
The implementation of a hearing device with a memory that stores a symmetrical key for encryption and decryption, along with a Uniform Resource Indicator (URI) that requires both the key and URI for access, enhances security by reducing the need for a separate trusted party and increasing the complexity of unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If passwords and usernames are used for securing data access, then ease of operation is improved, but reliability deteriorates due to susceptibility to attacks and data breaches
Solution Approach 1:
The patent extracts the password-based authentication mechanism and replaces it with a cryptographic key system. The hearing device generates and stores cryptographic keys locally, eliminating the need for users to manage passwords while providing stronger security through cryptographic protection of fitting data.
Solution Approach 2:
The patent introduces cryptographic keys as an intermediary between the user and the fitting data. Instead of directly accessing data with passwords, the system uses encrypted fitting data that requires cryptographic keys for decryption, adding a security layer that protects against unauthorized access while maintaining legitimate access.
2Reliability
If a separate trusted party is used to manage access control, then reliability of access control is improved, but device complexity increases
Solution Approach 1:
The hearing device performs self-service by generating, storing, and managing its own cryptographic keys locally. The device autonomously encrypts and decrypts its own fitting data without requiring external trusted parties, thereby maintaining security while reducing system complexity and eliminating dependency on additional infrastructure.
3Reliability
If robust encryption solutions are implemented, then reliability of data protection is improved, but ease of operation deteriorates due to increased complexity of key management
Solution Approach 1:
The hearing device autonomously generates and manages cryptographic keys without requiring user intervention. The encryption and decryption operations are performed automatically by the device using its stored keys, providing robust security while maintaining ease of operation as users simply interact with the device normally without needing to understand or manage cryptographic key pairs.
Data Source
AI summary
The disclosed technology relates to securely sharing data between a hearing care professional (HCP) and a hearing device user. For example, the disclosed technology relates to securely accessing fitting data for a hearing device. The disclosed technology includes a hearing device that has a memory, where the memory stores a key that can be used for encryption and decryption. The key can be a symmetrical key. In addition to storing a key, the hearing device can store a uniform resource indicator (URI) in its memory.