Hearing Device Data Encryption via Segmented Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Hearing devices store sensitive health data that can be accessed by unauthorized parties when lost or stolen, as existing security measures, such as data encryption protocols, do not adequately protect data stored on the devices.
Innovation Solution
Implementing a secure data sharing method where an encryption key is generated or provided to the hearing device, allowing only authorized users to decrypt encrypted data, using techniques like key agreement methods or public-private key pairs to ensure secure access and control over the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored on the hearing device for convenient access, then data availability is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The encryption key is segmented into two parts: a first key stored securely in the hearing device and a second key stored externally. Both keys are required to decrypt the data, so even if the hearing device is compromised, unauthorized parties cannot access the data without the external key component.
Solution Approach 2:
An external entity (such as a trusted server or secondary device) acts as an intermediary that holds the second key. This intermediary is required to participate in the decryption process, providing an additional layer of security control beyond what the hearing device alone can provide.
2Reliability
If data is encrypted only during transmission, then communication security is improved, but stored data security deteriorates
Solution Approach 1:
Data is encrypted with the first key before being stored in the hearing device memory. This preliminary encryption action ensures that even if the device is lost or stolen, the stored data remains protected and cannot be accessed without both encryption keys.
3Ease of operation
If encryption keys are stored in the hearing device for easy decryption, then decryption convenience is improved, but security against key extraction deteriorates
Solution Approach 1:
The decryption key is segmented into two separate components stored in different locations. The first key is stored in the hearing device to enable local decryption capability, while the second key is stored externally to prevent complete key compromise. Both keys must be combined for successful decryption.
Solution Approach 2:
An external entity serves as an intermediary that securely stores the second key. This intermediary architecture prevents the complete encryption key from being present in a single location, thereby eliminating the risk of total key extraction while maintaining decryption convenience through coordinated key usage.
Data Source
AI summary
There is provided a method for sharing data generated by a hearing device, comprising providing an encryption key in the hearing device; providing a decryption key in an external entity separate from the hearing device; generating data by a sensor of the hearing device, encrypting the data with the encryption key and storing the encrypted data on the hearing device; reading the encrypted data from the hearing device; and decrypting the read encrypted data with the decryption key in the external entity, wherein a user authorizes access to the sensor generated data by the external entity.