최신 보청기 적합 및 어플리케이션 프로그램의 보안 실태 연구

A Study of the Security System for the Current Hearing Aid Fitting and Application Programs

This review aims to identify the current status of the hearing aid fitting program and applications for six major manufacturers in terms of security system and to suggest supplementary methods and solutions for strengthening security. First of all, we analyzed the hearing aid fitting programs and applications for the six manufacturers. When the hearing aid fitting programs were executed, we examined authentication processes, encryption systems, and individual data logging operations. To identify whether a third party could access and operate the hearing aid through the application, authentication processes and technologies used for connection between the hearing aid and the application were also examined. Among the six hearing aid fitting programs, two manufacturers’ systems had authentication processes, one had access control program installed in the customer database, and the individual data logging could turn on/off in five hearing aid fitting programs. All manufacturers had no authentication processes in the hearing aid applications. Bluetooth was used for connection technology for all manufacturers, and the acoustic signal was used in two manufacturers’ programs. In most cases, the third parties were able to control the hearing aid using the vulnerability of Bluetooth and the acoustic signal. It is necessary to improve the security system by applying users authentication process, customer data encryption, role-based access control, audit trail, and automatic update function to the hearing aid fitting program. The security system of hearing aid application connected to Bluetooth and/or acoustic signal should be improved by adding a function of the user authentication and identification process of particular hearing aid for application usage.