MOBILE INTERACTION PLATFORM

Description

[0001] The present invention relates to a system for the non-discriminatory, secure, and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof, and theft-proof terminal. The system comprises a mobile, tamper-proof, and theft-proof terminal comprising a sealed housing, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated, and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed housing, a touchscreen, a positioning module, and at least one server in a data center configured to maintain the permanent, secure,encrypted and encapsulated connection to the terminal and continuous monitoring of the terminal's operating status.

[0002] Cost pressures and staff shortages, including in public administration, health insurance companies, medical facilities, and other institutions, increasingly necessitate the use of digital solutions. Reduced business hours at remaining offices, decreased staffing levels coupled with increasing process complexity, and widespread closures of existing access points are increasingly restricting service and easy access to social benefits, especially for less tech-savvy segments of the population, partly due to a lack of or inadequate hardware. At the same time, attacks on smartphones and digital infrastructure are rising sharply, making potential, yet often insufficient, protective measures increasingly costly.The constitutional right to non-discriminatory informational self-determination and the economic and procedural needs of institutions for the "activation" and enabling of participation in digital processes require future-proof, secure means of communication.

[0003] The internet-based branch offices set up as a "modern alternative" via smartphone apps, which are already available to a predominantly younger user base, are, like home digital access (assuming such technical equipment is available), insufficiently secure from a data protection and signature perspective. The use of this hardware in hotspots, Wi-Fi environments, or program modifications through insufficiently protected apps or links further complicates its use in the highly sensitive social data environment. The transmission of IP addresses, user data, and the creation of user profiles, for example through Google searches, are inherent aspects of smartphone technology and are currently shifted onto the (often digitally inept) users through generally incomprehensible terms and conditions.

[0004] Currently, and in addition to legal requirements and regulations, e.g., regarding the use of an electronic health card (eGK) or the electronic identity card to create a trustworthy digital identity (eID), there is a technical need for a solution that allows all people to participate in modern, affordable, and future-proof healthcare without fear of losing privacy or violating personal rights, ideally anonymously.

[0005] The Online Access Act, various eHealth laws, and the telematics regulations of the Fifth Book of the German Social Code mandate a multitude of digital applications for exercising the rights to informational self-determination and social welfare. These applications must enable informed citizens and insured individuals to control data flows and information. While deadlines for the implementation of these applications are set to prevent further delays, the lack of penalties often leaves them unfulfilled.

[0006] How and in what form this mandatory access for the insured is to be implemented while fully complying with the GDPR regulations remains unresolved, particularly from the perspective of the Federal Data Protection Commissioner. The alternative @home access via online access using a computer or mobile device presents greater obstacles in terms of both data protection and feasibility for all population groups and their varying levels of digital competence.

[0007] The object of the present invention is to provide a system for the non-discriminatory, secure and mobile provision of digital services from a service provider to a user via a mobile terminal that is tamper-proof and theft-proof.

[0008] This problem is solved according to the invention by the technical teaching of the independent claims. Further advantageous embodiments of the invention will become apparent from the dependent claims, the description, the figures, and the examples.

[0009] The present invention therefore relates to a system for providing digital services comprising multifunctional hardware specifically designed for personal and health data and data transmission paths encapsulated from the open internet, which as a whole dispenses with the permanent storage of user-generated or entered data, as well as extensive service components ranging from the setup of the terminal, its individual configuration, and the monitoring of the operation of the terminal and the servers, including maintenance.

[0010] The system according to the invention also enables the individual equipping of an access device, for example in the form of tablets, with regard to function or available information at each individual place of use, thus allowing the integration and creation of digital skills without risks, including opportunities for education and low-threshold access to information even for population groups that are not tech-savvy.

[0011] Due to the terminal's mobility, digital services can be made available anywhere outside of the public internet, wherever potential users are located on a daily basis or where the need for support arises. The system according to the invention thus enables everyone, regardless of their abilities, to participate digitally without requiring any technical expertise or knowledge, and in a secure, cost-effective, efficient, user-oriented, and comprehensive manner.

[0012] Thus, the present invention relates to a system (1) for the non-discriminatory, secure and mobile provision of digital services of a service provider (100) via a mobile, tamper-proof and theft-proof terminal (200) to a user (300) comprising a mobile, tamper-proof and theft-proof terminal (200) comprising a sealed enclosure (210), a cellular module (220) with a unique cellular identifier (221) and a device address (222) configured to establish a permanent, secure, encrypted, encapsulated and wireless connection (500) exclusively with at least one server (610) in a data center (600) via a private access point (510), a card reader module (230) integrated into the sealed enclosure (210) for reading smart cards (231) and NFC cards (232), a touchscreen (240) for displaying information on and for user input of data on a graphical user interface (410) of an application program (400), a positioning module (250) for determining a geographic position of the terminal (200), and at least one server (610) in a data center (600). which is configured to provide a permanent, secure,encrypted and encapsulated connection (500) with the terminal (200) and continuously monitoring the operating status of the terminal (200), , wherein the application program (400) and the graphical user interface (410) are provided and controlled on the terminal (200) by a service (650) running on the at least one server (610) in the data center (600); wherein the application program (400) is configured to delete the data generated during a user session (300) after the session ends, wherein the application program (400) is configured to lock the terminal (200) if the position data (251) acquired by the positioning module (250) is outside a predefined range, wherein the at least one server (610) is configured to transmit signed and encrypted data packets (520) created on the terminal (200) via the permanent, secure,receives encrypted and encapsulated connection (500) and forwards the data packets (520) in compressed form via a multi-tenant encrypted VPN tunnel (530) to a remote network (150) of the service provider (100), wherein the permanent, secure, encrypted, encapsulated and wireless connection (500) between the terminal (200) and the at least one server (610) is only established if the unique cellular identifier (221) of the cellular module (220) matches a predefined cellular identifier stored on the at least one server (610) and the device address (222) of the cellular module (220) matches a predefined device address stored on the at least one server (610).

[0013] The term "non-discriminatory" here means that the system enables all persons to access digital services, regardless of their abilities, without requiring any technical or prior knowledge, and in a secure, cost-effective, efficient, user-friendly, and comprehensive manner. Specifically, non-discriminatory also refers to the operation of the mobile terminal, which should preferably be barrier-free or at least have low barriers to use. Barrier-free or at least low barriers to use of the terminal are ensured in particular by appropriately adapted displays on the touchscreen (e.g., high contrast, strong magnification, special color schemes, font adjustments) or audio output via integrated speakers or connectable headphones. Voice control of the terminal via an integrated microphone is also possible.

[0014] The term "cross-sectoral" as used here means that the system provides services from various service providers in different areas and disciplines, such as public services or healthcare. The system according to the invention thus enables improved cooperation, networking, and communication between different disciplines and stakeholders in the healthcare sector. For example, outpatient physicians or attending physicians can work more closely with facilities such as hospitals, pharmacies, or care centers. The cross-sectoral provision of services is particularly advantageous for people with chronic illnesses who depend on regular medical care and continuous treatment, as collaboration across different sectors can save time, travel distances, duplicate examinations and treatments—and ultimately, money.

[0015] The term "social data compliant" here refers to the conformity of social data, and thus the fulfillment of legal, regulatory, and operational requirements for the system handling social data. This means that social data is structured, stored, and managed in such a way as to be protected against loss, damage, theft, and misuse. This generally also requires the implementation of data security and data protection measures. Therefore, "social data compliant" also includes the establishment of controls to protect data privacy, integrity, and availability, and to prevent data misuse. Service providers benefit from the social data compliance of the system, as it helps them to create and maintain efficient data management systems.

[0016] Of particular note is the secure provision of digital services by the system according to the invention. This is ensured in particular by avoiding the disclosure of personal data, health data, and IP addresses, and by refraining from the permanent storage of user profiles or the use of identifiable passwords or user IDs. Furthermore, data transmissions within the system take place exclusively via permanently monitored, encapsulated, and clearly defined channels.

[0017] Further security is ensured by the terminal's protection against tampering and theft. This includes, among other things, a sealed housing that makes mechanical manipulation difficult. In addition, multiple security measures (su) deactivate the terminal's physical interfaces, such as USB ports, via the user software. Furthermore, the mobile terminal's location tracking module makes theft more difficult, enabling the device's location to be determined and deactivated if it is used unauthorized outside its intended area.

[0018] The system (1) is further characterized by the fact that the digital services can be offered at virtually any location ("mobile provision"). This is made possible both by the portability of the terminal and by the secure, encrypted, encapsulated, and wireless connection to the data center via a private access point. At the same time, the system is also designed to restrict access to the digital services to specific locations ("theft protection"). The communication link with the data center not only provides the digital services to the user but also allows for the continuous monitoring, administration, and maintenance of the terminal. This ensures data security and system functionality without requiring any intervention from the user.The system according to the invention thus enables every person, regardless of their abilities, to participate digitally without the need for technology or knowledge and in a safe, cost-effective, efficient, user-oriented and comprehensive manner.

[0019] The system (1) according to the invention for the non-discriminatory, secure and mobile provision of digital services therefore offers the following advantages: Use of identity cards, including health and debit cards, including verification of validity and assignment to the respective service provider with the option to access individual functions in encapsulated form; use of technologies for biometric personal identification and image creation for use in identification processes and identity verification such as electronic health cards (eGK), etc.; avoidance of the disclosure of personal data, IP addresses, storage of user profiles or use of assignable passwords or user IDs as well as background profiling; monitored transmission of the data stream via permanently monitored, encapsulated, encrypted and clearly defined channels with additional safeguards within the network; use of a server structure monitored according to maximum data protection requirements in GDPR-certified data centers (KRITIS requirements).Mechanical and software-based protection of the terminal's physical interfaces against local access or misuse, protection of the software used and deactivation of all local administration, localization of the device's location and deactivation of the device in case of unauthorized use outside the intended operating area by the positioning module, remote operation and maintenance, direct multiple use of existing interfaces of the respective service providers through a managed data transfer procedure, optionally integrated infotainment platform for addressing and providing information via the screen during non-use phases.

[0020] The term "digital service" here refers to services provided by a service provider to the user via the system according to the invention. These include, for example, healthcare services provided by a health insurance company, a medical facility, or a physician, which involve enabling, coordinating, or managing, among other things, medications, pharmaceutical products, medical devices, or other medical treatments.Digital services can also include administrative services and, in particular, citizen services, such as changing the address on the identity card, obtaining information from the trade register, certifying documents or signatures, obtaining information from the residents' registration office, applying for or increasing housing benefit, applying for a reduction in daycare costs, applying for a passport, reporting a lost passport, applying for a temporary passport, applying for a child's passport, applying for a fishing license and exemptions from the fishing license requirement, applying for a certificate of good conduct, registering, deregistering, or changing the registration of a business, applying for subsistence assistance (social assistance), applying for long-term care assistance, applying for assistance to overcome special social difficulties, applying for cultural funding, applying for benefits from the education package, deregistering a secondary residence, obtaining a parking permit for severely disabled persons, replacing an identity card, reporting a lost identity card, applying for a temporary identity card, and deregistering a residence.

[0021] The term "service provider" as used herein can refer to, but is not limited to, a third-party provider of a service to a company and / or an individual and / or a group of individuals. Examples include government authorities and agencies such as the police, customs, citizens' offices or public health departments; medical facilities, health insurance companies, care services, rescue services, doctors' offices or private companies.

[0022] The term "user" as used here can refer to an individual or a group of people, but is not limited to either. This includes, but is not limited to, private individuals, employees of organizations and / or companies, members of service providers, members of a public authority, members of organizations, men, women, older people, people in need of care, and children.

[0023] The terminal (200) of the system according to the invention is an electronic, mobile device comprising a sealed housing (210), a mobile communication module (220), an integrated card reader module (230), a touchscreen (240), and a positioning module (250). In this context, "mobile" means that the device is portable, including the possibility of fixing the terminal to a bracket or stand, and has a secure, encrypted, encapsulated, and wireless connection to the data center via a private access point.

[0024] The system according to the invention enables every person, regardless of their abilities, to participate digitally by providing access to digital services via the terminal managed by the system, which the user can then access independently.

[0025] Thus, the present invention relates to a system (1) for the non-discriminatory, secure and mobile provision of digital services of a service provider (100) to a user (300) via a mobile, tamper-proof and theft-proof self-service access device (200). a mobile, tamper-proof and theft-proof self-service access device (200) comprising a sealed enclosure (210), a cellular module (220) with a unique cellular identifier (221) and a device address (222) configured to establish a permanent, secure, encrypted, encapsulated and wireless connection (500) exclusively with at least one server (610) in a data center (600) via a private access point (510), a card reader module (230) integrated into the sealed enclosure (210) for reading smart cards (231) and NFC cards (232), a touchscreen (240) for displaying information on and for user input of data on a graphical user interface (410) of an application program (400), a positioning module (250) for determining a geographic position of the terminal (200), and at least one server (610) in a Data center (600), configured to provide permanent,secure, encrypted and encapsulated connection (500) with the self-service access device and continuously monitoring the operating status of the self-service access device, , wherein the application program (400) and the graphical user interface (410) are provided and controlled on the self-service access device by a service (650) running on the at least one server (610) in the data center (600); wherein the application program (400) is configured to delete the data generated during a user's session (300) after the session ends, wherein the application program (400) is configured to lock the self-service access device if the position data (251) acquired by the positioning module (250) is outside a predefined range, wherein the at least one server (610) is configured to transmit signed and encrypted data packets (520) created on the self-service access device via the permanent, secure,receives encrypted and encapsulated connection (500) and forwards the data packets (520) in compressed form via a multi-tenant encrypted VPN tunnel (530) to a remote network (150) of a service provider (100), wherein the permanent, secure, encrypted, encapsulated and wireless connection (500) between the self-service access device and the at least one server (610) is only established if the unique cellular identifier (221) of the cellular module (220) matches a predefined cellular identifier stored on the at least one server (610) and the device address (222) of the cellular module (220) matches a predefined device address stored on the at least one server (610).

[0026] The terminal of the system according to the invention is, for example, a mobile device equipped for processing data using a processor, e.g., a data processing device such as a portable computer, a personal digital assistant, a tablet, a mobile phone, and / or any other mobile electronic device that has a processor. The term "processor" shall include, but is not limited to, control units, microprocessors, microcontrol units such as microcontrollers, digital signal processors (DSPs), application-specific integrated circuits (ASICs), or field-programmable gate arrays (FPGAs).

[0027] The terminal of the system according to the invention has a sealed housing (210) to prevent physical access to the electronics and the firmware and to detect any opening of the housing after tampering. The seals used for this purpose are preferably counterfeit-proof and possess authentication features (e.g., holograms). The seal protects against unnoticed access and tampering. Unauthorized changes are thus prevented from occurring in the first place. In addition, the user can recognize that changes have been made to the terminal for the purpose of manipulation.The sealed housing is therefore designed in such a way that "forcible" opening of the housing is prevented or at least the integrity and authenticity of the terminal is easily recognizable, that the signal lines are not accessible from the outside, and that a replacement of the original terminal with a manipulated device is detectable or that security-relevant functions are no longer performed by the terminal.

[0028] Preferably, the seal is positioned at a point on the housing where two housing parts are joined, such that damage to the seal is unavoidable when the housing halves are opened, pried open, or unfolded. Preferably, the seal is also positioned where it will not be damaged by normal user use of the terminal.

[0029] To make cutting attacks (e.g., with a scalpel) more difficult or to facilitate the detection of tampering, the seal is preferably applied in such a way that areas of the seal that do not contain authentication features do not extend across cut edges. To make cutting out these areas more difficult, the shape should not be a simple geometric form (circle, rectangle, triangle), but rather have, for example, rounded corners, more complex bases, or cutouts. Such areas should also not extend across the entire width or length of the seal.

[0030] Furthermore, the housing is designed in such a way as to make it more difficult for the seal to cut. For this purpose, the edge where the housing parts meet should preferably not be a simple straight line, which would not only facilitate cutting but also make the cut difficult to detect after the housing parts have been joined. Therefore, a housing part edge in a wave, triangular, or trapezoidal shape is preferred.

[0031] Furthermore, the terminal of the system according to the invention comprises a mobile communication module (220) configured to establish a permanent, secure, encrypted, encapsulated, and wireless connection (500) exclusively with at least one server (610) in a data center (600) via a private access point (510). For this purpose, the mobile communication module is equipped with a physical or virtualized device identification module for authentication with the mobile network. The device identification module is preferably a SIM card (UICC, USIM), an eSIM, an EAP identity module, or an EAP identity function, thus enabling the identification of the device in the mobile network. Tracing the data back to the person using the hardware is prevented by the structure of the application program and the communication with the data center described herein.

[0032] Network-independent, remotely programmable M2M SIM cards are particularly preferred as device identification modules. Due to their network independence and uncontrolled roaming, the mobile network with the best availability is always used for a permanent, secure, encrypted, encapsulated, and wireless connection (500). Furthermore, the content of the M2M SIM card can be changed remotely, enabling, for example, a change of provider without replacing the SIM card at the terminal.

[0033] The permissions granted to the terminal to use the mobile communication module—that is, the permissions it has to utilize the communication capabilities provided by the mobile network—depend not only on the permissions assigned to the mobile communication module or its subscriber identification module, but also on the unique mobile communication identifier (221) and the terminal itself. The unique mobile communication identifier (221) is preferably an MSISDN (Mobile Station International Subscriber Directory Number) or IMEI (International Mobile Subscriber Identity) number. The IMEI number consists of three main components: Mobile Country Code (MCC), Mobile Network Code (MNC), and Mobile Subscription Identification Number (MSIN). Together, these components ensure the accurate identification and authentication of subscribers in telecommunications networks.

[0034] The terminal itself can cryptographically protect data transmission independently of the mobile module and the mobile network, e.g., using MACsec, IPsec, TLS, DTLS, or OPC UA. Furthermore, communication within the radio channel via an S-VPN tunnel is also encrypted, as is the data packet it contains, all the way to its arrival at the data center server.

[0035] A communication option is provided for the terminal according to the authorization assigned to it. Authorization verification and enforcement can be performed by the mobile communication module itself, as well as by the private access point and / or at least one server in the data center. For this purpose, the device address (222) can be transmitted to the mobile communication network as identification information for the terminal.

[0036] The terminal's mobile communication module (220) is configured to establish a permanent, secure, encrypted, encapsulated, and wireless connection (500) exclusively with a designated server (610) in a data center (600) via a private access point (510). For example, the IP address of the designated server (610) can be stored in the terminal. "Exclusively" here means that only a wireless connection to the private access point is possible. Preferably, the network address of the private access point is not publicly known and cannot be identified by measurement.

[0037] The terms "private access point", "non-public access point" and "non-public network point" are used synonymously herein.

[0038] A "permanent, secure, encrypted, encapsulated, and wireless connection (500) with at least one server (610) in a data center (600) via a private access point (510)" here means a communicative data connection with a server in a data center. This connection comprises at least two links: a wireless link (511) between the terminal and the private access point, and a link (512) between the private access point (510) and the data center (600). Accordingly, the "permanent, secure, encrypted, encapsulated, and wireless connection (500) with at least one server (610) in a data center (600) via a private access point (510)" is a wireless link.The term "permanent, secure, encrypted, encapsulated and wireless connection (500) with at least one server (610) in a data center (600) via a private access point (510)" is therefore used synonymously herewith with "permanent, secure, encrypted, encapsulated and partially wireless connection (500) with at least one server (610) in a data center (600) via a private access point (510)." Preferably, the connection (512) between the private access point (510) and the data center (600) is established via a VPN tunnel (535).

[0039] The permanent, secure, encrypted, encapsulated, and wireless connection (500) does not use the public internet ("encapsulation") but is separated from it via private access points. Data traffic is routed directly through the private access point to the data center's server.

[0040] Secure connections to servers in the data center are established via mobile network technology, enabling bidirectional communication. A dedicated, secure network is created through a permanent, secure, encrypted, encapsulated, and wireless connection (500) to at least one server (610) in a data center (600) via a private access point (510), independent of the network of the locations. This private, highly secure IP network forms the basis for secure data communication and thus enables the secure and mobile provision of digital services. Control and monitoring of the network participants (terminal(s)) are always and completely managed from the data center.

[0041] The permanent, secure, encrypted, encapsulated, and wireless connection (500) to at least one server (610) in a data center (600) via a private access point (510) is a quadruple-secured connection. The first security measure is the privacy of the private access point (510), whose network address is preferably not publicly known and cannot be identified by measurement. Without knowledge of this access point, locating it is not possible without significant technical effort. The second security measure is access authorization, which is achieved through unique hardware authentication. Only the correct, authorized terminal hardware, registered in the data center, is permitted to connect to the private network. In the event of unauthorized access, this is immediately detected, and the affected terminal is isolated and excluded from the network.At the third security level, all data generated at the terminal, including private user data, is encrypted and only transmitted after successful encryption. At the data center, the data packet is received, its integrity is checked, and it is forwarded to the respective service provider, such as the health insurance company. End-to-end encryption is possible at this stage. A fourth and final security level is the digital signature of the data itself. All data created at the terminal is marked by the system with a unique digital signature. This unique digital signature allows for verification of the integrity of the respective data.

[0042] The terminal itself is also protected against manipulation by several measures, all of which are centrally monitored via the connection (500) (so).

[0043] Through the permanent, secure, encrypted, encapsulated and wireless connection (500) with the at least one server (610) and the multi-tenant encrypted connection via VPN tunnel (530) to the service provider (100), the system according to the invention is able to 1. to continuously monitor the operating status of the terminal (200), 2. to provide and control the application program (400) and the graphical user interface (410) from a service (650) running on at least one server (610) in the data center (600) on the terminal (200), 3. to provide the service provider's digital services on the terminal, 4. to prevent third parties from accessing the transmitted data packets (unauthorized access), and 5. to exclude unauthorized devices from the network.

[0044] The security measures of the system according to the invention described above therefore enable the cross-sector, non-discriminatory, secure and mobile provision of digital services from various service providers via a mobile, social data-compliant encapsulated, tamper-proof and theft-proof terminal to one or more users.

[0045] Thus, the present invention also relates to a system (1) for the non-discriminatory, cross-sectoral, secure and mobile provision of digital services from multiple service providers (100) via a mobile, tamper-proof and theft-proof terminal (200) to a user (300) comprising a mobile, tamper-proof and theft-proof terminal (200) comprising a sealed enclosure (210), a cellular module (220) with a unique cellular identifier (221) and a device address (222) configured to establish a permanent, secure, encrypted, encapsulated and wireless connection (500) exclusively with at least one server (610) in a data center (600) via a private access point (510), a card reader module (230) integrated into the sealed enclosure (210) for reading smart cards (231) and NFC cards (232), a touchscreen (240) for displaying information on and for user input of data on a graphical user interface (410) of an application program (400), a positioning module (250) for determining a geographic position of the terminal (200), and at least one server (610) in a data center (600). which is configured to provide a permanent, secure,encrypted and encapsulated connection (500) with the terminal (200) and continuously monitoring the operating status of the terminal (200), , wherein the application program (400) and the graphical user interface (410) are provided and controlled on the terminal (200) by a service (650) running on the at least one server (610) in the data center (600); wherein the application program (400) is configured to delete the data generated during a user session (300) after the session ends, wherein the application program (400) is configured to lock the terminal (200) if the position data (251) acquired by the positioning module (250) is outside a predefined range, wherein the at least one server (610) is configured to transmit signed and encrypted data packets (520) created on the terminal (200) via the permanent, secure,receives encrypted and encapsulated connection (500) and forwards the data packets (520) in compressed form via a multi-tenant encrypted VPN tunnel (530) to a remote network (150) of a service provider (100), wherein the permanent, secure, encrypted, encapsulated and wireless connection (500) between the terminal (200) and the at least one server (610) is only established if the unique cellular identifier (221) of the cellular module (220) matches a predefined cellular identifier stored on the at least one server (610) and the device address (222) of the cellular module (220) matches a predefined device address stored on the at least one server (610).

[0046] Thus, the present invention also relates to a system (1) for the non-discriminatory, secure and mobile provision of digital services of a service provider (100) via a mobile, tamper-proof and theft-proof terminal (200) to multiple users (300). a mobile, tamper-proof and theft-proof terminal (200) for each user, comprising a sealed enclosure (210), a cellular module (220) with a unique cellular identifier (221) and a device address (222) configured to establish a permanent, secure, encrypted, encapsulated and wireless connection (500) exclusively with at least one server (610) in a data center (600) via a private access point (510), a card reader module (230) integrated into the sealed enclosure (210) for reading smart cards (231) and NFC cards (232), a touchscreen (240) for displaying information on and for user input of data on a graphical user interface (410) of an application program (400), a positioning module (250) for determining a geographic position of the terminal (200), and at least one server (610) in a data center (600), which is configured as follows,that it continuously monitors the permanent, secure, encrypted and encapsulated connections (500) with each terminal (200) and the operating states of the terminals (200), wherein the application program (400) and the graphical user interface (410) are provided and controlled on each terminal (200) by a service (650) running on the at least one server (610) in the data center (600); wherein the application program (400) is configured to delete the data generated during a user's session (300) after the session ends, wherein the application program (400) is configured to lock each terminal (200) if the position data (251) acquired by the positioning module (250) of the respective terminal is outside a predefined range, wherein the at least one server (610) is configured to send signed and encrypted data packets (520) created on each terminal (200) via the respective permanent, secure,receives encrypted and encapsulated connection (500) and forwards the data packets (520) in compressed form via a multi-tenant encrypted VPN tunnel (530) to a remote network (150) of the service provider (100), wherein the permanent, secure, encrypted, encapsulated and wireless connection (500) between each terminal (200) and the at least one server (610) is only established if the unique cellular identifier (221) of the cellular module (220) matches a predefined cellular identifier stored on the at least one server (610) and the device address (222) of the cellular module (220) matches a predefined device address stored on the at least one server (610).

[0047] In this embodiment, the application program can be configured the same or differently for each user on their terminal. Furthermore, each permanent, secure, encrypted, encapsulated, and wireless connection (500) between the terminal and the at least one server (610) is independent of the others. There are no connections between the terminals themselves.

[0048] The present invention also relates to a system (1) for the non-discriminatory, cross-sectoral, secure and mobile provision of digital services from multiple service providers (100) via a mobile, tamper-proof and theft-proof terminal (200) to multiple users (300). a mobile, tamper-proof and theft-proof terminal (200) for each user, comprising a sealed enclosure (210), a cellular module (220) with a unique cellular identifier (221) and a device address (222) configured to establish a permanent, secure, encrypted, encapsulated and wireless connection (500) exclusively with at least one server (610) in a data center (600) via a private access point (510), a card reader module (230) integrated into the sealed enclosure (210) for reading smart cards (231) and NFC cards (232), a touchscreen (240) for displaying information on and for user input of data on a graphical user interface (410) of an application program (400), a positioning module (250) for determining a geographic position of the terminal (200), and at least one server (610) in a data center (600), which is configured as follows,that it continuously monitors the permanent, secure, encrypted and encapsulated connection (500) with the terminal (200) and the operating status of the terminal (200), wherein the application program (400) and the graphical user interface (410) are provided and controlled on the terminal (200) by a service (650) running on the at least one server (610) in the data center (600); wherein the application program (400) is configured to delete the data generated during a user's session (300) after the session ends, wherein the application program (400) is configured to lock the terminal (200) if the position data (251) acquired by the positioning module (250) is outside a predefined range, wherein the at least one server (610) is configured to send signed and encrypted data packets (520) created on each terminal (200) via the respective permanent, secure,receives encrypted and encapsulated connection (500) and forwards the data packets (520) in compressed form via a respective multi-tenant encrypted VPN tunnel (530) to a remote network (150) of a service provider (100), wherein the permanent, secure, encrypted, encapsulated and wireless connection (500) between each terminal (200) and the at least one server (610) is only established if the unique cellular identifier (221) of the cellular module (220) matches a predefined cellular identifier stored on the at least one server (610) and the device address (222) of the cellular module (220) matches a predefined device address stored on the at least one server (610).

[0049] The terminal's positioning module typically consists of a GPS receiver, but can also include other positioning services such as Galileo or GLONASS. Within buildings, positioning can also be based on Wi-Fi, beacons, or existing infrastructure elements such as smoke detectors equipped with Bluetooth or Wi-Fi. Naturally, a combination of outdoor and indoor positioning services is also possible.

[0050] In a preferred embodiment, the at least one server (610) in the data center (600) comprises a firewall (611), an application server (612), a web proxy server (613), and an email relay server (614). Thus, the system for the non-discriminatory, secure, and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof, and theft-proof terminal preferably includes A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal. wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile module matches a predefined mobile network identifier stored on the at least one server and the device address of the mobile module matches a predefined device address stored on the at least one server, and wherein the at least one server in the data center comprises a firewall, an application server, a web proxy server, and an email relay server.

[0051] In other words, the system for the non-discriminatory, secure and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof and theft-proof terminal preferably includes A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with an app server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and an app server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal.a firewall in the data center, a web proxy server in the data center, an email relay server in the data center, , wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the app server; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the location data captured by the positioning module is outside a predefined range, wherein the app server is configured to receive signed and encrypted data packets created on the terminal via the persistent, secure, encrypted and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, and wherein the persistent, secure, encrypted,A secure and wireless connection between the terminal and the app server is only established if the unique mobile network identifier of the mobile module matches a predefined mobile network identifier stored on at least one server, and if the device address of the mobile module matches a predefined device address stored on at least one server.

[0052] In a further preferred embodiment, the connection between the private access point and the data center is via a VPN tunnel, thereby increasing the security of the data transmission. Thus, the system for the non-discriminatory, secure, and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof, and theft-proof terminal preferably comprises A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal. wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile module matches a predefined mobile network identifier stored on the at least one server and the device address of the mobile module matches a predefined device address stored on the at least one server, and the connection between the private access point and the at least one server in the data center is established via a VPN tunnel.

[0053] In a further preferred embodiment, the mobile, tamper-proof, and theft-proof terminal further comprises an integrated camera for recording videos and images and for scanning documents, and at least one integrated speaker. Thus, the system for the non-discriminatory, secure, and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof, and theft-proof terminal preferably includes A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal. wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the data packets in compressed form via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile communication module matches a predefined mobile network identifier stored on the at least one server and the device address of the mobile communication module matches a predefined device address stored on the at least one server, and wherein the mobile, tamper-proof and theft-proof terminal further comprises an integrated camera for recording videos and images and for scanning documents and at least one integrated speaker.

[0054] In a preferred implementation, the system comprises the non-discriminatory, secure and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof and theft-proof terminal. A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal. wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the data packets in compressed form via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile communication module matches a predefined mobile network identifier stored on the at least one server and the device address of the mobile communication module matches a predefined device address stored on the at least one server, and wherein the mobile, tamper-proof and theft-proof terminal further comprises an integrated camera for recording videos and images and for scanning documents, at least one integrated speaker and at least one integrated microphone.

[0055] In another preferred embodiment, the mobile terminal's application program runs in a multi-user kiosk mode. The kiosk mode protects the terminal from unauthorized access by preventing access to system services. The application program is specifically optimized for use by multiple people, for example, by automatically terminating sessions and / or automatically deleting user-generated data after a session or interaction ends. Preferably, the application program is also equipped with automatically executed routines that ensure a degree of self-healing and tolerance. Thus, the system for the non-discriminatory, secure, and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof, and theft-proof terminal preferably comprises A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal. wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile module matches a predefined mobile network identifier stored on the at least one server, and the device address of the mobile module matches a predefined device address stored on the at least one server, and the application program of the mobile terminal is running in a multi-user kiosk mode.

[0056] In another preferred embodiment, the application program is configured to automatically terminate the session after a predefined period of time if the user is absent from the terminal and no re-identification occurs within that period. Thus, the system for the non-discriminatory, secure, and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof, and theft-proof terminal preferably comprises A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal. wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the application program is configured to automatically terminate the session after a predefined period of time if the user is absent from the terminal and no re-identification occurs within that period, wherein the at least one server is configured to send signed and encrypted data packets created on the terminal via the permanent, secure,receives an encrypted and encapsulated connection and forwards the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the permanent, secure, encrypted, encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile identifier of the mobile module matches a predefined mobile identifier stored on the at least one server and the device address of the mobile module matches a predefined device address stored on the at least one server.

[0057] In another preferred embodiment, the touchscreen is configured to capture signatures. Using digital signature capabilities, forms such as family questionnaires or applications can be easily processed by the user and submitted online, including payment of fees. Thus, the system for the non-discriminatory, secure, and mobile provision of digital services by a service provider to a user via a mobile, tamper-proof, and theft-proof terminal preferably comprises A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal. wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile communication module matches a predefined mobile network identifier stored on the at least one server, and the device address of the mobile communication module matches a predefined device address stored on the at least one server, and the terminal can capture signatures via the touchscreen.

[0058] In a preferred embodiment, the terminal is a mobile electronic device such as a tablet, smartphone, phablet, or convertible. Tablets are particularly preferred as mobile terminals. Thus, the system for the non-discriminatory, secure, and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof, and theft-proof tablet preferably comprises A mobile, tamper-proof and theft-proof tablet comprising a sealed housing, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed housing for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the tablet, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the tablet and the operating status of the tablet.wherein the application program and the graphical user interface are provided and controlled on the tablet by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the tablet if the location data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive signed and encrypted data packets created on the tablet via the persistent, secure, encrypted and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, and wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the tablet and the at least one server is only established if the unique mobile network identifier of the mobile module matches a predefined mobile network identifier stored on the at least one server and the device address of the mobile module matches a predefined device address stored on the at least one server.

[0059] In another embodiment, the tablet is arranged in a stand that includes a charging device. The stand is preferably designed to position the tablet at an angle that makes it easier for the user to operate the tablet, for example, by allowing the terminal and stand to be placed on a table. The charging device allows the tablet to be conveniently charged. Thus, the system for the non-discriminatory, secure, and mobile provision of digital services by a service provider to a user via a mobile, tamper-proof, and theft-proof tablet preferably comprises A mobile, tamper-proof and theft-proof tablet comprising a sealed housing, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed housing for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the tablet, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the tablet and the operating status of the tablet. wherein the application program and the graphical user interface are provided and controlled on the tablet by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the tablet if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive signed and encrypted data packets created on the tablet via the persistent, secure, encrypted and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the tablet and the at least one server is only established if the unique mobile network identifier of the mobile network module matches a predefined mobile network identifier stored on the at least one server and the device address of the mobile network module matches a predefined device address stored on the at least one server, wherein the tablet is arranged in a stand comprising a charging device and one or more electrical energy storage devices of the tablet are charged inductively or directly with a connected cable via the charging device.

[0060] In another embodiment, the terminal is arranged in a stationary device with connected peripheral hardware. The terminal is secured against theft or unauthorized access by means of at least one lock. The peripheral hardware is connected to the terminal via permanently monitored USB connections. Peripheral hardware can include, among other things, input or output devices such as a sensor for detecting the user's presence, a portrait and image camera, a biometric signature pad, a card reader for Gematik (EGK), an NFC reader, a POS payment terminal, headphones, a handheld scanner, a flatbed scanner, a touchscreen, speakers, a printer, or a headset. Devices for recording bodily functions can also be connected in this embodiment.

[0061] Thus, the present invention relates to a system (1) for the non-discriminatory, secure and mobile provision of digital services of a service provider (100) via a mobile, tamper-proof and theft-proof terminal (200) to a user (300) comprising a mobile terminal (200) connected to a stationary device with attached peripheral hardware, protected against tampering and theft, comprising a sealed housing (210), a cellular module (220) with a unique cellular identifier (221) and a device address (222) configured to establish a permanent, secure, encrypted, encapsulated, and wireless connection (500) exclusively with at least one server (610) in a data center (600) via a private access point (510), a card reader module (230) integrated into the sealed housing (210) for reading smart cards (231) and NFC cards (232), a touchscreen (240) for displaying information and for user input of data on a graphical user interface (410) of an application program (400), and a positioning module (250) for determining a geographic position of the terminal (200).at least one server (610) in a data center (600) configured to continuously monitor the permanent, secure, encrypted and encapsulated connection (500) with the terminal (200) and the operational status of the terminal (200), wherein the application program (400) and the graphical user interface (410) are provided and controlled on the terminal (200) by a service (650) running on the at least one server (610) in the data center (600); wherein the application program (400) is configured to delete the data generated during a user session (300) after the session ends, wherein the application program (400) is configured to lock the terminal (200) if the position data (251) acquired by the positioning module (250) is outside a predefined range, wherein the at least one server (610) is configured to transmit signed and encrypted data packets (520) created on the terminal (200) via the permanent, secure,receives encrypted and encapsulated connection (500) and forwards the data packets (520) in compressed form via a multi-tenant encrypted VPN tunnel (530) to a remote network (150) of the service provider (100), wherein the permanent, secure, encrypted, encapsulated and wireless connection (500) between the terminal (200) and the at least one server (610) is only established if the unique cellular identifier (221) of the cellular module (220) matches a predefined cellular identifier stored on the at least one server (610) and the device address (222) of the cellular module (220) matches a predefined device address stored on the at least one server (610).

[0062] In a preferred embodiment, the stationary device includes a document compartment for storing paper originals.

[0063] Thus, the present invention relates to a system (1) for the non-discriminatory, secure and mobile provision of digital services of a service provider (100) via a mobile, tamper-proof and theft-proof terminal (200) to a user (300) comprising a mobile terminal (200) connected to a stationary device with attached peripheral hardware, protected against tampering and theft, comprising a sealed housing (210), a cellular module (220) with a unique cellular identifier (221) and a device address (222) configured to establish a permanent, secure, encrypted, encapsulated, and wireless connection (500) exclusively with at least one server (610) in a data center (600) via a private access point (510), a card reader module (230) integrated into the sealed housing (210) for reading smart cards (231) and NFC cards (232), a touchscreen (240) for displaying information and for user input of data on a graphical user interface (410) of an application program (400), and a positioning module (250) for determining a geographic position of the terminal (200).at least one server (610) in a data center (600) configured to continuously monitor the permanent, secure, encrypted and encapsulated connection (500) with the terminal (200) and the operational status of the terminal (200), wherein the application program (400) and the graphical user interface (410) are provided and controlled on the terminal (200) by a service (650) running on the at least one server (610) in the data center (600); wherein the application program (400) is configured to delete the data generated during a user session (300) after the session ends, wherein the application program (400) is configured to lock the terminal (200) if the position data (251) acquired by the positioning module (250) is outside a predefined range, wherein the at least one server (610) is configured to transmit signed and encrypted data packets (520) created on the terminal (200) via the permanent, secure,The terminal (200) receives an encrypted and encapsulated connection (500) and transmits the compressed data packets (520) via a multi-tenant encrypted VPN tunnel (530) to a remote network (150) of the service provider (100), wherein the permanent, secure, encrypted, encapsulated, and wireless connection (500) between the terminal (200) and the at least one server (610) is established only if the unique cellular identifier (221) of the cellular module (220) matches a predefined cellular identifier stored on the at least one server (610) and the device address (222) of the cellular module (220) matches a predefined device address stored on the at least one server (610), and wherein the stationary device includes a document tray for storing paper originals.

[0064] In another preferred embodiment, the application program is configured to display information (infotainment) on the terminal's touchscreen when not in use by a user. This information is provided by the service provider via a permanent, secure, encrypted, and encapsulated connection through at least one server in the data center. Thus, the system for the non-discriminatory, secure, and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof, and theft-proof terminal preferably comprises A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal. wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,A secure and wireless connection between the terminal and the at least one server is established only if the unique mobile network identifier of the mobile module matches a predefined mobile network identifier stored on the at least one server and the device address of the mobile module matches a predefined device address stored on the at least one server, and the application program is configured to display information provided by the service provider on the terminal's touchscreen when not in use by a user via the permanent, secure, encrypted, and secure connection through the at least one server in the data center.

[0065] Another preferred embodiment relates to a system for the non-discriminatory, secure and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof and theft-proof terminal, comprising A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal. wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile module matches a predefined mobile network identifier stored on the at least one server, and the device address of the mobile module matches a predefined device address stored on the at least one server, where the unique mobile network identifier is the IMEI number of the mobile module and the device address is the MAC address.

[0066] Another preferred embodiment relates to a system for the non-discriminatory, secure and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof and theft-proof terminal, comprising A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal.a programming interface through which the service provider can call functions on the user's mobile terminal, wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, and wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile communication module matches a predefined mobile network identifier stored on the at least one server and the device address of the mobile communication module matches a predefined device address stored on the at least one server.

[0067] Another preferred embodiment relates to a system for the non-discriminatory, secure and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof and theft-proof terminal, comprising A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal.a programming interface through which the service provider can call functions on the user's mobile terminal, wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile module matches a predefined mobile network identifier stored on the at least one server, and the device address of the mobile module matches a predefined device address stored on the at least one server, and wherein the function callable via a programming interface is selected from: start signature process, read smartcard, scan document, encrypt document, send document, receive document, identify user, take photo of user, take photo or scan of identification document.

[0068] Another preferred embodiment relates to a system for the non-discriminatory, secure and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof and theft-proof terminal, comprising A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to continuously monitor the permanent, secure, encrypted and encapsulated connection with the terminal and the operational status of the terminal.a web interface for the service provider to administer the terminal, whereby access to the web interface is only permitted via the multi-tenant, encrypted VPN tunnel between the data center and the service provider's network, wherein the application program and the graphical user interface are provided and controlled on the terminal by a service running on the at least one server in the data center; wherein the application program is configured to delete the data generated during a user's session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive data packets created, signed, and encrypted on the terminal via the persistent, secure, encrypted, and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, and wherein the persistent, secure, encrypted,An encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile network identifier of the mobile communication module matches a predefined mobile network identifier stored on the at least one server and the device address of the mobile communication module matches a predefined device address stored on the at least one server.

[0069] Another preferred embodiment relates to a system for the non-discriminatory, secure and mobile provision of digital services from a service provider to a user via a mobile, tamper-proof and theft-proof terminal, comprising A mobile, tamper-proof and theft-proof terminal comprising a sealed enclosure, a cellular module with a unique cellular identifier and a device address configured to establish a permanent, secure, encrypted, encapsulated and wireless connection exclusively with at least one server in a data center via a private access point, a card reader integrated into the sealed enclosure for reading smart cards and NFC cards, a touchscreen for displaying information and for user input of data on a graphical user interface of an application program, a positioning module for determining the geographical position of the terminal, and at least one server in a data center configured to establish the permanent, secure, encrypted and encapsulated connection with the

[0070] The terminal and its operational status are continuously monitored, with the application program and graphical user interface being provided and controlled on the terminal by a service running on at least one server in the data center; wherein the application program is configured to delete the data generated during a user session after the session ends, wherein the application program is configured to lock the terminal if the position data acquired by the positioning module is outside a predefined range, wherein the at least one server is configured to receive signed and encrypted data packets created on the terminal via the permanent, secure, encrypted and encapsulated connection and to forward the compressed data packets via a multi-tenant encrypted VPN tunnel to a remote network of the service provider, wherein the permanent, secure, encrypted, encapsulated and wireless connection between the terminal and the at least one server is only established if the unique mobile identifier of the mobile module matches a value stored on the at least one server,matches a predefined mobile network identifier and the device address of the mobile network module matches a predefined device address stored on at least one server, and wherein the integrated card reader module comprises an NFC unit and a smart card reader and is configured to read smart cards, chip cards, identity documents, health cards and telematics cards.

[0071] In an exemplary embodiment, the terminal is a tablet computer device that optionally incorporates a camera. In an exemplary embodiment, the touchscreen is configured to display images and data to a user and to receive user input by contact with the touchscreen by the user (or a tool, such as a stylus operated by the user). The touch-sensitive touchscreen is capable of capturing user input when the user touches the touchscreen, for example, with a finger or a stylus. As disclosed herein by way of example, the user can sign their name on the touch-sensitive touchscreen (for example, with a stylus or a finger), and the user's signature can be captured and stored in electronic format (for example, as an image).For example, an integrated camera can be used to take digital photos of an object, such as a patient's identification card, driver's license, or health insurance card(s). The patient or healthcare provider can hold the card in front of the camera and press the shutter button. Alternatively, the integrated card reader can be used to scan the card. Optical character recognition (OCR) or image recognition methods implemented in the application running on the tablet can be used to extract information from the card, and this information can be converted into an electronic format and stored in individual fields.

[0072] In one exemplary embodiment, the terminal is configured to capture an electronic signature. The terminal is configured to display a signature pad on the touchscreen when electronic signature capture is desired. The user, for example, a patient, can enter their signature in the signature pad on the touchscreen using a touchscreen stylus. In another exemplary embodiment, the user's signature can be captured and stored in an electronic format (for example, as an image).

[0073] To recognize a variety of different identification means, such as chip cards, smart cards or tokens, the card reading module (230) of the system according to the invention is equipped with a near-field communication unit (235) and a smart card reading unit (236). This ensures maximum compatibility with the various standards and formats (chip card vs. contactless) for user identification and authentication.

[0074] The card reading module (230) is thus specifically designed for use in the system (1) according to the invention, since it makes a significant contribution to the necessary data security and at the same time simplifies the provision of digital services due to the greatest possible compatibility with the various standards and formats of the identification means of the service providers.

[0075] In a preferred embodiment of the system (1) according to the invention, the card reading module (230) is configured to read smart cards, chip cards, identity documents, health insurance cards, and telematics cards. In a preferred embodiment of the system (1) according to the invention, the near-field communication unit (235) is configured to read smart cards, chip cards, identity documents, health insurance cards, and telematics cards contactlessly. In a preferred embodiment of the card reading module (230), the smart card reading unit (236) comprises a chip card reader configured to read smart cards, chip cards, identity documents, health insurance cards, and telematics cards.

[0076] In a preferred embodiment of the system (1) according to the invention, the near-field communication unit (235) and the smart card reading unit (236) are integrated into the card reading module (230) such that the card reading module (230) forms a unit that can be integrated into the sealed housing (210) of the terminal (200). In this embodiment, the card reading module has a design that is as compact as possible and does not protrude from the terminal housing or only protrudes minimally.

[0077] Particularly advantageous aspects of combining the near-field communication unit (235) and the smart card reader (236) in a single card reader module are the simplified control and access to the card data by the application program. The application program no longer needs to be programmed, configured, and maintained for multiple card reader modules (module for contactless card reading and chip card module); instead, it is sufficient to address the card reader module (230) centrally to read the various identification cards regardless of their respective standard and format. Accordingly, the application program of the system according to the invention is specifically adapted to the card reader module (230) with a near-field communication unit (235) and a smart card reader (236). Character description

[0078] Figure 1 : Schematic of an embodiment of the system according to the invention. Examples Example 1: Data transmission to a service provider

[0079] A system like in Figure 1 The following steps are provided for secure, end-to-end encrypted data transmission between the mobile terminal and the service provider's network: 1. User authentication at the terminal via password entry, biometric recognition (iris or fingerprint), and / or smartcard reading. 2. Bringing the user's electronic health card (eGK) into contact with the card reader. Communication takes place between the terminal and the eGK to determine the validity of the eGK based on the data stored on the eGK. No data is transmitted. 3. Data transmission. 4. Data is encrypted locally via SSL. 5. Data is sent to the nearest LTE antenna. 6. The LTE antenna forwards data to a private APN via dedicated M2M radio frequencies. 7. The APN forwards the data to the M2M provider's firewall. 8. The M2M provider forwards the data through a VPN tunnel to the data center's firewall. 9. The firewall in the data center forwards data to the server cluster in the data center. 10. The available app server receives the data. 11.The app server compresses the data into a format compatible with the service provider's system. 12. The app server sends the data back to the data center's firewall. 13. The firewall forwards the data through an encrypted VPN tunnel to the service provider's firewall. 14. The service provider's firewall forwards the data to the DMS. 15. The DMS sends an acknowledgment of data receipt back to the service provider's firewall. 16. The firewall sends the data through the encrypted VPN tunnel to the data center's firewall. 17. The data center's firewall forwards the data to the app server. 18. The app server receives the acknowledgment and forwards it. 19. The firewall forwards the acknowledgment through an encrypted VPN tunnel to the M2M provider's firewall. 20. The M2M provider's firewall forwards the acknowledgment to the private M2M APN. 21. The APN forwards the acknowledgment to the LTE antenna. 22.The LTE antenna transmits the confirmation to terminal 23. The terminal then indicates to the user whether the real-time transmission was successful. Example 2: Sending emails to service providers via VPN

[0080] A system like in Figure 1 The following steps are provided for secure email communication between the system according to the invention and the service provider: 1. The application server in the data center generates an email. 2. The application server sends the email to the email relay in the data center. 3. The email relay forwards the email to the data center's firewall. 4. The firewall forwards the email through the encrypted VPN tunnel to the service provider's firewall. 5. The firewall forwards the email to the service provider's email server. 6. The email server stores the email in the corresponding mailbox. Example 3: Communication with external servers via an application programming interface (API)

[0081] A system like in Figure 1The system according to the invention includes a programming interface for communication with an external server via a programming interface. The following steps are performed: 1. The terminal calls a function that triggers a request. 2. The request is forwarded via LTE / M2M and VPN tunnel to the web proxy server in the data center. 3. The web proxy server sends the request to the destination on the internet. 4. The destination on the internet processes the request and sends the response to the web proxy server in the data center. 5. The web proxy server forwards the response to the terminal via VPN tunnel and LTE / M2M. Reference character list:

[0082] 1 System 100 Service provider 150 Network 160 Web interface 200 Mobile, tamper-proof and theft-proof terminal 201 Tablet 202 Stand 203 Charging device 205 One or more electrical energy storage devices 210 Sealed housing 220 Mobile communication module 221 Unique mobile communication identifier 222 Device address 230 Integrated card reader module 231 Smart card 232 NFC card 235 NFC unit 236 Smart card reader unit 240 Touchscreen 250 Positioning module 251 Position data 260 Integrated camera 265 Integrated speaker 266 Integrated microphone 300 User 400 Application program 410 Graphical user interface 450 Programming interface 500 Connection between terminal (200) and data center (600) 510 Private access point 511 Connection between terminal (200) and private access point (510) 512 Connection between private access point (510) and data center (600) 520 Data packet 530, 535 VPN tunnel 600Data center 610At least one server 611Firewall 612App server 613Web proxy server 614Email relay server 650Service

Claims

1. A system (1) for the non-discriminatory, secure and mobile provision of digital services of a service provider (100) to a user (300) via a mobile, tamper-proof and theft-protected terminal (200), comprising: • a mobile, tamper-proof and theft-protected terminal (200) comprising ∘ a sealed housing (210), ∘ a cellular module (220) with a unique cellular identifier (221) and a device address (222), configured to establish exclusively a permanent, secure, encrypted, encapsulated and wireless connection (500) with at least one server (610) in a data center (600) via a private access point (510), ∘ a card reader module (230) integrated into the sealed housing (210) for reading smart cards (231) and NFC cards (232), ∘ a touchscreen (240) for displaying information to and receiving input from the user on a graphical user interface (410) of an application program (400), ∘ a positioning module (250) for determining a geographical position of the terminal (200), • at least one server (610) in a data center (600), configured to continuously monitor the permanent, secure, encrypted and encapsulated connection (500) with the terminal (200) and the operating status of the terminal (200), wherein the application program (400) and the graphical user interface (410) are provided and controlled on the terminal (200) by a service (650) running on the at least one server (610) in the data center (600); wherein the application program (400) is configured to delete the data generated during a session by a user (300) after the session has ended; wherein the application program (400) is configured to lock the terminal (200) if the position data (251) detected by the positioning module (250) lies outside a predefined range; wherein the at least one server (610) is configured to receive signed and encrypted data packets (520) created on the terminal (200) via the permanent, secure, encrypted and encapsulated connection (500) and to forward the data packets (520), in compressed form, via a multi-tenant encrypted VPN tunnel (530) to a remote network (150) of the service provider (100); and wherein the permanent, secure, encrypted, encapsulated and wireless connection (500) between the terminal (200) and the at least one server (610) is established only if the unique cellular identifier (221) of the cellular module (220) matches a predefined identifier stored on the at least one server (610) and the device address (222) of the cellular module (220) matches a predefined device address stored on the at least one server (610).

2. The system (1) according to claim 1, wherein the at least one server (610) in the data center (600) comprises a firewall (611), an application server (612), a web proxy server (613), and an email relay server (614).

3. The system (1) according to claim 1 or 2, wherein the connection (512) between the private access point (510) and the data center (600) is established via a VPN tunnel (535).

4. The system (1) according to any one of claims 1 to 3, wherein the mobile terminal (200) further comprises an integrated camera (260) for capturing images and videos and scanning documents, and integrated speakers (265).

5. The system (1) according to any one of claims 1 to 4, wherein the application program (400) of the mobile terminal (200) runs in a multi-user kiosk mode.

6. The system (1) according to any one of claims 1 to 5, wherein the terminal (200) is configured to capture signatures via the touchscreen (240).

7. The system (1) according to any one of claims 1 to 6, wherein the terminal (200) is a tablet (201).

8. The system (1) according to claim 7, wherein the tablet (201) is positioned in a stand (202) comprising a charging device (203) and one or more electrical energy storage units (205) of the tablet can be charged inductively or directly by means of the charging device (203) via a cable.

9. The system (1) according to any one of claims 1 to 8, wherein the application program (400) is configured to display, on the touchscreen (240) of the terminal (200) when not in use by a user (300), information provided by the service provider (100) via the permanent, secure, encrypted, and encapsulated connection (500) through the at least one server (610) in the data center (600).

10. The system (1) according to any one of claims 1 to 9, wherein the unique cellular identifier (221) is the IMEI number of the cellular module (220).

11. The system (1) according to any one of claims 1 to 10, further comprising an application programming interface (API) (450) through which the service provider (100) can invoke functions on the mobile terminal (200) of the user (300).

12. The system (1) according to claim 11, wherein the functions accessible via the application programming interface (450) are selected from: starting a signature process, reading a smart card, scanning a document, encrypting a document, sending a document, receiving a document, identifying a user, capturing a photo of the user, and capturing a photo or scan of an identification document.

13. The system (1) according to any one of claims 1 to 12, further comprising a web interface (160) for administering the terminal (200) by the service provider (100), wherein access to the web interface (160) is permitted only via the multi-tenant encrypted VPN tunnel (530) between the data center (600) and the network (150) of the service provider (100).

14. The system (1) according to any one of claims 1 to 13, wherein the card reader module (230) comprises an NFC unit (235) and a smart card reader unit (236), and is configured to read smart cards, chip cards, identification documents, health cards, and telematics cards.