METHOD FOR PROVIDING A DATA CONNECTION TO THE INTERNET ON A TELECOMMUNICATIONS END DEVICE AND SERVER SYSTEM

Description

[0001] It is known that a mobile device accesses the internet via its "own" mobile network, or home mobile network, to which the mobile device's SIM card is assigned. This can be done using various technologies such as 3G, 4G, and 5G. However, if a mobile device is not within the reception area of ​​the home mobile network, for example, because the mobile device is located abroad, direct dial-in to the home mobile network is not possible. This has the disadvantage of reducing the services available to the mobile device, as some services are national and cannot be used from abroad, even when roaming. Such national services that cannot be used from abroad include, for example, logging into a bank account or using certain accounts, such as a national Twitter account.

[0002] Similarly, a telecommunications terminal that is not a mobile terminal may also face the problem of being able to effectively access the Internet and use services in another country.

[0003] EP 2 700 281 B1 discloses a method for routing telecommunications connections to a mobile terminal that is not within the reception range of its home network. This involves transmitting SIM information data from a SIM card of the mobile terminal via data transmission to a mobile gateway, which then logs into the mobile terminal's home network using this SIM information data at the location of the mobile gateway. A telecommunications connection directed to the mobile terminal's phone number is forwarded from the mobile gateway to the mobile terminal.

[0004] DE 10 2011 007 814 A1 discloses a method for routing telecommunications connections to a mobile radio terminal that is not within the reception area of ​​its home network, wherein the mobile radio terminal has a SIM card assigned to the home network with SIM information data, and the SIM card is assigned a first telephone number. Triggered by an event, a message is automatically generated in the mobile radio terminal or a device assigned to it, which message contains at least the SIM information data of the SIM card or information that identifies the SIM card. The message is sent directly or indirectly from the mobile radio terminal or the device connected to the mobile radio terminal to a mobile radio gateway. Assignment information that identifies the sender of the message is provided at the mobile radio gateway.After the message is received at the mobile gateway, a module of the mobile gateway at the mobile gateway's location registers itself in the home network using the received SIM information data or a partner SIM card, so that every telecommunications connection directed to the first phone number is routed to the mobile gateway. Such a telecommunications connection is then forwarded by the mobile gateway to the sender using the mapping information.

[0005] US 2006 / 0126645 A1 discloses a method in which a terminal device establishes a data connection via a router when it is outside its home network. The router establishes a first secure data connection between a home agent assigned to the terminal device and the router, and a second secure data connection.

[0006] The present invention is based on the object of providing an effective method for providing a data connection to the Internet on a telecommunications terminal and a server system which enable a telecommunications terminal to provide a connection to the Internet via a specific mobile radio network.

[0007] This object is achieved according to the invention by a method having the features of claim 1 and a server system having the features of claim 11. Embodiments of the invention are specified in the dependent claims.

[0008] Accordingly, in a first aspect, the present invention considers a method for providing a data connection to the Internet at a telecommunications terminal using a mobile radio network. The mobile radio network can be the mobile radio network to which a SIM card discussed below is assigned (in which case the mobile radio network is referred to as the home mobile radio network) or, alternatively, any other mobile radio network. In the latter case, it is, in particular, a mobile radio network of a different country than the country in which the SIM card's home mobile radio network is implemented.

[0009] The method involves assigning a SIM card to a considered telecommunications device. Such an assignment of a SIM card can be performed, for example, by the user of the telecommunications device or by a server. The assignment can be initiated manually or automatically. In either case, the assignment is recorded on the server, so that the server is aware that a considered SIM card is assigned to the considered telecommunications device.

[0010] In a subsequent step, the SIM card assigned to the telecommunications terminal is provided to a mobile communications gateway. This occurs when the SIM card is provided to the mobile communications gateway by the server or a separate SIM server communicating with the server, as will be explained below. In this context, it should be noted that a SIM card within the meaning of the present invention can be a physical SIM card or an eSIM (electronic SIM). Providing a SIM card within the meaning of the present invention means providing SIM information data that enable the SIM card to be registered in the mobile communications network. Thus, providing the SIM card to the mobile communications gateway does not mean physically providing a SIM card, but rather providing electronic SIM information data that enables registration in the mobile communications network.A SIM card typically includes an IMSI (International Mobile Subscriber Identity), a PIN (Personal Identity Number), security algorithms, and user-specific data. A SIM card personalizes a mobile device with respect to the user and the network operator and enables the network operator to bill call charges. A SIM card is also referred to as a universal integrated circuit card (UICC). The invention therefore refers to the "provision of a SIM card" as the data associated with and identifying a physical SIM card or an eSIM.

[0011] After the SIM card has been provided to the mobile communications gateway, a radio module of the mobile communications gateway is registered in the mobile communications network using the provided SIM card. In particular, the radio module registering with the SIM card is identified and authenticated. A distinction must be made between two cases. If the mobile communications network is the home mobile communications network of the SIM card, registration takes place in the home mobile communications network. If the mobile communications network is a different mobile communications network than the home mobile communications network of the SIM card, registration in the mobile communications network takes place via roaming, i.e. the radio module with the SIM card registers in the mobile communications network via roaming. In both cases, registration in the mobile communications network takes place.

[0012] After the radio module is registered, a cellular data connection is established from the radio module via the cellular network to the internet. The cellular data connection can be established in a conventional manner using an APN (APN = "Access Point Name") of the radio module. The cellular data connection can, for example, be established to a dial-in point or gateway of the cellular network to the internet, thus providing access to the internet via the cellular network, particularly to the "local" internet, which is connected to the network gateway. Such a gateway represents the interface between the switching network of the cellular network and the internet or data network (Packet Data Network). The established connection is referred to as a "cellular data connection" because it is established via the cellular network.

[0013] The method according to the invention further provides for the establishment of a first secure data connection between the mobile radio gateway and the server, wherein data can be transmitted transparently between the internet and the server via the mobile radio data connection and the first secure data connection. The secure data connection is, for example, a VPN tunnel (VPN = "Virtual Private Network") or other tunnel. A secure data connection is thus provided between the server and the mobile radio gateway (more precisely: the radio module of the mobile radio gateway), which enables the secure transmission of data. The data is transmitted transparently in the sense that the payload of the transmitted data packets is passed through and not altered.

[0014] Furthermore, a second secure data connection is established between the telecommunications terminal and the server. As will be explained below, the second secure data connection can be established before or after the first secure data connection in different embodiments of the present invention.

[0015] The first secure data connection and the second secure data connection are implemented via a packet-switched network such as the Internet.

[0016] Finally, the first secure data connection and the second secure data connection are connected or assigned to each other by the server, so that a data connection of the telecommunications terminal to the Internet is provided via the second secure data connection, the first secure data connection and the mobile data connection.

[0017] The method according to the invention is based on the idea of ​​providing two interconnected secure data connections between the telecommunications terminal and the mobile radio gateway with the server interposed, which provide the telecommunications terminal with secure data access to the mobile radio network, wherein the telecommunications terminal can dial into the remote mobile radio network directly via the coupled, secure data connections via the mobile radio gateway using the SIM card assigned to it. If, for example, the telecommunications terminal is located in country A and the mobile radio gateway and the mobile radio network are located in country B, a data connection is provided from the telecommunications terminal in country A to the mobile radio gateway in country B, and the telecommunications terminal logs into the mobile radio network in country B via the mobile radio gateway using the SIM card.

[0018] The method according to the invention provides direct access to the mobile network, even if the telecommunications terminal is located in a different region or country than the country in which the mobile network is implemented. The telecommunications terminal has direct data access to the mobile network via the interconnected, secure data connections.

[0019] If the mobile network is the home mobile network of the SIM card in question, the telecommunications terminal can use all services of the home mobile network without national restrictions regarding the available services. For the home mobile network, a direct login to the home mobile network takes place. Aspects of the invention thus avoid restrictions on the services available from abroad.

[0020] If the mobile network is a different mobile network than the home mobile network of the SIM card in question, aspects of the inventive solution effectively facilitate the implementation of test scenarios. In this case, the radio module of the mobile gateway logs into the mobile network via roaming. SIM cards can be assigned to the mobile gateway for test scenarios in order to test the usability of individual services in the case of such roaming. For example, a German mobile provider can check which services its own customers can use when they log into a US mobile network in the USA, without requiring a presence in the USA.For example, it can be tested whether the owner of a SIM card from a German mobile network can continue to access email messages (probably yes) or access their bank account (probably no) after roaming into a US mobile network. Of course, any two different countries and national mobile networks can be involved.

[0021] In addition to the availability of services in the other country, quality parameters such as bandwidth and different tariffs of mobile connections established via roaming in the other country with a local mobile network can also be tested. Such test scenarios can be carried out automatically using different SIM cards from different providers in different foreign networks.

[0022] The telecommunications device can be, for example, a mobile phone, a PC (personal computer), or a tablet computer. In principle, any telecommunications device can be used.

[0023] It should be noted that the "data connections" considered according to the present invention are implemented on layers 1 to 4 or 1 to 5 of the OSI reference model (OSI = "Open Systems Interconnection") according to document ITU-T X.200 (07 / 1994), and therefore do not necessarily relate to specific applications or services. The data connections considered according to the present invention provide the connectivity on the basis of which the telecommunications terminal can then implement applications and services. For example, the inventive solution allows different operating systems (e.g., Android, iOS, Windows, Linux, etc.) and applications (e.g., streaming services, Twitter, Facebook, etc.) to communicate directly with the target mobile network via the data connections, thus enabling them to use and test operating systems / applications as if they were directly connected to the mobile network.

[0024] Regarding the terminology used, please note the following.

[0025] A mobile radio gateway provides an interface between one or more telecommunications mobile networks and any other network, such as a fixed telecommunications network or an IP network. A mobile radio gateway is called by a user of another network or receives data messages from that network and forwards the desired connection / data packets via a mobile radio channel to the mobile radio network in which the recipient is located. To do this, the mobile radio gateway implements the functionality of a mobile phone and, in a sense, establishes a connection to the recipient as a mobile phone. Mobile radio gateways therefore have the same mobile radio modules as those used in mobile radio terminals (cell phones). Such mobile radio gateways are known, for example, from DE 103 14 144 A1. A mobile radio gateway is designed to contain a plurality of SIM cards for the managed mobile radio channels.Any SIM cards from different network operators can be used.

[0026] The invention further provides, as a variant, that the SIM card is provided to the mobile communications gateway by the server. In this case, in addition to its functionality as a data router between the two secure data connections, the server is a SIM server that manages a plurality of SIM cards. The essential role that the server plays in the inventive method by participating in secure data connections to both the mobile communications gateway and the telecommunications terminal and connecting them with each other is further enhanced in that the server also manages the SIM cards, and one of the SIM cards managed by the server is assigned to the telecommunications terminal and provided to the mobile communications gateway.

[0027] A SIM server is a server that manages and provides SIM cards for mobile communications. Depending on requirements and needs, a SIM card is requested from the SIM server by a mobile communications gateway, which then provides it to the mobile communications gateway. The SIM cards can be available electronically as an eSIM and managed via cloud-based management. The provisioning of a SIM card at the mobile communications gateway does not take place physically, neither if the SIM card is a physical SIM card nor if the SIM card is an eSIM. Only the SIM information data that identifies a SIM card and reflects its functionality is transferred to the mobile communications gateway. The SIM card is therefore, in a sense, virtually located on the SIM server oris managed by the gateway, and its functionality is emulated on the mobile gateway as needed based on specific information and data transmitted by the SIM server. This enables the use of a central SIM card pool for one or more mobile gateways. Such SIM servers are described, for example, in DE 103 11 980 A1.

[0028] In another variant, the invention provides that the SIM card is provided to the mobile radio gateway by a separate SIM server, which is different from the server that establishes the first secure data connection to the mobile radio gateway and the second secure data connection to the telecommunications terminal. In such a case, however, the SIM server and the server communicate with each other. In particular, it can be provided that the server issues the command to the SIM server or forwards it to the SIM server to provide the mobile radio gateway with a specific SIM card. In general, it can be provided that the command or trigger that the SIM server provides the mobile radio gateway with a specific SIM card is provided by manual information, for example triggered by a user, or by automatic information, for example time-controlled information.The SIM server can receive a corresponding command from the server, directly from a user, or in another way.

[0029] Furthermore, it can be provided that the SIM server informs the server of this provision after the SIM card has been made available to the mobile gateway, so that the server is aware that a specific SIM card has been made available to the mobile gateway (namely the SIM card that has been assigned to the telecommunications terminal).

[0030] A further embodiment provides that the SIM card is assigned to the telecommunications terminal by the SIM server.

[0031] A further embodiment of the invention provides that the second secure data connection between the telecommunications terminal and the server is established before the first secure data connection between the mobile radio gateway and the server, whereby the establishment of the second secure data connection triggers the provision of the SIM card at the mobile radio gateway. According to this embodiment, a secure data connection – the second secure data connection – is first established between the telecommunications terminal and the server. Within the framework of this data connection, a SIM card is assigned to the telecommunications terminal. At the same time, the establishment of this second secure data connection automatically triggers the provision of the SIM card at the mobile radio gateway (directly by the server or an assigned SIM server).If, according to the method according to the invention, the first secure data connection between the mobile radio gateway and the server is established at a later point in time, the server only has to connect this first secure data connection with the previously established second secure data connection between the telecommunications terminal and the server.

[0032] Alternatively, it is provided that the first secure data connection between the mobile communications gateway and the server is established before the second secure data connection between the telecommunications terminal and the server. In such a case, it can be provided that a separate connection is established between the server and the telecommunications terminal to assign the SIM card to the telecommunications terminal, which is then abandoned again and does not need to be a secure connection. In such a case, it can be provided that the telecommunications terminal sends a command to the server that triggers the provision of the SIM card at the mobile communications gateway, again without such a command necessarily being transmitted to the server via a secure connection. Alternatively, it can be provided that the telecommunications terminal sends a command to provide the SIM card at the mobile communications gateway directly to the mobile communications gateway.

[0033] One embodiment of the invention provides that the server connects the first secure data connection and the second secure data connection by assigning the two connections to each other so that data from one connection can be forwarded to the other connection and vice versa. Such an assignment can be made, for example, via IP addresses of the two secure data connections. For example, the second secure data connection, which is designed as a VPN tunnel, for example, is assigned its own IP address that identifies the VPN tunnel. Similarly, the first secure data connection, which is also designed as a VPN tunnel, for example, is assigned its own IP address that identifies this VPN tunnel.The server, as a participant in both secure data connections, knows both IP addresses and that both secure data connections are assigned to the same SIM card. It can assign them to each other and forward incoming and outgoing data packets to the other secure data connection, whereby the server performs IP routing.

[0034] One embodiment of the invention provides that the telecommunications terminal, after providing a data connection of the telecommunications terminal to the Internet, implements an application or service and, for this purpose, establishes a telecommunications connection (TK connection) to an Internet server and / or to another telecommunications terminal. Such a TK connection serves to implement the application or service, whereby the previously provided connectivity or data connections are used to establish the TK connection and to transmit user data via the TK connection. For example, an SMS / MMS message is transmitted to and / or received from an Internet server and / or another telecommunications terminal via the TK connection. A corresponding service can be provided on the user side or on the server side (for example, via a web server).

[0035] As a further additional option, a voice call can be provided between the internet and the telecommunications terminal, for example via VoIP. The server serves as a switching system to transfer messages and calls between the mobile gateway and the telecommunications terminal.

[0036] As already explained, the mobile network can be a mobile network in a different geographical region than the region in which the SIM card's home mobile network is located. In particular, the mobile network can be a mobile network in a different country than the country in which the SIM card's home mobile network is located. In this case, the registration of a radio module of the mobile gateway in the mobile network occurs through roaming using the provided SIM card.

[0037] Alternatively, it can be provided that the mobile network is the home mobile network of the SIM card, i.e. the mobile network to which the SIM card is assigned.

[0038] Further configurations provide for the first secure data connection and / or the second secure data connection to be additionally encrypted. The use of encryption methods guarantees a secure and tamper-evident data path all the way to the remote mobile network.

[0039] Furthermore, implementation variants can be provided in which algorithms determine the logical connection between a telecommunications terminal and the SIM card used and / or the provision of the SIM card at the mobile gateway. In particular, the use of the SIM card can be controlled in a time-based manner in the mobile gateway, with the control of SIM card use being achieved by parameters such as network quality, data throughput, prepaid credit, number of SMS, MMS, calls, call minutes, data volume used, etc. Such automatic control can be used, for example, to implement test scenarios.

[0040] In a further aspect of the invention, the present invention relates to a server system comprising: Means provided and designed to assign a SIM card to a telecommunications terminal; means provided and designed to provide the SIM card assigned to the telecommunications terminal to a mobile radio gateway; means provided and designed to cause the mobile radio gateway to log into the mobile radio network using the received SIM card and to establish a mobile radio data connection to the Internet via the mobile radio network; means provided and designed to establish a first secure data connection between the server and a mobile radio gateway, wherein data can be transparently transmitted between the mobile radio network and the server via the mobile radio data connection and the first secure data connection; means provided and designed to establish a second secure data connection between the server and the telecommunications terminal.and means provided and configured to connect the first secure data connection and the second secure data connection to provide a data connection of the telecommunications terminal to the Internet via the second secure data connection, the first secure data connection, and the mobile radio data connection.

[0041] The means mentioned comprise, for example, a processor for executing instructions and a memory coupled to the processor in which instructions are stored which, when executed by the processor, cause the processor to perform the steps mentioned. In other words, the means are implemented by software in combination with a processor that executes the software. The means mentioned can each be implemented by a separate processor with associated software, or the means mentioned can be provided jointly by one or more processors.

[0042] In one variant of the invention, the server system is divided into at least two different physical or virtual servers. In particular, the server system is divided such that it has a separate SIM server, with the means intended and configured to provide the SIM card assigned to the telecommunications terminal to a mobile communications gateway being provided by the SIM server. The other means are implemented, for example, in another server.

[0043] The SIM server makes the SIM card available to the mobile gateway, thus initiating the registration of the mobile gateway. The command or trigger for the SIM server to make the SIM card available to the mobile gateway can be provided in a variety of ways, for example, through manual notification (e.g., triggered by a user) or through automatic notification (e.g., time-controlled).

[0044] In one embodiment, the means intended and designed to cause the mobile radio gateway to log into the mobile radio network using the received SIM card and to establish a mobile radio data connection to the Internet via the mobile radio network are also integrated into the said SIM server.

[0045] However, it should be noted that dividing the server system into at least two different physical or virtual servers is not necessarily the case. In a second variant of the invention, all resources of the server system are implemented in one server. In this case, it is provided that such a server further comprises resources designed and configured to manage a plurality of SIM cards, whereby, as already mentioned, the term "SIM card" encompasses physical SIM cards and / or eSIMs. The server thus additionally has the functionality of a SIM server.

[0046] It is further pointed out that the means intended and designed to cause the mobile radio gateway to register in the mobile radio network using the received SIM card and to establish a mobile radio data connection in the mobile radio network are provided, for example, by means that generate a message that is sent to the mobile radio gateway, wherein the message contains the SIM information data, and wherein the receipt of the message at the mobile radio gateway triggers the registration of the SIM card and the establishment of the mobile radio data connection.

[0047] The invention is explained in more detail below with reference to the figures of the drawing using several exemplary embodiments. They show: Figure 1 shows an embodiment of a telecommunications arrangement which is suitable and designed for carrying out a method for providing a data connection to the Internet on a telecommunications terminal; Figure 2 shows a telecommunications arrangement according to Figure 1 a representation of the data connections between the telecommunications terminal and the Internet, wherein the data connections comprise secure data connections between the telecommunications terminal and a server and between the server and a mobile radio gateway; Figure 3 shows a flowchart illustrating the signaling sequence between the telecommunications terminal, server, mobile radio gateway and mobile radio network for establishing a data connection to the Internet according to an embodiment of the method according to the invention; Figure 4 shows the continuation of the flowchart of Figure 3; Figure 5 shows a further flow diagram showing the signaling process between the telecommunications terminal, server, mobile radio gateway and mobile radio network for establishing a data connection to the Internet according to an embodiment of the method according to the invention; Figure 6 shows the continuation of the flow diagram of Figure 5 ; Figure 7 shows a flowchart illustrating the signaling sequence between the telecommunications terminal, server, mobile radio gateway, and mobile radio network for sending an SMS / MMS message to a regional subscriber or service provider; Figure 8 shows a flowchart illustrating the signaling sequence between the telecommunications terminal, server, mobile radio gateway, and mobile radio network for receiving an SMS / MMS message from a regional subscriber or service provider; and Figure 9 shows a flowchart illustrating steps of a method for providing a data connection to the Internet at a telecommunications terminal.

[0048] The Figure 1shows a telecommunications arrangement comprising networks and telecommunications components with which a method according to the invention for establishing a data connection to the Internet can be implemented.

[0049] The telecommunications arrangement comprises as essential components a telecommunications terminal 1, a server 2, a mobile radio gateway 3, a SIM card 4, mobile radio networks 51, 52 and the Internet 7.

[0050] The telecommunications terminal 1 can be a mobile radio terminal or a non-mobile terminal, for example, a PC or a tablet computer. The telecommunications terminal 1 can communicate with the server 2 via a packet-switched network, for example, the Internet 70 or an intranet. Likewise, the server 2 can communicate with the mobile radio gateway 3 via the packet-switched network.

[0051] The server 2 serves to provide a secure data connection between the telecommunications terminal 1 and the mobile gateway 3, as will be explained below. In this case, the server 2 can additionally have the functionality of a SIM server and manage a pool of SIM cards 4. The SIM cards 4 can be physically located in the server 2 or be present as eSIMs in the server. Alternatively, as the Figure 1 As shown, a separate SIM server 20 is provided, which is designed, for example, as a cloud-based SIM management system, wherein the server 2 communicates with the SIM server 20 and, for example, sends commands to the SIM server to provide specific SIM cards 4 to the mobile radio gateway 3. The server 2 and the SIM server 20 form a server system within the meaning of the present invention.

[0052] In the following, it is assumed that a SIM server 20 is assigned to the server 2, whereby the SIM server 20 carries out the actual management of the SIM cards, although, as explained, this functionality can alternatively be integrated into the server 2.

[0053] The server 2 can, for example, upon a corresponding command from the server 2 or the telecommunications terminal 1, logically assign a specific SIM card to the telecommunications terminal 1. Furthermore, the server 2 can, for example, upon a command from the telecommunications terminal 1 or automatically on its own initiative, cause the SIM server 20 to provide the SIM card 4 logically assigned to the telecommunications terminal 1 to the mobile communications gateway 3. The provision of such a SIM card 9 does not occur physically, but rather merely the SIM information data, which identify a SIM card and reflect its functionality, is transmitted to the mobile communications gateway 4 via the network 70.

[0054] The mobile radio gateway 3 has a plurality of radio modules for mobile radio communication (not shown separately). A plurality of SIM cards 4 are assigned to the mobile radio gateway 3, each of which enables the use of a radio module for mobile radio communication. A radio module transmits data to a mobile radio channel and receives data via the mobile radio channel. One or more SIM cards can be assigned to each radio module, with only one SIM card being active at a time.

[0055] The mobile radio gateway 3 is located in the reception area of ​​a mobile radio network, whereby in the exemplary embodiment the Figure 1two mobile radio gateways 3, each located in a different mobile radio network 51, 52. The different mobile radio networks 51, 52 are located in different regions A, B, which are, for example, different countries. Each mobile radio network 51, 52 typically has a plurality of mobile radio transmission stations 6, as shown in the Figure 1 shown schematically. Furthermore, each mobile radio network 51, 52 has a transition to the local Internet 7, ie, the mobile radio network 51, 52 has, in a conventional manner, dial-in points or local transitions or gateways to the Internet 7 (not shown in detail).

[0056] The telecommunications order of the Figure 1The initial situation is that the telecommunications terminal 1 is located in a different country or region than the country or region in which the mobile radio network 51, 52 (hereinafter generally referred to as the mobile radio network 5) is implemented. A connection between the telecommunications terminal 1 and the server 2 is provided as a secure data connection in the form of a VPN tunnel via the network 70. Likewise, a secure data connection in the form of a VPN tunnel is provided via the network 70 between the server 2 and the respective mobile radio gateway 3. The mobile radio network 5, in whose reception area the mobile radio gateway 3 is located, can be the home mobile radio network of the respective SIM card 4, via which a connection to the mobile radio network 5 is established. However, this does not necessarily have to be the case.Alternatively, the mobile network 5, in whose reception area the mobile gateway 3 is located, can be a mobile network to which the SIM card 4 is not assigned, in which case a connection to the mobile network is made by the mobile gateway 3 or a radio module of the mobile gateway 3 via roaming.

[0057] The Figure 2shows a schematic of the established data connections. A secure data connection 81 in the form of a VPN tunnel is established between the telecommunications terminal 1 and the server 2, which is referred to as the second secure data connection. A further secure data connection 82 in the form of a VPN tunnel is established between the server 2 and the mobile radio gateway 3, which is referred to as the first secure data connection. A mobile radio data connection 83 to the mobile radio network 5 exists between the mobile radio gateway 3 and its radio module registered in the mobile radio network 5. This data connection 83 can be extended by a gateway to the Internet 7. Typical scenarios are the following:

[0058] Scenario 1: The PBX 1 is located in Germany, for example, in Germany. The mobile network 5 and the mobile gateway 3 are located abroad, for example, in the USA. The mobile network 5 is not the home mobile network of the SIM card 4, which is used to dial into the mobile network 5.

[0059] Scenario 2: The PBX 1 is located abroad, for example, in France. The mobile network 5 and the mobile gateway 3 are located in the country, for example, in Germany. The mobile network 5 is the home mobile network of the SIM card 4, which is used to dial into the mobile network 5.

[0060] The telecommunications order pursuant to the Figure 1 The procedure carried out is based on the Figure 9explained by way of example. According to step 901, a SIM card 4 is assigned to the telecommunications terminal, and this assignment is recorded on the server 2. In this case, only a logical assignment of the SIM card 4 to the telecommunications terminal 1 takes place, without the SIM card 4 or SIM information data being transmitted to the telecommunications terminal 1. Accordingly, it is also irrelevant for the present method whether the telecommunications terminal 1 is a mobile radio terminal or another telecommunications terminal. The logical assignment can take place automatically or by manual command. For example, it is provided that the SIM card 4 is assigned to the telecommunications terminal 1 by the server 2, which communicates with the SIM server 20 for this purpose.

[0061] According to step 902, the SIM card 4 is provided to the mobile network gateway 3. For this purpose, the SIM information data is transmitted from the SIM server 20 (or alternatively from the server 2) to the mobile network gateway 3. In step 903, a radio module of the mobile network gateway 3 registers with the mobile network 5 using the provided SIM card 4. As already mentioned, the mobile network 5 can be the home mobile network of the SIM card 4, in which case a direct registration occurs, or it can be another mobile network, in which case a registration occurs via roaming.

[0062] In step 904, a mobile data connection is established via the registered radio module to the Internet via the mobile network 5. Subsequently, in step 905, the first secure data connection 82 is established via a VPN tunnel between the mobile gateway 3 and the server 2. A second secure data connection 83 is established via a VPN tunnel between the telecommunications terminal 1 and the server 2 according to step 106. This secure data connection 83 may have already been established previously or is established after the secure data connection 82.

[0063] According to step 907, the first secure data connection 82 is connected to the second secure data connection 81 by the server 2. This provides a data connection of the telecommunications terminal 1 to the Internet via the second secure data connection 81, the first secure data connection 82 and the mobile data connection 83, see also Figure 2. The server 2 ensures that the two secure data connections 81, 82 are assigned to each other and that data is forwarded to the other data connection, so that the two secure data connections 81, 82 together realize a VPN tunnel from the telecommunications terminal 1 to the mobile radio gateway 3.

[0064] According to Scenario 1 above, the provided method allows the implementation of various test scenarios, whereby it can be tested which services with which quality characteristics are available to a user who dials into a mobile network in the USA while roaming using their SIM card assigned to a German mobile network. These test scenarios can be implemented without requiring a local dial-in with a telecommunications terminal in the USA. The two secure data connections 81, 82 form a data access via data transmission over the Internet (and not via mobile or telecommunications networks) to the mobile gateway 3 in the other country.

[0065] According to Scenario 2 above, the provided method allows the use of all services available in the home network, even if the telecommunications terminal 1 is located abroad. The telecommunications terminal 1 located abroad can dial into the mobile gateway 3 of the home mobile network via the data access formed by the two secure data connections 81, 82, so that there are no restrictions regarding the available services.

[0066] In the following, the Figures 3 to 8 Using several exemplary embodiments, the commands and signaling between the individual components of the telecommunications arrangement are explained, which enable access to the Internet and the use of various services.

[0067] The Figures 3 and 4 show the signaling process between telecommunications terminal 1, server 2, mobile gateway 3 and mobile network 5 according to a first embodiment.

[0068] According to step 301, a SIM card is assigned to the telecommunications terminal 1 at some point in time. The assignment can be performed by the user of the telecommunications terminal 1, an administrator, or the server 2. The assignment can be performed by manual command or automatically. A data connection between the telecommunications terminal 1 and the server 2 required for step 301 can subsequently be terminated. In any case, the server 2 must be informed of the assignment unless it performs it itself.

[0069] According to step 302, a command to register the SIM card in the mobile gateway is sent from the TK terminal 1 to the server 2. The command can be generated manually or automatically. The SIM card is then assigned by the server 2 to the mobile gateway 3 according to step 303 (either directly or via the SIM server 20 according to the Figure 1). Command 302 can also be sent to server 2 without maintaining a data connection.

[0070] According to step 304, the SIM card is registered in the mobile network 5 using a radio module of the mobile gateway 3. A data connection is then established in the mobile network 5 according to step 305. This is done via a local IP address of the mobile gateway 3 and a local access of the mobile gateway 3 to the mobile network 5. As soon as this has been done, a secure data connection (the data connection 82 of the Figure 2) is established according to step 306 between the mobile radio gateway 3 and the server 2. A first IP tunnel address is assigned to the secure data connection. The data of this data channel is then exchanged transparently between server 2 and the mobile radio network 5, with the mobile radio gateway routing the data between the secure data connection to server 2 and the mobile radio data connection to the mobile radio network 5. For this purpose, the data or data packets are assigned via the local IP address on the one hand and the first IP tunnel address on the other.

[0071] According to step 307, the data is thus passed transparently between the server 2 and the mobile network 5.

[0072] The Figure 4 shows the continuation of the signaling of the Figure 3. If, according to step 308, a second secure data connection is established by the user or the TK terminal 1 (or alternatively by the server 2) between the TK terminal 1 and the server 2 (the data connection 81 of the Figure 2 ), the server 2 connects this secure data connection of the user or the telecommunications terminal 1 (which is assigned a second IP tunnel address) with the secure data connection to the telecommunications terminal 3 or the SIM card 4. To do this, the server 2 routes the data between the first secure data connection and the second secure data connection, whereby the data or data packets are assigned via the first IP tunnel address on the one hand and the second IP tunnel address on the other. Thus, according to step 309, a transparent data tunnel is created between the telecommunications terminal 1 and the mobile network 5 of the region in question.

[0073] The server 2 can assign the secure data connection with the mobile radio gateway 3, which is based on the mobile radio communication of the registered SIM card 4, to the secure data connection with the telecommunications terminal 1, since it is informed about the assignment of the SIM card 4 to the telecommunications terminal 1.

[0074] According to step 310, the data tunnel can provide access to the underlying data network, generally the regional Internet. For the mobile network 5 and the underlying data network 7, the telecommunications terminal 1 behaves as if it were located locally in the region covered by the mobile network 5.

[0075] Please note that the data connections considered are connections at Layers 1 to 4, and possibly also Layer 5, of the OSI reference model, which serve to provide connectivity. This connectivity is a prerequisite for the implementation of applications and services located at Layer 7 of the OSI reference model.

[0076] The Figures 5 and 6 show the signaling process between telecommunications terminal 1, server 2, mobile gateway 3 and mobile network 5 according to a second embodiment.

[0077] As with the first design variant, a SIM card is assigned to the telecommunications terminal 1 at some point in time according to step 501. The assignment can be performed by the user of the telecommunications terminal 1, an administrator, or the server 2. The assignment can be performed by manual command or automatically. A data connection between the telecommunications terminal 1 and the server 2 required for step 301 can subsequently be terminated. In any case, the server 2 must be informed of the assignment unless it performs it itself.

[0078] If, according to step 502, the user or the telecommunications terminal 1 establishes a secure data connection (for example, a VPN connection) to the server 2, then the SIM card assigned to the telecommunications terminal 1 or the SIM information data is provided to the mobile radio gateway 3 (by the server 2 or a SIM server 20) according to step 503, and the mobile radio gateway 3 is logged into the mobile radio network 5 using the assigned SIM card according to step 504. In this embodiment, a secure data connection is thus first established between the telecommunications terminal and the server 2 (the data connection 81 of the Figure 2 ). This secure data connection is assigned a (second) IP tunnel address.

[0079] The further procedure is carried out according to the Figures 3 and 4. As soon as the SIM card has been successfully registered and a data connection has been established through the mobile network 5 according to step 505 (via a local IP address of the mobile gateway 3 and a local access of the mobile gateway 3 to the mobile network 5), a further secure data connection, for example a VPN connection, is established between the mobile gateway and the server 2 according to step 506. A (first) IP tunnel address is assigned to this secure data connection. The data of this data channel is then exchanged transparently between server 2 and the mobile network 5 according to step 507, with the data being routed in the mobile gateway between the secure data connection to server 2 and the mobile data connection to the mobile network 5, with the data or data packets being assigned via the local IP address on the one hand and the first IP tunnel address on the other.

[0080] It is further provided that server 2 connects the secure data connection between server 2 and mobile radio gateway 3 with the secure data connection established in step 502 between telecommunications terminal 1 and server 2. To this end, server 2 routes the data between the two secure data connections, whereby the data or data packets are assigned via the first IP tunnel address on the one hand and the second IP tunnel address on the other. Thus, according to step 508, a transparent data tunnel is created between telecommunications terminal 1 and the mobile radio network 5 of the region in question. According to step 509, this data tunnel can provide access to the data network connected behind it, generally the regional Internet 7. For the mobile radio network 5 and the data network connected behind it, the telecommunications terminal 1 behaves as if it were located locally in the region covered by the mobile radio network 5.

[0081] After providing a data connection of the telecommunications terminal 1 to the Internet 7 according to the procedure of Figures 3 and 4 or the procedure of Figures 5 and 6 a connectivity of the telecommunications terminal 1 to the Internet 7 is provided, on the basis of which telecommunications connections (TK connections) can be established between the telecommunications terminal 1 and a communication partner, for example an Internet server or another telecommunications terminal, in order to implement an application or a service on level 7 of the OSI reference model.

[0082] The Figures 7 and 8 show the implementation of a service by which an SMS / MMS message is sent or received from the telecommunications terminal 1. According to the Figure 7Based on the situation that a SIM card is assigned to the telecommunications terminal 1, it is provided that the user or the telecommunications terminal sends an SMS / MMS message to a regional subscriber or service provider. The telecommunications terminal 1 sends the SMS / MMS message to the server 2, entering a recipient according to step 701. If the telecommunications terminal 1 is not a mobile radio terminal, the SMS / MMS message is made available, for example, via a user interface on the server 2 (for example an HTML interface) or via another interface. The server 2 forwards the message according to step 702 to the mobile radio gateway 3. This sends the SMS / MMS message according to step 703 via the mobile radio network 5. This sends the message according to step 704 via the Internet to a service or subscriber 9. Overall, a transmission path 705 from the telecommunications terminal to the service / subscriber 9 is thus provided.

[0083] According to the Figure 8 A user or their telecommunications terminal 1 receives an SMS / MMS message from a regional subscriber or service provider 9, for example, during two-way authorization in conjunction with a data application. The message is sent from the service / subscriber 9 via the Internet to the mobile network 5 and received by the mobile gateway 3 (steps 801, 802). In step 803, the mobile gateway 3 forwards the received SMS / MMS message to the server 2. The server 2 forwards the received SMS / MMS message to the telecommunications terminal 1 according to step 804. Overall, a transmission path 805 is thus provided from the service / subscriber 9 to the telecommunications terminal 1.

[0084] It should be understood that the invention is not limited to the embodiments described above, and various modifications and improvements may be made within the scope of the appended claims without departing from the concepts described herein. It should also be understood that any of the described features may be used separately or in combination with any other features, provided they are not mutually exclusive. The disclosure extends to and includes all combinations and subcombinations of one or more features described herein. Where ranges are defined, these include all values ​​within these ranges, as well as all subranges that fall within a range.

Claims

1. Method for providing a data connection to the Internet on a telecommunication terminal, TC terminal, by using a mobile radio network (5, 51, 52), the method comprising: - associating a SIM card (4) with the TC terminal (1) and recording this association on a server (2); - delivering the SIM card (4) to a mobile radio gateway (3); - registering a radio module of the mobile radio gateway (3) in the mobile radio network (5, 51, 52) by using the delivered SIM card (4); - setting up a mobile radio data connection (83) by way of the registered radio module of the mobile radio gateway (3) via the mobile radio network (5, 51, 52) to the Internet (7); - setting up a first secure data connection (82) between the mobile radio gateway (3) and the server (2), data being transparently transmissible between the Internet (7) and the server (2) via the mobile radio data connection (83) and the first secure data connection (82); - setting up a second secure data connection (81) between the TC terminal (1) and the server (2); and - connecting the first secure data connection (82) and the second secure data connection (81) by way of the server (2) to provide a data connection from the TC terminal (1) to the Internet via the second secure data connection (81), the first secure data connection (82) and the mobile radio data connection (83), - the SIM card (4) being delivered to the mobile radio gateway (3) by way of the server (2), the server (2) being a SIM server, or the SIM card (4) being delivered to the mobile radio gateway (3) by way of a separate SIM server (20) that communicates with the server (2).

2. Method according to Claim 1, characterized in that the second secure data connection (81) between the TC terminal (1) and the server (2) is set up before the first secure data connection (82) between the mobile radio gateway (3) and the server (2), the setup of the second secure data connection (81) triggering the delivery of the SIM card (4) to the mobile radio gateway (3) .

3. Method according to Claim 1, characterized in that the first secure data connection (82) between the mobile radio gateway (3) and the server (2) is set up before the second secure data connection (81) between the TC terminal (1) and the server (2).

4. Method according to one of the preceding claims, characterized in that the server (2) connects the first secure data connection (82) and the second secure data connection (81) by associating the two connections (81, 82) with one another, with the result that data of one connection can be forwarded to the other connection, and vice versa.

5. Method according to Claim 4, characterized in that the server (2) associates the two connections (81, 82) with one another by associating IP addresses that are respectively associated with the first secure data connection (82) and the second secure data connection (81) with one another.

6. Method according to one of the preceding claims, characterized in that each of the first secure data connection (82) and the second secure data connection (81) is a VPN connection or another tunnel.

7. Method according to one of the preceding claims, characterized in that, after the provision of a data connection from the TC terminal (1) to the Internet, the TC terminal (1) implements an application or a service and accomplishes this by setting up a telecommunication connection, TC connection, to a server of the Internet (7) and / or to another TC terminal.

8. Method according to Claim 7, characterized in that the TC connection is used to transmit and / or receive an SMS / MMS / voice message to and / or from the server of the Internet (7) and / or the other TC terminal.

9. Method according to one of the preceding claims, characterized in that the mobile radio network (5, 51, 52) is a mobile radio network of a different country from the country in which the home mobile radio network of the SIM card is implemented, a radio module of the mobile radio gateway (3) being registered in the mobile radio network (5, 51, 52) by using the delivered SIM card (4) by way of roaming.

10. Method according to one of Claims 1 to 8, characterized in that the mobile radio network (5, 51, 52) is the home mobile radio network of the SIM card (4).

11. Server system comprising: - means that are intended and designed to associate a SIM card (4) with a TC terminal (1); - a SIM server that is intended and designed to deliver the SIM card (4) associated with the TC terminal (1) to a mobile radio gateway (3); - means that are intended and designed to cause the mobile radio gateway (3) to register in the mobile radio network (5, 51, 52) by using the received SIM card (4) and to set up a mobile radio data connection (83) via the mobile radio network (5, 51, 52) to the Internet (7); - means that are intended and designed to set up a first secure data connection (82) between a server (2) and the mobile radio gateway (3), data being transparently transmissible between the mobile radio network (5, 51, 52) and the server (2) via the mobile radio data connection (83) and the first secure data connection (82); - means that are intended and designed to set up a second secure data connection (81) between the server (2) and the TC terminal (1); - means that are intended and designed to connect the first secure data connection (82) and the second secure data connection (81) to provide a data connection from the TC terminal (1) to the Internet via the second secure data connection (81), the first secure data connection (82) and the mobile radio data connection (83), - either all means of the server system being implemented in the server (2), the server (2) comprising the SIM server, or - the server system being split into at least two different physical or virtual servers, the server system comprising the server (2) and the SIM server (20), and the SIM server (20) communicating with the server (2).

12. Server system according to Claim 11, characterized in that the server (2) is intended and designed to connect the first secure data connection (82) and the second secure data connection (81) by associating the two connections (81, 82) with one another, with the result that data of one connection can be forwarded to the other connection, and vice versa.

13. Server system according to Claim 12, characterized in that the server (2) is intended and designed to associate the two connections (81, 82) with one another by being intended and designed to associate IP addresses that are respectively associated with the first secure data connection (82) and the second secure data connection (81) with one another.