Patent ID: 8646065

Claim:
A method for routing a bi-directional end-to-end connection between an end subscriber terminal and the domain of a service provider by means of a signaling protocol via an interposed firewall with address transformation device, wherein a security and tunnel device is located in the end-to-end connection between the end subscriber terminal and the firewall with address transformation device in the domain of the end subscriber, and a session border controller is located in the end-to-end connection in the domain of the service provider, the method comprising: setting up a tunnel between the security and tunnel device and the session border controller, performing a bi-directional data exchange via the tunnel between the end subscriber terminal and the domain of the service provider in the area between the security and tunnel device and the session border controller by means of a tunnel protocol, and storing a correlation between a private address of the end subscriber terminal and an address of the security and tunnel device in the session border controller the method further comprising at least one of, encrypting data packets by means of the session border controller before the encrypted data packets are packed into tunnel packets by means of the tunnel protocol and sent via the tunnel to the security and tunnel device, and encrypting the payload of tunnel packets by means of the session border controller.