Method for routing bi-directional connections in a telecommunication network by means of a signalling protocol via an interposed firewall with address transformation device and also a telecommunication network and security and tunnel device for this

1. A method for routing a bi-directional end-to-end connection between an end subscriber terminal and the domain of a service provider by means of a signaling protocol via an interposed firewall with address transformation device, wherein a security and tunnel device is located in the end-to-end connection between the end subscriber terminal and the firewall with address transformation device in the domain of the end subscriber, and a session border controller is located in the end-to-end connection in the domain of the service provider, the method comprising:

setting up a tunnel between the security and tunnel device and the session border controller,

performing a bi-directional data exchange via the tunnel between the end subscriber terminal and the domain of the service provider in the area between the security and tunnel device and the session border controller by means of a tunnel protocol, and

storing a correlation between a private address of the end subscriber terminal and an address of the security and tunnel device in the session border controller

the method further comprising at least one of,

encrypting data packets by means of the session border controller before the encrypted data packets are packed into tunnel packets by means of the tunnel protocol and sent via the tunnel to the security and tunnel device, and

encrypting the payload of tunnel packets by means of the session border controller.

2. The method according to claim 1 , further comprising at least one of:

encrypting data packets by means of the security and tunnel device before the encrypted data packets are packed into tunnel packets by means of the tunnel protocol and sent via the tunnel to the session border controller, and

encrypting the payload of tunnel packets by means of the security and tunnel device.

3. The method according to claim 1 , further comprising:

checking information on the session border controller contained in the data sent by the session border controller and received by the security and tunnel device by means of the security and tunnel device.

4. The method according to claim 1 , further comprising:

keeping open, by the security and tunnel device, the connection through the firewall with address transformation device between the security and tunnel device and the session border controller by means of a keep-alive mechanism.

5. A telecommunication network for executing a method for routing a bi-directional end-to-end connection between an end subscriber terminal and the domain of a service provider by means of a signaling protocol via an interposed firewall with address transformation device, comprising:

a security and tunnel device in the end-to-end connection between the end subscriber terminal and the firewall with address transformation device in the domain of the end subscriber; and

a session border controller in the end-to-end connection in the domain of the service provider;

wherein the security and tunnel device is configured to set up a tunnel between the security and tunnel device and the session border controller, and

wherein the security and tunnel device and the session border controller are configured to enable a bi-directional data exchange via the tunnel between the end subscriber and the domain of the service provider in the area between the security and tunnel device and the session border controller by means of a tunnel protocol, and

wherein a correlation between a private address of the end subscriber terminal and an address of the security and tunnel device is stored in the session border controller,

wherein the session border controller is configured to at least one of,

encrypt data packets before the encrypted data packets are packed into tunnel packets by means of the tunnel protocol and sent via the tunnel to the security and tunnel device, and

encrypt the payload of the tunnel packets.

6. The telecommunication network according to claim 5 , wherein the security and tunnel device is configured to at least one of

encrypt data packets before the encrypted data packets are packed into tunnel packets by means of the tunnel protocol and sent via the tunnel to the session border controller, and

encrypt the payload of the tunnel packets.

7. The telecommunication network according to claim 5 , wherein the security and tunnel device is configured to check information on the session border controller contained in the data sent by the session border controller and received by the security and tunnel device.

8. The telecommunication network according to claim 5 , wherein the security and tunnel device is configured to keep open the connection through the firewall with address transformation device between the security and tunnel device and the session border controller by a keep-alive mechanism.

9. A security and tunnel device for a telecommunication network for operating a bi-directional end-to-end connection between an end subscriber terminal and a domain of a service provider by means of a signaling protocol via an interposed firewall with address transformation device, comprising:

means for setting up a tunnel between the security and tunnel device and a session border controller that is located in the end-to-end connection in the domain of the service provider, and for enabling a bi-directional data exchange via the tunnel between the end subscriber terminal and the domain of the service provider in the area between the security and tunnel device and the session border controller through a tunnel protocol, and

means for detecting data packets that are addressed to the session border controller and sending the detected data packets via the tunnel,

means for receiving, from the tunnel, one of,

tunnel packets of data packets encrypted by the session border controller, and

tunnel packets of payload encrypted by the session border controller.

10. The security and tunnel device according to claim 9 , wherein the security and tunnel device further comprises means for keeping open the connection through the firewall between the security and tunnel device and the session border controller by a keep-alive mechanism.

11. The security and tunnel device according to claim 9 , wherein the security and tunnel device further comprises means for at least one of

encrypting data packets before the data packets are packed into tunnel packets by means of the tunnel protocol and sent via the tunnel to the session border controller, and

encrypting the payload of the tunnel packets.

12. The security and tunnel device according to claim 9 , wherein the security and tunnel device further comprises means for checking information on the session border controller contained in the data sent by the session border controller and received by the security and tunnel device.

13. A session border controller for use in a telecommunications network and for operating a bidirectional end-to-end connection between an end subscriber terminal and the domain of a service provider by means of a signaling protocol through an interposed firewall with address transformation device, comprising:

a memory configured to store a correlation between a private address of the end subscriber terminal and an address of a security and tunnel device, which is located in the end-to-end connection between the end subscriber terminal and the firewall with address transformation device in a domain of the end subscriber,

means for one of,

encrypting data packets before packing the encrypted data packets into tunnel packets by means of the signaling protocol and sending the tunnel packets via a tunnel to the domain of the service provider,

encrypting the payload of tunnel packets by means of the session border controller.