EP1479212A1

EP1479212A1 - Device and method for intermediation between service providers and their users

Info

Publication number: EP1479212A1
Application number: EP03717410A
Authority: EP
Inventors: Murielle Rose
Original assignee: Gemplus Card International SA; Gemplus SA
Current assignee: Thales DIS France SA
Priority date: 2002-02-18
Filing date: 2003-02-18
Publication date: 2004-11-24
Also published as: US7643497B2; AU2003222577A1; WO2003071760A1; BR0307778A; US20050141525A1; MXPA04008028A

Abstract

The invention concerns a device for intermediation (12) designed to connect at least a service provider (FS) and at least one user (U) using at least one off-Internet channel (VHI). It comprises: means for intelligent connection management (26) to identify an incoming protocol and to select an outgoing protocol and a communication channel with reference to databases (20, 22); and means for protocol conversion (24) controlled by the management means (26) to connect a service provider (FS) using a channel in accordance with a first communication protocol and a user (U) using an off-Internet channel in accordance with a second communication protocol. The off-Internet channel (VHI) is advantageously a wireless communication channel.

Description

INTERMEDIATION DEVICE AND METHOD BETWEEN SERVICE PROVIDERS AND THEIR USERS

The present invention relates to the communication of data between at least one service provider and their users via a route of which at least part is located outside the Internet. This route can be located for example in a so-called wireless communication network, such as a cellular mobile telephone network. The service provider generally includes any entity which makes a service available at a distance in the broad sense of the term: communication, information, registration, access control, discussion forums, sale of services or material goods, etc. In this context, the invention provides an intermediation platform allowing a service provider to reach a user of the service - and vice versa - under all conditions and with the distribution of quality service.

Today, a service provider has digital data, software and other files on its own server, which represent its service. In general, it does not have its own communication infrastructure, this aspect being provided by external communication networks. Among these, the Internet is an end-to-end means of communication allowing customers to access services using a computer. However, the Internet has many drawbacks: neither the service user nor the service provider can be identified, and the network is difficult to secure.

FIG. 1 illustrates the current communication environment between the service providers FS and the different types of user terminals TU, represented by a mobile telephone terminal 2, and a PC type computer 4.

Generally, the exchanges between the providers FS and these user terminals TU currently pass through the Internet network 6 (channel VI). On the side of the user terminals TU, the connection to the Internet network 6 can be carried out via different intermediate subnets, called gateways, which provide the relay (arrow FI) with the Internet network 6 to connect the service providers FS. The figure illustrates an example in the form of a WAP gateway 8 (from the English "wireless application protocol") used by the different mobile operators 10 (designated by the generic acronym of MNO (from the English " mobile network operator ").

Another common link is a so-called "all Internet" connection between the service provider FS (arrow F2) and the computer PC 4 of user U.

It appears that on the user side, there are many different possible terminals, each operating on the basis of a particular independent operator (for example among the different MNOs accessible in a geographic region) allowing access in different ways to the different services offered by FS providers located on the other side of the Internet 6.

The MNO 10 networks constitute gateways managed by different independent operators, and have given rise to a "wireless data ecosystem" which has the potential to meet the requirements of service providers, but at the cost of establishing agreements with several MNO, and to decline each service in different forms adapted to the specific protocol of each MNO. ^' These gateways constitute VHI non-Internet channels passing through multiple possible MNOs and other gateway operators outside the Internet. In fact, the non-Internet VHI channel can integrate not only MNOs, but more generally all means of communication outside the Internet network.

Agreements exist between service providers and MNOs allowing a user to receive good service through a reliable means of communication. However, these solutions have many limitations. The service provider is dependent on the wireless communication network of an external operator. Its service must adapt to the requirements of this means of communication, in particular for the functions which interest it such as:

-the scope of the service, generally limited to a region, a country,

-the user identification means, -the protection of exchanged data, -the payment solution ...

MNOs 10 can only offer services to their subscribers for which they have agreements with the relevant FS service providers. On the other hand, a subscriber who changes country no longer has access to the same services since he no longer depends on the same MNO. An MNO which has a dual function of telephone operator and service provider, other than telephone, can only offer its own services to its subscribers.

Faced with these drawbacks and limitations, service providers tend to develop their own communication infrastructure, sometimes based on new technologies, which compete with those of existing communication operators. However, this specific infrastructure generally has the same weaknesses. In addition, the user of a service today wishes to have a wide choice of services, to receive them with quality whatever their geographic location, without being limited to a communications operator and a service provider. Often, it has several communication devices based on different technologies, for example: a mobile phone terminal, a personal digital assistant, a PC, an interactive television terminal (known by the English term "ITV set-top box", .... His wish is to be able to receive the service of his choice anytime, anywhere, with the best possible quality, on the most efficient device in his given situation.

The invention therefore aims to meet the expectations of the user.

It also aims to meet the expectations of operators outside the Internet (designated by the generic abbreviation of OHI) existing, including - but not limited to - MNOs, by allowing them to make the best use of their infrastructure for a maximum services, and thus assume a role beyond providing simple communication pipes.

It also aims to allow service providers to have an optimal distribution platform.

These objectives are achieved in accordance with the invention by providing for the creation of an intelligent intermediation platform for communication channels outside the Internet, to which any service provider can connect to communicate with the various user terminals by using a route outside the Internet. .

This route appears to be transparent at the supplier level, the intermediation platform being responsible on the one hand for the selection of the operator outside the Internet. depending on the user U addressed, and on the other by adapting the communication to the specifics of this operator.

In addition, the platform can provide multiple other services aimed at simplifying and standardizing exchanges between the user and the supplier. Thus, in a preferred embodiment, the invention provides functionalities at the level of the platform consisting in providing: i) security, ii) service management, and iii) streamlined invoicing.

The platform is advantageously managed by a third-party trusted organization which centralizes and filters the sensitive data necessary to ensure these functionalities. More particularly, the invention provides, according to a first aspect, an intermediation device intended to connect at least one service provider and at least one user provided with at least one communication terminal, by using at least one route outside the Internet. , characterized in that it comprises:

- intelligent connection management means for:

-select an operator's route outside the Internet, taken by a user's terminal;

-select an outgoing communication protocol and channel by reference to databases; and

- protocol conversion means controlled by the management means for connecting a service provider using a channel according to a first communication protocol and a user using the route outside the Internet according to a second communication protocol;

- a billing unit which performs global and automated billing for each user and a periodic distribution of payments received to different service providers and to different operators of non-Internet channels.

This device can periodically enter into communication with a user terminal (TU) in order to transfer the data characteristic of the services used by the user using the terminal (TU), this terminal comprising an application and a secure memory in order to store these characteristic data of the services used, necessary for billing. The system can implement the transfer of the characteristic data necessary for invoicing according to its initiative during periods of reduced activity. This characteristic data necessary for billing can for example be found in the security module of a telephone.

The device of the invention also allows a means of monitoring the subscribers of a channel operator outside the Internet by a system for changing channel operators outside the Internet according to the use of a given service, so transparent to the user. This change of operators can be done at a given location depending on the characteristic of the service requested, or for a given service depending on the geographic location of the subscriber.

According to a second aspect, the invention provides for the use of the device according to the first object for ensuring the distribution of a service by a service provider. According to a third aspect, the invention provides for the use of the device according to the first by an operator of communication channels outside the Internet, for example a mobile telephone operator, to allow the distribution of services through one of its communication network. . According to a fourth aspect, the invention provides a method of distributing services to at least one user from a service provider by means of an intermediary device according to the first aspect, comprising the following steps: detection of a request for connection of a service provider on a first protocol, verification of the identity of the service provider, - search for at least one user to reach, identification of a route outside the Internet to take to reach the or each user specified by the service provider, verification of the identity of the or each specified user,

- establishment of communication with the or each specified user, and creation of a communication link with conversion between first and second protocols to connect the supplier with the or each specified and validly identified user,

- recording of the service data necessary for invoicing,

- globalized and automated invoicing for each user, and

- periodic distribution of payments received to different service providers and to different operators of non-Internet channels.

According to a fifth aspect, the invention provides a method of access by a user to a service of a service provider by means of an intermediary device according to the first aspect, comprising the following steps: detection of a request connecting a user to a second protocol, - verification of the identity of the user,

- request for a service offered by a service provider, identification of a channel according to a first protocol to be used to reach the service provider requested by the user, verification of the identity of the service provider, establishment of communication with the service provider, and creation of a communication link with conversion between first and second protocols to connect the user and the validly identified service providers, - recording of the service data necessary for invoicing,

- globalized and automated invoicing for each user, and

- periodic distribution of payments received to different service providers (FS) and to different operators of non-Internet channels (VHI).

The invention and the advantages which ensue therefrom will appear more clearly on reading the following description of a preferred embodiment, given purely by way of nonlimiting example with reference to the appended drawings in which: FIG. 1, already described, is a diagram illustrating the possibilities of conventional connection between service providers and their users via the Internet; and FIG. 2 is a simplified block diagram illustrating the integration of an intelligent intermediation platform for communication channels off the Internet in accordance with the preferred embodiment of the invention, in the context represented in FIG. 1.

As it appears in FIG. 2, the intelligent intermediation platform 12 according to the preferred embodiment of the invention is located between the service providers FS and the user terminals TU using a communication channel outside the Internet capable of be employed by a user U of the services. The platform 12 can be in the form of a set of technical means grouped on a single geographic site or distributed over several sites.

In the example illustrated, the user terminals served by the platform use a communication channel outside the Internet protocol and include: a second or third generation mobile phone terminal 2, a personal digital assistant 14 (also known by the English acronym PDA, for "personal digital assistant"), a PC 6 computer communicating with the "Bluetooth" or 802 standard. llx, an ITV 16 interactive television terminal, known by the English term "ITV set top box". Of course, other terminals making it possible to use a communication channel outside the Internet can be used: video game, on-board equipment on the vehicle, etc.

The non-Internet VHI channels taken by these terminals 2, 4, 14, 16 can either: i) not use the Internet at all or ii) use the Internet, but only part of the link, the rest being therefore outside the Internet.

These channels are presented in the form of variable communication gateways from one user terminal to another, being linked on the one hand to the protocol used and on the other hand to the operator, for example the different MNOs using the WAP 8 gateway as described with reference to Figure 1.

The platform therefore has the function of managing the linking of three types of entities: users, operators of communication gateways and service providers.

To ensure this connectivity and communication between service providers and users, the platform includes: - a central data unit 18 which integrates two databases: i) a "service provider" database 20 which groups the all the files and data necessary to communicate with and represent the FS service providers, and ii) a "users" database, which groups together all the files and data necessary to communicate with and represent the users; a protocol conversion unit 24 functionally connected to the service providers FS by communication channels VP1 using first communication protocols and to the user terminals

(TU) by VHI communication channels using second communication protocols. This unit thus constitutes the point of passage of the incoming and outgoing protocols between the service providers FS and the users U. It accepts all the NI second protocols of the different channels outside the Internet coming from the user terminals TU and all the first N2 protocols of the different channels of the service providers, ensuring bidirectional conversion between any one of the first NI protocols and any one of the N2 second protocols. The term protocol (applied to service providers or users) is understood in the broad sense, being transport protocols such as TCP / IP,

802.11, application protocols, session management protocols, presentation protocols, etc.

As an indication, these user-side protocols can include:

- second and third generation cellular telephone networks (2G, 2.5G and 3G such as GSM, WAP, GPRS, UMTS, for each operator providing access to these networks, multiplied by the different types of message transmission possible

(SMS, MMS, emails, etc.). Protocol conversion in the broad sense therefore includes the establishment of a specific communication linked to the choice of a certain MNO, then the practical use of the communication gateway of this MNO to connect a user and a service provider. ,

- interactive television networks (ITV), - local private LAN and WLAN,

- pico-communication networks such as "Bluetooth" and 802.11,

- etc.

The codes necessary for the different possible combinations of protocol conversion are extracted from the user service provider databases.

22 via an intelligent connection management unit 26.

These codes allow the protocol conversion unit 24: for a transmission to a user terminal TU, to extract the payload data arriving according to any of the service provider protocols, to selectively reformat them according to one any of the user protocols and transmit to the destination user terminal TU, and

- for a transmission to a service provider, to extract the payload data arriving according to any one of the user protocols, to selectively reformat it according to any one of the service provider protocols and to transmit them to the service provider recipient service.

Since the connections between users U and service providers FS thus established are generally secure (cf. functionality i) below), the protocol conversion unit 24 constitutes a secure element of the platform. To this end, it is protected by hardware and software security means (for example by being physically closed and provided with fire screens, known by the English term "firewall").

In practice, a given user U can have several possible user terminals TU by which he can communicate with a service provider FS. The problem then arises of choosing the most appropriate user terminal when a supplier wishes to establish contact with a user, if one wishes to avoid reaching the latter on all the terminals available to him, which would tend to clutter up the communication media.

To respond to this problem, the intelligent connection management unit 26 accesses a directory of user terminals TU of the user database 22, comprising:

on the one hand, the relationship links between each user U and each user terminal TU by which he can be reached by the platform, and

- on the other hand, the relationship links between each user terminal TU thus listed and the protocol user it uses. For example, if the user terminal TU is a mobile telephone terminal 2, the second communication protocol can be the GSM protocol, UMTS, via the operator X on which it depends. There is thus a relationship between each user terminal TU and the communication operators.

This directory thus makes it possible to know for each user U the candidate user terminals TU and to know how to access them. To establish the intelligent selection of one particular of these user terminals, the connection management unit 26 also accesses a second directory, called intelligent selection of user terminals TU, from the user database 22. This directory includes , for each user U, the following parameters: a link between each of the user terminals listed in the first database and the time variable (date and time of day of the connection request), making it possible to favor selection of a candidate terminal according to this variable,

- a link between each of these terminals and the geographic location of the user, making it possible to favor the selection of a candidate terminal according to the location of the user,

- detection of active terminals,

- the history of prior use of terminals (last used, etc.), - the specific wishes expressed by the user (for example according to a list of preferences),

- the technical characteristics of possible user terminals (terminal models, available memory capacity, etc.), - the selection indications according to the technical characteristics of the message to be retransmitted from the FS service provider (volume in bytes, text file, image, sound, etc.), - the selection indications according to the characteristics of the content of the message ( degree of urgency, confidentiality, generic or specific content, etc.), and the service provider likely to contact the user.

The parameters of the time and geographic location variable can be combined into a global criterion if the latter can only be determined on the basis of the former. These parameters are combined and weighted by the intelligent connection management unit 26 on pre-established bases to provide as output the specific choice of the user terminal TU to be accessed for each connection request from a service provider.

The intermediation platform 12 according to the preferred embodiment offers a range of technical functionalities aimed at unifying the service providers FS and the users U. These functionalities are centralized around the intelligent connection management unit 26, which groups together the 'intelligence of the intermediation platform 12, and in this capacity also ensures internal management and the delegation of tasks to other units. In the example, the functionalities are: i) securing the link between the user and a service provider, ii) managing services, and iii) streamlined billing. i) Securing the link between the user and a service provider.

This functionality includes: on the one hand the verification of the identity of the user and the service provider for a given service, and on the other hand the creation of a secure communication tunnel between the user and the service provider. FS services. Securing the link between the user and a service provider is managed by a security unit 28 by reference to security files stored in the service provider 20 and user 22 databases, using techniques known in themselves.

More particularly, the security unit 28 accesses a first set of security files, called identification files, and a second set of files, called encryption files. The first set of security files includes, for each user U and for each service provider: the personal identity data of the user / service provider, including the different personal codes, IMSI / Ki identifiers, passwords , pseudonym, symmetric and asymmetric keys, etc. the links between this personal identity data and the services of the suppliers for which this data will be requested, and a personal identifier specific to the intermediation platform making it possible to verify the right of access to it. The second set of security files includes, for each user U and for each service provider: the different encryption algorithms used to exchange sensitive data between the user and each service provider FS,

- data specific to encryption: public and private keys, module keys, mathematical function coefficients, etc., - the protocols for exchanging this specific data to establish encryption, and the links between this information and each supplier of services, making it possible to adapt the encryption and therefore the secure communication tunnel between the user and a service provider according to specific methods.

The security unit 28 thus makes it possible, by using these security files, to offer security guarantees for both the service provider and its user, the latter then no longer having to perform for him- even identity checks and being assured that all transactions will be carried out automatically in a protected environment under the auspices of a trusted third party. ii) Service management

The intermediation platform 12 allows the user to register with it either for a new service, or for a new service setting for which he is already registered. It also allows users subscribed to an operator of an MNO-type communication gateway to access all the services offered by service providers. It then takes care of the logistical aspect of activating the service and making it available on the user terminal TU. In other words, the supplier of services FS only has to provide its agreement, the platform being able to download software and access codes relating to new services or their new configuration. This aspect is provided by a service management unit 30 which accesses a library of application programs and settings relating to the various services offered by the providers contained in the service provider database 20. From this library, the service activation unit 30 selectively extracts a program to download it to a user terminal TU of a user having requested it. The download authorization is validated by an acceptance signal coming either directly from the supplier concerned, or from data stored in the user database 22 making it possible to establish whether the requesting user is actually able to receive the program concerned. Each program is stored in different forms in the library (language, internal configuration, limited or full version, etc.) depending on the user terminal TU for which it will be intended. These programs constitute the software interfaces of the user to access the various services of the suppliers.

The library is also associated with accounting means making it possible to record, for each program download, its form, the destination user terminal TU, and therefore the user. This information can be accessed remotely by the service provider for statistical purposes. iii) Streamlined billing

This functionality is provided by a billing unit 32 which accesses a set of files from the service provider databases 20 and users 22. These files contain information related to any transaction between each user U and each service provider FS giving rise to invoicing (purchase of goods, services) or entering into the calculation of invoicing (use of communication package , etc.).

The intermediation platform 12 offers streamlined billing for all of the different services offered by FS providers. For the user, this functionality makes it possible to pay in a single payment for several services from various suppliers obtained through the platform over a given period.

The management of global billing is ensured by a billing unit 32 which performs automated accounting for each user. This unit 32 comprises a user database U, with for each of the latter links on:

- each paid service to which he subscribes and his personalization (package, range of services, ...),

- the pricing of the service (sum per unit of time of use (telephony, information bases, ...) or quantity of modules (files, films, musical titles, etc. ...) downloaded, - the amount of the invoice of each order placed for the case of services allowing online purchases (books, travel, ticketing, articles on catalog by mail order (VPC), multimedia products, games ....), and - the supplier of each service covered by the invoice.

Furthermore, the billing unit 32 periodically distributes the payments received from the user set U to the various service providers FS according to the aforementioned breakdown. It also sends to suppliers the detailed information contained in its database for their internal management.

The billing unit 32 also manages a payment to the various operators of the non-Internet channels VHI, for example the mobile telephone operators MNO, in order to bill the communication service proper.

It then becomes possible to insure through the intermediation platform 12: - online payment,

- the invoice to service providers,

- the invoice to users,

- recording of transactions, and

- repayment to operators of channels outside the Internet.

As a variant, the user's communication terminal has an application whose function is to store in a secure memory of the terminal the data characteristic of the services used by the user, necessary for billing. For example, this application and the secure memory space can be found on the security module of a mobile phone. The intermediation platform periodically enters into communication with the terminal to transfer this data in order to proceed with billing according to the method described above. This periodic communication can be done on the initiative of the platform which chooses a period of reduced activity or on the initiative of a terminal, for example when its secure memory is full. This embodiment of billing has the advantages of offering flexibility to the intermediation platform which does not have to store in real time the information of all transactions, to allow a high level of reliability and security. because terminals generally have secure means such as a security module and are best placed to register all of the services implemented by a user through them. Such a service can for example be a security service consisting in the production of a digital signature, each digital signature produced by a user terminal being accounted for in order to be invoiced according to the method described above.

Examples of the functioning of the intermediation platform 12.

The platform offers a myriad of possibilities of operation due to the multiplicity of its functionalities and the possibilities of cooperation between them, as well as by its means of communication with the service providers FS and the users U. The examples of use which follow are only a small sample of these possibilities.

I. Use of the intermediation platform by a user.

This use case goes through the following stages:

I.i) Detection of a user connection request on a second protocol, provided by the intelligent connection management unit 26.

This unit permanently receives all incoming calls on the protocol conversion unit and initiates the rest of the connection process upon receipt of a call; I.ii) Identification of the calling user, provided by the security unit 28.

The user's call from his user terminal goes through general reception and filtering software produced by the intermediation platform and serving as a general portal. This software first detects if the user is already registered and then allows the user to transmit the user's personal access code to the intermediation platform. If this code is valid, the platform sends a validation code to the user terminal allowing the general filtering software to present an access page to the available services;

I.iii) Request for access to a service offered by a service provider, provided by the service management unit 30.

The user thus validly identified selects a service from the access page, the software specific to the selected service appears on the user terminal. The latter transmits to the platform the personal codes for access to the service, which are recognized by the service management unit 32. The latter informs the active software on the platform side to assume the management of its execution. It informs the intelligent connection management unit 26 of the service provider FS concerned;

I. iv) Identification of the access channel to the FS service provider concerned, provided by the intelligent connection management unit 26. This identification is carried out by reference to the service provider databases 20, which identifies the route according to a first protocol for each supplier, possibly with selection criteria when several channels are possible. The choice can also be guided by the state of congestion of the possible routes;

Iv) verification of the identity of the FS service provider, provided by the security unit 28. The security unit verifies the identity of the called supplier, in a similar manner to the verification step of the user U in step I.ii above;

I.vi) Establishing communication with the FS service provider, step carried out by the protocol conversion unit 24;

This unit calls the service provider concerned using the communication channel of the first protocol indicated by the intelligent connection management unit 26;

I.vii) Creation of a communication link with conversion between the first and second protocols to connect the user and the validly identified service providers, ensured by the protocol conversion unit 24.

When the service provider is validly identified, the protocol conversion unit 24 acts to allow the exchange of data in both directions between the user and the service provider, by reformatting this data from the first to the second protocol used, and vice versa.

If it is required to secure the communication link between the service provider FS and the user U, the platform performs an additional step, during the creation of the link (cf. step I.vii above), which consists in making from this link a secure communication tunnel TCS, using the security unit 28. This tunnel is based on encryption between the service provider FS and the user U.

To this end, the smart card of the user terminal TU selectively transmits the encryption keys, personal codes, identifiers, so-called key

GSM subscription IMSl / ki, platform-specific key, etc. towards the security unit of the platform, the FS service provider doing the same.

Advantageously, this code is stored, like all the other security data, in a smart card associated with the terminal (for example a SIM card in the case of a mobile telephone).

It is noted that the platform thus assumes the essential tasks of end-to-end securing of the communication link between the user U and his service provider FS, in transparent mode and without direct intervention by the latter.

I.viii) Billing of the user, carried out by the billing unit 32.

At regular intervals, for example once a month, the billing unit 32 issues to the user a global and detailed invoice produced for all of the services provided by the different service providers FS during this interval.

II. Using the platform ¹ intermediation by a service provider.

The intermediation platform 12 is used by service providers as a single entity to communicate directly with users, as well as to delegate tasks that they ordinarily have to perform. An FS service provider can thus initiate communication with a particular user or with a group of users, selected according to technical criteria (for example having a terminal of a certain type) or commercial criteria (for example using a certain type on duty) .

In both cases, the use process is substantially analogous to the case of a connection initiated by a user U, the steps being as follows:

Il.i) Detection of a connection request from a service provider on a first protocol, ensured by the intelligent connection management unit 26. This step is analogous to step Ii) above, with detection of the second protocol.

II. ii) Verification of the identity of the FS service provider, carried out by the security unit 28.

This step is identical to step I. vi) above. II. iii) Search for at least one user to be reached, provided by the intelligent connection management unit 26. This unit 26 interrogates the service provider to determine the user U or the group of users it wishes to reach by the intermediation platform 12, either by name, or by predetermined selection criteria. II. iv) Identification of a route outside the Internet (VHI) to be used to reach the or each user U specified by the service provider FS.

After having determined the each user to be contacted, the intelligent connection management unit 26 searches, from the user databases 22, for: intelligently identifying the user terminal TU with which a connection is to be established, by reference to the selection criteria in the user database 22. It makes it possible in particular to select one of several possible terminals available to a user, and to identify the communication channel according to a second protocol to be used for the user's user terminal , or of each user of the group, indicated by the supplier;

II.v) Verification of the identity of the or each specified user, provided by the security unit 28; This step is identical to step Ilii) above, applied for the or each specified user;

II.vi) Establishing communication with the or each user U identified, step carried out by the protocol conversion unit 24.

This step is analogous to step I. vi) above, the connection being established this time on a channel outside

VHI Internet according to a second protocol making it possible to reach the user or each user with whom the service provider wishes to contact;

Il.vii) Creation of a communication link with protocol conversion between the first and second protocols to connect the supplier with the or each specified and validly identified user, ensured by the protocol conversion unit.

This step is identical to step I.vii) above, applied if necessary to several users.

The security option for creating a secure communication tunnel, described above in the context of step I.vii) can also be applied in this case, according to the same methods.

Thus, the service provider FS accesses a given user or group of users U by first calling the intermediation platform 12 to dialogue with the intelligent connection management unit 26.

Il.viii) Payment for services to service providers, provided by billing unit 32.

At regular intervals, for example once a month, the billing unit 32 transfers to the service providers the sums which are due to them and which have been the subject of a written billing within the framework of stage I .viii) above.

It is noted that the invention offers great advantages because it allows the optimal exploitation of three entities that are the user terminals, the gateways of communication, and service providers, through the use of a fourth entity which is the intermediary platform of the invention. Each entity obtains a more advantageous situation: - A user can pass transparently from one service to another, overcoming the constraints linked to a particular communication operator. At a given location, a user can use two different communication operators to obtain two different services. He can also access services in a geographically transparent manner, being able to cross borders without influencing the service used. The invention therefore also represents an advantageous solution for monitoring subscribers, usually called by the English term "roaming". Indeed, as we have seen, a subscriber to a given operator can use the communication networks of other operators in a flexible and user-friendly manner, for which he has no subscription, - a communication operator can offer his communication service to users other than its subscribers and allow its subscribers to access a large number of services in a user-friendly manner,

-a service provider can access a large number of users, bypassing a particular communication operator.

In addition to the above advantages, the following remarkable qualities of the invention will be noted:

- the capacity to evolve, the user-friendliness (choice of connections), and the flexibility (by combination of different functions), security by: i) the identification of stakeholders (users and suppliers) and ii) the creation of security for end to end, with the establishment of a secure communication tunnel, all creating end-to-end security between the user and the service provider,

- service management, and

- streamlined billing.

The invention allows numerous variants in terms of the functionalities offered, the means of communication targeted by the platform, the management of transactions, the software and hardware means used, etc.

Claims

1. Intermediation device (12) intended to connect at least one service provider (FS) and at least one user (U) provided with at least one communication terminal, characterized in that it comprises:

- intelligent connection management means (26) for:

-select an operator's non-Internet channel (VHI), taken by a user's terminal;

-selecting an outgoing communication protocol and channel by reference to databases (20, 22); and protocol conversion means (24) controlled by the management means (26) for connecting a service provider (FS) using a route according to a first communication protocol and a user (U) using the route outside the Internet (VHI) ) according to a second communication protocol;

- a billing unit (32) which performs a globalized and automated billing for each user and a periodic distribution of the payments received to the different service providers (FS) and to the different operators of non-Internet channels (VHI).

2. Device according to claim 1, characterized in that the non-Internet channel (VHI) comprises at least one mobile telephone network of a given operator (MNO).

3. Device according to any one of claims 1 to 2, characterized in that the means for connection management (26) select a route outside the Internet (VHI) from among several possible to reach a user's terminal (U) according to optimized selection criteria stored in said databases (20, 22), said predetermined criteria include at least one of:

- the time of the connection request,

- the geographic location of the user, the detection of the active user terminal (s), the history of the prior use of user terminals,

- the specific wishes expressed by the user, the technical characteristics of possible user terminals, the technical characteristics of the message to be retransmitted from the service provider,

- the content of the message, and

- the service provider.

4. Device according to any one of claims 1 to 3, characterized in that it further comprises means for identifying a service provider (FS) and a user (U).

5. Device according to any one of claims 1 to 4, characterized in that it further comprises security means (28) for managing the creation of a secure communication link between the service provider (FS) and a user terminal (TU) of a user (U).

6. Device according to any one of claims 1 to 5, characterized in that it further comprises service management means (30), comprising means for storing service software and means for downloading software selectively to a given user terminal (TU).

7. Device according to any one of claims 1 to 6, characterized in that the billing unit (32) accesses database files of service providers (20) and users (22) which contain related information to any transaction between each user (U) and each service provider (FS) to issue each user (U) a global invoice for all of the amounts due for each service obtained with one or more service provider (s) ( FS) over a given time interval.

8. Device according to any one of claims 1 to 7, characterized in that it periodically enters into communication with a user terminal (TU) in order to transfer the characteristic data of the services used by the user using the terminal (TU), this terminal comprising an application and a secure memory in order to store this data characteristic of the services used, necessary for billing.

9. Device according to the preceding claim, characterized in that it implements the transfer of the characteristic data necessary for invoicing according to its initiative during periods of reduced activity.

10. Device according to claims 8 or 9 characterized in that it transfers the data characteristics necessary for billing from the security module of a telephone.

11. Use of the device according to any one of claims 1 to 10 for ensuring the distribution of a service by a service provider (FS).

12. Use of the device according to any one of claims 1 to 10 by an operator

(10) non-Internet communication channels (VHI) to enable the distribution of services through its communication network.

13. Use according to claim 12, characterized in that the operator is a mobile operator (10).

14. A method of access by a user (U) to a service of a service provider (FS) by means of an intermediation device (12) according to any one of claims 1 to 10, comprising the steps following:

- detection (26) of a request for connection of a user on a second protocol by a communication channel outside the Internet (VHI),

- verification (28) of the identity of the user, request (30) for a service offered by a service provider, - identification (26, 22) of a route according to a first protocol to be used to reach the provider service requested by the user,

- verification (28) of the identity of the service provider, establishment (24) of communication with the service provider,

- creation (24) of a communication link with conversion between first and second protocols to connect the user and the validly identified service providers,

- recording of the service data necessary for invoicing,

- globalized and automated invoicing for each user, and

15. A method of distributing services to at least one user (U) from a service provider (FS) by means of an intermediary device (12) according to any one of claims 1 to 10, comprising the following steps : - detection (26) of a connection request from a service provider (FS) on a first protocol,

- verification (28) of the identity of the service provider, search (30) for at least one user to be contacted,

- identification (26, 22) of a route outside the Internet (VHI) to be used to reach the or each user (U) specified by the service provider,

- verification (28) of the identity of the or each specified user,

- establishment of communication with the or each specified user (U), and

- creation (24) of a communication link with conversion between first and second protocols to link the supplier with the or each specified and validly identified user,

- recording of the service data necessary for invoicing,

- globalized and automated invoicing for each user, and

16. Device according to one of claims 1 to

10 characterized in that it contains a means of monitoring subscribers allowing a change of channel operators outside the Internet according to the use of a given service, in a transparent manner for the user.