What Is A2P SMS? Application-to-Person Messaging Explained

22.12.2020
guide-image

Quick definition:A2P SMS stands for Application-to-Person Short Message Service. Whenever a person receives a text message from a software program or sends a text message to one, that’s A2P SMS. Messages from an application are often automated and trigger based on a set of rules or conditions. Messages to an application involve a request or command.

Password reset requests, two-step authentication, and appointment reminders are all common examples of Application-to-Peer messaging. Enterprise businesses also use A2P SMS to turn text messaging into an outbound marketing channel.

In the Internet of Things (IoT), end users and manufacturers rely on A2P SMS to do things like remotely set the Access Point Name (APN), reconfigure devices, “wake up” a device to go online, or send small measurement data to the application.

While P2P (Peer-to-Peer or Person-to-Person) SMS is usually two-way communication, A2P messaging is often one-way communication. The recipient may not need to reply to the SMS besides confirming that it is received. However, applications can also use pre-programmed responses to a received device SMS to facilitate data exchange.

The advantage of A2P SMS for IoT applications is that the device doesn’t need to be online to receive SMS, so the device can act on the command or request right away, rather than having to wait for a connection. Using A2P SMS saves battery, can lower costs, and ensures devices have a backup channel to receive or transmit data.

A smart water meter system can use A2P SMS to remotely adjust the flow of water or turn the supply on and off.

Smart security systems can use A2P SMS to turn off an alarm, unlock a door, or activate a camera that was in sleep mode.

Cold chain monitoring systems may use A2P SMS to change the temperature in a refrigerated truck or adjust the range that needs to be maintained.

So how do apps and devices communicate via SMS? Here’s how it works.

How A2P SMS works

Short Message Service relies on Short Message Peer-to-Peer Protocol (SMPP) to relay communications between two entities. It’s the system of rules that governs how they connect, whether each entity will transmit or receive a message, and how the message gets packaged. 

One entity attempts to initiate an SMPP session using the protocol to determine where it’s trying to send the message, and then a Short Message Service Center (SMSC) accepts or rejects the message and relays it to the other entity. (In the context of SMS, SMS-enabled devices are called External Short Message Entities or ESMEs for short.)

IoT devices can connect to wireless networks, just like cell phones. Many of the most popular IoT applications even use cellular connectivity. But these devices don’t type out text messages. To use SMS, they communicate through a software application.

Applications aren’t “peers,” but they still use SMPP. With cell phones (P2P SMS), the SMSC is like a mediator, defining what their interactions will look like and passing messages between them. With IoT devices, the application effectively serves as an additional mediator, relaying messages to and from the SMSC on behalf of the IoT devices.

Enable Application-to-Peer messaging with emnify

If you’re an IoT manufacturer, your device may rely on SMS communication. In these cases, emnify can automate your SMS data exchange between device and application through the REST-API. The REST-API does not only allow to programmatically send SMS to the device but also to retrieve the SMS data the device sends. 

Our communication platform connects your devices to a global cellular network and helps you to operate, automate and integrate your device communication. With our comprehensive approach to security we also offer SMS firewalls that ensure that devices cannot be misconfigured from outside. 

Get in touch with our IoT experts

Discover how emnify can help you grow your business and talk to one of our IoT consultants today!

Related Posts

Image for post IoT Security for SMS: Peer-to-Peer & Application-to-Peer Messaging

IoT Security for SMS: Peer-to-Peer & Application-to-Peer Messaging

EMnify now offers enhanced SMS options for customers in the form of peer-to-peer (P2P) and application-to-peer (A2P) messaging. Combining these options increases flexibility and security for device configuration and communication. SMS is an important feature for IoT and M2M developers and enterprises: is the only communication channel that works on every cellular-enabled device, on every network, and with full visibility of delivery status. SMS also works in areas of weak radio reception, and when a device is roaming. Although a single SMS is limited to 160 characters, multiple SMS can be logically grouped into one, making longer commands and message exchanges possible. Both P2P and A2P messaging are necessary in IoT and M2M depending on the use case. P2P messaging could be required for an IoT device that sends alerts directly to the end user, such as a home smoke detector. A2P messaging would be more beneficial in use cases where data being sent to or from the device was controlled at the enterprise level, such as pipeline monitoring alerts. In this blog post, we will explore both P2P and A2P messaging options, highlight security factors that should be taken into consideration, and share how customers can easily utilize one or both on the emnify platform. Peer-to-Peer (P2P) Messaging P2P is the exchange of SMS between devices. Devices address each other via telephone numbers (MSISDNs). P2P is the type of SMS that is sent between two mobile phones, and which consumers are most familiar with through basic text messages and group chats. P2P works through the default configuration in any cellular-enabled device, with no additional integration or setup required. P2P messaging has limitations within an IoT and M2M context. First, automation is not possible. For example, if 10,000 devices need to be configured by SMS, manually keying in and sending a message to each of these devices would be incredibly difficult. Second, there is limited throughput of about 6 SMS per minute. If a number of messages needed to be sent, such as a series of alerts from a device, the messages could be delayed. Most importantly, there are security issues surrounding P2P messaging, especially for IoT and M2M data of a sensitive nature. P2P messaging exposes devices to incoming messages from outside numbers - anyone in the world can access the device, sending commands and potentially changing the configuration settings. Building a secure SMS firewall is challenging without a robust service management platform like emnify. Application-to-Peer Messaging A2P is the exchange of SMS between a device and an application. Applications will connect to the device via an API, the emnify SMS console, or SMPP protocol (through the emnify SMS service center (SMSC)). Typically devices will address a Short Code to reach the application, which is a private number used to send SMS (3-6 digits) and is allocated by the customer. A2P works through the default configuration in any cellular-enabled device, although the application it communicates with must be set up separately. A2P messaging is fully trackable, with oversight on the delivery status of a message. On the emnify platform, message status can be monitored through the emnify User Interface (EUI) SMS console and through the customer’s own application. Messages are instantly delivered through the emnify platform to a device that is attached to our network. A2P messages can be automated, which means customers with large numbers of deployments can easily configure their devices over-the-air. emnify SMS structure for A2P & P2P messaging. Increased security through SMS firewall Increasing Security through the emnify SMS Firewall In general, A2P messaging is more secure than P2P, which has protection drawbacks. However, emnify is working to make both A2P and P2P messaging more secure by enabling our customers to control who their devices are allowed to communicate with. As mentioned previously, P2P by default is an open messaging system and has no built-in verification of the authenticity of the sender, which means anyone with the MSISDN of the device can send messages to it and the originating address can easily be spoofed. Any system relying on the originating address for authentication are open to attacks by an SMS impersonating an authenticated phone number. However, emnify has enabled an SMS Firewall which means our customers have more control over device communication. Depending on the use case, customers can choose to: Enable open P2P communication Send P2P messages only to other customer devices (with emnify MSISDNs) Send P2P messages only to non-customer devices (non-emnify MSISDNs) Block any incoming P2P SMS to the device (i.e., mobile terminated/MT) Block any P2P SMS being sent from the device (i.e., mobile originated/MO) Block all P2P SMS from device to avoid any SMS-related charges A2P messaging on the emnify platform is a closed communication system between a customer’s device and a customer’s application. Messages are directly routed (not through a 3rd party) and there is no access permitted outside of the customer device, customer application, and the emnify platform. A2P messages are sent and received via a RestAPI, emnify SMS console or SMPP protocol 3.4, both of which are set up and managed by the customer. Depending on the use case, customers can choose to: Send messages directly to customer devices (with emnify MSISDNs) Send messages directly to non-customer devices (non-emnify MSISDNs) Block all SMS from device to avoid any SMS-related charges emnify customers can choose to have P2P enabled, A2P enabled, both P2P and A2P enabled, or SMS blocked account settings. If you would like to switch your current SMS account settings, please contact our support team at support.mnify.com.