Purpose
When the IP is unreachable or low-power wake-up is needed, SMS can be used to send configurations or trigger connections. Modules use AT commands (such as CMGS/CMGR) to send and read messages, supporting both Text and PDU modes. Chinese and long messages require UCS2 and segment concatenation.
Limitations
IoT SIM cards may have SMS disabled; international roaming SMS paths can be complex. If storage is full, new messages will be rejected, requiring timely deletion or forwarding.
Security
Authenticate the sender's number and whitelist to prevent forged control commands.
PDU mode and encoding details
Text mode is suitable for English short messages, while Chinese and binary payloads must use PDU mode with correct DCS, UDHI, and segment headers. Long messages require splitting and concatenation, handling out-of-order arrival and missing segments, with application-layer sequence numbers and timeout retransmission strategies recommended. Some modules have limitations on storage capacity and concurrent read/write operations, so batch deletion and reading should avoid blocking the main business thread. Different vendors' AT command sets vary in prompts, error codes, and URC formats, so an abstraction layer should be implemented for easier module replacement.
Related to cellular data plans and roaming strategies
IoT SIM cards usually have voice and SMS disabled by default, or only enable specific numbers. Before activation, confirm the whitelist and tariffs with the operator. When roaming internationally, SMS routing may go through third-party gateways, increasing latency and failure rates; critical control commands should use a dual-factor IP channel. After SMS-triggered wake-up, devices should quickly establish a data connection and report execution results to prevent users from thinking it didn't work. For high-security scenarios, SMS payloads can be signed or use challenge-response to prevent replay attacks and social engineering deception.
Engineering Practice Supplement
Combine 'SMS and AT commands' with the module's full lifecycle: verify reference design and antenna solutions in the EVT stage; conduct conduction/radiation surveys and thermal imaging in the DVT stage; finalize calibration and test scripts in the PVT stage. Before certification, check the regulations of target countries and operator registration requirements to avoid missing frequency bands or SAR items. Production lines should retain golden samples for comparison and inspection rules; after-sales service should be able to trace software versions, calibration parameters, and key component batches by serial number. If remote maintenance is required by the customer, a strategy for secure upgrades, rollback, and emergency shutdown must also be designed.
When the SMS Control Path Can Still Stand In for a Data Bearer
SMS together with AT commands is a control path that can still carry a short instruction when the cellular data bearer is unavailable. It goes through the short-message center and does not require the terminal to hold a usable IP address at that moment, so it can wake the module or the host during deep power saving, when the access point is restricted, or when the server cannot be reached. A plain English sentence can use text mode. Chinese, binary, and long commands that must be concatenated require PDU mode, with the alphabet and user-data header set correctly. The module reports a new message with an unsolicited indication, and the application then reads the store. The path itself does not guarantee order or immediate delivery.
The conditions under which it works are narrow. The SIM must have SMS enabled, and the sender must be on the allowlist. Across borders, short-message-center routing may take a detour, so delay and failure look different from the home network, and a critical command should not rely on this path alone. SMS is suitable for triggering a connection, changing a server address, or delivering a one-time credential. It is not suitable for periodic telemetry, large configuration packages, or a closed loop that needs reliable ordering. After the wake, a data connection and an acknowledgement should be established promptly. How network readiness is staged is covered in wake-up and interrupts. For a roaming SIM, confirm first that IoT roaming includes SMS, rather than assuming it is opened together with data roaming.
When the store is full, a new message is rejected while the platform believes the command has arrived. A long message with a missing segment can still be concatenated into the parameter area and write a half configuration. Using only the sender number as identity means a forged SMS can change the access point or reboot the device. Error codes and prompts differ across modules. A port that compares strings directly can parse a send failure as success. When SMS and data share one serial port, a host task that waits on the send result can miss the registration window.
Each downlink SMS should carry a sequence number, a validity period, and a credential that can be checked. The execution result then returns over the data channel or a status report. Read messages need a deletion limit and a retry on failure, so the store does not fragment until it can no longer receive. Tests should at least cover an empty number, over-length text, out-of-order segments, a full store, and a SIM with SMS not provisioned, and should record the time from send to the module indication. Walking the path once with a SIM that already has SMS does not explain the reject causes the field will see.