Information processing apparatus and method

Abstract

The invention provides an information processing apparatus and method. The information processing device is provided with: a storage unit that stores authentication information for connection to a first communication system; a first eUICC that stores profile information for a connection to a first operator network selected to be signed as an access network by a user; and a control unit. And a control unit that performs an operation of accepting authentication in the first operator network using the profile information, establishing a connection with the first operator network, and establishing a logical tunnel with the gateway device in the first communication system on the first operator network. And a control unit that accepts authentication in the first communication system using the authentication information and establishes a connection with the first communication system. After the connection with the first communication system is established, communication with the external network is performed through the logical tunnel and the first communication system.

Description

Technical Field

[0001] The present disclosure is a technology related to wireless communication using a SIM in a terminal. Background Art

[0002] A method of storing a connection method of a user terminal, a plurality of SIM slots, and priorities in correspondence with each other and automatically switching the SIM slot based on the connection method and priority of the user terminal has been disclosed (for example, Japanese Patent Laid-Open No. 2022-76592). Summary of the invention

[0003] An object of one aspect of the present disclosure is to provide an information processing device and method that can communicate via a predetermined communication system regardless of which carrier network a user uses as an access network.

[0004] One method of the present disclosure is an information processing device, which includes: a storage unit, which stores authentication information, the authentication information is used for connecting to a first communication system; a first embedded universal integrated circuit card, which stores configuration file information, the configuration file information is used for connecting to a first operator network selected by a user as an access network and contracted; a control unit, which performs the following actions, namely, using the configuration file information to accept authentication in the first operator network and establish a connection with the first operator network, on the first operator network after the connection is established, establishing a logical tunnel with a gateway device in the first communication system, through the logical tunnel, using the authentication information to accept authentication in the first communication system and establish a connection with the first communication system, after the connection with the first communication system is established, communicating with an external network through the logical tunnel and the first communication system.

[0005] Another embodiment of the present invention is a method, which performs the following actions through an information processing device, wherein the information processing device comprises: a storage unit, which stores authentication information, the authentication information is used for connecting to a first communication system; a first embedded universal integrated circuit card, which stores profile information, the profile information is used for connecting to a first operator network selected by a user as an access network and contracted, the action is to use the profile information to accept authentication in the first operator network and establish a connection with the first operator network, on the first operator network after the connection is established, establish a logical tunnel with a gateway device in the first communication system, through the logical tunnel, use the authentication information to accept authentication in the first communication system and establish a connection with the first communication system, after the connection with the first communication system is established, communicate with an external network through the logical tunnel and the first communication system.

[0006] According to one aspect of the present disclosure, regardless of which carrier network is used by a user as an access network, communication of an information processing device can be made via a predetermined communication system. BRIEF DESCRIPTION OF THE DRAWINGS

[0007] Features, advantages, and technical and industrial significance of exemplary embodiments of the present disclosure will be described below with reference to the accompanying drawings, in which like symbols represent like elements, and wherein:

[0008] Figure 1 A diagram showing an example of connection between a vehicle and a vehicle manufacturer communication system according to the first embodiment;

[0009] Figure 2 is a diagram showing an example of a hardware structure of a DCM;

[0010] Figure 3 is an example of the functional structure of DCM;

[0011] Figure 4 An example of a flow chart for a communication connection establishment process for a DCM;

[0012] Figure 5 This is an example of the sequence until the connection between the DCM and the vehicle manufacturer's communication system is established. DETAILED DESCRIPTION

[0013] For example, manufacturers of vehicles with communication functions such as connected cars and self-driving cars sometimes make the vehicle's communication go through a communication system prepared by the vehicle manufacturer in order to control the vehicle's communication and collect information related to the vehicle's communication. In such a case, the operator network used by the vehicle as an access network is limited to the operator network of the communication operator that cooperates with the vehicle manufacturer's communication system. Therefore, the vehicle owner and the like cannot freely select the operator network used as the access network for the vehicle's communication.

[0014] In one embodiment of the present disclosure, in view of the above-mentioned problem, an information processing device establishes a logical tunnel with a gateway device in a first communication system on a carrier network selected by a user as an access network, and communicates through the tunnel. Thus, regardless of which carrier network the user uses as an access network, the information processing device can communicate through the logical tunnel and via the first communication system.

[0015] More specifically, one method of the present disclosure is an information processing device, which includes: a storage unit that stores authentication information, the authentication information being used for connection to a first communication system; a first embedded universal integrated circuit card (eUICC) that stores profile information, the profile information being used for connection to a first operator network selected by a user as an access network and contracted; and a control unit. The control unit uses the profile information stored in the first embedded universal integrated circuit card to accept authentication in the first operator network and establish a connection with the first operator network. The control unit establishes a logical tunnel with a gateway device in the first communication system on the first operator network after the connection is established. The control unit uses the authentication information stored in the storage unit through the logical tunnel to accept authentication in the first communication system and establish a connection with the first communication system. After establishing a connection with the first communication system, the control unit communicates with an external network through the logical tunnel and the first communication system.

[0016] The information processing device is, for example, a vehicle-mounted device mounted on a vehicle, a smart phone, a tablet terminal, a wearable terminal, and a terminal capable of wireless communication based on a mobile communication method. The vehicle-mounted device is, for example, a data communication module (Data Communication Module, DCM), a car navigation device, a driving recorder, and an electronic control unit (Electronic Control Unit, ECU). The control unit is a processor such as a central processing unit (Central Processing Unit, CPU), a digital signal processor (Digital Signal Processor, DSP) and a data communication processor, and a circuit such as a field programmable gate array (Field-Programmable Gate Array, FPGA). The storage unit for storing the authentication information is, for example, an auxiliary storage device or a second embedded universal integrated circuit card.

[0017] The first communication system is a wireless communication system such as LTE-Advanced (4G), 5G, and 3G, which requires that the terminal has an eUICC. The gateway device is, for example, an enhanced packet data gateway (ePDG) (4G), a non-3GPP interworking function (N3IWF) (5G), a PDG (3G), etc. The logical tunnel is, for example, an IPsec tunnel.

[0018] In one embodiment of the present disclosure, an information processing device establishes a logical tunnel with a gateway device in a first communication system on a first operator network, thereby directly connecting to the first communication system, for example, at the IP layer. Thus, even if the first communication system does not cooperate with the first operator network, the communication of the information processing device can be passed through the first communication system. In addition, the user of the information processing device can freely select the first operator network as the access network from among multiple communication operators.

[0019] In one embodiment of the present disclosure, the authentication information may also be profile information issued by the first communication system and used for connection to the first communication system. In this case, the storage unit may also be a second embedded universal integrated circuit card. The information processing device stores the profile information issued by the first communication system in the second embedded universal integrated circuit card, so that, for example, the owner of the information processing device can rewrite the profile information in order to change or enhance security.

[0020] In one embodiment of the present disclosure, the authentication information may also be an electronic certificate and key information, wherein the electronic certificate is issued by a predetermined authentication authority when the owner of the information processing device is confirmed for the key information used for authentication in the first communication system. In this case, the information processing device may not have two eUICCs, thereby simplifying the structure of the information processing device.

[0021] In one embodiment of the present disclosure, the information processing device may also be a vehicle-mounted device mounted on a vehicle. In this case, the first communication system may be a communication system managed by the manufacturer of the vehicle. Thus, the communication of the vehicle can be conducted via the communication system managed by the vehicle manufacturer, so that the vehicle manufacturer can control the communication of the vehicle and collect information related to the communication of the vehicle.

[0022] As another aspect, the present disclosure can also be specified as a method for a computer to execute the processing of the above-mentioned information processing apparatus, a program for causing a computer to execute the processing of the above-mentioned information processing apparatus, and a computer-readable recording medium having the program recorded thereon.

[0023] Hereinafter, embodiments of the present disclosure will be described based on the drawings. The structures of the following embodiments are exemplifications, and the present disclosure is not limited to the structures of the embodiments.

[0024] First embodiment

[0025] Figure 1 This is a diagram showing an example of a connection between a vehicle 10 and a vehicle manufacturer communication system 500 according to a first embodiment. In the first embodiment, in order to allow the communication of the vehicle 10 (DCM 1) to pass through the vehicle manufacturer communication system 500, the vehicle 10 (DCM 1) is connected to the vehicle manufacturer communication system 500 through an IPsec tunnel. In the first embodiment, it is assumed that the communication operator network 200 and the vehicle manufacturer communication system 500 are communication networks corresponding to 4G. However, this is not limited to this, and the communication operator network 200 and the vehicle manufacturer communication system 500 may also be systems corresponding to 5G and 6G.

[0026] The vehicle manufacturer communication system 500 is a communication system managed by the manufacturer of the vehicle 10. Figure 1As shown, the vehicle manufacturer communication system 500 has an ePDG, a Home Subscriber Server (HSS), a Packet Data Network GateWay (PGW), and a Policy and Charging Rules Function (PCRF), and has a structure close to the core network. However, the vehicle manufacturer communication system 500 does not have a charging function, and has an authentication, authorization, and accounting (Authentication Authorization Accounting, AAA) that performs authentication instead of the MME in the usual EPC. In the first embodiment, the AAA in the vehicle manufacturer communication system 500 performs authentication in the same manner as the authentication performed by the MME in the usual EPC. In addition, Figure 1 The components of the vehicle manufacturer communication system 500 shown in the figure are only a part of the components, and the components of the vehicle manufacturer communication system 500 are not limited to the components of the vehicle manufacturer communication system 500. Figure 1 The structural elements shown.

[0027] The communication carrier network 200 is a communication carrier network that the owner of the vehicle 10 has signed a contract with. The communication carrier network 200 is a common Evolved Packet Core (EPC). Figure 1 In the figure, as the structural elements of the communication operator network 200, an evolved Node B (eNode-B, eNB), a serving gateway (Serving Gate Way, SGW), a mobility management entity (Mobility Management Entity, MME) and an HSS are shown, but the structural elements of the communication operator network 200 are not limited to these.

[0028] In the first embodiment, the vehicle manufacturer communication system 500 treats the communication operator network 200 as one of the untrusted non-3GPP accesses. Therefore, the communication from the communication operator network 200 to the vehicle manufacturer communication system 500 is temporarily output from the SGW of the communication operator network 200 to the Internet, and then enters the ePDG in the vehicle manufacturer communication system 500.

[0029] The vehicle 10 is provided with a DCM 1. The DCM 1 is an example of a device having a communication function. The DCM 1 is provided with two SIMs. SIM#1 stores profile information issued by the vehicle manufacturer communication system 500. SIM#2 stores profile information issued by a communication operator network selected and contracted by the owner of the vehicle 10 from among a plurality of communication operators.

[0030] DCM 1 uses the profile information issued by the communication operator network 200 stored in SIM#2 to accept the authentication in the communication operator network 200 and establish a connection with the communication operator network 200. Then, DCM 1 establishes an IPsec tunnel with the ePDG of the vehicle manufacturer communication system 500 on the basis of the connection with the communication operator network 200. When establishing the IPsec tunnel, DCM 1 uses the profile information issued by the vehicle manufacturer communication system 500 stored in SIM#1 to accept the authentication in the vehicle manufacturer communication system 500 and establish a connection with the vehicle manufacturer communication system 500. When the connection with the vehicle manufacturer communication system 500 is established, DCM 1 can connect to the Internet, etc., for example. As a result, the communication of DCM 1 will pass through the vehicle manufacturer communication system 500. The vehicle manufacturer communication system 500 is an example of a "first communication system". The communication operator network 200 is an example of a "first operator network". The ePDG in the vehicle manufacturer communication system 500 is an example of a "gateway device".

[0031] In the first embodiment, the vehicle manufacturer communication system 500 treats the communication operator network 200 as one of the untrusted non-3GPP accesses, and establishes an IPsec tunnel with the ePDG in the vehicle manufacturer communication system 500 on the communication operator network 200 through the DCM 1, so that the DCM 1 and the vehicle manufacturer communication system 500 are directly connected in the IP layer. As a result, the vehicle manufacturer, as the manager of the vehicle manufacturer communication system 500, can make the communication of the DCM 1 pass through the vehicle manufacturer communication system 500 without cooperating with the communication operator of the communication operator network 200. Regarding the cooperation with the communication operator, for example, a special contract for making the communication of the DCM 1 pass through the vehicle manufacturer communication system 500 can be listed. In addition, the owner of the vehicle 10 can freely select the communication operator network 200 to be signed from a plurality of communication operators.

[0032] Figure 21 is a diagram showing an example of the hardware structure of DCM 1. As a hardware structure, DCM 1 includes CPU 101, memory 102, auxiliary storage device 103, wireless communication unit 104, SIM 105 and SIM 106. Auxiliary storage device 103 is, for example, a hard disk drive (HDD) and a solid state drive (SSD). Among the programs stored in auxiliary storage device 103, there are, for example, an operating system (OS), a communication control program and other multiple programs. The communication control program is a program that establishes an IPsec tunnel with the ePDG of the vehicle manufacturer communication system 500 after connecting to the communication carrier network 200 using the profile information in SIM#2, and connects to the vehicle manufacturer communication system 500 using the profile information in SIM#1. Memory 102 includes semiconductor memories such as read-only memory (ROM) and random access memory (RAM). The memory 102 and the auxiliary storage device 103 are each an example of a computer-readable recording medium.

[0033] The CPU 101 performs various processes by loading the OS and other various programs stored in the auxiliary storage device 103 into the memory 102 and executing them. The number of CPU 101 is not limited to one, and a plurality of CPUs may be provided. The CPU 101 is an example of a "control unit". In the first embodiment, the wireless communication unit 104 communicates with an external device based on a 4G mobile communication method. In addition, in the case where the communication operator network 200 is a system corresponding to a mobile communication method after 5G or 6G, it is assumed that the wireless communication unit 104 also corresponds to the mobile communication method corresponding to the communication operator network 200.

[0034] SIM 105 and SIM 106 are eUICCs. In the first embodiment, SIM 105 is a chip-type eUICC. SIM 106 can be a chip-type or a card-type. In addition, the hardware structure of DCM 1 is not limited to Figure 2 For example, SIM 105 may be a card-type eUICC or a UICC. For example, SIM 106 may be a card-type pluggable UICC. When SIM 106 is a card-type, DCM 1 has a SIM slot and a SIM card reader.

[0035] Figure 3This is an example of the functional structure of the DCM 1. As a functional structure, the DCM 1 includes a communication control unit 11. The communication control unit 11 controls the connection between the DCM 1 and the vehicle manufacturer communication system 500 using the profile information stored in the SIM 105 and the SIM 106. The details of the processing of the communication control unit 11 will be described below.

[0036] The SIM 105 stores profile information 105A. The profile information 105A is profile information issued by the vehicle manufacturer communication system 500. The profile information 105A is also referred to as profile information for the vehicle manufacturer communication system 500. In the first embodiment, since the SIM 105 is an eUICC, the profile information 105A can be rewritten. For example, when the owner of the vehicle 10 changes or when the profile information 105A is updated for security enhancement, the profile information 105A can be rewritten. Figure 3 In the embodiment, although the identity confirmation certificate 105B is also shown in the SIM 105, the identity confirmation certificate 105B is not used in the first embodiment. An embodiment using the identity confirmation certificate 105B is described below. The SIM 105 is an example of a "storage unit" and a "second embedded universal integrated circuit card". The profile information 105A is an example of "authentication information" and "profile information" stored in the "second embedded universal integrated circuit card".

[0037] The SIM 106 stores the profile information 106A. The profile information 106A is the profile information issued by the communication operator network 200. The profile information 106A may also be referred to as a profile for the communication operator network 200. The profile information includes, for example, a plurality of identification information and key information for authentication and encryption. The identification information included in the profile information includes, for example, an International Mobile Subscriber Identity (IMSI) and an Integrated Circuit Card ID (ICCID). The SIM 106 is an example of a "first embedded universal integrated circuit card". The profile information 106A is an example of "profile information".

[0038] Figure 4 An example of a flowchart of the communication connection establishment process of the DCM 1 is shown. Figure 4The processing shown is started, for example, when profile information is stored in SIM#2, when the SIM card of SIM#2 is inserted, and when a user operation is input to request a connection for communication using a mobile communication method. Figure 4 The execution subject of the illustrated example is the CPU 101, and for convenience of explanation, the functional structural elements are mainly described.

[0039] In OP1, the communication control unit 11 reads the profile information 106A for the communication carrier network 200 from the SIM 106. In OP2, the communication control unit 11 executes a process of establishing a connection with the communication carrier network 200. In the process of establishing a connection with the communication carrier network 200, authentication is performed by the communication carrier network 200. At this time, the communication control unit 11 accepts authentication in the communication carrier network 200 using the profile information 106A. When the authentication succeeds, the connection with the communication carrier network 200 is established.

[0040] In OP3, the communication control unit 11 performs a process of establishing an IPsec tunnel with the ePDG in the vehicle manufacturer communication system 500. In the process of establishing the IPsec tunnel, the communication control unit 11 performs a step for establishing the IPsec tunnel to the ePDG. The ePD-related information used in the process of establishing the IPsec tunnel can be obtained, for example, based on the information included in the profile information 105A. The IPsec tunnel is an example of a "logical tunnel".

[0041] In OP4, the communication control unit 11 reads the profile information 105A for the vehicle manufacturer communication system 500 from the SIM 105. In OP5, the communication control unit 11 performs a process of establishing a connection with the vehicle manufacturer communication system 500. In the process of establishing a connection with the vehicle manufacturer communication system 500, authentication is performed by the vehicle manufacturer communication system 500. At this time, the communication control unit 11 receives authentication in the vehicle manufacturer communication system 500 using the profile information 105A through the IPsec tunnel. When the authentication succeeds, the connection with the vehicle manufacturer communication system 500 is established. After that, the DCM 1 can communicate with the Internet or the like via the vehicle manufacturer communication system 500 through the IPsec tunnel.

[0042] Figure 5An example of a sequence until the connection between DCM 1 and the vehicle manufacturer communication system 500 is established. In S1, a step of establishing communication is performed between DCM 1 and the communication operator network 200. The process in S1 is also called a contact step. In S1, information is mainly exchanged between DCM 1 and the MME in the communication operator network 200. S2 is the authentication of DCM 1 performed in the step in S1. In S2, in the communication operator network 200, the MME collaborates with the HSS, for example, to perform AKA (Authentication and Key Agreement) authentication. In S2, DCM 1 uses the information contained in the profile information 106A for the communication operator network 200 to accept the authentication in the communication operator network 200. Then, the connection between DCM 1 and the communication operator network 200 is established.

[0043] In S3, a step of establishing an IPsec tunnel is performed between the DCM 1 and the ePDG of the vehicle manufacturer communication system 500. In S4, an IPsec tunnel is established between the DCM 1 and the ePDG of the vehicle manufacturer communication system 500. One end of the IPsec tunnel is set as the interface of the ePDG, and the other end is set as the interface corresponding to the SIM 106 of the DCM 1.

[0044] In S5, a step of establishing a connection between DCM 1 and the vehicle manufacturer communication system 500 through an IPsec tunnel is performed. In S6, in the vehicle manufacturer communication system 500, AAA collaborates with HSS, for example, performing AKA authentication in the same manner as the MME in the communication operator network 200. In S6, DCM 1 uses the information contained in the profile information 105A for the vehicle manufacturer communication system 500 to accept the authentication in the vehicle manufacturer communication system 500. Then, a connection between DCM 1 and the vehicle manufacturer communication system 500 is established. Thereafter, DCM 1 is able to communicate with a PDN (Public Data Network) such as the Internet through the communication operator network 200 and the vehicle manufacturer communication system 500. Within the vehicle manufacturer communication system 500, communications from DCM 1 are forwarded from the ePDG to the PGW, and output from the PGW to a PDN such as the Internet.

[0045] Effects of the First Embodiment

[0046] In the first embodiment, the DCM 1 establishes an IPsec tunnel with the ePDG of the vehicle manufacturer communication system 500 on the communication operator network 200, thereby enabling communication via the vehicle manufacturer communication system 500 while using the communication operator network 200 as an access network. As a result, the owner of the vehicle 10 can freely select a communication operator network to be contracted from among a plurality of communication operator networks. In addition, even if the vehicle manufacturer communication system 500 does not cooperate with the communication operator network, the communication of the DCM 1 can be passed through the vehicle manufacturer communication system 500.

[0047] Modifications

[0048] In the first embodiment, since the vehicle manufacturer communication system 500 authenticates the subscriber in the same manner as the normal EPC, the DCM 1 stores the profile information 105A in the SIM 105. The vehicle manufacturer communication system 500 may also use an authentication method different from the EPC instead. In this case, the DCM 1 stores the authentication information used in the authentication method used by the vehicle manufacturer communication system 500 instead of the profile information 105A.

[0049] In a modified example, DCM 1 does not store profile information 105A in SIM 105, but stores identity confirmation certificate 105B instead. When purchasing a vehicle, the contractor (owner) submits identity confirmation documents such as a driver's license with a facial image, etc., and the prescribed certification authority reviews it and matches the vehicle with the contractor. In addition, the key information generated by DCM 1 can be sent to the certification authority that cooperates with the vehicle manufacturer communication system 500, and an electronic certificate that is the key information of the contractor himself is issued. SIM 105B contains the key information and the electronic certificate that proves that it is the key information of the contractor himself. DCM 1 uses identity confirmation certificate 105B in authentication in the vehicle manufacturer communication system 500.

[0050] As described above, since SIM 105B is information based on the contractor's identity verification document, the contractor's identity verification can be more reliably performed by using SIM 105B for authentication. In addition, the identity verification certificate 105B can also be stored in a secure storage area outside SIM 105. The identity verification certificate 105B in the modified example is an example of "authentication information".

[0051] In addition, the authentication method adopted by the vehicle manufacturer communication system 500 is not limited to the authentication method using the SIM 105B. In addition, the DCM 1 may store the authentication information corresponding to the authentication method adopted in the vehicle manufacturer communication system 500 and the authentication information permitted to be used by the vehicle manufacturer communication system 500 in advance in the secure storage area of ​​the auxiliary storage device 103. The DCM 1 may also read the authentication information from the secure storage area and accept the authentication at the time of authentication in the vehicle manufacturer communication system 500. In such a case, the DCM 1 may not have the SIM 105, but only have one SIM, the SIM 106.

[0052] Other Modifications

[0053] The above-described embodiment is merely an example, and the present disclosure can be implemented with appropriate modifications without departing from the gist of the disclosure.

[0054] In the first embodiment, it is assumed that the communication operator network 200 and the vehicle manufacturer communication system 500 are systems corresponding to 4G. However, it is not limited to this, and the communication operator network 200 and the vehicle manufacturer communication system 500 can be systems corresponding to 5G, 3G, and mobile communication methods after 6G. In the case where the vehicle manufacturer communication system 500 is a system corresponding to 5G, the vehicle manufacturer communication system 500, for example, has N3IWF instead of ePDG, UPF instead of PGW, Unified Data Management (UDM) instead of HSS, Policy Control Function (PCF) instead of PCRF, and Authentication Server Function (AUSF) instead of AAA. In the case where the communication operator network 200 is a system corresponding to 5G, it has gNB instead of eNB, Access and Mobility Management Function (AMF) and Session Management Function (SMF) instead of SGW and MME, and UDM instead of HSS.

[0055] In the first embodiment, although the case where the communication of the vehicle 10 is passed through the vehicle manufacturer communication system 500 managed by the manufacturer of the vehicle 10 is described, the application object of the technology described in the first embodiment is not limited to the connection between the vehicle 10 and the vehicle manufacturer communication system 500. For example, it can also be applied to the connection between a smartphone or IoT terminal and the communication system of its manufacturer. In addition, it can also be applied to the connection between the terminal and the communication system of a third party other than the manufacturer of the terminal. In such a case, the terminal is provided with authentication information issued by the third-party communication system (for example, SIM profile information, etc.) and a program for connecting to the third-party communication system (equivalent to the communication control unit 11).

[0056] In the first embodiment, an IPsec tunnel is established between the DCM 1 and the ePDG in the vehicle manufacturer communication system 500, but the present invention is not limited thereto. A logical tunnel at the IP layer or higher other than the IPsec tunnel may be established between the DCM 1 and the ePDG in the vehicle manufacturer communication system 500.

[0057] The processes and units described in the present disclosure can be implemented in combination as long as no technical contradiction occurs.

[0058] Furthermore, a process described as being implemented by one device may be shared and executed by multiple devices. Alternatively, a process described as being implemented by different devices may be executed by one device. In a computer system, the hardware structure (server structure) used to implement each function can be flexibly changed.

[0059] The present disclosure can also provide a computer with a computer program having the functions described in the above embodiments installed therein, and enable one or more processors of the computer to read and execute the program to achieve the same. Such a computer program can be provided to the computer via a non-temporary computer-readable storage medium that can be connected to the system bus of the computer, or it can be provided to the computer via a network. Non-temporary computer-readable storage media include, for example, any type of disk (Floppy (registered trademark) disk, hard disk drive (HDD)), optical disk (CD-ROM, DVD disk, Blu-ray disk, etc.), ROM (read-only memory), random access memory (RAM), EPROM, EEPROM, magnetic card, flash memory, optical card, and any type of medium suitable for storing electronic commands.

Claims

1. An information processing device comprising: a storage unit for storing authentication information, wherein the authentication information is used for connection to the first communication system; A first embedded universal integrated circuit card stores configuration file information, wherein the configuration file information is used for connection to a first operator network selected by a user as an access network and contracted by the user; The control unit performs the following actions, namely, using the profile information to accept authentication in the first operator network and establish a connection with the first operator network, On the first operator network after the connection is established, a logical tunnel is established with a gateway device in the first communication system, accepting authentication in the first communication system using the authentication information through the logical tunnel and establishing a connection with the first communication system, After the connection with the first communication system is established, communication with an external network is performed through the logical tunnel and the first communication system.

2. The information processing device according to claim 1, wherein: The authentication information is profile information issued by the first communication system and used for connection to the first communication system. The storage unit is a second embedded universal integrated circuit card.

3. The information processing device according to claim 1, wherein: The authentication information is an electronic certificate and key information. The electronic certificate is issued by a predetermined certification authority when the owner of the information processing device has confirmed the identity of the owner with respect to the key information used for authentication in the first communication system.

4. The information processing device according to claim 1, wherein: The information processing device is a vehicle-mounted device mounted on a vehicle, The first communication system is a communication system managed by a manufacturer of the vehicle.

5. An information processing method, which performs the following actions by an information processing device, wherein: The information processing device comprises: a storage unit for storing authentication information, wherein the authentication information is used for connection to the first communication system; A first embedded universal integrated circuit card stores configuration file information, wherein the configuration file information is used for connection to a first operator network selected by a user as an access network and contracted by the user. The action is, using the profile information to accept authentication in the first operator network and establish a connection with the first operator network, On the first operator network after the connection is established, a logical tunnel is established with a gateway device in the first communication system, accepting authentication in the first communication system using the authentication information through the logical tunnel and establishing a connection with the first communication system, After the connection with the first communication system is established, communication with an external network is performed through the logical tunnel and the first communication system.

Images