Communication system, authentication method, and storage medium

Abstract

The present disclosure provides a communication system, an authentication method, and a storage medium that reduce the cost for authenticating a communication terminal. The communication system is provided with: a storage unit that stores authentication data for authenticating the mobile communication terminal; a gateway that accepts access from a first communication network that is not trusted; and a control unit. The control unit authenticates the mobile communication terminal connected via the gateway by using the authentication data via the first communication network, and provides first information relating to an authentication result of the mobile communication terminal to a first server that is a communication destination of the mobile communication terminal.

Description

Technical Field

[0001] The present disclosure relates to a communication technology. Background Art

[0002] A technology for improving the reliability of communication using a cellular communication network has been developed. Regarding this technology, for example, Patent Document 1 discloses a communication device including a SIM (Subscriber Identity Module) card capable of storing a plurality of communication profiles.

[0003] Prior Art Literature

[0004] Patent Literature

[0005] Patent Document 1: Japanese Patent Application Publication No. 2022-180105 Summary of the invention

[0006] Problems to be solved by the invention

[0007] An object of the present disclosure is to reduce the cost for authenticating a communication terminal.

[0008] Methods for solving problems

[0009] One embodiment of the present disclosure is a communication system, comprising:

[0010] A storage unit that stores authentication data for authenticating a mobile communication terminal; a gateway that accepts access from a first communication network that is not trusted; and a control unit that performs the following operations, namely: authenticating a mobile communication terminal connected via the gateway via the first communication network using the authentication data; and providing first information related to the authentication result of the mobile communication terminal to a first server that is a communication target of the mobile communication terminal.

[0011] One embodiment of the present disclosure is an authentication method, comprising:

[0012] The first step is to use the authentication data stored in the storage unit to authenticate the mobile communication terminal connected via a gateway that accepts access from an untrusted first communication network; the second step is to provide first information related to the authentication result of the mobile communication terminal to a first server that is the communication target of the mobile communication terminal.

[0013] Furthermore, as another aspect, there can be cited a program for causing a computer to execute the above-described method, or a computer-readable storage medium storing the program in a non-transitory manner.

[0014] Effects of the Invention

[0015] According to the present disclosure, the cost for authenticating a communication terminal can be reduced. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 This is a schematic diagram of a vehicle communication network according to the first embodiment.

[0017] Figure 2 For a more detailed Figure 1 The network structure shown is represented in the figure.

[0018] Figure 3 It is a hardware structure diagram of the DCM (Data Communication Module) 10.

[0019] Figure 4 FIG. 1 is a hardware structure diagram of the communication device 11 .

[0020] Figure 5 FIG. 2 is a hardware structure diagram of the authentication device 20 .

[0021] Figure 6 This is the software structure diagram of DCM10.

[0022] Figure 7 FIG. 1 is a software structure diagram of the communication device 11 .

[0023] Figure 8 FIG. 2 is a software structure diagram of the authentication device 20 .

[0024] Fig. 9 This is a flowchart of the process of connecting the DCM 10 to the communication system 2 .

[0025] Fig.10 This is a flowchart of the authentication process executed by the authentication device 20.

[0026] Fig.11 This is a schematic diagram of a vehicle communication network according to a modification of the first embodiment. DETAILED DESCRIPTION

[0027] In recent years, the networking of automobiles has been advancing, and the number of vehicles equipped with on-board devices with wireless communication functions has increased. The on-board devices can provide various services to vehicle passengers by communicating with server devices (application servers, etc.) via cellular communication networks, for example.

[0028] The server device that the vehicle-mounted device is communicating with is not necessarily configured in a secure network. Therefore, it is preferred that the vehicle-mounted device authenticates the server device that is the communication target by means of, for example, SSL (Secure Sockets Layer) during the communication process to confirm its authenticity.

[0029] In the future, if the amount of processing performed by the vehicle-mounted device increases, it is conceivable that more resources for authentication will be consumed. For example, when the number of communication objects increases, resources for exchanging and confirming certificates will be consumed each time. However, the processor of the vehicle-mounted device is different from a computer for general conditions, and there are many restrictions on the resources that can be used, so it is not preferable to allocate more resources for authentication. The communication system involved in the present disclosure will solve the above problem.

[0030] The communication system involved in the first method of the present disclosure comprises: a storage unit, which stores authentication data for authenticating a mobile communication terminal; a gateway, which accepts access from a first communication network that is not trusted; and a control unit, which performs the following operations, namely: authenticating a mobile communication terminal connected via the gateway via the first communication network and using the authentication data; and providing first information related to the authentication result of the mobile communication terminal to a first server that is a communication target of the mobile communication terminal.

[0031] The mobile communication terminal is typically an in-vehicle terminal mounted on a vehicle, but is not limited to this.

[0032] The gateway is a terminal device that accepts access via an untrusted first communication network in the communication system. The communication system includes a storage unit that stores authentication data, a control unit, and a gateway. The control unit authenticates the mobile communication terminal based on the authentication data stored in the storage unit.

[0033] The control unit provides information (first information) related to the authentication result of the mobile communication terminal to a first server that is a communication partner of the mobile communication terminal. The first server may also be configured on a network such as the Internet that is not secure. The control unit may also relay the communication from the authenticated mobile communication terminal in the first server.

[0034] The presence of first information corresponding to a certain mobile communication terminal means that the mobile communication terminal has been authenticated by the communication system. Therefore, it can be considered that the first server has authenticated the mobile terminal under the condition that the first information is provided to the first server. That is, the process for authenticating the mobile communication terminal from the first server can be omitted.

[0035] In addition, the control unit may authenticate the first server using an electronic certificate corresponding to the first server. Preferably, the authentication is performed before authenticating the mobile communication terminal.

[0036] Furthermore, the control unit may provide the mobile communication terminal with second information related to the authentication result of the first server. The mobile communication terminal may also treat the first server that provided the second information as a trustworthy communication partner.

[0037] According to the above structure, the mobile communication terminal can be taught that the first server is a trustworthy device, and the mobile communication terminal can be taught that the first server is a trustworthy device. That is, even if the mobile communication terminal and the first server do not directly perform mutual authentication, the legitimacy between them can be guaranteed.

[0038] In addition, the communication system may also include a second gateway connected to the cellular communication network. In addition, the control unit may also use the same authentication data to authenticate the mobile communication terminal when the mobile communication terminal is connected via the gateway and when the mobile communication terminal is connected via the second gateway.

[0039] Furthermore, the authentication data may be data corresponding to SIM profile information of the mobile communication terminal. The SIM profile information may be issued by a carrier operating the communication system.

[0040] The specific embodiments of the present disclosure are described below based on the drawings. Unless otherwise specified, the hardware configuration, module configuration, functional configuration, etc. described in each embodiment do not limit the technical scope of the disclosure to these contents.

[0041] (First Embodiment)

[0042] [Network Overview]

[0043] In reference Figure 1At the same time, an overview of the vehicle communication network involved in the first embodiment is described. The vehicle communication network involved in this embodiment is configured to include a DCM10 mounted on a vehicle 1, a communication device 11 connected to the DCM10, and a server device 3. In addition, the DCM10 and the server device 3 are connected together via a carrier network A and a communication system 2, or a carrier network B and a communication system 2. The communication system 2 is a network including a plurality of communication devices, and the communication device includes an authentication device 20. In addition, the vehicle 1 and the server device 3 included in the system may also be multiple.

[0044] Vehicle 1 is a networked vehicle that can communicate with any server device via wireless communication. Vehicle 1 can provide various services by communicating with an external server device (e.g., server device 3) via DCM10, which is a wireless communication device. As various services, for example, navigation services, remote control (e.g., remote control of air conditioning, etc.) services, in-car Wi-Fi (registered trademark) services, emergency notification services, etc. can be exemplified. In addition to the devices shown in the figure, vehicle 1 may also have a vehicle-mounted terminal that provides these services.

[0045] DCM10 is a device for connecting a component (e.g., an on-board terminal) of the vehicle 1 to the server device 3 to implement wireless communication with a predetermined network. In the present embodiment, DCM10 is configured to be connectable to a predetermined cellular communication network. DCM10 is configured to have an eUICC (Embedded Universal Integrated Circuit Card) for identifying the user. The eUICC can be a physical SIM card or an eSIM, etc. In the following, the eUICC of DCM10 is referred to as the first SIM.

[0046] In the example shown in the figure, the DCM 10 is configured to be communicable with a carrier network A constituting a cellular communication network. The carrier network A includes a base station of the cellular communication network, a control device for managing mobile communication terminals, and the like.

[0047] In this embodiment, the carrier network A is connected to the communication system 2. The communication system 2 is a network that connects the carrier network A to a PDN (Packet Data Network) such as the Internet.

[0048] The carrier network A is a network operated by a communication operator, whereas the communication system 2 can be a system operated by the manufacturer of the vehicle 1. By connecting the carrier network A and the communication system 2 to each other, for example, a unique service can be provided to the vehicle 1 through the communication system 2.

[0049] In this embodiment, the carrier network A only provides a communication line, and the authentication of the DCM 10 and the provision of services for the DCM 10 are implemented by the communication system 2. The DCM 10 has a first SIM storing profile information for receiving authentication through the communication system 2. The first SIM is issued by a carrier (e.g., a vehicle manufacturer) that operates the communication system 2. The communication system 2 includes an authentication device 20 for authenticating the DCM 10.

[0050] The DCM 10 is connected to the communication system 2 via the carrier network A, and receives authentication from the communication system 2 using the profile information stored in the first SIM. In the present embodiment, the authentication device 20 of the communication system 2 performs authentication of the DCM 10 based on the profile information of the first SIM. The authenticated DCM 10 becomes able to communicate with the PDN (e.g., the Internet), and thus can start communication with the server device 3.

[0051] Furthermore, as shown in the figure, in a form where the DCM 10 is directly connected to the cellular communication network (carrier network A), if a communication failure occurs in the carrier network, the communication will be interrupted.

[0052] In order to cope with this situation, a technology has been proposed in which a plurality of profile information is stored in a SIM card and a network is switched according to the situation (for example, connecting to a network of another carrier).

[0053] However, even with such a structure, it is impossible to cope with the upgrading of cellular communication standards. For example, it is expected that the services of previous communication standards such as 3G will be discontinued one after another in the future. On the other hand, since cars are generally used for a long time span of more than 10 years, it is conceivable that communication devices such as DCM equipped at the time of manufacturing will become unusable in the future. In order to change the carrier network, it is necessary to replace the SIM card or communication module, which will incur great costs.

[0054] To cope with this situation, in the present embodiment, the DCM 10 is configured to be externally connectable to another communication device, so that when the carrier network A becomes unavailable, an alternative communication path is secured via the communication device.

[0055] like Figure 1As shown, the DCM 10 is configured to be externally connected to the communication device 11. For example, the DCM 10 is configured to be connected to the communication device 11 via an interface such as a USB, and to transmit and receive data via the communication device 11. In other words, the DCM 10 is configured to be capable of USB tethering.

[0056] The communication device 11 is a device capable of performing wireless communication based on an arbitrary communication standard. For example, even when the service of the communication standard used by the DCM 10 has been terminated, the DCM 10 can continue to communicate via the communication device 11 .

[0057] The communication device 11 is a device having the same communication function as the DCM 10. The communication device 11 has a second SIM card and can connect to the carrier network B based on the profile information stored in the second SIM card.

[0058] Carrier network B is a cellular communication network independent of carrier network A and communication system 2. For example, the user of vehicle 1 selects carrier network B and signs a contract, and prepares communication device 11 corresponding to the contract.

[0059] Since the carrier network B is a network independent of the communication system 2, it is not possible to connect the carrier network B and the communication system 2 to each other. Therefore, in this embodiment, the DCM 10 connected to the carrier network B establishes an IPsec tunnel with the ePDG of the communication system 2, so that the communication system 2 can be connected via the carrier network B and the IP communication network of the connection target.

[0060] The communication system 2 has a gateway (enhanced Packet Data Gateway, hereinafter ePDG) for accepting access from the IP communication network. The ePDG is a gateway for accepting untrusted non-3GPP wireless access. Thus, in addition to access via the wireless access network (carrier network A), the communication system 2 can also accept access via the IP communication network (via carrier network B). In addition, the IP communication network is typically the Internet, but it can also be a network other than this.

[0061] Thus, the DCM 10 connected to the carrier network B can communicate with the communication system 2 using a path via the IP communication network (Internet).

[0062] According to the above configuration, even when the carrier network A is unavailable, the user of the vehicle 1 can continue the communication between the DCM 10 and the communication system 2 through an arbitrary path.

[0063] [Overview of Authentication Process]

[0064] When DCM 10 is connected to communication system 2 via carrier network A, communication system 2 can confirm the legitimacy of DCM 10 through the SIM (first SIM) issued by itself. On the other hand, when DCM 10 is connected via carrier network B, communication system 2 cannot trust DCM 10 because only authentication (authentication using the second SIM) is performed by carrier network B.

[0065] Therefore, in the present embodiment, the communication system 2 (authentication device 20 ) authenticates the DCM 10 connected via the ePDG using the authentication information possessed by the first SIM, similarly to the case where the connection is made via the carrier network A.

[0066] Thus, even when the communication path between the DCM 10 and the communication system 2 is changed, the communication system 2 can continue to perform authentication with the same reliability as that of cellular communication without changing the device configuration.

[0067] Furthermore, in this embodiment, the authentication device 20 shares the result of authenticating the DCM 10 in this way with the server device 3. In addition, the authentication device 20 has a function of authenticating the server device 3, and shares the result of authenticating the server device 3 with the DCM 10. The authentication result can also be sent or shared using a predetermined API (Application Programming Interface).

[0068] In this embodiment, since the authentication device 20 shares the authentication results of the DCM 10 and the server device 3 with the DCM 10 and the server device 3, respectively, the DCM 10 and the server device 3 can confirm that the communication object is the real communication object even if the authentication process is not performed locally. In addition, since there is no need to exchange certificates between the DCM 10 and the server device 3, the processing load of the DCM 10 can be reduced.

[0069] Furthermore, the authentication device 20 can confirm that the user of the vehicle 1 is the contracting party by authenticating the DCM 10. That is, by having the server device 3 share the authentication result with the authentication device 20, the server device 3 can confirm that the user of the vehicle 1 is the contracting party. In addition, this has the advantage that it is not necessary to perform a self-authentication process (for example, obtaining an identity certificate, etc.) when starting to use the service.

[0070] [Details of network structure]

[0071] Figure 2 For detailed reference Figure 1 A diagram showing the components of each system described. Figure 2 In the embodiment, the structural elements of each system are extracted from the structural elements of the first embodiment and are represented. The structural elements of each system are not limited to Figure 2 The situation shown.

[0072] The carrier network A is constructed in a manner including a base station for cellular communication (hereinafter referred to as eNodeB), a control device for managing mobile communication terminals headed by DCM10 (Mobile Management Entity, hereinafter referred to as MME), and a gateway for implementing data relay (Serving Gateway, hereinafter referred to as S-GW).

[0073] The communication system 2 is configured to include a gateway (Packet Gateway, hereinafter referred to as P-GW) for connecting the EPC network to the Internet, and a device for implementing network policy and billing management (hereinafter referred to as PCRF).

[0074] Furthermore, as described above, the communication system 2 is configured to include a gateway (ePDG) that accepts access from the IP communication network, and the authentication device 20 .

[0075] The authentication device 20 is also called an AAA (Authentication Authorization and Accounting) server, and performs the process of authenticating the mobile communication terminal including the DCM 10. The authentication device 20 has the function of performing authentication in place of the MME in the conventional EPC network. The authentication device 20 is connected to a database (Home Subscriber Server, hereinafter referred to as HSS) that manages subscriber information, and performs authentication of the mobile communication terminal based on the information stored in the database (authentication information corresponding to each first SIM).

[0076] The carrier network B has a function of authenticating the mobile communication terminal (communication device 11) connected via the base station (eNodeB). In addition, the carrier network B has a P-GW connected to an IP communication network (e.g., the Internet). Thus, the mobile communication terminal (communication device 11) connected to the carrier network B can communicate with the IP communication network.

[0077] When establishing a connection using its own wireless communication module, DCM 10 sends a connection request to communication system 2 via carrier network A. At this time, DCM 10 receives authentication from authentication device 20 using authentication information included in profile information (hereinafter referred to as first profile) stored in the first SIM.

[0078] Furthermore, when establishing a connection via the communication device 11, the DCM 10 sends a connection request to the communication system 2 using the ePDG of the communication system 2 as the destination. As described above, since the ePDG is a gateway that accepts access from the IP communication network, the DCM 10 can communicate with the communication system 2 via the ePDG. At this time, the DCM 10 receives authentication from the authentication device 20 using the authentication information included in the profile information (first profile) stored in the first SIM.

[0079] That is, the DCM 10 is configured to receive authentication from the authentication device 20 using the same authentication information (authentication information included in the first configuration file) regardless of the path to the communication system 2 .

[0080] The connection request is processed by the authentication device 20 of the communication system 2, and authentication is performed between the DCM 10 and the authentication device 20. The authentication device 20 performs authentication of the DCM 10 based on the authentication information included in the first profile. When the authentication is completed, a path from the DCM 10 to the PDN is established, so that the DCM 10 and the server device 3 can communicate.

[0081] In this embodiment, the DCM 10 is directed to a path ( Figure 2 In the case of the first path (shown in the figure), and in the case of the path (second path) for connecting to the communication system 2 via the IP communication network using network sharing, the same authentication information (profile information) is used to receive authentication from the authentication device 20. According to the above structure, it is possible to effectively use the equipment such as the first SIM and the authentication device 20 for performing authentication using the cellular communication network, and set the path (second path) via the IP communication network in an additional manner.

[0082] Furthermore, the authentication device 20 shares the result of authenticating the DCM 10 with the server device 3. In addition, the authentication device 20 authenticates the server device 3 as the communication partner of the DCM 10 in advance, and shares the result of the authentication with the DCM 10. In the case where there are multiple server devices 3, the multiple server devices 3 may also be authenticated in advance. Thus, the DCM 10 and the server device 3 can confirm the legitimacy of each other without exchanging certificates, etc.

[0083] [Hardware Structure]

[0084] Next, the hardware configuration of each device constituting the system will be described. Figure 3 This is a diagram schematically showing an example of the configuration of hardware included in the DCM 10 according to the present embodiment.

[0085] The DCM 10 can be configured as a computer having a processor (CPU, GPU, etc.), a main storage device (RAM, ROM, etc.), and an auxiliary storage device (EPROM, hard disk drive, removable media, etc.). The auxiliary storage device stores an operating system (OS), various programs, various tables, etc., and by executing the programs stored therein, various functions (software modules) that are consistent with the intended purpose as described later can be realized. However, some or all of the functions can also be realized as hardware modules by hardware circuits such as ASIC and FPGA.

[0086] The DCM 10 is configured to include a control unit 101 , a storage unit 102 , a wireless communication module 103 , a CAN communication module 104 , and an expansion interface 105 .

[0087] The control unit 101 is a computing unit that implements various functions of the DCM 10 by executing a predetermined program. The control unit 101 can be implemented by a hardware processor such as a CPU, etc. In addition, the control unit 101 can also be configured to include a RAM, a ROM (Read Only Memory), a cache memory, etc.

[0088] The storage unit 102 is a means for storing information, and is composed of a storage medium such as a RAM, a magnetic disk, or a flash memory. The storage unit 102 stores a program executed by the control unit 101 and data used by the program.

[0089] The wireless communication module 103 is a communication device that performs wireless communication with a predetermined network. In the present embodiment, the wireless communication module 103 is configured to be able to communicate with a predetermined cellular communication network (carrier network A).

[0090] The wireless communication module 103 is configured to include a SIM card 103A. The SIM card 103A is Figure 1 The SIM card 103A is configured as a microcomputer including a CPU and a storage device. The SIM card 103A has information (PLMN information) for connecting to the carrier network A and authentication information for receiving authentication from the communication system 2.

[0091] The CAN communication module 104 is a communication interface for connecting the DCM 10 to the in-vehicle network of the vehicle 1. The CAN communication module 104 may be configured to include a network interface board that implements communication using a CAN (Controller Area Network) protocol. The DCM 10 can communicate data with other components of the vehicle 1 (e.g., an onboard terminal, etc.) via the CAN communication module 104.

[0092] The expansion interface 105 is an interface for mutually connecting the DCM 10 and the communication device 11. The expansion interface 105 is, for example, a USB interface. The DCM 10 is configured to be connectable to the communication device 11 via, for example, a USB interface.

[0093] Next, the hardware configuration of the communication device 11 will be described. Figure 4 It is a diagram schematically showing an example of the configuration of hardware included in the communication device 11 according to the present embodiment.

[0094] The communication device 11 is configured to include a control unit 111 , a storage unit 112 , a wireless communication module 113 , and an interface 114 .

[0095] The control unit 111 is a calculation unit that implements various functions of the communication device 11 by executing a predetermined program, similarly to the control unit 101. The control unit 111 can be implemented by a hardware processor such as a CPU, for example.

[0096] The storage unit 112 is a means for storing information, and is composed of a storage medium such as a RAM, a magnetic disk, or a flash memory. The storage unit 112 stores a program executed by the control unit 111 and data used by the program.

[0097] The wireless communication module 113 is a communication device that performs wireless communication with a predetermined network. In the present embodiment, the wireless communication module 113 is configured to be able to communicate with a predetermined cellular communication network (carrier network B).

[0098] The wireless communication module 113 is configured to include a SIM card 113A. The SIM card 113A is Figure 1 The second SIM in the SIM card 113A is configured as a microcomputer having a CPU and a storage device. The SIM card 113A has information (PLMN information) for connecting to the carrier network B and authentication information for receiving authentication from the network. The second SIM can be a physical SIM card or an eSIM.

[0099] The interface 114 is an interface for mutually connecting the DCM 10 and the communication device 11. The communication device 11 is configured to be connectable to the DCM 10 via an interface such as a USB, for example.

[0100] Next, the hardware configuration of the authentication device 20 will be described. Figure 5 It is a diagram schematically showing an example of the configuration of hardware included in the authentication device 20 according to the present embodiment.

[0101] The authentication device 20 is configured as a computer including a control unit 201 , a storage unit 202 , and a communication module 203 .

[0102] The authentication device 20 can be configured as a computer having a processor (CPU, GPU, etc.), a main storage device (RAM, ROM, etc.), and an auxiliary storage device (EPROM, hard disk drive, removable media, etc.). However, some or all of the functions (software modules) may also be implemented as hardware modules by hardware circuits such as ASIC and FPGA.

[0103] The control unit 201 is a calculation unit that realizes various functions (software modules) of the authentication device 20 by executing a predetermined program. The control unit 201 can be realized by a hardware processor such as a CPU, for example.

[0104] The storage unit 202 is a means for storing information, and is composed of a storage medium such as a RAM, a magnetic disk, or a flash memory. The storage unit 202 stores a program executed by the control unit 201 and data used by the program.

[0105] The communication module 203 is a communication interface for connecting the authentication device 20 to the communication system 2. The authentication device 20 can perform data communication with other devices arranged in the communication system 2 via the communication module 203.

[0106] [Software Structure]

[0107] Next, the software configuration of each device constituting the system will be described. Figure 6 It is a diagram schematically showing the software configuration of the DCM 10 according to the present embodiment.

[0108] In this embodiment, the control unit 101 included in the DCM 10 is configured as a software module including the communication control unit 1011. The software module may be realized by the control unit 101 (CPU) executing a program stored in the storage unit 102. In addition, the information processing performed by the software module is synonymous with the information processing performed by the control unit 101 (CPU).

[0109] In addition, the SIM card 103A (first SIM) built into the wireless communication module 103 is configured to store a first profile as SIM profile information. The first profile is a profile issued by an operator that manages the communication system 2. The first profile is configured to include, for example, identification information such as IMSI (International Mobile Subscription Identity) or ICCID (Integrated Circuit Card ID), and authentication information (key information) for accepting SIM authentication such as AKA authentication.

[0110] The communication control unit 1011 establishes a network connection in response to a request from a vehicle component of the vehicle 1. The communication control unit 1011 may also be configured to be able to select a network to be used in the connection. For example, when the first SIM is inserted into the DCM 10, the DCM 10 can implement a network connection via the carrier network A. In addition, when the communication device 11 having the second SIM is connected to the DCM 10, the DCM 10 can implement a network connection via the carrier network B. When multiple networks can be used, the communication control unit 1011 may also determine the network to be used in the connection based on the user's selection.

[0111] When the network connection is established via the carrier network A, the communication control unit 1011 receives authentication from the authentication device 20 using the profile information (first profile) stored in the first SIM.

[0112] When the network connection is implemented via the carrier network B, the communication control unit 1011 first executes a process of requesting the communication device 11 to connect to the carrier network B. Furthermore, after the communication device 11 is connected to the carrier network B, it interacts with the communication system 2 (authentication device 20) via the carrier network B, thereby executing a process of receiving authentication from the authentication device 20.

[0113] Next, the software configuration of the communication device 11 will be described. Figure 7It is a diagram schematically showing the software configuration of the communication device 11 according to the present embodiment.

[0114] In this embodiment, the control unit 111 included in the communication device 11 is configured as a software module including the communication control unit 1111. The software module may be implemented by the control unit 111 (CPU) executing a program stored in the storage unit 112. In addition, information processing performed by the software module is synonymous with information processing performed by the control unit 111 (CPU).

[0115] In addition, the SIM card 113A (second SIM) built into the wireless communication module 113 is configured to store a second profile as SIM profile information. The second profile is a profile issued by a communication carrier that manages the carrier network B. The second profile is configured to include identification information such as IMSI or ICCID, and authentication information (key information) for receiving SIM authentication, similarly to the first profile.

[0116] The communication control unit 1111 establishes a network connection in accordance with a request from the DCM 10. When there is a connection request from the DCM 10, the communication control unit 1111 implements the network connection via the carrier network B. At this time, the communication control unit 1111 receives authentication from the control device (MME) of the carrier network B using the profile information (second profile) stored in the second SIM.

[0117] Next, the software configuration of the authentication device 20 will be described. Figure 8 It is a diagram schematically showing the software configuration of the authentication device 20 according to the present embodiment.

[0118] In this embodiment, the control unit 201 of the authentication device 20 is configured to include two software modules, namely, a terminal authentication unit 2011 and a server authentication unit 2012. Each software module may be implemented by the control unit 201 (CPU) executing a program stored in the storage unit 202. In addition, information processing executed by a software module is synonymous with information processing executed by the control unit 201 (CPU).

[0119] The terminal authentication unit 2011 receives a request from the DCM 10 and executes a process of authenticating the DCM 10. The authentication process can be executed according to the following procedure defined by 3GPP (registered trademark), for example.

[0120] (1) Processing of receiving an attach request (Attach Request) from DCM 10

[0121] (2) Sending a request to the HSS to obtain authentication data (Authentication data Request)

[0122] (3) Processing of obtaining authentication data response from HSS

[0123] (4) Processing of sending a challenge (User Authentication Request) to DCM10

[0124] (5) Processing of receiving a response (User Authentication Response) from DCM10

[0125] (6) Processing to confirm the legitimacy of DCM 10 based on the response

[0126] In addition, the terminal authentication unit 2011 may also execute a process required for registering the DCM 10 in the communication system 2 in addition to the above.

[0127] The server authentication unit 2012 performs a process of authenticating the server device 3 as the communication partner of the DCM 10. For example, the server authentication unit 2012 obtains an electronic certificate issued by a certification authority from the server device 3 as the communication partner of the DCM 10. The server authentication unit 2012 can verify whether the obtained electronic certificate is an electronic certificate corresponding to the server device 3 by decrypting the electronic certificate using the public key of the certification authority. In addition, the process of authenticating the server device 3 by the server authentication unit 2012 is not limited to the process using the electronic certificate as illustrated.

[0128] This authentication process is executed at an arbitrary timing before the start of communication with the DCM 10 and the server device 3 .

[0129] The terminal authentication unit 2011 that has confirmed the legitimacy of DCM10 through authentication, and the server authentication unit 2012 that has confirmed the legitimacy of the server device 3 share the authentication results between each other's devices. That is, the terminal authentication unit 2011 sends the authentication result of DCM10 to the server device 3, and the server authentication unit 2012 sends the authentication result of the server device 3 to DCM10. In this way, DCM10 and the server device 3 can confirm that each other's communication objects are legitimate communication objects. In addition, the authentication result can be treated as valid before DCM10 is disconnected from the communication system 2, for example.

[0130] [flow chart]

[0131] Next, the details of the process executed when the DCM 10 is connected to the communication system 2 will be described. Fig. 9 This is a flowchart of a process executed when the DCM 10 connects to the communication system 2 .

[0132] First, in step S11, the communication control unit 1011 of the DCM 10 determines the network to be used for connection. For example, when a valid first SIM card is inserted into the DCM 10, the communication control unit 1011 can determine to use Figure 1 In addition, when a valid first SIM card is not inserted in DCM 10 or communication device 11 is connected to DCM 10, communication control unit 1011 may determine to connect to the network via communication device 11 (carrier network B).

[0133] Furthermore, when a plurality of networks are available, which network to use may be determined based on a selection made by the user.

[0134] Next, in step S12, the communication control unit 1011 determines whether the network used in the connection is a direct connection realized by a cellular communication network or a connection realized by network sharing. The direct connection realized by the cellular communication network refers to a method in which the DCM10 uses the built-in wireless communication module 103 to connect to the communication system 2 via the carrier network A. The connection realized by network sharing refers to a method in which the communication device 11 connected to the DCM10 connects to the carrier network B, and the DCM10 connects to the communication system 2 via the communication device 11 and the IP communication network.

[0135] When the network used for connection is a direct connection implemented by a cellular communication network, the process moves to step S13. When the network used for connection is a connection implemented by network sharing, the process moves to step S14.

[0136] In step S13 , the communication control unit 1011 transmits an authentication request to the carrier network A, and the communication system 2 authenticates the DCM 10 .

[0137] In this step, the communication control unit 1011 sends an authentication request to the carrier network A, for example, via the base station of the carrier network A. The authentication request may be data for starting the authentication procedure (for example, an attachment request specified by 3GPP), or a request including data of entities required for authentication. The authentication request reaches the communication system 2 via the carrier network A. For example, the MME of the carrier network A that receives the authentication request may also forward the authentication request to the authentication device 20 of the communication system 2.

[0138] Next, the authentication device 20 of the communication system 2 starts authenticating the DCM 10 according to the authentication request. For example, the authentication device 20 requests the HSS of the communication system 2 for data used in authentication (hereinafter referred to as authentication-related data). The authentication device 20 authenticates the DCM 10 using the received authentication-related data and the information recorded in the first SIM of the DCM 10 (details will be described later).

[0139] When the authentication device 20 successfully authenticates the DCM 10, the communication system 2 establishes communication channels for the control side and the user side. Thus, the DCM 10 can communicate with the server device 3 via the P-GW included in the communication system 2.

[0140] When the process moves to step S14, the DCM 10 instructs the communication device 11 to connect to the network. In response, the communication device 11 starts to connect using the carrier network B. Specifically, the control unit 111 of the communication device 11 sends an authentication request to the carrier network B via the base station of the carrier network B. The authentication request is received by the MME of the carrier network B, and the MME authenticates the communication device 11 based on the authentication-related data obtained from the HSS. In this authentication, the profile information stored in the second SIM is used.

[0141] When the authentication is completed, a communication channel is established between the communication device 11 and the carrier network B, thereby enabling the communication device 11 to communicate with the IP communication network via the P-GW.

[0142] When the communication device 11 becomes able to communicate with the IP communication network, in step S15, authentication is started between the DCM 10 and the communication system 2. In step S15, the DCM 10 sends an authentication request to the communication system 2 using a path through the carrier network of the network sharing target (i.e., carrier network B). The authentication request reaches the communication system 2 via the IP communication network and the ePDG, and is received by the authentication device 20.

[0143] Next, the authentication device 20 starts authenticating the DCM 10 according to the received authentication request. The authentication procedure is the same as that described in step S13. That is, in this step, the authentication of the DCM 10 is also performed based on the profile information stored in the first SIM.

[0144] When the authentication device 20 successfully authenticates the DCM 10, the communication path is established through the communication system 2. As a result, the DCM 10 connected to the communication system 2 via the ePDG becomes able to communicate with the server device 3 via the P-GW. The establishment of the communication path and the relay of data using the communication path can be performed by the authentication device 20 or by other devices included in the communication system 2.

[0145] In addition, the communication system 2 does not relay communication between devices that have not established a communication path. Therefore, for example, the communication system 2 blocks communication from an unauthenticated server device to the DCM 10 .

[0146] Next, the authentication-related processing executed by the authentication device 20 will be described.

[0147] Fig.10 This is a flowchart of the process executed in steps S13 and S15 by the authentication device 20. The illustrated process is started when the authentication device 20 (terminal authentication unit 2011) receives the authentication request transmitted from the DCM 10.

[0148] As described above, in this embodiment, the authentication device 20 provides information related to the authentication result of the DCM 10 to the server device 3 as the communication partner of the DCM 10. Similarly, the authentication device 20 authenticates the server device 3 in advance and provides the authentication result to the DCM 10. Thus, even if the DCM 10 and the server device 3 do not directly perform mutual authentication, they can confirm the legitimacy of each other.

[0149] Therefore, the communication system 2 needs to authenticate the server device 3 in advance at a timing before the DCM 10 is connected. Step S21 is a step in which the authentication device 20 authenticates the server device 3 located on the Internet (PDN). In this step, for example, the authentication device 20 (server authentication unit 2012) obtains an electronic certificate from the server device 3 and decrypts the electronic certificate using the public key of the certification authority. In this way, it is possible to verify whether the obtained electronic certificate is an electronic certificate corresponding to the server device 3. This step can also be skipped after the authentication of the server device 3 is completed.

[0150] Next, in step S22, the terminal authentication unit 2011 obtains authentication-related data from the HSS. The authentication-related data is data used to authenticate the DCM10. As authentication-related data, for example, a challenge, an authentication token, an expected response value, etc. issued by the HSS can be exemplified (when AKA authentication is implemented between the authentication device 20 and the DCM10). AKA authentication refers to an authentication method based on challenge response for implementing terminal authentication using a SIM card. The authentication-related data may also be subscriber information.

[0151] In step S23, the terminal authentication unit 2011 authenticates the DCM 10 based on the authentication-related data. In the case of implementing AKA authentication, the authentication device 20 sends a challenge to the DCM 10, and the DCM 10 generates a response in response thereto. The response is generated based on the authentication information (key information) included in the profile information stored in the first SIM. When the generated response is consistent with the authentication-related data provided by the HSS, it can be considered that the authentication of the DCM 10 is successful.

[0152] In this example, AKA authentication is exemplified as a method for authenticating the DCM 10 , but authentication may be performed by any other method as long as the method performs authentication based on information stored in the SIM card.

[0153] Next, in step S24, the terminal authentication unit 2011 sends the result of authenticating the DCM 10 to the server device 3. For example, the terminal authentication unit 2011 generates data that associates the IP address or MAC address assigned to the DCM 10 with the authentication result, and sends the data to the server device 3. Thus, the server device 3 can confirm that the connected DCM 10 is a legitimate object. In particular, as long as the DCM 10 that is connected to the communication system 2 and has completed authentication is not disconnected from the communication system 2, it can be regarded as a real communication object.

[0154] Next, in step S25, the server authentication unit 2012 sends the result of authenticating the server device 3 to the DCM 10. For example, the server authentication unit 2012 generates data that associates the IP address or MAC address assigned to the server device 3 with the authentication result, and sends the data to the DCM 10. Thus, the DCM 10 can confirm that the server device 3 as the connection target is a legitimate communication partner.

[0155] Although the DCM 10 performs communication via an IP communication network whose security is not ensured, as long as communication is performed via the ePDG of the communication system 2, the device on the other side (the server device 3) can be regarded as a trustworthy object.

[0156] As described above, the DCM 10 involved in the first embodiment is configured to be connectable to the communication device 11, and can communicate with the communication system 2 via any cellular communication network via the communication device 11. Thus, even if the wireless communication module built into the DCM 10 becomes unusable, an alternative communication path can be secured to continue communication.

[0157] Furthermore, the authentication device 20 according to the first embodiment uses the profile information stored in the first SIM to authenticate the DCM 10 and the server device 3 in the communication system 2 regardless of the access path from the DCM 10, and shares the authentication result between the DCM 10 and the server device 3. This eliminates the need to exchange certificates and the like between the DCM 10 and the server device 3 each time, thereby saving resources for authentication.

[0158] Furthermore, since the authentication information used by the DCM 10 for authentication is related to the SIM contract, the identity verification can be considered completed when the authentication device 20 authenticates the DCM 10. Therefore, the server device 3 can recognize that the user of the vehicle 1 is the contracting party without performing additional identity verification processing.

[0159] (Modification of the first embodiment)

[0160] In the first embodiment, by connecting the communication device 11 to the DCM 10 , a communication path other than the carrier network A is added. Since this communication path is a path using network sharing, another carrier network can be further used by replacing the communication device 11 . Fig.11 This is a schematic diagram for explaining a method of further connecting another communication device (communication device 11B) to the DCM 10 in the first embodiment.

[0161] As shown in the figure, the DCM 10 is configured to be connected to another communication device 11B in addition to the communication device 11. The communication device 11B is configured to have a SIM card (third SIM) for connecting to the carrier network C. Even in this case, the DCM 10 can connect to the communication system 2 via the communication device 11B. Even in this case, the DCM 10 receives authentication from the authentication device 20 using the profile information stored in the first SIM. According to the above structure, a communication path can be freely added without changing the structure of performing authentication using the first SIM.

[0162] Furthermore, although the example of securing the alternative path by USB tethering is given in the first embodiment, the alternative path may be a path realized by Wi-Fi tethering. In this case, the DCM 10 may also be configured in a manner capable of wirelessly connecting to a smartphone or the like owned by a user of the vehicle 1. In this case, the communication device 11 illustrated in the first embodiment is replaced by a smartphone or the like.

[0163] (Change example)

[0164] The above-described embodiment is merely an example, and the present disclosure can be implemented with appropriate modifications without departing from the gist of the disclosure.

[0165] For example, the processes or units described in the present disclosure can be implemented in combination as long as no technical contradiction occurs.

[0166] In addition, although 4G (LTE-Advanced) is exemplified as the standard of the cellular communication network in the description of the implementation, 3G and 5G etc. can also be adopted as the communication standard. In this case, ePDG can be replaced by N3IWF (non-3GPP Interworking Function) (in the case of 5G), PDG (in the case of 3G), etc.

[0167] In the description of the embodiment, the DCM 10 is exemplified as a mobile communication terminal, but the mobile communication terminal may be an IoT terminal or the like.

[0168] In addition, although the DCM 10 is assumed to be able to connect to the carrier network A in the description of the embodiment, the DCM 10 does not necessarily have to have the wireless communication module 103, and may not have the function of connecting to the carrier network A. That is, the DCM 10 may have a structure that must communicate via the communication device 11. Even in this case, the DCM 10 receives authentication from the authentication device 20 using the profile information stored in the first SIM. In the above structure, the first SIM is not used for connection to the carrier network, but is only used for authentication.

[0169] In addition, although the example of implementing the authentication of DCM10 using the profile information stored in the SIM is cited in the description of the embodiment, the DCM10 may be authenticated by other methods. For example, the DCM10 may also store a pair of key information and an electronic certificate (for example, issued by a certification authority) for certifying the authenticity of the key information in the storage unit 102. The authentication device 20 may also implement the authentication of DCM10 using such information. In any case, the authentication can be performed using the same authentication information regardless of the communication path.

[0170] Furthermore, a process described as being performed by one device may be shared and executed by a plurality of devices. Alternatively, a process described as being performed by different devices may be performed by one device. In a computer system, the hardware structure (server structure) used to implement each function can be flexibly changed.

[0171] The present disclosure can also be implemented by providing a computer program with the functions described in the above embodiments, and enabling one or more processors of the computer to read and execute the program. Such a computer program can be provided to the computer via a non-temporary computer-readable storage medium that can be connected to the system bus of the computer, or it can be provided to the computer via a network. Non-temporary computer-readable storage media include, for example, any type of disk (Floopy, registered trademark), hard disk drive (HDD), optical disk (CD-ROM, DVD, Blu-ray disc, etc.), read-only memory (ROM), random access memory (RAM), EPROM, EEPROM, magnetic card, flash memory, optical card, and any type of medium suitable for storing electronic instructions.

[0172] Explanation of symbols

[0173] 1…Vehicle;

[0174] 2…Communication system;

[0175] 3…server device;

[0176] 10…DCM;

[0177] 11...communication device;

[0178] 20…Authentication device.

Claims

1. A communication system comprising: a storage unit for storing authentication data for authenticating the mobile communication terminal; A gateway that accepts access from the untrusted first communication network; The control unit performs the following operations, namely: authenticating, via the first communication network, a mobile communication terminal connected via the gateway using the authentication data; and First information related to the authentication result of the mobile communication terminal is provided to a first server which is a communication target of the mobile communication terminal.

2. The communication system according to claim 1, wherein: The control unit relays the communication from the authenticated mobile communication terminal to the first server.

3. The communication system according to claim 1, wherein: The control unit authenticates the first server using an electronic certificate corresponding to the first server before authenticating the mobile communication terminal.

4. The communication system according to claim 3, wherein: The control unit further performs an operation of providing second information related to the authentication result of the first server to the authenticated mobile communication terminal.

5. The communication system according to claim 4, wherein: The communication system further comprises the mobile communication terminal, The mobile communication terminal treats the first server that provides the second information as a trusted communication target.

6. The communication system according to any one of claims 1 to 4, wherein: There is also a second gateway, the second gateway is connected to the cellular communication network, The control unit authenticates the mobile communication terminal using the same authentication data when the mobile communication terminal is connected via the gateway and when the mobile communication terminal is connected via the second gateway.

7. The communication system according to any one of claims 1 to 4, wherein: The authentication data is data corresponding to SIM profile information possessed by the mobile communication terminal.

8. The communication system according to claim 7, wherein: The SIM profile information is issued by an operator operating the communication system.

9. The communication system according to any one of claims 1 to 4, wherein: The communication system further comprises the mobile communication terminal, The mobile communication terminal is constructed in a manner having an embedded universal integrated circuit card, The authentication data is data corresponding to the SIM configuration file information possessed by the embedded universal integrated circuit card.

10. An authentication method, comprising: The first step is to authenticate the mobile communication terminal connected via the gateway that accepts access from the untrusted first communication network using the authentication data stored in the storage unit; In the second step, first information related to the authentication result of the mobile communication terminal is provided to a first server which is a communication target of the mobile communication terminal.

11. The authentication method according to claim 10, wherein: The method further includes a third step, which is a step of authenticating the first server using an electronic certificate corresponding to the first server and is executed before the first step.

12. The authentication method according to claim 11, wherein: The method further includes a fourth step of providing second information related to the authentication result of the first server to the authenticated mobile communication terminal.

13. The authentication method according to claim 12, wherein: The mobile communication terminal treats the first server that provides the second information as a trusted communication target.

14. The authentication method according to any one of claims 10 to 13, wherein: The authentication data is data corresponding to SIM profile information possessed by the mobile communication terminal. 15 . A non-transitory storage medium having recorded thereon a program for causing a computer to execute the authentication method according to claim 10 .

Images