Communication apparatus and communication control method

Abstract

The invention relates to a communication apparatus and a communication control method. The communication apparatus, which communicates with an in-vehicle terminal, includes a control unit that performs authentication based on authentication information received from the in-vehicle terminal by the communication apparatus using a tunnel established on an access network, the access network is selected from a plurality of access networks which can be used for communication between the vehicle-mounted terminal and the communication device; and routing of data received from the in-vehicle terminal when the authentication is successful.

Description

Technical Field

[0001] The present disclosure relates to a communication device and a communication control method. Background Art

[0002] Conventionally, there is a system in which a vehicle-mounted terminal sends request data including data about the current location of the vehicle-mounted terminal to a data center via the Internet, and the data center extracts only information matching the user's current location from the latest information after user authentication, and provides the extracted information to the vehicle-mounted terminal (for example, Japanese Unexamined Patent Application Publication No. 2003-216637). Summary of the invention

[0003] An object of the present disclosure is to provide a communication device and a communication control method, which makes it possible to ensure the reliability of communication between a vehicle-mounted terminal and the communication device.

[0004] The scheme of the present disclosure is a communication device for communicating with a vehicle-mounted terminal, the communication device including a control unit, the control unit performing: authentication based on authentication information received by the communication device from the vehicle-mounted terminal by using a tunnel established on an access network, the access network being selected from a plurality of access networks that can be used for communication between the vehicle-mounted terminal and the communication device; and routing of data received from the vehicle-mounted terminal when the authentication is successful.

[0005] Other aspects of the present disclosure include a communication control method executed by a communication device, a program for causing a computer to function as a communication device, a recording medium storing the program, and the like.

[0006] According to any one of the aspects of the present disclosure, the reliability of communication between the vehicle-mounted terminal and the communication device can be ensured. BRIEF DESCRIPTION OF THE DRAWINGS

[0007] Features, advantages, and technical and industrial significance of exemplary embodiments of the present invention will be described below with reference to the accompanying drawings, wherein like reference numerals represent like elements, and wherein:

[0008] Figure 1 An example of a communication system according to an embodiment is shown;

[0009] Figure 2 An example of a configuration of a DCM is shown;

[0010] Figure 3A An example of a configuration of a communication device is shown;

[0011] Figure 3B An example of a configuration of a smart device is shown;

[0012] Figure 4 is a flowchart illustrating an example of processing of a DCM; and

[0013] Figure 5 is a sequence diagram showing an example of actions in the communication system. DETAILED DESCRIPTION

[0014] In some cases, a business operator (e.g., a vehicle manufacturer, a dealer, a rental company, etc.) involved in vehicles with communication functions (such as connected cars and autonomous vehicles) desires to collect vehicle-related data (e.g., data related to driving of the vehicle, data related to communication of the vehicle, etc.). Therefore, it is considered to configure the communication device (communication facility) of the business operator to receive predetermined data (IoT data) transmitted from an in-vehicle terminal installed in each vehicle via a network.

[0015] For the network connecting the vehicle-mounted terminal and the communication device, the network (referred to as the telecommunications operator network) of a mobile network operator (MNO: also called a telecommunications carrier) with which the user using the vehicle has signed a contract can be thought of. However, in order to access the communication device, in addition to via the telecommunications operator network, there is another conceivable situation, such as via the telecommunications operator network of another telecommunications operator and the Internet, or via a wireless LAN and the Internet by using tethering. If the user is allowed to select an access network for accessing the communication device from a plurality of access networks, it becomes possible to send vehicle-related data to the communication device under conditions that are favorable to the user, and thus it becomes easier to obtain the user's cooperation when collecting vehicle-related data. On the other hand, it becomes possible for commercial operators to collect more data.

[0016] However, when the Internet is included in the path from the vehicle-mounted terminal to the network of the communication device, there is a problem of reduced reliability of communication compared to the case where only the telecommunications operator network is used for the path. In addition, there is a problem that if the information exchanged between the vehicle-mounted terminal and the communication device (especially information related to the authentication of the vehicle-mounted terminal) varies depending on the method of access from the vehicle-mounted terminal to the communication device, the configuration and information to be included on the vehicle-mounted terminal side become complicated.

[0017] In the embodiment described below, a communication system that can solve the above-mentioned problems is described. In other words, a communication system is described that can ensure the reliability of communication (secure communication) even if the method of accessing the communication device is determined by the user, and at the same time, it is possible to suppress the complexity of the configuration of the vehicle-mounted terminal by enabling the user to select the access method.

[0018] Hereinafter, an embodiment of the present disclosure will be described with reference to the accompanying drawings. The configuration according to the embodiment is presented for exemplary purposes, and the present disclosure is not limited to such configuration in the embodiment. Figure 1 An example of a communication system according to an embodiment is shown. The communication system includes a data communication module (DCM) 10 and a communication device 20, and the DCM 10 is an example of a vehicle-mounted terminal installed in a vehicle. The vehicle-mounted terminal may be an information processing device other than the DCM. The vehicle-mounted terminal may be a fixed type, or may have portability.

[0019] The DCM 10 can collect information related to the vehicle (data related to the driving of the vehicle, such as the position or the speed) from an on-board device (e.g., a car navigation device, a driving recorder, an electronic control unit (ECU), etc.). The DCM 10 can also collect data related to the communication with the vehicle (on-board terminal). The data (user data) sent from the DCM 10 is sent to a predetermined communication partner (e.g., the server 51 or the server 52) via the communication device 20. However, the destination of the user data may be the communication device 20.

[0020] For the default network for the DCM 10 to communicate with the communication device 20, the telecommunications operator network 2 is used, and the user of the vehicle has signed a contract to use the network. The telecommunications operator network may be a mobile network operator (MNO) network, or may be a mobile virtual network operator (MVNO) network. The telecommunications operator network 2 includes a wireless access network (base station) and a core network. When the telecommunications operator network 2 is used, the communication device 20 is used as a part of the core network of the telecommunications operator network 2. For the authentication of the DCM 10 in the telecommunications operator network 2, the authentication information stored in the first subscriber identity module (SIM) 105 included in the DCM 10 is used.

[0021] In this embodiment, for access networks other than the telecommunications operator network 2, the user can use an MNO network or MVNO network other than the MNO network or MVNO network that is the telecommunications operator network 2 ( Figure 1 ). In this case, for authentication of the DCM 10 in the MVNO network 3, authentication information stored in the second SIM 106 is used. Each of the telecom operator network 2 and the MVNO network 3 may be a 4G (LTE) network, a 5G network, or a 6G network.

[0022] The user can also use the wireless LAN (Wi-Fi) 4 as an access network by performing network sharing using the network sharing device 13. Network sharing can be Wi-Fi network sharing, Bluetooth (R) network sharing, or Universal Serial Bus (USB) network sharing. When the MVNO network 3 or the wireless LAN 4 is used as the access network, the path from the DCM 10 to the communication device 20 is via the Internet 1. As described above, with respect to access to the communication device 20, in addition to the telecommunications operator network 2, the user can select an access network that the user desires to use from a plurality of access networks such as the MVNO network 3 and the wireless LAN 4. In other words, the DCM 10 can access the communication device 20 by using an access method selected by the user from a plurality of access methods. The telecommunications operator network is an example of a cellular network (first cellular network). The MVNO network 3 is an example of a second cellular network and a first access network via the second cellular network. The wireless LAN 4 is an example of a network used by network sharing and a second access network via the network other than the first cellular network.

[0023] The communication device 20 can be configured by using a single computer or a collection of more than two computers (cloud). The communication device 20 includes a gateway (GW) 21 connected to the Internet 1. GW 21 is a gateway that accommodates non-3GPP (R) wireless access (untrusted non-3GPP (R) IP access) such as the Internet. For example, when the communication device complies with 4G, GW 21 is an evolved packet data gateway (ePDG), when the communication device complies with 5G, GW 21 is a non-3GPP (R) interworking function (N3IWF), and when the communication device complies with 3G, GW 21 is a PDG. GW 21 can convert the format of a signal received from the Internet 1 into a format suitable for the core network of the telecommunications operator network 2, and use it in the communication device 20. Compared with the telecommunications operator network 2 (3GPP (R) wireless access), in the Internet 1, the reliability (security) of communication is poor. Therefore, when DCM 10 communicates with communication device 20 by using an access network other than telecommunication operator network 2, a logical tunnel is established between DCM 10 and GW 21. The tunnel is, for example, an IPsec tunnel established in IPsec tunnel mode. However, the tunnel may be a tunnel other than an IPsec tunnel.

[0024] The communication device 20 includes an authentication unit 22 and a routing unit 23. After the tunnel is established, the authentication unit 22 receives the authentication information sent from the DCM 10 through the tunnel via the GW21, and performs the authentication of the DCM 10 (user). In the present embodiment, for the authentication information, the authentication information for authentication in the telecommunications operator network 2 stored in the first SIM 105 is used. However, in addition to the first SIM 105, the authentication information may be authentication information stored in a secure storage area of ​​the DCM 10. When the communication device 20 operates as part of an LTE (4G) core network, the authentication unit 22 operates as a home subscriber server (HSS) that performs authentication processing. However, the authentication unit 22 may operate as a combination of an HSS and an authentication authorization accounting (AAA). When the communication device 20 operates as part of a 5G core network, the authentication unit 22 operates as an authentication server function (AUSF), that is, a network function that authenticates a subscriber / UE (DCM 10) based on subscriber information stored in a unified data management (UDM). For example, for the authentication scheme, EPA-AKA is applied. However, certification schemes other than EPA-AKA may be applied.

[0025] For the authentication information used when the DCM 10 accesses the communication device 20 by using an access network (access line) other than the telecommunications operator network 2, common authentication information is used in either case of using the MVNO network 3 and network sharing. In the present embodiment, for the common authentication information in a plurality of access networks, the authentication information (authentication information of the telecommunications operator network 2) stored in the first SIM 105 is used.

[0026] The routing unit 23 performs configuration and determination of a path from the DCM 10 to the destination of the user data (communication partner: for example, the server 51 or the server 52). A communication path (session) is established between the routing unit 23 and the DCM 10. When the communication device 20 operates as part of an LTE (4G) core network, the routing unit 23 operates as a packet data network gateway (PGW). When the communication device 20 operates as part of a 5G core network, the routing unit 23 operates as a user plane function (UPF).

[0027] When DCM 10 communicates with server 51 or server 52, data addressed to server 51 or server 52 always passes through the tunnel and reaches communication device 20 due to routing unit 23, and is sent to server 51 or server 52 via routing unit 23. Data addressed to DCM 10 sent from server 51 or server 52 always passes through communication device 20 and is transmitted through the tunnel.

[0028] A communication path (referred to as a second route) between DCM 10 and GW 21 may be established while communicating using a path (referred to as a first route) between DCM 10 and communication device 20 via telecommunications operator network 2. In other words, the first route and the second route may be used in parallel.

[0029] Figure 2 An example of the configuration of the DCM 10 is shown. The DCM 10 includes a CPU 101, a memory 102, an auxiliary storage device 103, a wireless communication unit 104, a first SIM 105, and a second SIM 106. Examples of the auxiliary storage device 103 include a hard disk drive (HDD), a solid state drive (SSD), an EEPROM, etc. The auxiliary storage device 103 stores, for example, an operating system (OS) and various types of application programs (apps). These applications include programs for implementing various functions, such as communication control programs. Examples of the memory 102 include semiconductor memories, such as read-only memories (ROMs) and random access memories (RAMs). Each of the memory 102 and the auxiliary storage device 103 (also collectively referred to as storage devices) is an example of a computer-readable recording medium.

[0030] The wireless communication unit 104 includes a data circuit terminating equipment (DCE) and communicates with an external device according to a wireless communication scheme such as a cellular network (LTE, 4G, 5G, 6G, etc.), Bluetooth (R), or a wireless LAN (including IEEE 802.11 series, Wi-Fi, etc.). The external device is a base station in the case of a telecommunications operator network, an access point in the case of a wireless LAN (Wi-Fi), and a Bluetooth (R) compatible communication device in the case of Bluetooth (R).

[0031] Each of the first SIM 105 and the second SIM 106 is an eUICC. The first SIM 105 is a SIM for a telecom operator network 2, and the second SIM 106 is a SIM for an MVNO network 3. The first SIM 105 and the second SIM 106 may be a chip type or a card type. When the SIM is a card type, the DCM 10 includes a SIM slot, a SIM card reader, and the like.

[0032] In addition, the DCM 10 includes a USB connector 107, an input device 108, and a display 109. A USB dongle 13B can be connected to the USB connector 107. A smart device 13A can also be connected to the USB connector 107 via a USB cable. The USB dongle 13B and the smart device 13A are examples of the network sharing device 13. The smart device 13A is a smartphone, a tablet terminal, or the like.

[0033] The input device 108 is a button, a key, a touch panel, etc., and is used to input information, make settings, etc. The display 109 is used to display information. The input device 108 may be a user interface displayed on the display 109.

[0034] The CPU 101 performs various processes (collection of data, reception of collected data, transmission and reception of data, etc.) related to the operation of the DCM 10 by executing various programs stored in the storage device. The CPU 101 is an example of a control unit, a controller, or a processor.

[0035] Figure 3A An example of the configuration of the communication device 20 is shown, and Figure 3B An example of the configuration of the smart device 13A is shown. Figure 3A In the embodiment, the communication device 20 includes a processor 31, a storage device 32, a communication interface (communication IF) 33, an input device 34, and a display 35 as an example.

[0036] The storage device 32 stores various programs and data. The processor 31 is an example of a control unit, and is a CPU, a DSP, a GPU, or any combination thereof, etc. The processor 31 performs various processes by executing the program stored in the storage device 32, such as calculation or manipulation using the data stored in the storage device 32, etc. By executing the program, the communication device 20 operates as a device including the GW 21, the authentication unit 22, and the routing unit 23. The processor 31 corresponds to a control unit that performs actions as the GW 21, the authentication unit 22, and the routing unit 23. The communication IF 33 includes a communication interface circuit for the telecommunications operator network 2 and a communication interface circuit for the Internet 1, and performs transmission and reception of communication-related signals, format (protocol) conversion, etc. The input device 34 is a button, a key, a touch panel, etc. for inputting information, making settings, etc. The display 35 is used to display information.

[0037] exist Figure 3B , as an example, the smart device 13A includes a processor 131, a storage device 132, an input device 134, and a display 135. These components have similar functions to the processor 31, the storage device 32, the input device 34, and the display 35, although there are differences in performance and type. The wireless communication interface (wireless communication IF) 133 includes a communication interface circuit capable of wirelessly accessing each of a telecommunications operator network, Bluetooth (R), and a wireless LAN (Wi-Fi). The processor 131 can perform various processes by executing a program stored in the storage device 132.

[0038] Figure 4 is a flowchart showing an example of the processing of the DCM 10 . Figure 51 is a sequence diagram showing an example of actions in the communication system. For example, when the user of the vehicle operates the DCM 10 and calls up a screen for selecting an access line (access method) to the communication device 20 on the display 109, the communication system starts to be connected to the DCM 10. Figure 4 Processing of the flowchart shown.

[0039] In step S01, the CPU 101 of the DCM 10 receives an input of a selection result of a fixed access line input by a user using the input device 108. In step S02, the CPU 101 determines whether the selection result is the telecommunications operator network 2. When it is determined that the telecommunications operator network 2 is selected, the process moves to step S07, otherwise the process moves to step S03.

[0040] When the process moves to step S07, the CPU 101 executes a process of establishing a communication channel with the communication device 20 via the telecommunications operator network 2. When establishing the communication channel, the DCM 10 transmits a connection request including information on the communication partner to the telecommunications operator network 2.

[0041] Registration, authentication, etc. of the location of the DCM 10 in the telecommunications operator network 2 are performed by using the information (subscriber information, authentication information, etc.) stored in the first SIM 105. For authentication, the CPU 101 performs a process of reading the authentication information stored in the first SIM 105 and sending the authentication information to the telecommunications operator network 2. The telecommunications operator network 2 includes an authentication unit different from the authentication unit 22, and authentication using the authentication information is performed by the authentication unit. When an access line other than the telecommunications operator network 2 is used, the authentication unit 22 is used to perform authentication.

[0042] When the communication channel is established between the DCM 10 and the communication device 20, when the authentication in the telecommunications operator network 2 succeeds, the telecommunications operator network 2 performs control for establishing a communication channel connecting the routing unit 23 of the communication device 20 and the DCM 10. When such a communication channel is established, the routing unit 23 performs routing to the communication partner (for example, the server 51 or 52) of the DCM 10. By routing, a state in which communication (transmission and reception of data) can be performed between the DCM 10 and the communication partner via the communication device 20 (routing unit 23) is achieved.

[0043] When the process moves to step S03, the CPU 101 performs a process of connecting to the GW 21. For example, when the MVNO network 3 is selected as a result of the selection of the access line, registration, authentication, and the like of the location of the DCM 10 in the MVNO network 3 are performed by using the information (subscriber information, authentication information, and the like) stored in the second SIM 106. For the authentication, the CPU 101 performs a process of reading the authentication information stored in the second SIM 106 and transmitting the authentication information to the telecommunications operator network 2. When the authentication succeeds, the MVNO network 3 performs routing to the GW 21 which is the communication partner of the DCM 10, and thus a communication channel ( Figure 5 , <1> ).

[0044] When tethering using the tethering device 13 (smart device 13A or USB dongle 13B) is selected as a result of selecting the access line, the user performs a process of connecting the DCM 10 and the tethering device 13 by using the USB connector 107. Alternatively, settings are made to pair the DCM 10 and the smart device 13A by wireless communication (Bluetooth (R) or Wi-Fi). The DCM 10 transmits data destined for the GW 21 to the tethering device 13. The tethering device 13 accesses an access point of a predetermined wireless LAN by functioning like a mobile router, and transmits data to the GW 21 via the wireless LAN 4 and the Internet. Therefore, communication can be performed between the DCM 10 and the GW 21 via the wireless LAN 4 and the Internet 1 ( Figure 5 , <1> ).

[0045] In step S04, the CPU 101 performs a process of establishing a tunnel (IPsec tunnel) in IPsec tunnel mode between the DCM 10 and the GW 21. For example, a remote access VPN is established, in which the DCM 10 corresponds to a terminal and the GW 21 corresponds to a VPN device ( Figure 5 , <2> ). Note that for tunneling, you may consider using SSL / TLS instead of IPsec.

[0046] When the tunnel is established, the CPU 101 performs a process of reading authentication information from the first SIM 105 and sending the authentication information to the GW 21 ( Figure 5 , <3> ). The authentication information is transmitted to GW 21 through the tunnel. GW 21 forwards the authentication information to authentication unit 22. Authentication unit 22 performs authentication processing by using the authentication information ( Figure 5 , <4> ).

[0047] When the authentication succeeds, the routing unit 23 performs routing of data transmitted and received between the DCM 10 and the communication partner (server 51 or 52) by using information about the communication partner, which is transmitted from the DCM 10 together with the authentication information (or may be transmitted at another timing) ( Figure 5 , <5> As a result of the routing, a state is achieved in which the routing unit 23 transmits data from the DCM 10 to the communication partner and transmits data from the communication partner to the DCM 10. In other words, the DCM 10 is in a state in which it is possible to communicate with the communication partner ( Figure 5 , <6> ).

[0048] Thereafter, information notifying that authentication is successful (communication is available) is transmitted from the communication device 20 to the DCM 10 ( Figure 5 , <7> ), and is received by the DCM 10 (step S06). Thereafter, the user data such as vehicle-related data transmitted from the DCM 10 reaches the communication device 20 through the tunnel, and is received by the communication partner via the routing unit 23 of the communication device 20 ( Figure 5 , <8> and <9> Data addressed to the DCM 10 from a communication partner passes through the routing unit 23 and is received by the DCM 10 via the tunnel ( Figure 5 , <10> and <11> ).

[0049] According to the communication system in the embodiment, by using the tunnel established between the DCM 10 (vehicle terminal) and the communication device 20, the authentication information is transferred from the DCM 10 to the communication device 20. Therefore, the problem of reliability of the access network between the DCM 10 and the communication device 20 can be ignored. In other words, the communication between the DCM 10 and the communication device 20 is performed in an encrypted state due to the tunnel (VPN connection). Therefore, even in the route via the Internet 1, the reliability of the communication is ensured. Therefore, the user can flexibly select the access line.

[0050] When using an access line other than the telecommunications operator network 2, authentication using common authentication information is performed by the authentication unit 22 of the communication device 20 regardless of the result of selection of the access line. The common authentication information in the access line (access network) is the authentication information used when using the telecommunications operator network 2. Therefore, since the DCM 10 (user (subscriber)) can be authenticated by using a scheme similar to that used when using the telecommunications operator network 2, the configuration of the DCM 10 (vehicle-mounted terminal) can be suppressed from becoming complicated.

[0051] The DCM 10 may be configured or may be changed to a setting that receives data only from the communication device 20 and rejects data from devices other than the communication device 20. With this configuration, since the DCM 10 does not need to determine whether a communication partner is a reliable communication partner, it is possible to simplify the configuration of the DCM 10. Since the DCM 10 can be dedicated to communication with the communication device 20, all functions including routing can be deployed on the communication device 20 side in consideration of providing advanced applications in the future.

[0052] When communication is performed between the DCM 10 and the communication device 20 through network sharing using the smart device 13A (e.g., the user's smartphone), the charging mechanism 40 ( Figure 1 ) is charged communication fees. The communication fees in this case can be charged to the user. For example, when a user signs a contract to pay a flat rate for no more than a certain amount of communication regarding the cost of communication with a smartphone, communication through network sharing as described above can be performed within the remaining amount of communication covered by the flat rate. Therefore, the commercial operator side does not need to bear the communication costs related to network sharing. The user also has the benefit of not actually having to bear the communication costs because the communication is performed within the coverage of the flat rate. In addition, when the amount of communication that can be used for a specific price under flat rate pricing increases in the future, the application used by DCM 10 can be changed to an application that is more convenient although it uses more communication volume.

[0053] In the operation related to the communication fee of such network sharing, an application program (app) that executes the following processing may be installed in the smart device 13A.

[0054] When tethering is performed, the user is notified of the communication fee charged. This notification is performed by displaying such a notification on the display 125, for example.

[0055] When network sharing is performed, the communication amount that has been used among the communication amount that can be used within the flat rate is notified, or the remaining communication amount that can be used within the flat rate is notified.

[0056] When the amount of communication that has been used among the amount of communication that can be used within the flat rate is above a threshold value (or the remaining amount of communication that can be used within the flat rate is less than a threshold value), a notification related to the use of tethering is issued (e.g., displayed on the display 125). Alternatively, the use of tethering is prohibited (a state in which connection or pairing between the DCM 10 and the smart device 13A is unavailable is achieved).

[0057] The following configuration is also possible.

[0058] Controlling the communication volume of the DCM 10 according to the increase or decrease in the communication volume that the user can allow. The communication volume performed by the DCM 10 to the communication device 20 may increase or decrease in some cases, and the communication volume from the communication device 20 to the DCM 10 may increase or decrease in some cases.

[0059] In response to a request to install an application for communication from the DCM 10, the communication device 20 allows installation of the application according to the communication volume allowed by the user. In other words, the type of application that can be installed in the DCM 10 is controlled according to the communication volume that the user can use within a flat rate.

[0060] Any processing and method described in the present disclosure can be freely combined and implemented to the extent that no technical contradiction occurs. In addition, the processing described as being performed by a single device can be performed by multiple devices in a distributed manner. Alternatively, the processing described as being performed by different devices can be performed by a single device. It is possible to flexibly change what hardware configuration (server configuration) is used to implement each function in a computer system. The present disclosure can also be implemented by providing a computer program in which the functions described in the embodiment are encapsulated to the computer, and by reading and executing the program by one or more processors included in the computer. Such a computer program can be provided to the computer by using a non-temporary computer-readable recording medium that can be connected to the system bus of the computer, or it can be provided to the computer via a network. Examples of non-temporary computer-readable recording media include any type of disk, such as a disk (floppy (R) disk, hard disk drive (HDD)), etc.) and an optical disk (CD-ROM, DVD disk, Blu-ray disk, etc.), a read-only memory (ROM), a random access memory (RAM), an EPROM, an EEPROM, a magnetic card, a flash memory, an optical card, and any type of medium suitable for storing electronic instructions.

Claims

1. A communication device that communicates with an in-vehicle terminal, the communication device including a control unit that performs: authentication based on authentication information received by the communication device from the in-vehicle terminal by using a tunnel established on an access network, the access network being selected from a plurality of access networks that can be used for communication between the in-vehicle terminal and the communication device; and routing of data received from the in-vehicle terminal when the authentication is successful.

2. The communication device according to claim 1, wherein The authentication based on the authentication information is a common procedure for the plurality of access networks.

3. The communication device according to claim 1, wherein The authentication information is authentication information used when the in-vehicle terminal accesses the communication device via a cellular network different from the plurality of access networks and the communication device operates as a part of a core network of the cellular network. The communication device according to claim 3 , wherein: The communication device receives the authentication information by using an access network selected from the plurality of access networks including a first access network via a second cellular network different from the first cellular network as the cellular network, and a second access network used via a network other than the first cellular network through network sharing.

5. A communication control method, comprising: Through the communication device that communicates with the vehicle terminal, performing authentication based on authentication information received by the communication device from the in-vehicle terminal by using a tunnel established on an access network, the access network being selected from a plurality of access networks that can be used for communication between the in-vehicle terminal and the communication device; as well as When the authentication succeeds, routing of data received from the in-vehicle terminal is performed.

Images