Information processing device and method

Abstract

To make communication of an information processing device go through a prescribed communication system even in the case that a user adopts any carrier network as an access network.SOLUTION: An information processing device includes: a storage part for storing authentication information to be used for connection to a first communication system; a first eUICC for holding profile information to be used for connection to a first carrier network contracted by user's selection as an access network; and a control part. The control part receives authentication in the first carrier network by using the profile information, establishes the connection to the first carrier network, and establishes a gateway device and a logic tunnel in the first communication system on the first carrier network. The control part receives authentication in the first communication system by using the authentication network, and establishes connection to the first communication system. Communication with external networks is performed through the logic tunnel and the first communication network after establishing the connection to the first communication system.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to wireless communication using a SIM in a terminal. [Background technology]

[0002] A method has been disclosed in which a user terminal connection method, a plurality of SIM slots, and a priority are associated with each other and stored, and the SIM slot is automatically switched based on the user terminal connection method and the priority (for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2022-76592 A Summary of the Invention [Problem to be solved by the invention]

[0004] One aspect of the disclosure has an objective of providing an information processing device and method that enable communication to be routed through a predetermined communication system regardless of the carrier network adopted by a user as an access network. [Means for solving the problem]

[0005] One aspect of the present disclosure is a storage unit that stores authentication information used for connecting to the first communication system; a first eUICC that holds profile information used for connection to a first carrier network that a user has selected and subscribed to as an access network; receiving authentication in the first carrier network using the profile information and establishing a connection with the first carrier network; establishing a logical tunnel with a gateway device in the first communication system on the first carrier network after the connection is established; authenticating to the first communication system using the authentication information through the logical tunnel and establishing a connection with the first communication system; After establishing a connection with the first communication system, communicating with an external network through the logical tunnel and the first communication system; A control unit that executes the above. The information processing device includes:

[0006] Another aspect of the present disclosure is a storage unit that stores authentication information used for connecting to the first communication system; a first eUICC that holds profile information used for connection to a first carrier network that a user has selected and subscribed to as an access network; An information processing device comprising: receiving authentication in the first carrier network using the profile information and establishing a connection with the first carrier network; establishing a logical tunnel with a gateway device in the first communication system on the first carrier network after the connection is established; authenticating to the first communication system using the authentication information through the logical tunnel and establishing a connection with the first communication system; After establishing a connection with the first communication system, communicating with an external network through the logical tunnel and the first communication system; This is a method for carrying out the above. Effect of the Invention

[0007] According to one aspect of the present disclosure, regardless of the carrier network adopted by the user as the access network, communication of an information processing device can be routed through a predetermined communication system. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram showing an example of a connection between a vehicle and a vehicle manufacturer communication system according to the first embodiment. [Diagram 2] FIG. 2 is a diagram illustrating an example of a hardware configuration of the DCM. [Diagram 3] FIG. 3 shows an example of the functional configuration of a DCM. [Figure 4] FIG. 4 is an example of a flowchart of a communication connection establishment process of the DCM. [Diagram 5] FIG. 5 shows an example of a sequence for establishing a connection between the DCM and the vehicle manufacturer's communication system. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] For example, manufacturers of vehicles equipped with communication functions, such as connected cars and autonomous vehicles, may route vehicle communications through a communication system prepared by the vehicle manufacturer in order to control vehicle communications and collect information related to vehicle communications. In such cases, the carrier network used by the vehicle as an access network is limited to the carrier network of a communication carrier that is linked to the vehicle manufacturer's communication system. Therefore, vehicle owners, etc. cannot freely select the carrier network to be used as the access network for vehicle communications.

[0010] In one aspect of the present disclosure, in consideration of the above problem, an information processing device is caused to establish a logical tunnel with a gateway device in a first communication system on a carrier network selected by a user as an access network, and to communicate through the tunnel. This makes it possible to route communication of the information processing device through the first communication system via the logical tunnel, regardless of which carrier network the user selects as an access network.

[0011] More specifically, one aspect of the present disclosure is an information processing device including a storage unit that stores authentication information used for connecting to a first communication system, a first eUICC (Embedded Universal Integrated Circuit Card) that holds profile information used for connecting to a first carrier network selected and subscribed to by a user as an access network, and a control unit. The control unit is authenticated in the first carrier network using the profile information held in the first eUICC, and establishes a connection with the first carrier network. The control unit establishes a logical tunnel with a gateway device in the first communication system on the first carrier network after the connection is established. The control unit is authenticated in the first communication system using the authentication information held in the storage unit through the logical tunnel, and establishes a connection with the first communication system. After the connection with the first communication system is established, the control unit communicates with an external network through the logical tunnel and the first communication system.

[0012] The information processing device is, for example, an in-vehicle device installed in a vehicle, a smartphone, a tablet terminal, a wearable terminal, and a terminal capable of wireless communication based on a mobile communication method. The in-vehicle device is, for example, a DCM (Data Communication Module), a car navigation device, The control unit is, for example, a drive recorder and an ECU (Electronic Control Unit). For example, CPU (Central Processing Unit), DSP (Digital Signal Processor), and The authentication information may be stored in a storage device such as an auxiliary storage device, a processor such as a data communication processor, or a circuit such as an FPGA (Field-Programmable Gate Array). This is the second eUICC.

[0013] The first communication system is a wireless communication system that requires a terminal to have an eUICC, such as 4G (LTE-Advanced), 5G, and 3G. The gateway device is, for example, an ePDG (Evolved Packet Data Gateway) (for 4G), N3 IWF (non-3GPP Interworking Function) (in the case of 5G), PDG (in the case of 3G), etc. The logical tunnel is, for example, an IPsec tunnel.

[0014] In one aspect of the present disclosure, the information processing device connects to the first communication system directly, for example, at the IP layer, by establishing a logical tunnel with a gateway device in the first communication system on the first carrier network. This allows the communication of the information processing device to be routed through the first communication system even if the first communication system does not cooperate with the first carrier network. In addition, the user of the information processing device can freely select the first carrier network as an access network from among multiple communication carriers.

[0015] In one aspect of the present disclosure, the authentication information may be profile information issued by the first communication system and used for connecting to the first communication system. In this case, the storage unit may be a second eUICC. By the information processing device storing the profile information issued by the first communication system in the second eUICC, for example, the owner of the information processing device can rewrite the profile information for modification or security enhancement.

[0016] In one aspect of the present disclosure, the authentication information may be an electronic certificate issued by a predetermined certificate authority when the identity of the owner of the information processing device is verified using key information used in authentication in the first communication system, and the key information. In this case, the information processing device does not need to include two eUICCs, and the configuration of the information processing device can be simplified.

[0017] In one aspect of the present disclosure, the information processing device may be an on-board device mounted on a vehicle. In this case, the first communication system may be a communication system managed by the manufacturer of the vehicle. This allows the vehicle's communication to be routed through the communication system managed by the vehicle manufacturer, and the vehicle manufacturer can control the vehicle's communication and collect information related to the vehicle's communication.

[0018] In other aspects, the present disclosure can also be specified as a method for a computer to execute processing of the above-mentioned information processing device, a program for causing a computer to execute processing of the above-mentioned information processing device, and a computer-readable recording medium having the program recorded thereon.

[0019] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. The configurations of the following embodiments are merely examples, and the present disclosure is not limited to the configurations of the embodiments.

[0020] First Embodiment FIG. 1 is a diagram showing an example of a connection between a vehicle 10 and a vehicle manufacturer communication system 500 according to the first embodiment. In the first embodiment, in order to route communication of the vehicle 10 (DCM 1) through the vehicle manufacturer communication system 500, the vehicle 10 (DCM 1) is connected to the vehicle manufacturer communication system 500 via an IPsec tunnel. In the first embodiment, it is assumed that the communication carrier network 200 and the vehicle manufacturer communication system 500 are communication networks compatible with 4G. However, without being limited thereto, the communication carrier network 200 and the vehicle manufacturer communication system 500 may be systems compatible with 5G, 6G, etc.

[0021] The vehicle manufacturer communication system 500 is a communication system managed by the manufacturer of the vehicle 10. As shown in FIG. 1, the vehicle manufacturer communication system 500 includes an ePDG, a Home Subscriber Server (HSS), a Packet data network GateWay (PGW), and a Policy and Charging Rules Function (PCRF), and has a configuration similar to that of a core network. The communication systems 500 of both manufacturers do not have a billing function and have AAA (Authentication Authorization Accounting) that performs authentication instead of MME in a normal EPC. In the first embodiment, the AAA in the vehicle manufacturer communication system 500 performs authentication in the same manner as authentication performed by the MME in a normal EPC. Note that the components of the vehicle manufacturer communication system 500 shown in FIG. 1 are only a part of the components, and the components included in the vehicle manufacturer communication system 500 are not limited to the components shown in FIG. 1.

[0022] The communication carrier network 200 is a communication carrier network with which the owner of the vehicle 10 has a contract. The communication carrier network 200 is a normal EPC (Evolved Packet Core). In FIG. Although components of rear network 200 include eNB (eNode-B), SGW (Serving GateWay), MME (Mobility Management Mobility), and HSS, the components of communication carrier network 200 are not limited to these.

[0023] In the first embodiment, the vehicle manufacturer communication system 500 treats the communication carrier network 200 as one of the untrusted non-3GPP accesses. Therefore, communication from the communication carrier network 200 to the vehicle manufacturer communication system 500 goes from the SGW of the communication carrier network 200 to the Internet once, and then enters the ePDG in the vehicle manufacturer communication system 500.

[0024] The vehicle 10 includes a DCM 1. The DCM 1 is an example of a device having a communication function. The DCM 1 includes two SIMs. The SIM#1 stores profile information issued by a vehicle manufacturer communication system 500. The SIM#2 stores profile information issued by a communication carrier network with which the owner of the vehicle 10 has selected from a plurality of communication carriers and made a contract.

[0025] The DCM 1 is authenticated in the communication carrier network 200 using profile information issued by the communication carrier network 200 held in the SIM#2, and establishes a connection with the communication carrier network 200. After that, the DCM 1 establishes an IPsec tunnel with the ePDG of the vehicle manufacturer communication system 500 on the connection with the communication carrier network 200. After establishing the IPsec tunnel, the DCM 1 is authenticated in the vehicle manufacturer communication system 500 using profile information issued by the vehicle manufacturer communication system 500 held in the SIM#1, and establishes a connection with the vehicle manufacturer communication system 500. When the connection with the vehicle manufacturer communication system 500 is established, the DCM 1 can connect to, for example, the Internet. This allows the communication of the DCM 1 to pass through the vehicle manufacturer communication system 500. The vehicle manufacturer communication system 500 is an example of a "first communication system". The communication carrier network 200 is an example of a "first carrier network". The ePDG in the vehicle manufacturer communication system 500 is an example of a "gateway device".

[0026] In the first embodiment, the vehicle manufacturer communication system 500 treats the communication carrier network 200 as one of the untrusted non-3GPP accesses, and the DCM 1 establishes an IPsec tunnel on the communication carrier network 200 with the ePDG in the vehicle manufacturer communication system 500, so that the DCM 1 and the vehicle manufacturer communication system 500 are directly connected at the IP layer. This allows the vehicle manufacturer, who is the administrator of the vehicle manufacturer communication system 500, to route the communication of the DCM 1 through the vehicle manufacturer communication system 500 without coordinating with the communication carrier of the communication carrier network 200. Examples of the cooperation with the communication carrier include making a special contract to route the communication of the DCM 1 through the vehicle manufacturer communication system 500. In addition, the owner of the vehicle 10 can freely select the communication carrier network 200 to contract with from among multiple communication carriers.

[0027] FIG. 2 is a diagram showing an example of the hardware configuration of the DCM 1. The DCM 1 includes, as the hardware configuration, a CPU 101, a memory 102, an auxiliary storage device 103, a wireless communication unit 104, an SIM 105, and an SIM 106. The auxiliary storage device 103 is, for example, a hard disk drive (HDD) and a solid state drive (SSD). The programs stored in the auxiliary storage device 103 include, for example, an operating system (OS), a communication control program, and a plurality of other programs. The communication control program is a program that establishes an IPsec tunnel with the ePDG of the vehicle manufacturer communication system 500 after connecting to the communication carrier network 200 using the profile information in the SIM#2, and connects to the vehicle manufacturer communication system 500 using the profile information in the SIM#1. The memory 102 includes, for example, a semiconductor memory such as a read only memory (ROM) and a random access memory (RAM). The memory 102 and the auxiliary storage device 103 are each an example of a computer-readable recording medium.

[0028] The CPU 101 executes various processes by loading the OS and various other programs stored in the auxiliary storage device 103 into the memory 102 and executing them. The number of CPUs 101 is not limited to one, and multiple CPUs may be provided. The CPU 101 is an example of a "control unit." In the first embodiment, the wireless communication unit 104 communicates with an external device based on a 4G mobile communication system. In addition, when the communication carrier network 200 is a system that supports a 5G or 6G or later mobile communication system, the wireless communication unit 104 also supports the mobile communication system supported by the communication carrier network 200.

[0029] Each of the SIM 105 and the SIM 106 is an eUICC. In the first embodiment, the SIM 105 is a chip-type eUICC. The SIM 106 may be a chip-type or a card-type. The hardware configuration of the DCM 1 is not limited to the configuration shown in FIG. 2. For example, the SIM 105 may be a card-type eUICC or a UICC. For example, the SIM 106 may be a card-type removable UICC. When the SIM 106 is a card-type, the DCM 1 includes a SIM slot, a SIM card reader, and the like.

[0030] 3 shows an example of the functional configuration of the DCM 1. The DCM 1 includes a communication control unit 11 as a functional configuration. The communication control unit 11 controls the connection between the DCM 1 and the vehicle manufacturer communication system 500 by using profile information held in each of the SIMs 105 and 106. The process of the communication control unit 11 will be described in detail later.

[0031] Profile information 105A is stored in the SIM 105. The profile information 105A is profile information issued by the vehicle manufacturer communication system 500. The profile information 105A can also be called profile information for the vehicle manufacturer communication system 500. In the first embodiment, since the SIM 105 is an eUICC, the profile information 105A is rewritable. For example, when the owner of the vehicle 10 is changed, or when the vehicle 10 is updated to enhance security, the profile information 105A is rewritten. Note that, although the personal identification certificate 105B is also illustrated in FIG. 3 for the SIM 105, the personal identification certificate 105B is not used in the first embodiment. An example in which the personal identification certificate 105B is used will be described later. The SIM 105 is an example of a "storage unit" and a "second eUICC". The profile information 105A is an example of "authentication information" and "profile information" held in the "second eUICC".

[0032] Profile information 106A is stored in the SIM 106. The profile information 106A is profile information issued by the communication carrier network 200. The profile information 106A can also be called a profile for the communication carrier network 200. The information includes, for example, a plurality of pieces of identification information and key information used for authentication and encryption. The identification information included in the profile information includes, for example, an IMSI (International Mobile Station Identification Number). Subscription Identity (SIID) and Integrated Circuit Card ID (ICCID). SIM 106 is an example of a "first eUICC." Profile information 106A is an example of "profile information."

[0033] Fig. 4 is an example of a flowchart of a communication connection establishment process of DCM 1. The process shown in Fig. 4 is started, for example, when profile information is stored in SIM#2, when the SIM card of SIM#2 is inserted, when a user operation is input to request a connection for communication by a mobile communication method, etc. The execution subject of the example shown in Fig. 4 is CPU 101, but for convenience, the description will be given mainly on the functional components.

[0034] At OP1, the communication control unit 11 reads out profile information 106A for the communication carrier network 200 from the SIM 106. At OP2, the communication control unit 11 executes a process to establish a connection with the communication carrier network 200. In the process to establish a connection with the communication carrier network 200, authentication is performed by the communication carrier network 200. At this time, the communication control unit 11 is authenticated by the communication carrier network 200 using the profile information 106A. If the authentication is successful, a connection with the communication carrier network 200 is established.

[0035] In OP3, the communication control unit 11 executes a process of establishing an IPsec tunnel with the ePDG in the vehicle manufacturer communication system 500. In the process of establishing the IPsec tunnel, the communication control unit 11 performs a procedure for establishing an IPsec tunnel addressed to the ePDG. Information related to the ePD used in the process of establishing the IPsec tunnel is obtained, for example, based on information included in the profile information 105A. The IPsec tunnel is an example of a "logical tunnel."

[0036] At OP4, the communication control unit 11 reads out profile information 105A for the vehicle manufacturer communication system 500 from the SIM 105. At OP5, the communication control unit 11 executes a process to establish a connection with the vehicle manufacturer communication system 500. In the process to establish a connection with the vehicle manufacturer communication system 500, authentication is performed by the vehicle manufacturer communication system 500. At this time, the communication control unit 11 receives authentication in the vehicle manufacturer communication system 500 using the profile information 105A through an IPsec tunnel. If the authentication is successful, a connection with the vehicle manufacturer communication system 500 is established. Thereafter, the DCM 1 becomes able to communicate with the Internet, etc., through the IPsec tunnel via the vehicle manufacturer communication system 500.

[0037] FIG. 5 shows an example of a sequence for establishing a connection between the DCM 1 and the vehicle manufacturer communication system 500. In S1, a procedure for establishing communication is executed between the DCM 1 and the communication carrier network 200. The process in S1 is also called an attach procedure. In S1, the DCM In S2, communication is performed between DCM 1 and the MME in S200. S2 is authentication of DCM 1 executed in the procedure in S1. In S2, in the communication carrier network 200, the MME cooperates with the HSS to perform, for example, AKA authentication. In S2, DCM 1 is authenticated in the communication carrier network 200 using information included in profile information 106A for the communication carrier network 200. After that, a connection between DCM 1 and the communication carrier network 200 is established.

[0038] In S3, a procedure for establishing an IPsec tunnel between the DCM 1 and the ePDG of the vehicle manufacturer communication system 500 is executed. In S4, an IPsec tunnel is established between the DCM 1 and the ePDG of the vehicle manufacturer communication system 500. The IPsec tunnel is associated with an interface of the ePDG at one end and the SIM 106 of the DCM 1 at the other end. The interface is as follows:

[0039] In S5, a procedure is executed to establish a connection between the DCM 1 and the vehicle manufacturer communication system 500 through an IPsec tunnel. In S6, in the vehicle manufacturer communication system 500, the AAA performs AKA authentication in cooperation with the HSS, for example, in the same manner as the MME in the communication carrier network 200. In S6, the DCM 1 is authenticated in the vehicle manufacturer communication system 500 using information included in the profile information 105A for the vehicle manufacturer communication system 500. Thereafter, a connection between the DCM 1 and the vehicle manufacturer communication system 500 is established. Thereafter, the DCM 1 becomes capable of communicating with a PDN such as the Internet through the communication carrier network 200 and the vehicle manufacturer communication system 500. In the vehicle manufacturer communication system 500, communication from the DCM 1 is transferred from the ePDG to the PGW, and output from the PGW to a PDN such as the Internet.

[0040] <Effects of the First Embodiment> In the first embodiment, the DCM 1 can perform communication via the vehicle manufacturer communication system 500 while using the communication carrier network 200 as an access network by establishing an IPsec tunnel with the ePDG of the vehicle manufacturer communication system 500 on the communication carrier network 200. This allows the owner of the vehicle 10 to freely select a communication carrier network to contract with from among multiple communication carrier networks. In addition, the vehicle manufacturer communication system 500 can route communication of the DCM 1 via the vehicle manufacturer communication system 500 without linking with a communication carrier network.

[0041] <Modification> In the first embodiment, the vehicle manufacturer communication system 500 authenticates subscribers in the same manner as a normal EPC, so the DCM 1 holds the profile information 105A in the SIM 105. Alternatively, the vehicle manufacturer communication system 500 can adopt an authentication method different from that of the EPC. In this case, the DCM 1 holds authentication information used in the authentication method adopted by the vehicle manufacturer communication system 500, instead of the profile information 105A.

[0042] In a modified example, the DCM 1 does not hold the profile information 105A in the SIM 105, but holds the identity verification certificate 105B instead. When purchasing a vehicle, the contractor (owner) submits an identity verification document with a face image such as a driver's license, which is examined by a predetermined certification authority to associate the vehicle with the contractor. Furthermore, the key information generated by the DCM 1 can be sent to the certification authority linked to the vehicle manufacturer communication system 500 to have an electronic certificate issued that proves that the key information belongs to the contractor. The SIM 105B includes the key information and the electronic certificate that proves that the key information belongs to the contractor. The DCM 1 uses the identity verification certificate 105B in authentication in the vehicle manufacturer communication system 500.

[0043] As described above, the SIM 105B is information based on the contractor's identification document, so that the contractor's identity can be more securely identified by performing authentication using the SIM 105B. The identification certificate 105B may be stored in a secure storage area outside the SIM 105. The identification certificate 105B in the modified example is an example of "authentication information."

[0044] The authentication method adopted by the vehicle manufacturer communication system 500 is not limited to the authentication method using the SIM 105B. The DCM 1 stores authentication information corresponding to the authentication method adopted by the vehicle manufacturer communication system 500 and whose use has been approved in advance by the vehicle manufacturer communication system 500 in a secure storage area of ​​the auxiliary storage device 103. The DCM 1 may read the authentication information from the secure storage area and receive authentication during authentication in the vehicle manufacturer communication system 500. In this case, the DCM 1 does not need to hold the SIM 105 and may only need to have one SIM, SIM 106.

[0045] <Other Modifications> The above-described embodiment is merely an example, and the present disclosure can be modified and implemented as appropriate without departing from the spirit and scope of the present disclosure.

[0046] In the first embodiment, it is assumed that the communication carrier network 200 and the vehicle manufacturer communication system 500 are systems compatible with 4G. However, without being limited thereto, the communication carrier network 200 and the vehicle manufacturer communication system 500 may be systems compatible with 5G, 3G, and 6G or later mobile communication methods. When the vehicle manufacturer communication system 500 is a system compatible with 5G, the vehicle manufacturer communication system 500 includes, for example, an N3IWF instead of an ePDG, a UPF instead of a PGW, a UDM (Unified Data Management) instead of an HSS, a PCF (Policy Control Function) instead of a PCRF, and an AUSF (Authentication Server Function) instead of an AAA. When the communication carrier network 200 is a system compatible with 5G, a gNB instead of an eNB, an AMF (Access and Mobility Management Function) and an SMF (Session Management Function) instead of an SGW and an MME, and a UDM instead of an HSS are included.

[0047] In the first embodiment, the communication of the vehicle 10 is described as being routed through the vehicle manufacturer communication system 500 managed by the manufacturer of the vehicle 10, but the application of the technology described in the first embodiment is not limited to the connection between the vehicle 10 and the vehicle manufacturer communication system 500. For example, the technology can be applied to the connection between a smartphone or an IoT terminal and the communication system of the manufacturer. Furthermore, the technology can be applied to the connection between a terminal and a communication system of a third party other than the manufacturer of the terminal. In this case, the terminal includes authentication information (e.g., SIM profile information, etc.) issued by the third party's communication system and a program (corresponding to the communication control unit 11) for connecting to the third party's communication system.

[0048] In the first embodiment, an IPsec tunnel is established between the DCM 1 and the ePDG in the vehicle manufacturer communication system 500, but is not limited to this. A logical tunnel at the IP layer or higher other than the IPsec tunnel may be established between the DCM 1 and the ePDG in the vehicle manufacturer communication system 500.

[0049] The processes and means described in this disclosure can be freely combined and implemented as long as no technical contradiction occurs.

[0050] Furthermore, a process described as being performed by one device may be shared and executed by multiple devices. Alternatively, a process described as being performed by different devices may be executed by one device. In a computer system, the hardware configuration (server configuration) by which each function is realized can be flexibly changed.

[0051] The present disclosure can also be realized by supplying a computer program that implements the functions described in the above embodiments to a computer, and having one or more processors of the computer read and execute the program. Such a computer program may be provided to the computer by a non-transitory computer-readable storage medium that can be connected to the system bus of the computer, or may be provided to the computer via a network. Non-transitory computer-readable storage media include, for example, magnetic disks (floppy (registered trademark) disks, hard disk drives (HDDs), etc.), optical disks (CD-ROMs, This includes any type of disk (such as a DVD disk, Blu-ray disk, etc.), read-only memory (ROM), random-access memory (RAM), EPROM, EEPROM, magnetic cards, flash memory, optical cards, and any type of medium suitable for storing electronic instructions. [Explanation of symbols]

[0052] 1··DCM 10. Vehicle 11. Communication control section 101··CPU 102 Memory 103...Auxiliary storage device 104 Wireless communication unit 105··SIM 105A··Profile Information 106··SIM 106A··Profile Information 200··Telecommunications carrier network 500 ··Vehicle manufacturer communication system

Claims

1. a storage unit that stores authentication information used for connecting to the first communication system; A first eUICC (Embedded Universal Integrated Circuit Card) that holds profile information used for connecting to a first carrier network that a user has selected and subscribed to as an access network; receiving authentication in the first carrier network using the profile information and establishing a connection with the first carrier network; Establishing a logical tunnel with a gateway device in the first communication system on the first carrier network after the connection is established; authenticating to the first communication system using the authentication information through the logical tunnel and establishing a connection with the first communication system; after establishing a connection with the first communication system, communicating with an external network through the logical tunnel and the first communication system; A control unit that executes the above. An information processing device comprising:

2. the authentication information is profile information issued by the first communication system and used for connecting to the first communication system, The storage unit is a second eUICC. The information processing device according to claim 1 .

3. The authentication information is an electronic certificate issued by a predetermined certificate authority when the identity of the owner of the information processing device is verified using key information used in authentication in the first communication system, and the key information. The information processing device according to claim 1 .

4. The information processing device is an in-vehicle device mounted in a vehicle, The first communication system is a communication system managed by a manufacturer of the vehicle. The information processing device according to claim 1 .

5. a storage unit that stores authentication information used for connecting to the first communication system; A first eUICC (Embedded Universal Integrated Circuit Card) that holds profile information used for connecting to a first carrier network that a user has selected and subscribed to as an access network; An information processing device comprising: receiving authentication in the first carrier network using the profile information and establishing a connection with the first carrier network; Establishing a logical tunnel with a gateway device in the first communication system on the first carrier network after the connection is established; authenticating to the first communication system using the authentication information through the logical tunnel and establishing a connection with the first communication system; after establishing a connection with the first communication system, communicating with an external network through the logical tunnel and the first communication system; How to do it.

Images