Communication device and communication control method

Abstract

To make it possible to ensure reliability of communication between an in-vehicle terminal and a communication device.SOLUTION: A communication device configured to communicate with an in-vehicle terminal includes a control unit that performs authentication based on authentication information received by the communication device from the in-vehicle terminal using a tunnel established on an access network selected from a plurality of access networks available for communication between the in-vehicle terminal and the communication device, and, if the authentication is successful, performs routing of data received from the in-vehicle terminal.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a communication device and a communication control method. [Background technology]

[0002] Conventionally, an in-vehicle terminal transmits request data including the current location data of the in-vehicle terminal to a data center via the Internet, and the data center, after authenticating the user, extracts only the information that matches the user's current location from the latest information and supplies it to the in-vehicle terminal (for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2003-216637 A Summary of the Invention [Problem to be solved by the invention]

[0004] An object of the present disclosure is to provide a communication device and a communication control method capable of ensuring the reliability of communication between an in-vehicle terminal and a communication device. [Means for solving the problem]

[0005] One aspect of the present disclosure is a communication device that communicates with an on-board terminal, the communication device including a control unit that performs authentication based on authentication information received by the communication device from the on-board terminal using a tunnel established on an access network selected from a plurality of access networks available for communication between the on-board terminal and the communication device, and if the authentication is successful, performs routing of data received from the on-board terminal.

[0006] Other aspects of the present disclosure include a communication control method by the above-mentioned communication device, a program for causing a computer to operate as the above-mentioned communication device, a recording medium having the program recorded thereon, and the like. Effect of the Invention

[0007] According to one aspect of the present disclosure, it is possible to ensure the reliability of communication between an in-vehicle terminal and a communication device. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram illustrating an example of a communication system according to an embodiment. [Diagram 2] FIG. 2 is a diagram illustrating an example of the configuration of a DCM. [Diagram 3] FIG. 3A illustrates an example of the configuration of a communication device, and FIG. 3B illustrates an example of the configuration of a smart device. [Figure 4] FIG. 4 is a flowchart showing an example of processing by the DCM. [Diagram 5] FIG. 5 is a sequence diagram showing an example of an operation in the communication system. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Business operators (e.g., vehicle manufacturers, sales companies, rental companies, etc.) of vehicles equipped with communication functions, such as connected cars and autonomous vehicles, may wish to collect data related to the vehicles (e.g., data related to the driving of the vehicles, data related to vehicle communications, etc.). For this reason, it is considered that the communication devices (communication facilities) of the business operators will receive, via a network, predetermined data (IoT data) transmitted from the on-board terminals mounted on the vehicles.

[0010] As a network connecting the in-vehicle terminal and the communication device, it is possible to use a network (called a communication carrier network) of a mobile communication operator (MNO: also called a communication carrier) with which the user of the vehicle has a contract. However, in addition to the above-mentioned communication carrier network, access to the communication device may be via a communication carrier network of another communication carrier and the Internet, or via a wireless LAN and the Internet using tethering. If the user is allowed to select an access network to be used to access the communication device from multiple access networks, it becomes possible to transmit data related to the vehicle to the communication device under conditions favorable to the user, making it easier to obtain the user's cooperation in collecting data related to the vehicle. On the other hand, it becomes possible for the operator to collect more data.

[0011] However, when the network route from the in-vehicle terminal to the communication device includes the Internet, there is a problem that the reliability of communication is lower than when only the communication carrier network is used as the route. Also, if the information exchanged between the in-vehicle terminal and the communication device, especially the information related to the authentication of the in-vehicle terminal, differs due to the difference in the access method from the in-vehicle terminal to the communication device, there is a problem that the configuration of the in-vehicle terminal and the information that should be provided become complicated.

[0012] The following embodiment describes a communication system capable of solving the above-mentioned problems. That is, the communication system can ensure the reliability of communication (secure communication) even if the access method to the communication device is left to the user, while suppressing the complication of the configuration of the in-vehicle terminal due to the access method being selectable.

[0013] Hereinafter, an embodiment of the present disclosure will be described with reference to the drawings. The configurations of the following embodiments are merely examples, and the present disclosure is not limited to the configurations of the embodiments. FIG. 1 is a diagram showing an example of a communication system according to an embodiment. The communication system includes a DCM (Data Communication Module) 10, which is an example of an in-vehicle terminal mounted in a vehicle, and a communication device 20. The in-vehicle terminal includes a DCM and The in-vehicle terminal may be a stationary type or a portable type.

[0014] The DCM 10 receives vehicle information (such as vehicle position, vehicle speed, etc.) from an in-vehicle device (such as a car navigation device, a drive recorder, and an ECU (Electronic Control Unit)). The DCM 10 can collect data related to the driving of the vehicle. The DCM 10 can also collect data related to communication of the vehicle (vehicle-mounted terminal). Data (user data) transmitted from the DCM 10 is sent to a predetermined communication partner (for example, server 51 or server 52) via the communication device 20. However, the destination of the user data may be the communication device 20.

[0015] The communication carrier network 2 with which the vehicle user has a contract is used as a default network used by the DCM 10 for communication with the communication device 20. The communication carrier network may be an MNO (Mobile Network Operator) network or an MVNO (Mobile Virtual Network Operator) network. The communication carrier network 2 has a wireless access network (base station) and a core network. When the communication carrier network 2 is used, the communication device 10 forms part of the core network of the communication carrier network 2. Authentication information stored in a first SIM (Subscriber Identity Module) 105 possessed by the DCM 10 is used to authenticate the DCM 10 in the communication carrier network 2.

[0016] In this embodiment, the user can use a network of an MNO or MVNO other than the MNO or MVNO of the communication carrier network 2 (MVNO network 3 is exemplified in FIG. 1) as an access network other than the communication carrier network 2. In this case, authentication information stored in the second SIM 106) is used to authenticate the DCM 10 in the MVNO network 3. Each of the communication carrier network 2 and the MVNO network 3 may be a 4G (LTE) network, a 5G network, or a 6G network.

[0017] The user can also use the wireless LAN (Wi-Fi) 4 as an access network by tethering using the tethering device 13. The tethering can be Wi-Fi tethering, Bluetooth (registered trademark) tethering, or USB (Universal serial Bus) tethering. Tethering may also be used. When the MVNO network 3 or the wireless LAN 4 is used as the access network, the route from the DCM 10 to the communication device 20 passes through the Internet 1. In this way, the user can select an access network that the user desires to use from multiple access networks such as the MVNO network 3 or the wireless LAN 4, in addition to the communication carrier network 2, for access to the communication device 20. That is, the DCM 10 can access the communication device 20 using an access method selected by the user from multiple access methods. The communication carrier network is an example of a cellular network (first cellular network). The MVNO network 3 is an example of a second cellular network and a first access network passing through the second cellular network. The wireless LAN 4 is an example of a network other than the first cellular network used by tethering, and a second access network passing through the network.

[0018] The communication device 20 can be configured by one computer or a collection (cloud) of two or more computers. The communication device 20 has a gateway (GW) 21 connected to the Internet 1. The GW 21 is a gateway that accommodates non-3GPP (registered trademark) wireless access (Untrusted Non-3GPP (registered trademark) IP Access) such as the Internet. For example, if the communication device is compatible with 4G, it is an ePDG (Evolved Packet Data Gateway), if it is compatible with 5G, it is an N3IWF (non-3GPP (registered trademark) Interworking Function), and if it is compatible with 3G, it is a PDG. The GW 21 is a gateway that accommodates non-3GPP (registered trademark) wireless access (Untrusted Non-3GPP (registered trademark) IP Access) such as the Internet 1. The signal format received from the DCM 10 can be converted into a format compatible with the core network of the communication carrier network 2, which is used in the communication device 20. The Internet 1 has lower communication reliability (security) than the communication carrier network 2 (3GPP (registered trademark) wireless access). For this reason, when the DCM 10 communicates with the communication device 20 using an access network other than the communication carrier network 2, a logical tunnel is established between the DCM 10 and the GW 21. The tunnel is, for example, an IPsec tunnel established by the IPsec tunnel mode. However, the tunnel may be something other than an IPsec tunnel.

[0019] The communication device 20 includes an authentication unit 22 and a routing unit 23. After the tunnel is established, the authentication unit 22 receives authentication information sent from the DCM 10 through the tunnel via the GW 21, and authenticates the DCM 10 (user). In this embodiment, as the authentication information, authentication information for authentication in the communication carrier network 2 stored in the first SIM 105 is used. However, the authentication information may be stored in a secure storage area of ​​the DCM 10 other than the first SIM 105. When the communication device 20 operates as a part of an LTE (4G) core network, the authentication unit 22 operates as an HSS (Home Subscriber Server) that performs authentication processing. However, the authentication unit 22 may operate as a combination of an HSS and an AAA (Authentication Authorization Accounting). When the communication device 20 operates as a part of a 5G core network, the authentication unit 22 operates as a combination of an HSS and an AAA (Authentication Authorization Accounting). When the authentication unit 21 operates as an authentication server function (AUSF), that is, the authentication unit 21 performs the authentication for the subscriber information stored in the UDM (Unified Data Management). It operates as a network function that authenticates the user / UE (DCM10). For example, EPA-AKA is applied, but the authentication method may be other than this.

[0020] When the DCM 10 accesses the communication device 20 using an access network (access line) other than the communication carrier network 2, common authentication information is used regardless of whether the MVNO network 3 or tethering is used. In this embodiment, the authentication information stored in the first SIM 105 (authentication information for the communication carrier network 2) is used as common authentication information for a plurality of access networks.

[0021] The routing unit 23 determines the destination of the user data from the DCM 10 (the communication partner, for example, The routing unit 23 sets and determines a route to the DCM 10 (server 51 or server 52). A communication route (session) is established between the routing unit 23 and the DCM 10. When the communication device 20 operates as a part of a LTE (4G) core network, the routing unit 23 operates as a PGW (Packet data network Gateway). When the communication device 20 operates as a part of a 5G core network, In this case, the routing unit 23 operates as a UPF (User Plane Function).

[0022] When DCM 10 communicates with server 51 or server 52, data addressed to server 51 or server 52 is always routed through a tunnel by routing unit 23 to reach communication device 20, and is then transmitted to server 51 or server 52 via routing unit 23. Data addressed to DCM 10 and transmitted from server 51 or server 52 is always transferred via the tunnel via communication device 20.

[0023] In a state where communication is being performed using a path (called a first route) between the DCM 10 and the communication device 20 via the communication carrier network 2, a communication path (called a second route) between the DCM 10 and the GW 21 may be established. In other words, the first route and the second route may be used in parallel.

[0024] 2 is a diagram showing an example of the configuration of the DCM 10. The DCM 10 includes a CPU 101, a memory 102, an auxiliary storage device 103, a wireless communication unit 104, a first SIM 105, and a second SIM 106. The auxiliary storage device 103 includes, for example, a hard disk drive (HDD), and The auxiliary storage device 103 is, for example, a solid state drive (SSD), an EEPROM, etc. For example, an OS (Operating System) and a plurality of types of application programs (apps) are stored. The apps include programs for implementing various functions, such as a communication control program. The memory 102 includes, for example, a ROM (Read Only Memory), a RAM (Random Access Memory), and a The memory 102 and the auxiliary storage device 103 (collectively referred to as storage devices) are each an example of a computer-readable recording medium.

[0025] The wireless communication unit 104 includes DCE (Data Circuit terminating Equipment) and communicates with an external device according to a wireless communication method such as a cellular network (LTE, 4G, 5G, or 6G, etc.), Bluetooth (registered trademark), wireless LAN (IEEE 802.11 series, including Wi-Fi), etc. The external device is a base station in the case of a communication carrier network, an access point in the case of wireless LAN (Wi-Fi), and a communication device compatible with Bluetooth (registered trademark) in the case of Bluetooth (registered trademark).

[0026] Each of the first SIM 105 and the second SIM 106 is an eUICC. The first SIM 105 is a SIM for the communication carrier network 2, and the second SIM 106 is a SIM for the MVNO network 3. The first SIM 105 and the second SIM 106 may be a chip type or a card type. When the SIM is a card type, the DCM 10 includes a SIM slot, a SIM card reader, and the like.

[0027] The DCM 10 also includes a USB connector 107, an input device 108, and a display 109. A USB dongle 13B can be connected to the USB connector 107. A smart device 13A can also be connected to the USB connector 107 via a USB cable. The USB dongle 13B and the smart device 13A are examples of the tethering device 13. The smart device 13A is a smartphone, a tablet terminal, or the like.

[0028] The input device 108 is a button, a key, a touch panel, etc., and is used for inputting and setting information. The display 109 is used for displaying information. It may be a user interface displayed on the play 109.

[0029] The CPU 101 executes various programs stored in the storage device to perform various processes related to the operation of the DCM 10 (data collection, reception of collected data, transmission and reception of data, etc.) The CPU 101 is an example of a control unit, a controller, or a processor.

[0030] Fig. 3 shows a configuration example of the communication device 20, and Fig. 3B shows a configuration example of the smart device 13A. In Fig. 3A, the communication device 20 includes, as an example, a processor 31, a storage device 32, a communication interface (communication IF) 33, an input device 34, and a display 35.

[0031] The storage device 32 stores various programs and data. The processor 31 is an example of a control unit, and is a CPU, a DSP, a GPU, or a combination of these. The processor 31 executes the programs stored in the storage device 32 and performs various processes, such as calculations or processing using data stored in the storage device 32. By executing the programs, the communication device 20 operates as a device including the GW 21, the authentication unit 22, and the routing unit 23. The processor 31 corresponds to a control unit that operates as the GW 21, the authentication unit 22, and the routing unit 23. The communication IF 33 includes a communication interface circuit with the communication carrier network 2 and a communication interface circuit with the Internet 1, and transmits and receives signals related to communication, converts formats (protocols), and the like. The input device 34 is a button, a key, a touch panel, and the like used for inputting and setting information. The display 35 is used for displaying information.

[0032] In FIG. 3B, the smart device 13A has, as an example, a processor 131, a storage device 132, an input device 134, and a display 135. Although there are differences in performance and type, these have similar functions to the processor 31, the storage device 32, the input device 34, and the display 35. The wireless communication interface (wireless communication IF) 133 is a wireless access point for each of a communication carrier network, Bluetooth (registered trademark), and a wireless LAN (Wi-Fi). The processor 131 can perform various processes by executing programs stored in the storage device 132.

[0033] Fig. 4 is a flowchart showing an example of processing of the DCM 10. Fig. 5 is a sequence diagram showing an example of operation in the communication system. The processing of the flowchart shown in Fig. 4 is started when, for example, a user of the vehicle operates the DCM 10 to call up a selection screen for an access line (access method) to the communication device 20 on the display 109.

[0034] In step S01, the CPU 101 of the DCM 10 accepts a confirmation input of the selection result of the access line input by the user using the input device 108. In step S02, the CPU 101 determines whether the selection result is the communication carrier network 2. If it is determined that the communication carrier network 2 has been selected, the process proceeds to step S07, and if not, the process proceeds to step S03.

[0035] When the process proceeds to step S07, the CPU 101 performs processing for establishing a communication path with the communication device 20 via the communication carrier network 2. When establishing the communication path, the DCM 10 transmits a connection request including information about the communication partner to the communication carrier network 2.

[0036] Using information (such as subscriber information and authentication information) stored in the first SIM 105, location registration and authentication of the DCM 10 in the communication carrier network 2 are performed. The CPU 101 reads out the authentication information stored in the first SIM 105 and transmits it to the communication carrier network 2 for authentication. The communication carrier network 2 is provided with an authentication unit different from the authentication unit 22, and this authentication unit performs authentication using authentication information. The authentication unit 22 is used to perform authentication when an access line other than that of the communication carrier network 2 is used.

[0037] When authentication in the communication carrier network 2 is successful in establishing a communication path between the DCM 10 and the communication device 20, the communication carrier network 2 performs control to establish a communication path connecting the routing unit 23 in the communication device 20 and the DCM 10. In establishing the communication path, the routing unit 23 performs routing with a communication partner of the DCM 10 (for example, server 51 or 52). Through the routing, communication (transmission and reception of data) becomes possible between the DCM 10 and the communication partner via the communication device 20 (routing unit 23).

[0038] When the process proceeds to step S03, the CPU 101 performs a process of connecting with the GW 21. For example, when the MVNO network 3 is selected as a result of the selection of the access line, the DCM 10 performs location registration and authentication of the DCM 10 in the MVNO network 3 using information (contractor information, authentication information, etc.) stored in the second SIM 106. For authentication, the CPU 101 performs a process of reading the authentication information stored in the second SIM 106 and transmitting it to the communication carrier network 2. If the authentication is successful, the MVNO network 3 performs routing to the GW 21, which is the communication partner of the DCM 10, and establishes a communication path between the DCM 10 and the GW 21 (see FIG. 5). <1> ).

[0039] When tethering using the tethering device 13 (smart device 13A or USB dongle 13B) is selected as the result of the access line selection, the user performs a process of connecting the DCM 10 and the tethering device 13 using the USB connector 107. Alternatively, the user may perform a process of connecting the DCM 10 and the smart device 13A using wireless communication (Bluetooth (registered trademark) The DCM 10 then sends data intended for the GW 21 to the tethering device 13. The tethering device 13 operates like a mobile router, accesses a predetermined wireless LAN access point, and transmits data to the GW 21 via the wireless LAN 4 and the Internet. In this way, the DCM 10 and the GW 21 can communicate with each other via the wireless LAN 4 and the Internet 1 (FIG. 5 <1> ).

[0040] In step S04, the CPU 101 performs processing to establish a tunnel (IPsec tunnel) in IPsec tunnel mode between the DCM 10 and the GW 21. For example, a remote access VPN is constructed in which the DCM 10 corresponds to a terminal and the GW 21 corresponds to a VPN device (see FIG. 5). <2> ) Note that the tunnel can use SSL / TLS instead of IPsec. It is possible.

[0041] When the tunnel is established, the CPU 101 reads the authentication information from the first SIM 105 and transmits it to the GW 21 (see FIG. 5). <3> The authentication information is transferred to the GW 21 through the tunnel. The GW 21 transfers the authentication information to the authentication unit 22. The authentication unit 22 performs authentication processing using the authentication information (see FIG. 5). <4> ).

[0042] Furthermore, if the authentication is successful, the routing unit 23 uses the information of the communication partner (server 51 or 52) sent from the DCM 23 together with the authentication information (or at a different timing) to perform routing for data transmitted between them (FIG. 5 <5> As a result of the routing, the routing unit 23 is in a state in which it can send data from the DCM 10 to the communication partner and transmit data from the communication partner to the DCM 10. In other words, the DCM 10 is in a state in which it can communicate with the communication partner (see FIG. 5). <6> ).

[0043] After that, the communication device 20 transmits information to the DCM 10 notifying that the authentication has been successful (communication is possible). (Figure 5 <7> ), and is received by the DCM 10 (step S06). After that, the user data, such as data related to the vehicle, transmitted from the DCM 10 reaches the communication device 20 through the tunnel, passes through the routing unit 23 of the communication device 20, and is received by the communication partner (FIG. 5 <8> and <9> ). Data addressed to the DCM 10 from the communication partner is received by the DCM 10 through the tunnel via the routing unit 23 (see FIG. 5). <10> and <11> ).

[0044] According to the communication system of the embodiment, authentication information is passed from the DCM 10 (vehicle-mounted terminal) to the communication device 20 using a tunnel established between the DCM 10 and the communication device 20. This makes it possible to ignore the reliability of the access network existing between the DCM 10 and the communication device 20. In other words, communication between the DCM 10 and the communication device 20 is performed in an encrypted state using a tunnel (VPN connection). This ensures the reliability of communication even if the route goes through the Internet 1. This allows the user to flexibly select an access line.

[0045] Furthermore, when an access line other than the communication carrier network 2 is used, authentication using common authentication information is performed by the authentication unit 22 of the communication device 20 regardless of the result of the access line selection. This authentication information common between access lines (access networks) is authentication information when using the communication carrier network 2. This allows the DCM 10 (user (subscriber)) to be authenticated using the same method as when using the communication carrier network 2, thereby preventing the configuration of the DCM 10 (vehicle-mounted terminal) from becoming complicated.

[0046] Furthermore, the DCM 10 can be configured or set to receive only data received from the communication device 20 and reject data received from devices other than the communication device 20. With such a configuration, the DCM 10 does not need to determine whether the communication partner is trustworthy, and the configuration of the DCM 10 can be simplified. Since the DCM 10 can be specialized only for communication with the communication device 20, it becomes possible to place all functions, including routing, on the communication device 20 side, with the provision of advanced applications in the future in mind.

[0047] In addition, the communication fee when the DCM 10 and the communication device 20 communicate by tethering using the smart device 13A (for example, the user's smartphone) is charged by the charging mechanism 40 (FIG. 1) on the network. In this case, the communication fee can be charged to the user. For example, if the user has a fixed-rate contract for smartphone communication fees up to a certain communication amount, the above-mentioned communication by tethering can be performed within the remaining communication amount within the fixed amount. In this way, the operator does not have to bear the communication fee related to tethering. In addition, since the communication is within the fixed amount, there is an advantage that the user does not have to bear the communication fee. In addition, if the amount of communication available for a certain amount of money increases in the future, the application program used by the DCM 10 can be changed to one that is more convenient in exchange for a larger amount of communication.

[0048] In such an operation related to communication costs of tethering, an application program (app) that performs the following process may be installed in the smart device 13A. When tethering is performed, the user is notified that communication fees will be charged. The notification is performed, for example, by displaying on the display 125. When tethering, the amount of communication already used out of the amount of communication available at the flat rate is notified, or the amount of communication remaining out of the amount of communication available at the flat rate is notified. If the amount of communication already used among the fixed-rate communication amount is equal to or greater than a threshold (or if the remaining amount of communication falls below the threshold), a warning against the use of tethering is issued (for example, displayed on the display 125). Alternatively, the use of tethering is prohibited (DCM 10 and smart device (This assumes that the device is in a state where it cannot connect or pair with the 10A.)

[0049] The following configuration may also be adopted. The amount of communication of the DCM 10 is controlled according to an increase or decrease in the amount of communication that the user can tolerate. In some cases, the DCM 10 increases or decreases the amount of communication to the communication device 20, and in other cases, the amount of communication from the communication device 20 to the DCM 10 is increased or decreased. The communication device 20 permits the installation of an application according to the communication volume permitted by the user in response to a request for installing a communication application from the DCM 10. In other words, the type of application that can be installed in the DCM 10 is controlled according to the user's available flat-rate communication volume.

[0050] The processes and means described in the present disclosure can be freely combined and implemented as long as no technical contradiction occurs. In addition, a process described as being performed by one device may be shared and executed by multiple devices. Alternatively, a process described as being performed by different devices may be executed by one device. In a computer system, the hardware configuration (server configuration) by which each function is realized can be flexibly changed. The present disclosure can also be realized by supplying a computer program that implements the functions described in the above embodiments to a computer, and having one or more processors of the computer read and execute the program. Such a computer program may be provided to the computer by a non-transitory computer-readable storage medium that can be connected to the system bus of the computer, or may be provided to the computer via a network. Non-transitory computer-readable storage media include, for example, any type of disk, such as a magnetic disk (floppy disk, hard disk drive (HDD), etc.), an optical disk (CD-ROM, DVD disk, Blu-ray disk, etc.), a read-only memory (ROM), a random-access memory (RAM), an EPROM, an EEPROM, a magnetic card, a flash memory, an optical card, or any type of medium suitable for storing electronic instructions. [Explanation of symbols]

[0051] 1 Internet, 2 Telecommunication carrier network, 3 MCNO network, 4 Wireless LAN, 10 DCM, 20 Communication device, 31 Processor, 21 Gateway, 22 Authentication unit, 23 Routing unit

Claims

1. A communication device that communicates with an in-vehicle terminal, performing authentication based on authentication information received by the communication device from the on-board terminal using a tunnel established on an access network selected from a plurality of access networks available for communication between the on-board terminal and the communication device; If the authentication is successful, routing data received from the vehicle-mounted terminal. A control unit that executes A communication device comprising:

2. The authentication based on the authentication information is a common procedure for the plurality of access networks.

2. The communication device according to claim 1.

3. The authentication information is authentication information used when the in-vehicle terminal accesses the communication device via a cellular network different from the plurality of access networks and the communication device operates as a part of a core network of the cellular network. The communication device according to claim 1 .

4. The communication device receives the authentication information using an access network selected from the plurality of access networks, including a first access network via a second cellular network different from the first cellular network, which is the cellular network, and a second access network via a network other than the first cellular network, which is used by tethering. The communication device according to claim 3 .

5. A communication device that communicates with an in-vehicle terminal, performing authentication based on authentication information received by the communication device from the on-board terminal using a tunnel established on an access network selected from a plurality of access networks available for communication between the on-board terminal and the communication device; If the authentication is successful, routing data received from the vehicle-mounted terminal. A communication control method including:

Images