Communication system and authentication method

Abstract

To improve communication availability.SOLUTION: A communication system includes a mobile communication terminal and a first network. The mobile communication terminal has a first storage for storing first authentication information and a first control unit that selects a communication network from among multiple communication networks including an untrusted non-trusted network to be used for communication with the first network and receives authentication from the first network connected via the selected communication network using the first authentication information. The first network has a second storage unit that stores the first authentication information, a gateway that accommodates access from the non-trusted network, and a second control unit that authenticates the mobile communication terminal connected via the gateway on the basis of the first authentication information.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to communications technology. [Background technology]

[0002] Technologies for improving the robustness of communications using cellular communications networks have been developed. In this regard, for example, Patent Document 1 discloses a communication device equipped with a SIM card capable of storing multiple communication profiles. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2022-180105 Summary of the Invention [Problem to be solved by the invention]

[0004] The present disclosure aims to improve communication availability. [Means for solving the problem]

[0005] One aspect of the present disclosure is to A communication system including a mobile communications terminal and a first network, wherein the mobile communications terminal has a first memory unit that stores first authentication information, and a first control unit that performs the following: selecting a communications network to be used for communication with the first network from among a plurality of communications networks including an untrusted network, and receiving authentication from the first network connected via the selected communications network using the first authentication information; and the first network has a second memory unit that stores the first authentication information, a gateway that accommodates access from the untrusted network, and a second control unit that authenticates the mobile communications terminal connected via the gateway based on the first authentication information.

[0006] One aspect of the present disclosure is to This is an authentication method in which a mobile communications terminal performs a first step of selecting a communications network to be used for communicating with a first network from among a plurality of communications networks including an untrusted network, a second step of receiving authentication from the first network connected via the selected communications network using pre-stored first authentication information, and a third step of a control unit included in the first network authenticating the mobile communications terminal connected via a gateway that accommodates access from the untrusted network using the pre-stored first authentication information.

[0007] Another aspect of the present invention is a program for causing a computer to execute the above-described method, or a computer-readable storage medium non-transitoryly storing the program. Effect of the Invention

[0008] According to the present disclosure, it is possible to improve the availability of communications. [Brief description of the drawings]

[0009] [Figure 1] 1 is a schematic diagram of a vehicle communication network according to a first embodiment; [Diagram 2] A more detailed diagram of the network configuration shown in Figure 1. [Diagram 3] Hardware configuration diagram of DCM10. [Figure 4] FIG. 2 is a hardware configuration diagram of the communication device 11. [Diagram 5] FIG. 2 is a hardware configuration diagram of the authentication device 20. [Figure 6] DCM10 software configuration diagram. [Figure 7] FIG. 2 is a software configuration diagram of the communication device 11. [Figure 8] FIG. 2 is a diagram showing a software configuration of the authentication device 20. [Figure 9] 6 is a flowchart of a process in which the DCM 10 connects to the communication system 2. [Figure 10] 4 is a flowchart of an authentication process executed by the authentication device 20. [Figure 11] FIG. 2 is a schematic diagram of a vehicle communication network according to a modified example of the first embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] In recent years, automobiles have become more connected, and the number of vehicles equipped with communication devices is increasing. The in-vehicle communication device can provide various services to the vehicle occupants by communicating with a server device (such as an application server) via a cellular communication network, for example.

[0011] Typical in-vehicle communication devices have built-in communication modules that comply with specific standards and SIM cards for connecting to a specific carrier network, and it is not easy to change the communication standard or the carrier network to which the device is connected.

[0012] However, if a wireless communication device can only use one carrier network, communication will be cut off if a communication failure occurs in that carrier network. Furthermore, since automobiles are generally used for long periods of time, such as 10 years or more, it is expected that the communication standards assumed at the time of manufacture will become unusable in the future due to a change in communication standards. To deal with this, it is necessary to replace SIM cards and communication modules, which will incur significant costs. The communication system according to the present disclosure solves such problems.

[0013] A communication system according to a first aspect of the present disclosure includes: A communication system including a mobile communications terminal and a first network, wherein the mobile communications terminal has a first memory unit that stores first authentication information, and a first control unit that executes the following: selecting a communications network to be used for communication with the first network from among a plurality of communications networks including an untrusted network, and receiving authentication from the first network connected via the selected communications network using the first authentication information; and the first network has a second memory unit that stores the first authentication information, a gateway that accommodates access from the untrusted network, and a second control unit that authenticates the mobile communications terminal connected via the gateway based on the first authentication information.

[0014] The mobile communication terminal is typically, but not limited to, an in-vehicle terminal mounted in a vehicle. The mobile communication terminal is configured to be able to select a communication network to be used for communication with the first network from among a plurality of communication networks including an untrusted network. The first network has a gateway, which is a termination device that accommodates access from untrusted networks, and allows the mobile communication terminal to establish a connection to the first network via a selected communication network.

[0015] The mobile communication terminal can be configured to receive authentication from the first network using the same authentication information regardless of which of the multiple communication networks is selected. Similarly, the control unit of the first network can be configured to perform authentication based on the same authentication information regardless of which communication network is selected by the mobile communication terminal.

[0016] When multiple communication paths are provided between the mobile communication terminal and the first network, must have different authentication information for each communication path (e.g., for each carrier). However, in the communication system according to the present disclosure, the information used for authentication is fixed regardless of the communication path, so that even if an arbitrary communication path is added, it is possible to continue communication between the mobile communication terminal and the first network without changing the data for authentication.

[0017] The mobile communication terminal may be configured to be able to add a communication module that communicates through any communication network, including an untrusted network. For example, the any communication network can be added by USB tethering or the like.

[0018] The first authentication information possessed by the mobile communication terminal may be SIM profile information possessed by a SIM card or an eSIM. The SIM profile information may be issued by a carrier that operates the first network.

[0019] Specific embodiments of the present disclosure will be described below with reference to the drawings. Unless otherwise specified, the hardware configuration, module configuration, functional configuration, and the like described in each embodiment are not intended to limit the technical scope of the disclosure to only those.

[0020] First Embodiment [Network Overview] An overview of a vehicle communication network according to a first embodiment will be described with reference to Fig. 1. The vehicle communication network according to this embodiment includes a DCM 10 mounted on a vehicle 1, a communication device 11 connected to the DCM 10, and a server device 3. The DCM 10 and the server device 3 are connected via a carrier network A and a communication system 2, or a carrier network B and a communication system 2. The communication system 2 is a network including a plurality of communication devices including an authentication device 20. Note that the system may include a plurality of vehicles 1 and server devices 3.

[0021] The vehicle 1 is a connected vehicle capable of communicating with any server device via wireless communication. The vehicle 1 can provide various services by communicating with an external server device (e.g., server device 3) via DCM 10, which is a wireless communication device. Examples of the various services include a navigation service, a remote control service (e.g., remote air conditioning, etc.), an in-vehicle Wi-Fi (registered trademark) service, and an emergency call service. In addition to the devices shown in the figure, the vehicle 1 may have an in-vehicle terminal that provides these services.

[0022] The DCM 10 is a device that performs wireless communication with a predetermined network in order to connect a component (for example, an in-vehicle terminal) of the vehicle 1 with the server device 3. In this embodiment, the DCM 10 is configured to be connectable to a predetermined cellular communication network. The DCM 10 is configured to have an eUICC (Embedded Universal Integrated Circuit Card) for identifying a user. The eUICC may be a physical SIM card or an eSIM. Hereinafter, the eUICC owned by the DCM 10 is referred to as a first SIM.

[0023] In the illustrated example, the DCM 10 is configured to be able to communicate with a carrier network A that constitutes a cellular communication network. The carrier network A includes base stations of the cellular communication network, control devices that manage mobile communication terminals, and the like.

[0024] In this embodiment, the carrier network A is connected to a communication system 2. The communication system 2 is a network that includes the carrier network A and a PDN (Packet Data Network) such as the Internet. ork). While the carrier network A is a network operated by a telecommunications carrier, the communication system 2 can be a system operated by a manufacturer of the vehicle 1. By connecting these to each other, for example, it becomes possible for the communication system 2 to provide a service unique to the vehicle 1.

[0025] In this embodiment, the carrier network A provides only a communication line, and the communication system 2 authenticates the DCM 10 and provides services to the DCM 10. The DCM 10 has a first SIM that stores profile information for being authenticated by the communication system 2. The first SIM is issued by a business operator (e.g., a vehicle manufacturer) that operates the communication system 2. The communication system 2 includes an authentication device 20 for authenticating the DCM 10.

[0026] The DCM 10 connects to the communication system 2 via the carrier network A, and is authenticated by the communication system 2 using the profile information stored in the first SIM. In this embodiment, an authentication device 20 included in the communication system 2 authenticates the DCM 10 based on the profile information included in the first SIM. The authenticated DCM 10 becomes capable of communicating with a PDN (e.g., the Internet) and can start communicating with the server device 3.

[0027] In addition, as shown in the figure, in a configuration in which the DCM 10 is directly connected to a cellular communication network (carrier network A), if a communication failure occurs in the carrier network, communication will be interrupted.

[0028] To address this issue, a technology has been proposed that stores multiple profile information in a SIM and switches networks depending on the situation (for example, connecting to other carrier networks). However, even if such a configuration is adopted, it is not possible to respond to the generational change in cellular communication standards. For example, it is expected that services for older communication standards such as 3G will be discontinued one after another in the future. Meanwhile, since automobiles are generally used for long periods of time, such as 10 years or more, it is expected that communication devices such as DCMs that are installed at the time of manufacture will become unusable in the future. In order to change carrier networks, it is necessary to replace SIM cards and communication modules, which will incur huge costs.

[0029] To deal with this, in this embodiment, the DCM 10 is configured to allow external connection of another communication device, and if the carrier network A becomes unavailable, an alternative communication path is secured via that communication device.

[0030] 1, the DCM 10 is configured to be capable of externally connecting to a communication device 11. For example, the DCM 10 is configured to be capable of connecting to the communication device 11 via an interface such as USB, and to be capable of transmitting and receiving data via the communication device 11. In other words, the DCM 10 is configured to be capable of USB tethering. The communication device 11 is a device capable of wireless communication according to any communication standard. For example, even if the service of the communication standard used by the DCM 10 is terminated, the DCM 10 can continue communication via the communication device 11.

[0031] The communication device 11 is a device having the same communication function as the DCM 10. The communication device 11 has a second SIM, and can connect to the carrier network B based on profile information stored in the second SIM.

[0032] Carrier network B is independent of carrier network A and communication system 2. For example, the user of the vehicle 1 selects the carrier network B, makes a contract with the carrier network B, and prepares the communication device 11 corresponding to the contract.

[0033] Since the carrier network B is a network independent of the communication system 2, the carrier network B and the communication system 2 cannot be connected to each other as is. Therefore, in this embodiment, the DCM 10 connected to the carrier network B establishes an IPsec tunnel with the ePDG of the communication system 2, thereby making it possible to connect to the communication system 2 via the carrier network B and the IP communication network beyond it.

[0034] The communication system 2 has a gateway (enhanced Packet Data Gateway, hereinafter referred to as ePDG) for accommodating access from an IP communication network. The ePDG is a gateway for accommodating untrusted non-3GPP wireless access. This allows the communication system 2 to accept access via an IP communication network (via carrier network B) in addition to access via a wireless access network (carrier network A). The IP communication network is typically the Internet, but may be something else. This allows the DCM 10 connected to the carrier network B to communicate with the communication system 2 via a route via an IP communication network (the Internet).

[0035] According to this configuration, even if the carrier network A is unavailable, the user of the vehicle 1 can continue communication between the DCM 10 and the communication system 2 via an arbitrary route.

[0036] [Authentication process overview] When DCM10 connects to communication system 2 via carrier network A, communication system 2 can verify the authenticity of DCM10 by its own issued SIM (first SIM). On the other hand, when DCM10 connects via carrier network B, only authentication by carrier network B (authentication using the second SIM) has been performed, so communication system 2 cannot trust DCM10 as it is.

[0037] Therefore, in this embodiment, the communication system 2 (authentication device 20) authenticates the DCM 10 connected via the ePGD using the authentication information held by the first SIM, in the same way as when the DCM 10 is connected via the carrier network A. As a result, even if the communication path between the DCM 10 and the communication system 2 changes, the communication system 2 can continue to perform authentication with the same robustness as cellular communication without changing the device configuration.

[0038] Furthermore, in this embodiment, the authentication device 20 shares the result of authenticating the DCM 10 in this manner with the server device 3. Furthermore, the authentication device 20 has a function of authenticating the server device 3, and shares the result of authenticating the server device 3 with the DCM 10. The authentication result may be transmitted or shared using a predetermined API (Application Programming Interface).

[0039] In this embodiment, the authentication device 20 shares the results of authentication between the DCM 10 and the server device 3, so that the DCM 10 and the server device 3 can verify that the communication partner is genuine without having to execute authentication processing locally. This also makes it unnecessary to exchange certificates between the DCM 10 and the server device 3, thereby reducing the processing load on the DCM 10.

[0040] Furthermore, the authentication device 20 can confirm that the user of the vehicle 1 is the contractor by authenticating the DCM 10. By sharing the information, the server device 3 can verify that the user of the vehicle 1 is the contractor. This also provides an advantage in that it is not necessary to carry out identity verification processing (e.g., obtaining an identification card) when starting to use the service.

[0041] [Network configuration details] Fig. 2 is a diagram showing in detail the components of each network described with reference to Fig. 1. Note that Fig. 2 shows components according to the first embodiment extracted from the components of each system, and the components of each system are not limited to those shown in Fig. 2.

[0042] Carrier network A includes a cellular communication base station (hereinafter referred to as eNodeB), a control device (Mobile Management Entity, hereinafter referred to as MME) that manages mobile communication terminals including DCM 10, and a gateway (Serving Gateway, hereinafter referred to as S-GW) that relays data. will be done.

[0043] The communication system 2 includes a gateway (Packet Gateway, hereinafter referred to as P-GW) for connecting the EPC to the Internet, and a device for performing network policy and charging management (hereinafter referred to as PCRF). As described above, the communication system 2 includes a gateway (ePDG) that accommodates access from an IP communication network, and the authentication device 20.

[0044] The authentication device 20 is an AAA (Authentication Authorization and Accounting) server. Also called an authentication device 20, it executes a process of authenticating mobile communication terminals including the DCM 10. The authentication device 20 has a function of performing authentication instead of the MME in a normal EPC. The authentication device 20 is connected to a database (Home Subscriber Server, hereinafter referred to as HSS) that manages subscriber information, and performs authentication of the mobile communication terminal based on information stored in the database (authentication information corresponding to the first SIM).

[0045] Carrier network B has a function of authenticating a mobile communication terminal (communication device 11) connected via a base station (eNodeB). Carrier network B also has a P-GW connected to an IP communication network (e.g., the Internet). This allows the mobile communication terminal (communication device 11) connected to carrier network B to communicate with the IP communication network.

[0046] In a case where the DCM 10 establishes a connection using its own wireless communication module, the DCM 10 transmits a connection request to the communication system 2 via the carrier network A. At this time, the DCM 10 is authenticated by the authentication device 20 using authentication information included in profile information (hereinafter referred to as a first profile) stored in the first SIM.

[0047] Furthermore, in the case of establishing a connection via the communication device 11, the DCM 10 transmits a connection request to the communication system 2, addressed to the ePDG of the communication system 2. As described above, the ePDG is a gateway that accommodates access from an IP communication network, and therefore the DCM 10 can communicate with the communication system 2 via the ePDG. At this time, the DCM 10 is authenticated by the authentication device 20 using authentication information included in the profile information (first profile) stored in the first SIM. That is, the DCM 10 is configured to be authenticated by the authentication device 20 using the same authentication information (authentication information included in the first profile) regardless of the path to the communication system 2.

[0048] The connection request is processed by the authentication device 20 of the communication system 2, and is authenticated as the DCM 10. Authentication is then performed between the DCM 10 and the server device 3. The authentication device 20 authenticates the DCM 10 based on the authentication information included in the first profile. When the authentication is complete, a path from the DCM 10 to the PDN is established, and the DCM 10 and the server device 3 can communicate with each other.

[0049] In this embodiment, the DCM 10 receives authentication from the authentication device 20 using the same authentication information (profile information) for a route (first route shown in FIG. 2) for directly connecting to the communication system 2 via the cellular communication network and a route (second route) for connecting to the communication system 2 via an IP communication network using tethering. With this configuration, it becomes possible to additionally provide a route (second route) via an IP communication network by utilizing facilities for authentication in the cellular communication network, such as the first SIM and the authentication device 20.

[0050] Furthermore, authentication device 20 shares the result of authenticating DCM 10 with server device 3. Authentication device 20 also authenticates server device 3, which is the communication partner of DCM 10, in advance and shares the result of the authentication with DCM 10. If there are multiple server devices 3, the multiple servers may be authenticated in advance. This allows DCM 10 and server device 3 to confirm each other's legitimacy without exchanging certificates, etc.

[0051] [Hardware configuration] Next, the hardware configuration of each device constituting the system will be described. Fig. 3 is a diagram showing an example of the hardware configuration of the DCM 10 according to this embodiment.

[0052] The DCM10 can be configured as a computer having a processor (CPU, GPU, etc.), a main storage device (RAM, ROM, etc.), and an auxiliary storage device (EPROM, hard disk drive, removable media, etc.). The auxiliary storage device stores an operating system (OS), various programs, various tables, etc., and by executing the programs stored therein, various functions (software modules) that match a predetermined purpose, as described below, can be realized. However, some or all of the functions may be realized as hardware modules using hardware circuits such as ASICs and FPGAs.

[0053] The DCM 10 includes a control unit 101 , a storage unit 102 , a wireless communication module 103 , a CAN communication module 104 , and an expansion interface 105 .

[0054] The control unit 101 is a calculation unit that executes a predetermined program to realize various functions of the DCM 10. The control unit 101 can be realized by a hardware processor such as a CPU. The control unit 101 may also be configured to include a RAM, a ROM (Read Only Memory), a cache memory, and the like.

[0055] The storage unit 102 is a means for storing information, and is configured with storage media such as RAM, a magnetic disk, a flash memory, etc. The storage unit 102 stores programs executed by the control unit 101, data used by the programs, etc.

[0056] The wireless communication module 103 is a communication device that performs wireless communication with a predetermined network. In this embodiment, the wireless communication module 103 is configured to be able to communicate with a predetermined cellular communication network (carrier network A). The wireless communication module 103 includes a SIM card 103A. The SIM card 103A is the first SIM in FIG. 1. The SIM card 103A is configured as a microcomputer equipped with a CPU and a storage device. The SIM card 103A stores information (PLMN information) for connecting to the carrier network A and information (PLMN information) for connecting to the communication system 2. The authentication information is used to authenticate the user.

[0057] The CAN communication module 104 is a communication interface for connecting the DCM 10 to an in-vehicle network of the vehicle 1. The CAN communication module 104 is, for example, a network interface that performs communication according to a CAN (Controller Area Network) protocol. The DCM 10 can perform data communication with other components (for example, an in-vehicle terminal, etc.) of the vehicle 1 via the CAN communication module 104.

[0058] The expansion interface 105 is an interface for mutually connecting the DCM 10 and the communication device 11. The expansion interface 105 is, for example, a USB interface. The DCM 10 is configured to be connectable to the communication device 11 via, for example, the USB interface.

[0059] Next, a description will be given of the hardware configuration of the communication device 11. Fig. 4 is a diagram showing an example of a hardware configuration of the communication device 11 according to this embodiment.

[0060] The communication device 11 includes a control unit 111 , a storage unit 112 , a wireless communication module 113 , and an interface 114 .

[0061] Similar to the control unit 101, the control unit 111 is a calculation unit that executes a predetermined program to realize various functions of the communication device 11. The control unit 111 can be realized by, for example, a hardware processor such as a CPU.

[0062] The storage unit 112 is a means for storing information, and is configured with a storage medium such as a RAM, a magnetic disk, a flash memory, etc. The storage unit 112 stores the programs executed by the control unit 111, data used by the programs, etc.

[0063] The wireless communication module 113 is a communication device that performs wireless communication with a predetermined network. In this embodiment, the wireless communication module 113 is configured to be able to communicate with a predetermined cellular communication network (carrier network B). The wireless communication module 113 includes a SIM card 113A. The SIM card 113A is the second SIM in FIG. 1. The SIM card 113A is configured as a microcomputer equipped with a CPU and a storage device. The SIM card 113A has information (PLMN information) for connecting to a carrier network B and authentication information for receiving authentication from the network. The second SIM may be a physical SIM card or may be an eSIM, etc.

[0064] The interface 114 is an interface for mutually connecting the DCM 10 and the communication device 11. The communication device 11 is configured to be connectable to the DCM 10 via an interface such as a USB.

[0065] Next, a description will be given of the hardware configuration of the authentication device 20. Fig. 5 is a diagram showing an example of a hardware configuration of the authentication device 20 according to this embodiment. The authentication device 20 is configured as a computer having a control unit 201 , a storage unit 202 , and a communication module 203 .

[0066] The authentication device 20 can be configured as a computer having a processor (CPU, GPU, etc.), a main memory device (RAM, ROM, etc.), and an auxiliary memory device (EPROM, hard disk drive, removable media, etc.). However, some or all of the functions (software) may be configured as a computer having a processor (CPU, GPU, etc.), a main memory device (RAM, ROM, etc.), and an auxiliary memory device (EPROM, hard disk drive, removable media, etc.). The software module may be realized as a hardware module by a hardware circuit such as an ASIC or an FPGA.

[0067] The control unit 201 is a calculation unit that executes a predetermined program to realize various functions (software modules) of the authentication device 20. The control unit 201 can be realized by, for example, a hardware processor such as a CPU.

[0068] The storage unit 202 is a means for storing information, and is configured with a storage medium such as a RAM, a magnetic disk, a flash memory, etc. The storage unit 202 stores the programs executed by the control unit 201, data used by the programs, etc.

[0069] The communication module 203 is a communication interface for connecting the authentication device 20 to the communication system 2. The authentication device 20 can perform data communication with other devices arranged in the communication system 2 via the communication module 203.

[0070] [Software configuration] Next, the software configuration of each device constituting the system will be described. Fig. 6 is a diagram showing a schematic software configuration of the DCM 10 according to this embodiment.

[0071] In this embodiment, the control unit 101 of the DCM 10 is configured to have a software module of a communication control unit 1011. The software module may be realized by the control unit 101 (CPU) executing a program stored in the storage unit 102. Note that the information processing executed by the software module is synonymous with the information processing executed by the control unit 101 (CPU).

[0072] Moreover, SIM card 103A (first SIM) built into wireless communication module 103 is configured to store a first profile which is SIM profile information. The first profile is a profile issued by a business operator that manages communication system 2. The first profile includes, for example, identification information such as an International Mobile Subscription Identity (IMSI) and an Integrated Circuit Card ID (ICCID), and authentication information (key information) for receiving SIM authentication such as AKA authentication.

[0073] The communication control unit 1011 establishes a network connection in response to a request from a vehicle component of the vehicle 1. The communication control unit 1011 may be configured to be able to select a network to be used for the connection. For example, when a first SIM is inserted in the DCM 10, the DCM 10 can establish a network connection via a carrier network A. Also, when a communication device 11 having a second SIM is connected to the DCM 10, the DCM 10 can establish a network connection via a carrier network B. When multiple networks are available, the communication control unit 1011 may determine a network to be used for the connection based on a user selection.

[0074] When a network connection is made via the carrier network A, the communication control unit 1011 receives authentication from the authentication device 20 using the profile information (first profile) stored in the first SIM. When a network connection is made via carrier network B, the communication control unit 1011 first executes a process of requesting the communication device 11 to connect to carrier network B. Secondly, after the communication device 11 connects to carrier network B, the communication control unit 1011 executes a process of interacting with the communication system 2 (authentication device 20) via carrier network B and receiving authentication from the authentication device 20.

[0075] Next, a description will be given of the software configuration of the communication device 11. Fig. 7 is a diagram showing a schematic diagram of the software configuration of the communication device 11 according to this embodiment.

[0076] In this embodiment, the control unit 111 of the communication device 11 is configured to have a software module of a communication control unit 1111. The software module may be realized by causing the control unit 111 (CPU) to execute a program stored in the storage unit 112. Note that the information processing executed by the software module is synonymous with the information processing executed by the control unit 111 (CPU). Moreover, SIM card 113A (second SIM) built into wireless communication module 113 is configured to store a second profile, which is SIM profile information. The second profile is a profile issued by a communications carrier that manages carrier network B. Like the first profile, the second profile is configured to include identification information such as IMSI and ICCID, and authentication information (key information) for undergoing SIM authentication.

[0077] The communication control unit 1111 establishes a network connection in response to a request from the DCM 10. When there is a connection request from the DCM 10, the communication control unit 1111 establishes a network connection via the carrier network B. At this time, the communication control unit 1111 receives authentication from a control device (MME) of the carrier network B using profile information (second profile) stored in the second SIM.

[0078] Next, a description will be given of the software configuration of the authentication device 20. Fig. 8 is a diagram showing a schematic diagram of the software configuration of the authentication device 20 according to this embodiment.

[0079] In this embodiment, the control unit 201 of the authentication device 20 is configured to have two software modules: a terminal authentication unit 2011 and a server authentication unit 2012. Each software module may be realized by the control unit 201 (CPU) executing a program stored in the storage unit 202. Note that the information processing executed by the software module is synonymous with the information processing executed by the control unit 201 (CPU).

[0080] Upon receiving a request from the DCM 10, the terminal authentication unit 2011 executes processing to authenticate the DCM 10. The authentication processing can be executed, for example, according to the following sequence defined by 3GPP (registered trademark). (1) Processing to receive an Attach Request from DCM10 (2) A request to obtain authentication-related data (Authentication data Request) is sent to the HS Process to send to S (3) Processing to obtain authentication related data (Authentication data response) from the HSS (4) Process of sending a challenge (User Authentication Request) to DCM10 (5) Processing to receive a response (User Authentication Response) from DCM10 (6) Process to verify the validity of DCM10 based on the response In addition, the terminal authentication unit 2011 may also execute processes required for registering the DCM 10 in the communication system 2.

[0081] The server authentication unit 2012 executes a process for authenticating the server device 3, which is the communication partner of the DCM 10. For example, the server authentication unit 2012 acquires an electronic certificate issued by a certificate authority from the server device 3, which is the communication partner of the DCM 10. The server authentication unit 2012 can verify whether or not the acquired electronic certificate corresponds to the server device 3 by decrypting the electronic certificate with the public key of the certificate authority. Note that the process by which the server authentication unit 2012 authenticates the server device 3 is not limited to the one using an electronic certificate as exemplified above. The authentication process may be performed at any time before the DCM 10 starts communication with the server device 3. This is carried out in a single step.

[0082] The terminal authentication unit 2011, which has confirmed the legitimacy of the DCM10 through authentication, and the server authentication unit 2012, which has confirmed the legitimacy of the server device 3, share the authentication result between the two devices. That is, the terminal authentication unit 2011 transmits the authentication result of the DCM10 to the server device 3, and the server authentication unit 2012 transmits the authentication result of the server device 3 to the DCM10. This allows the DCM10 and the server device 3 to confirm that the other party with which they are communicating is legitimate. The authentication result can be treated as valid, for example, until the DCM10 is disconnected from the communication system 2.

[0083] [flowchart] Next, a detailed description will be given of the process executed when the DCM 10 connects to the communication system 2. FIG 9 is a flowchart showing the process executed when the DCM 10 connects to the communication system 2.

[0084] First, in step S11, the communication control unit 1011 of the DCM 10 determines a network to be used for connection. For example, when a valid first SIM is inserted in the DCM 10, the communication control unit 1011 can determine to establish a connection using the carrier network A shown in Fig. 1. Note that when a valid first SIM is not inserted in the DCM 10 or when the communication device 11 is connected to the DCM 10, the communication control unit 1011 may determine to establish a network connection via the communication device 11 (carrier network B). However, if multiple networks are available, the decision as to which network to use may be based on a selection made by the user.

[0085] Next, in step S12, the communication control unit 1011 determines whether the network used for the connection is a direct connection via a cellular communication network or a connection via tethering. A direct connection via a cellular communication network is a mode in which the DCM 10 connects to the communication system 2 via a carrier network A using the built-in wireless communication module 103. A connection via tethering is a mode in which the communication device 11 connected to the DCM 10 connects to a carrier network B, and the DCM 10 connects to the communication system 2 via the communication device 11 via an IP communication network.

[0086] If the network used for the connection is a direct connection via a cellular communication network, the process proceeds to step S13. If the network used for the connection is a connection via tethering, the process proceeds to step S14.

[0087] In step S13, the communication control unit 1011 transmits an authentication request to the carrier network A, and the communication system 2 authenticates the DCM 10. In this step, the communication control unit 1011 transmits an authentication request to the carrier network A, for example, via a base station of the carrier network A. The authentication request may be data for starting an authentication procedure (for example, an attach request defined in 3GPP), or may include substantial data required for authentication. The authentication request reaches the communication system 2 via the carrier network A. For example, the MME of the carrier network A that receives the authentication request may transfer the authentication request to the authentication device 20 included in the communication system 2.

[0088] Next, the authentication device 20 of the communication system 2 starts authenticating the DCM 10 in accordance with the authentication request. For example, the authentication device 20 requests data to be used for authentication (hereinafter, authentication related data) from the HSS of the communication system 2. The authentication device 20 authenticates the DCM 10 using the received authentication related data and information recorded in the first SIM of the DCM 10. Authenticate (more on this below). When the authentication device 20 succeeds in authenticating the DCM 10, the communication system 2 establishes communication paths in the control plane and the user plane. This enables the DCM 10 to communicate with the server device 3 via the P-GW of the communication system 2.

[0089] When the process transitions to step S14, the DCM 10 instructs the communication device 11 to connect to the network. In response to this, the communication device 11 starts a connection using the carrier network B. Specifically, the control unit 111 of the communication device 11 transmits an authentication request to the carrier network B via a base station of the carrier network B. The authentication request is received by the MME of the carrier network B, and the MME authenticates the communication device 11 based on authentication-related data acquired from the HSS. For the authentication, profile information stored in the second SIM is used. When the authentication is completed, a communication path is established between the communication device 11 and the carrier network B, which enables the communication device 11 to communicate with the IP communication network via the P-GW.

[0090] When the communication device 11 becomes able to communicate with the IP communication network, in step S15, authentication is started between the DCM 10 and the communication system 2. In step S15, the DCM 10 transmits an authentication request to the communication system 2 via a route through the tethering destination carrier network (i.e., carrier network B). The authentication request reaches the communication system 2 via the IP communication network and the ePDG, and is received by the authentication device 20.

[0091] Next, the authentication device 20 starts authentication of the DCM 10 in accordance with the received authentication request. The authentication procedure is the same as that described in step S13. That is, in this step, authentication of the DCM 10 is also performed based on the profile information stored in the first SIM. If the authentication device 20 succeeds in authenticating the DCM 10, a communication path is established by the communication system 2. As a result, the DCM 10 connected to the communication system 2 via the ePEG becomes capable of communicating with the server device 3 via the P-GW. The establishment of the communication path and the relay of data using the communication path may be performed by the authentication device 20 or may be performed by another device included in the communication system 2.

[0092] Note that the communication system 2 does not relay communication between devices where a communication path has not been established. As a result, for example, communication from an unauthenticated server device to the DCM 10 is blocked by the communication system 2.

[0093] Next, authentication-related processing executed by the authentication device 20 will be described. 10 is a flowchart of the processes executed by authentication device 20 in steps S13 and S15. The illustrated process is started when authentication device 20 (terminal authentication unit 2011) receives an authentication request transmitted from DCM 10.

[0094] As described above, in this embodiment, authentication device 20 provides information on the authentication result of DCM 10 to server device 3, which is the communication partner of DCM 10. Similarly, authentication device 20 authenticates server device 3 in advance and provides the authentication result to DCM 10. This allows DCM 10 and server device 3 to confirm each other's legitimacy without directly performing mutual authentication.

[0095] For this reason, the communication system 2 needs to authenticate the server device 3 before the DCM 10 is connected. Step S21 is a step in which the authentication device 20 authenticates the server device 3 on the Internet (PDN). In this step, for example, the authentication device 20 (server authentication unit 2012) obtains an electronic certificate from the server device 3 and The digital certificate is decrypted with the public key of the certificate authority. This makes it possible to verify whether the acquired digital certificate corresponds to the server device 3. This step may be skipped after the authentication of the server device 3 is completed.

[0096] Next, in step S22, the terminal authentication unit 2011 acquires authentication-related data from the HSS. The authentication-related data is data used to authenticate the DCM10. Examples of the authentication-related data include a challenge issued by the HSS, an authentication token, and an expected response value (when AKA authentication is performed between the authentication device 20 and the DCM10). AKA authentication is a challenge-response authentication method for authenticating a terminal using a SIM card. The authentication-related data may be subscriber information.

[0097] In step S23, the terminal authentication unit 2011 authenticates the DCM 10 based on the authentication related data. When performing AKA authentication, the authentication device 20 transmits a challenge to the DCM 10, and the DCM 10 generates a response in response to this. The response is generated based on authentication information (key information) included in the profile information stored in the first SIM. If the generated response matches the one provided by the HSS, it can be considered that the authentication of the DCM 10 has been successful.

[0098] In this example, AKA authentication is exemplified as a method for authenticating the DCM 10, but authentication may be performed by other methods as long as the authentication is performed based on information stored in a SIM card.

[0099] Next, in step S24, the terminal authentication unit 2011 transmits the result of authenticating the DCM 10 to the server device 3. For example, the terminal authentication unit 2011 generates data that associates the IP address or MAC address assigned to the DCM 10 with the authentication result, and transmits the data to the server device 3. This enables the server device 3 to confirm that the connected DCM 10 is legitimate. In particular, a DCM 10 that is connected to the communication system 2 and has been authenticated can be considered to be genuine unless it is disconnected from the communication system 2.

[0100] Next, in step S25, the server authentication unit 2012 transmits the result of authenticating the server device 3 to the DCM 10. For example, the server authentication unit 2012 generates data that associates the IP address or MAC address assigned to the server device 3 with the authentication result, and transmits the data to the DCM 10. This enables the DCM 10 to confirm that the server device 3 to which it is connected is legitimate. Although DCM10 communicates via an IP communication network where security is not ensured, as long as the communication is via the ePDG of communication system 2, the other device (server device 3) can be regarded as a trustworthy device.

[0101] As described above, the DCM 10 according to the first embodiment is configured to be connectable to the communication device 11, and can communicate with the communication system 2 via any cellular communication network via the communication device 11. This makes it possible to secure an alternative communication path and continue communication even if the wireless communication module built into the DCM 10 becomes unavailable.

[0102] Furthermore, the authentication device 20 according to the first embodiment authenticates the DCM 10 and the server device 3 in the communication system 2 using the profile information stored in the first SIM, regardless of the access route from the DCM 10, and shares the result of the authentication between the DCM 10 and the server device 3. This eliminates the need to exchange certificates and the like every time between the DCM 10 and the server device 3, making it possible to save resources for authentication. Furthermore, since the authentication information used by DCM 10 for authentication is related to the SIM contract, it can be considered that identity verification has been completed when authentication device 20 has authenticated DCM 10. Therefore, server device 3 can recognize that the user of vehicle 1 is the subscriber without performing additional identity verification processing.

[0103] (Modification of the first embodiment) In the first embodiment, by connecting the communication device 11 to the DCM 10, a communication path other than the carrier network A (a communication path by tethering) is added. On the other hand, a plurality of communication paths may be set by tethering. Fig. 11 is a schematic diagram for explaining a form in which another communication device (communication device 11B) can be connected to the DCM 10 in the first embodiment.

[0104] As shown in the figure, the DCM 10 is configured to be connectable to another communication device 11B in addition to the communication device 11. The communication device 11B is configured to have a SIM card (third SIM) for connecting to a carrier network C. The communication devices 11 and 11B may be connectable at the same time. In this modification, the DCM 10 can select the device to be used for communication from among its own device, communication device 11, and communication device 11B. When its own device is selected as the device to be used for communication, communication is performed via carrier network A. When communication device 11 is selected as the device to be used for communication, communication is performed via carrier network B. Also, when communication device 11B is selected as the device to be used for communication, communication is performed via carrier network C. When there are multiple communication paths via tethering, the communication control unit 1011 may determine which communication path to use, for example, before executing step S14. Regardless of which communication path is used, the DCM 10 uses the profile information stored in the first SIM to receive authentication from the authentication device 20. With this configuration, communication paths can be freely added without changing the configuration in which authentication is performed using the first SIM.

[0105] Furthermore, in the first embodiment, an example is given in which an alternative route is secured by USB tethering, but the alternative route may be secured by Wi-Fi tethering. In this case, the DCM 10 may be configured to be wirelessly connectable to a smartphone or the like owned by the user of the vehicle 1. In this case, the exemplified communication device 11 (or communication device 11B) is replaced with the smartphone or the like.

[0106] (Modification) The above-described embodiment is merely an example, and the present disclosure can be modified and implemented as appropriate without departing from the spirit and scope of the present disclosure. For example, the processes and means described in this disclosure can be freely combined and implemented as long as no technical contradiction occurs.

[0107] In addition, in the description of the embodiment, 4G (LTE-Advanced) is exemplified as the standard of the cellular communication network, but 3G, 5G, etc. can also be adopted as the communication standard. In this case, ePDG can be replaced with N3IWF (non-3GPP Interworking Function) (in the case of 5G), PDG (in the case of 3G), etc. Furthermore, in the description of the embodiment, the DCM 10 is exemplified as the mobile communication terminal, but the mobile communication terminal may be an IoT terminal or the like.

[0108] In the embodiment, the DCM 10 is capable of connecting to the carrier network A. However, the DCM 10 does not necessarily have to have the wireless communication module 103. The DCM 10 may not have a function for connecting to network A. That is, the DCM 10 may be configured to require communication via the communication device 11. Even in this case, the DCM 10 is authenticated by the authentication device 20 using profile information stored in the first SIM. In this configuration, the first SIM is not used for connecting to the carrier network, but is used only for authentication.

[0109] Also, in the description of the embodiment, an example has been given in which the profile information stored in the SIM is used to authenticate the DCM10, but the DCM10 may be authenticated by other methods. For example, the DCM10 may store in the storage unit 102 a pair of key information and an electronic certificate (e.g., issued by a certificate authority) for verifying the authenticity of the key information. The authentication device 20 may also authenticate the DCM10 by using such information. In either case, authentication is performed using the same authentication information regardless of the communication path.

[0110] Furthermore, a process described as being performed by one device may be shared and executed by multiple devices. Alternatively, a process described as being performed by different devices may be executed by one device. In a computer system, the hardware configuration (server configuration) by which each function is realized can be flexibly changed.

[0111] The present disclosure can also be realized by supplying a computer program implementing the functions described in the above embodiments to a computer, and having one or more processors of the computer read and execute the program. Such a computer program may be provided to the computer by a non-transitory computer-readable storage medium connectable to the system bus of the computer, or may be provided to the computer via a network. Non-transitory computer-readable storage media include, for example, any type of disk, such as a magnetic disk (floppy disk, hard disk drive (HDD), etc.), an optical disk (CD-ROM, DVD disk, Blu-ray disk, etc.), a read-only memory (ROM), a random access memory (RAM), an EPROM, an EEPROM, a magnetic card, a flash memory, an optical card, and any type of medium suitable for storing electronic instructions. [Explanation of symbols]

[0112] 1. Vehicle 2. Communication Systems 3. Server equipment 10··DCM 11. Communication equipment 20 Authentication device

Claims

1. A communication system including a mobile communication terminal and a first network, The mobile communication terminal includes: a first storage unit that stores first authentication information; selecting a communication network to be used for communication with the first network from among a plurality of communication networks including an untrusted network; receiving authentication from the first network connected via the selected communication network using the first authentication information; A first control unit that executes the above; having The first network comprises: a second storage unit that stores the first authentication information; a gateway for accommodating access from the untrusted network; a second control unit that authenticates the mobile communication terminal connected via the gateway based on the first authentication information; A communication system comprising:

2. the first control unit receives authentication from the first network using the same first authentication information regardless of which of the plurality of communication networks is selected; The communication system according to claim 1 .

3. the second control unit performs the authentication using the same first authentication information regardless of which communication network the mobile communication terminal selects. The communication system according to claim 2 .

4. The mobile communication terminal is configured to be able to add a communication module that communicates through any communication network including an untrusted network. The communication system according to claim 1 .

5. The mobile communication terminal is configured to include an eUICC (Embedded Universal Integrated Circuit Card), The first authentication information is SIM profile information possessed by the eUICC. A communication system according to any one of claims 1 to 4.

6. The SIM profile information is issued by an operator that operates the first network.

6. The communication system according to claim 5.

7. The mobile communication terminal is an IoT device. A communication system according to any one of claims 1 to 4.

8. A mobile communication terminal A first step of selecting a communication network to be used for communication with a first network from among a plurality of communication networks including an untrusted network; performing a second step of receiving authentication from the first network connected via the selected communication network using pre-stored first authentication information; A control unit included in the first network, a third step of authenticating the mobile communication terminal connected via a gateway that accommodates access from the untrusted network, using the first authentication information stored in advance; Execute, Authentication method.

9. in the second step, regardless of which of the plurality of communication networks is selected, the authentication is performed using the same first authentication information; The authentication method according to claim 8.

10. In the third step, the authentication is performed using the same first authentication information regardless of which communication network the mobile communication terminal selects. The authentication method according to claim 9.

11. The mobile communication terminal is configured to include an eUICC (Embedded Universal Integrated Circuit Card), The first authentication information is SIM profile information possessed by the eUICC. The authentication method according to any one of claims 8 to 10.

12. The SIM profile information is issued by an operator that operates the first network. The authentication method according to claim 11.

13. The mobile communication terminal is an IoT device. The authentication method according to any one of claims 8 to 10.

Images