Information processing device and method

Abstract

To make communication of an information processing device go through a prescribed communication system even in the case that a user adopts any carrier network as an access network.SOLUTION: An information processing device includes: a storage part for storing authentication information to be used for connection to a first communication system; a first eUICC for holding profile information to be used for connection to a first carrier network contracted by user's selection as an access network; and a control part. The control part receives authentication in the first carrier network by using the profile information, establishes the connection to the first carrier network, and establishes a gateway device and a logic tunnel in the first communication system on the first carrier network. The control part receives authentication in the first communication system by using the authentication network, and establishes connection to the first communication system. Communication with external networks is performed through the logic tunnel and the first communication network after establishing the connection to the first communication system.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present disclosure relates to wireless communication using a SIM in a terminal.

Background Art

[0002] A method has been disclosed in which a connection method of a user terminal, a plurality of SIM slots, and priorities are associated and stored, and the SIM slots are automatically switched based on the connection method and priorities of the user terminal (for example, Patent Document 1).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] One aspect of the disclosure aims to provide an information processing apparatus and method capable of communicating via a predetermined communication system regardless of which carrier network is adopted as an access network by a user.

Means for Solving the Problems

[0005] One aspect of the present disclosure is a storage unit that stores authentication information used for connection to a first communication system, a first eUICC that holds profile information used for connection to a first carrier network selected and subscribed to by a user as an access network, receiving authentication in the first carrier network using the profile information and establishing a connection with the first carrier network, establishing a logical tunnel with a gateway device in the first communication system on the first carrier network after connection establishment, Through the aforementioned logical tunnel, authentication is obtained in the first communication system using the authentication information, and a connection with the first communication system is established. After establishing a connection with the first communication system, communication with the external network is performed through the logical tunnel and the first communication system. A control unit that performs the following: This is an information processing device equipped with [a specific feature / feature].

[0006] Another aspect of this disclosure is, A storage unit for storing authentication information used to connect to the first communication system, A first eUICC that holds profile information used to connect to a first carrier network selected and contracted by the user as the access network, An information processing device equipped with, Using the aforementioned profile information, authentication is performed on the first carrier network, and a connection to the first carrier network is established. After the connection is established, a logical tunnel is established between the gateway device in the first communication system and the first carrier network. Through the aforementioned logical tunnel, authentication is obtained in the first communication system using the authentication information, and a connection with the first communication system is established. After establishing a connection with the first communication system, communication with the external network is performed through the logical tunnel and the first communication system. This is how to do it. [Effects of the Invention]

[0007] According to one aspect of this disclosure, regardless of the carrier network adopted by the user as the access network, the communication of the information processing device can be routed through a predetermined communication system. [Brief explanation of the drawing]

[0008] [Figure 1] Figure 1 shows an example of the connection between a vehicle and a vehicle manufacturer's communication system according to the first embodiment. [Figure 2] Figure 2 shows an example of the DCM hardware configuration. [Figure 3] Figure 3 shows an example of the DCM's functional configuration. [Figure 4] Figure 4 is an example of a flowchart for the DCM's communication connection establishment process. [Figure 5] Figure 5 shows an example of the sequence of events leading up to the establishment of a connection between the DCM and the vehicle manufacturer's communication system. [Modes for carrying out the invention]

[0009] For example, manufacturers of vehicles equipped with communication functions, such as connected cars and autonomous vehicles, may route vehicle communications through their own communication systems for purposes such as controlling vehicle communications and collecting information related to those communications. In such cases, the carrier network used by the vehicle as its access network is limited to the carrier network of a communication carrier that is linked to the vehicle manufacturer's communication system. Therefore, vehicle owners and others cannot freely choose the carrier network used as the access network for their vehicle's communications.

[0010] In one aspect of this disclosure, in view of the above problem, the information processing device is made to establish a logical tunnel with a gateway device in the first communication system on the carrier network selected by the user as the access network, and to communicate through the said tunnel. This makes it possible for the information processing device's communication to pass through the first communication system via the said logical tunnel, regardless of which carrier network the user selects as the access network.

[0011] More specifically, one aspect of the present disclosure is an information processing apparatus including a storage unit that stores authentication information used for connection to a first communication system, a first eUICC (Embedded Universal Integrated Circuit Card) that holds profile information used for connection to a first carrier network selected and contracted by a user as an access network, and a control unit. The control unit receives authentication in the first carrier network using the profile information held in the first eUICC and establishes a connection with the first carrier network. After establishing the connection, the control unit establishes a logical tunnel with a gateway device in the first communication system over the first carrier network. The control unit receives authentication in the first communication system using the authentication information held in the storage unit through the logical tunnel and establishes a connection with the first communication system. After establishing the connection with the first communication system, the control unit performs communication with an external network through the logical tunnel and the first communication system.

[0012] The information processing apparatus is, for example, an in-vehicle device mounted on a vehicle, a smartphone, a tablet terminal, a wearable terminal, and a terminal capable of wireless communication based on a mobile communication method. The in-vehicle device is, for example, a DCM (Data Communication Module), a car navigation device, a drive recorder, an ECU (Electronic Control Unit), and the like. The control unit is, for example, a processor such as a CPU (Central Processing Unit), a DSP (Digital Signal Processor), and a data communication processor, and a circuit such as an FPGA (Field-Programmable Gate Array). The storage unit that holds the authentication information is, for example, an auxiliary storage device or a second eUICC.

[0013] The first communication system is a wireless communication system that requires a terminal to have an eUICC, such as 4G (LTE-Advanced), 5G, and 3G. The gateway device is, for example, an ePDG (Evolved Packet Data Gateway) (in the case of 4G), N3 IWF (non-3GPP Interworking Function) (in the case of 5G), PDG (in the case of 3G), etc. The logical tunnel is, for example, an IPsec tunnel.

[0014] In one aspect of the present disclosure, the information processing device connects directly to the first communication system, for example, at the IP layer, by establishing a logical tunnel with the gateway device in the first communication system on the first carrier network. As a result, even if the first communication system does not cooperate with the first carrier network, the first communication system can be used for the communication of the information processing device. In addition, the user of the information processing device can freely select the first carrier network as an access network from among a plurality of communication carriers.

[0015] In one aspect of the present disclosure, the authentication information may be profile information issued by the first communication system and used for connecting to the first communication system. In this case, the storage unit may be a second eUICC. By having the information processing device hold the profile information issued by the first communication system in the second eUICC, for example, the owner of the information processing device can rewrite the profile information for reasons such as change or security enhancement.

[0016] In one aspect of the present disclosure, the authentication information may be an electronic certificate issued by a predetermined certification authority when the identity of the owner of the information processing device has been verified for the key information used in the authentication in the first communication system, and the key information. In this case, the information processing device does not necessarily need to have two eUICCs, and the configuration of the information processing device can be simplified.

[0017] In one aspect of this disclosure, the information processing device may be an in-vehicle device installed in a vehicle. In this case, the first communication system may be a communication system managed by the vehicle manufacturer. This allows vehicle communications to be routed through a communication system managed by the vehicle manufacturer, enabling the vehicle manufacturer to control vehicle communications and collect information related to vehicle communications.

[0018] This disclosure can also be identified in other aspects as a method by which a computer performs the processing of the information processing apparatus, a program for causing a computer to perform the processing of the information processing apparatus, and a computer-readable recording medium on which the program is recorded.

[0019] Embodiments of this disclosure will be described below with reference to the drawings. The configurations of the following embodiments are illustrative, and this disclosure is not limited to the configurations of these embodiments.

[0020] <First Embodiment> Figure 1 shows an example of the connection between a vehicle 10 and a vehicle manufacturer's communication system 500 according to the first embodiment. In the first embodiment, in order for the vehicle 10 (DCM 1) to communicate via the vehicle manufacturer's communication system 500, the vehicle 10 (DCM 1) is connected to the vehicle manufacturer's communication system 500 by an IPsec tunnel. In the first embodiment, it is assumed that the communication carrier network 200 and the vehicle manufacturer's communication system 500 are 4G-compatible communication networks. However, it is not limited to this, and the communication carrier network 200 and the vehicle manufacturer's communication system 500 may be systems compatible with 5G, 6G, etc.

[0021] The vehicle manufacturer communication system 500 is a communication system managed by 10 vehicle manufacturers. The vehicle manufacturer's communication system 500, as shown in Figure 1, includes an ePDG, HSS (Home Subscriber Server), PGW (Packet data network Gateway), and PCRF (Policy and Charging Rules Function), and has a configuration similar to the core network. However, the vehicle Both manufacturers' communication systems 500 do not have a billing function and have AAA (Authentication Authorization Accounting) which performs authentication instead of MME in a normal EPC. In the first embodiment, the AAA in the vehicle manufacturer communication system 500 performs authentication using the same method as the authentication performed by the MME in a normal EPC. Note that the components of the vehicle manufacturer communication system 500 shown in Figure 1 are only a part of the system, and the components of the vehicle manufacturer communication system 500 are not limited to those shown in Figure 1.

[0022] The communication carrier network 200 is a communication carrier network contracted by the owner of vehicle 10. The communication carrier network 200 is a standard EPC (Evolved Packet Core). In Figure 1, the communication carrier While eNB (eNode-B), SGW (Serving Gateway), MME (Mobility Management Mobility), and HSS are shown as components of the rear network 200, the components of the telecommunications carrier network 200 are not limited to these.

[0023] In the first embodiment, the vehicle manufacturer's communication system 500 treats the communication carrier network 200 as one of the untrusted non-3GPP access points. Therefore, communication from the communication carrier network 200 to the vehicle manufacturer's communication system 500 goes from the SGW of the communication carrier network 200 to the internet and then enters the ePDG within the vehicle manufacturer's communication system 500.

[0024] Vehicle 10 is equipped with DCM 1. DCM 1 is an example of a device with communication capabilities. DCM 1 is equipped with two SIMs. SIM #1 stores profile information issued by the vehicle manufacturer's communication system 500. SIM #2 stores profile information issued by the communication carrier network to which the owner of vehicle 10 has selected and contracted from multiple communication carriers.

[0025] DCM 1 uses profile information issued by the communication carrier network 200, stored in SIM#2, to obtain authentication from the communication carrier network 200 and establish a connection with the communication carrier network 200. Subsequently, DCM 1 establishes an IPsec tunnel with the ePDG of the vehicle manufacturer's communication system 500 over the connection with the communication carrier network 200. Once the IPsec tunnel is established, DCM 1 uses profile information issued by the vehicle manufacturer's communication system 500, stored in SIM#1, to obtain authentication from the vehicle manufacturer's communication system 500 and establish a connection with the vehicle manufacturer's communication system 500. Once the connection with the vehicle manufacturer's communication system 500 is established, DCM 1 can connect to, for example, the internet. As a result, DCM 1's communication will pass through the vehicle manufacturer's communication system 500. The vehicle manufacturer's communication system 500 is an example of the "first communication system". The communication carrier network 200 is an example of the "first carrier network". The ePDG within the vehicle manufacturer's communication system 500 is an example of a "gateway device".

[0026] In the first embodiment, the vehicle manufacturer's communication system 500 treats the communication carrier network 200 as one of the untrusted non-3GPP access points, and the DCM 1 establishes an IPsec tunnel with the ePDG within the vehicle manufacturer's communication system 500 over the communication carrier network 200, thereby directly connecting the DCM 1 and the vehicle manufacturer's communication system 500 at the IP layer. This allows the vehicle manufacturer, as the administrator of the vehicle manufacturer's communication system 500, to route the DCM 1's communications through the vehicle manufacturer's communication system 500 without coordinating with the communication carrier of the communication carrier network 200. Coordination with the communication carrier could include, for example, concluding a special contract to route the DCM 1's communications through the vehicle manufacturer's communication system 500. Furthermore, the owner of the vehicle 10 can freely select the communication carrier network 200 to contract with from among multiple communication carriers.

[0027] Figure 2 shows an example of the hardware configuration of DCM 1. DCM 1 includes a CPU 101, memory 102, auxiliary storage device 103, wireless communication unit 104, SIM 105, and SIM 106 as its hardware configuration. The auxiliary storage device 103 is, for example, an HDD (Hard Disk Drive) and an SSD (Solid State Drive). The programs held in the auxiliary storage device 103 include, for example, an OS (Operation System), a communication control program, and several other programs. The communication control program is a program that, after connecting to the communication carrier network 200 using profile information in SIM #2, establishes an IPsec tunnel with the ePDG of the vehicle manufacturer's communication system 500 and connects to the vehicle manufacturer's communication system 500 using profile information in SIM #1. Memory 102 includes, for example, semiconductor memory such as ROM (Read Only Memory) and RAM (Random Access Memory). Memory 102 and auxiliary storage device 103 are examples of computer-readable recording media.

[0028] The CPU 101 performs various processes by loading the OS and various other programs stored in the auxiliary storage device 103 into memory 102 and executing them. 101 is not limited to one, but may be provided in multiple units. CPU 101 is an example of a "control unit". In the first embodiment, the wireless communication unit 104 communicates with external devices based on a 4G mobile communication system. If the communication carrier network 200 is a system that supports 5G or 6G or later mobile communication systems, the wireless communication unit 104 will also support the mobile communication system supported by the communication carrier network 200.

[0029] SIM 105 and SIM 106 are eUICCs. In the first embodiment, SIM 105 is a chip-type eUICC. SIM 106 may be either a chip-type or a card-type. Note that the hardware configuration of DCM 1 is not limited to the configuration shown in Figure 2. For example, SIM 105 may be a card-type eUICC or a UICC. For example, SIM 106 may be a card-type removable UICC. If SIM 106 is a card-type, DCM 1 includes a SIM slot and a SIM card reader, etc.

[0030] Figure 3 shows an example of the functional configuration of DCM 1. DCM 1 includes a communication control unit 11. The communication control unit 11 controls the connection between DCM 1 and the vehicle manufacturer's communication system 500 using profile information held in SIM 105 and SIM 106, respectively. Details of the processing performed by the communication control unit 11 will be described later.

[0031] SIM 105 stores profile information 105A. Profile information 105A is profile information issued by the vehicle manufacturer's communication system 500. Profile information 105A can also be called profile information for the vehicle manufacturer's communication system 500. In the first embodiment, since SIM 105 is an eUICC, profile information 105A is rewritable. For example, when the owner of vehicle 10 changes, or when updating for security enhancement, profile information 105A is rewritten. Although Figure 3 also shows an identity verification certificate 105B for SIM 105, the identity verification certificate 105B is not used in the first embodiment. An embodiment in which the identity verification certificate 105B is used will be described later. SIM 105 is an example of a "storage unit" and a "second eUICC". Profile information 105A is an example of "profile information" held in "authentication information" and the "second eUICC".

[0032] SIM 106 stores profile information 106A. Profile information 106A is profile information issued by the communication carrier network 200. Profile information 106A can also be called a profile for the communication carrier network 200. The information includes, for example, multiple identification pieces of information and key information used for authentication and encryption. The identification pieces included in the profile information include, for example, IMSI (International Mobile Security Information System). Examples include Subscription Identity and ICCID (Integrated Circuit Card ID). SIM 106 is an example of "first eUICC". Profile information 106A is an example of "profile information".

[0033] Figure 4 is an example of a flowchart for the communication connection establishment process of DCM 1. The process shown in Figure 4 is initiated, for example, when profile information is stored in SIM#2, when the SIM card of SIM#2 is inserted, and when a user input for a communication connection request using a mobile communication method is received. The execution entity in the example shown in Figure 4 is the CPU 101, but for convenience, the functional components will be described as the main components.

[0034] In OP1, the communication control unit 11 reads profile information 106A for the communication carrier network 200 from the SIM 106. In OP2, the communication control unit 11 executes a process to establish a connection with the communication carrier network 200. During the process of establishing a connection with the communication carrier network 200, authentication is performed by the communication carrier network 200. At this time, the communication control unit 11 uses the profile information 106A to obtain authentication from the communication carrier network 200. If authentication is successful, a connection with the communication carrier network 200 is established.

[0035] In OP3, the communication control unit 11 executes the process of establishing an IPsec tunnel with the ePDG in the vehicle manufacturer's communication system 500. In the process of establishing the IPsec tunnel, the communication control unit 11 performs the procedure for establishing an IPsec tunnel addressed to the ePDG. Information related to the ePD used in the process of establishing the IPsec tunnel is obtained, for example, using information contained in profile information 105A as a clue. The IPsec tunnel is an example of a "logical tunnel".

[0036] In OP4, the communication control unit 11 reads profile information 105A for the vehicle manufacturer's communication system 500 from the SIM 105. In OP5, the communication control unit 11 executes a process to establish a connection with the vehicle manufacturer's communication system 500. During the process of establishing a connection with the vehicle manufacturer's communication system 500, authentication is performed by the vehicle manufacturer's communication system 500. At this time, the communication control unit 11 receives authentication from the vehicle manufacturer's communication system 500 using the profile information 105A via the IPsec tunnel. If authentication is successful, a connection with the vehicle manufacturer's communication system 500 is established. From there, DCM 1 can communicate to the internet, etc., via the vehicle manufacturer's communication system 500 through the IPsec tunnel.

[0037] Figure 5 shows an example of the sequence of events leading up to the establishment of a connection between DCM 1 and the vehicle manufacturer's communication system 500. In S1, the procedure for establishing communication is performed between DCM 1 and the communication carrier network 200. The process in S1 is also called the attach procedure. In S1, mainly DCM An exchange takes place between 1 and the MME in S200. S2 is the authentication of DCM 1 performed in the procedure in S1. In S2, the MME, in cooperation with the HSS, performs, for example, AKA authentication in the communication carrier network 200. In S2, DCM 1 is authenticated in the communication carrier network 200 using the information contained in the profile information 106A for the communication carrier network 200. After that, the connection between DCM 1 and the communication carrier network 200 is established.

[0038] In S3, the procedure for establishing an IPsec tunnel between DCM 1 and the vehicle manufacturer's communication system 500 and the ePFG is executed. In S4, the IPsec tunnel between DCM 1 and the ePFG of the vehicle manufacturer's communication system 500 is established. This IPsec tunnel is mapped to the ePDG interface at one end and to the SIM 106 of DCM 1 at the other end. This will be the interface.

[0039] In S5, a procedure is performed to establish a connection between DCM 1 and the vehicle manufacturer's communication system 500 via an IPsec tunnel. In S6, in the vehicle manufacturer's communication system 500, AAA, in cooperation with HSS, performs AKA authentication, for example, similar to MME in the communication carrier network 200. In S6, DCM 1 is authenticated in the vehicle manufacturer's communication system 500 using the information contained in the profile information 105A for the vehicle manufacturer's communication system 500. Subsequently, a connection is established between DCM 1 and the vehicle manufacturer's communication system 500. From this point onward, DCM 1 can communicate with PDNs such as the Internet via the communication carrier network 200 and the vehicle manufacturer's communication system 500. Within the vehicle manufacturer's communication system 500, communication from DCM 1 is forwarded from ePDG to PGW, and then output from PGW to PDNs such as the Internet.

[0040] <Effects of the First Embodiment> In the first embodiment, the DCM 1 can communicate via the vehicle manufacturer's communication system 500 while using the communication carrier network 200 as an access network by establishing an IPsec tunnel with the ePDG of the vehicle manufacturer's communication system 500 on the communication carrier network 200. This allows the owner of the vehicle 10 to freely select a communication carrier network from among multiple communication carrier networks. Furthermore, the vehicle manufacturer's communication system 500 can route the communication of the DCM 1 through the vehicle manufacturer's communication system 500 without coordinating with the communication carrier network.

[0041] <Variation> In the first embodiment, the vehicle manufacturer communication system 500 authenticates subscribers in the same manner as a normal EPC, so the DCM 1 holds profile information 105A in the SIM 105. Alternatively, the vehicle manufacturer communication system 500 may adopt an authentication method different from that of the EPC. In this case, instead of profile information 105A, the DCM 1 holds authentication information used in the authentication method adopted by the vehicle manufacturer communication system 500.

[0042] In a modified version, DCM 1 does not store profile information 105A within SIM 105, but instead stores identity verification certificate 105B. When purchasing a vehicle, the contract holder (owner) submits identity verification documents with a facial image, such as a driver's license, which are reviewed by a designated certification authority to associate the vehicle with the contract holder. Furthermore, the key information generated by DCM 1 is transmitted to the certification authority, which is linked to the vehicle manufacturer's communication system 500, to obtain an electronic certificate proving that it is the contract holder's key information. SIM 105B contains the key information and the electronic certificate that proves it is the contract holder's key information. DCM 1 uses identity verification certificate 105B in authentication in the vehicle manufacturer's communication system 500.

[0043] As mentioned above, SIM 105B contains information based on the subscriber's identity verification documents. Therefore, authentication using SIM 105B allows for stronger verification of the subscriber's identity. The identity verification document 105B may be stored in a secure storage area outside of SIM 105. The identity verification document 105B in the modified example is an example of "authentication information".

[0044] Furthermore, the authentication method adopted by the vehicle manufacturer communication system 500 is not limited to the authentication method using SIM 105B. In addition, DCM 1 stores authentication information corresponding to the authentication method adopted by the vehicle manufacturer communication system 500, and authentication information that has been pre-approved for use by the vehicle manufacturer communication system 500, in the secure storage area of ​​the auxiliary storage device 103. It is also possible that DCM 1 reads the authentication information from the secure storage area and obtains authentication in the vehicle manufacturer's communication system 500. In this case, DCM 1 does not need to hold SIM 105, but only needs to have one SIM, SIM 106.

[0045] <Other variations> The embodiments described above are merely examples, and this disclosure may be modified as appropriate without departing from its essence.

[0046] In the first embodiment, the communication carrier network 200 and the vehicle manufacturer communication system 500 are assumed to be 4G-compatible systems. However, the invention is not limited to this, and the communication carrier network 200 and the vehicle manufacturer communication system 500 may be systems compatible with 5G, 3G, and 6G and later mobile communication systems. If the vehicle manufacturer communication system 500 is a 5G-compatible system, the vehicle manufacturer communication system 500 may, for example, include an N3IWF instead of ePDG, a UPF instead of PGW, a UDM (Unified Data Management) instead of HSS, a PCF (Policy Control Function) instead of PCRF, and an AUSF (Authentication Server Function) instead of AAA. If the communication carrier network 200 is a 5G-compatible system, it may include a gNB instead of eNB, an AMF (Access and Mobility Management Function) and an SMF (Session Management Function) instead of SGW and MME, and a UDM instead of HSS.

[0047] In the first embodiment, the communication of the vehicle 10 was described as being routed through a vehicle manufacturer's communication system 500 managed by the manufacturer of the vehicle 10. However, the application of the technology described in the first embodiment is not limited to the connection between the vehicle 10 and the vehicle manufacturer's communication system 500. For example, it can also be applied to the connection between a smartphone or IoT terminal and the communication system of its manufacturer. Furthermore, it can also be applied to the connection between a terminal and a communication system of a third party other than the manufacturer of the terminal. In this case, the terminal is equipped with authentication information issued by the third-party communication system (e.g., SIM profile information) and a program for connecting to the third-party communication system (corresponding to the communication control unit 11).

[0048] In the first embodiment, an IPsec tunnel is established between the DCM 1 and the ePDG in the vehicle manufacturer's communication system 500, but this is not limited to the first embodiment. A logical tunnel at the IP layer or higher, other than an IPsec tunnel, may be established between the DCM 1 and the ePDG in the vehicle manufacturer's communication system 500.

[0049] The processes and methods described in this disclosure can be freely combined and implemented, provided that no technical inconsistencies arise.

[0050] Furthermore, a process described as being performed by a single device may be divided and executed by multiple devices. Conversely, a process described as being performed by different devices may be executed by a single device. In a computer system, the hardware configuration (server configuration) by which each function is implemented can be flexibly changed.

[0051] This disclosure can also be realized by supplying a computer program implementing the functions described in the above embodiments to a computer, and having one or more processors in the computer read and execute the program. Such a computer program may be provided to the computer by a non-temporary computer-readable storage medium that can be connected to the computer's system bus, or it may be provided to the computer via a network. Non-temporary computer-readable storage mediums include, for example, magnetic disks (floppy disks, hard disk drives (HDDs), etc.), optical disks (CD-ROMs, etc.) This includes any type of disc (such as DVD discs and Blu-ray discs), read-only memory (ROM), random access memory (RAM), EPROM, EEPROM, magnetic cards, flash memory, optical cards, and any type of medium suitable for storing electronic instructions. [Explanation of symbols]

[0052] 1. DCM 10. Vehicles 11. Communications Control Unit 101··CPU 102...memory 103...Auxiliary storage device 104. Wireless Communication Department 105··SIM 105A ··Profile Information 106··SIM 106A ··Profile Information 200... Telecommunications carrier network 500 · Vehicle Manufacturer Communication System

Claims

1. A storage unit that stores authentication information used for connecting to the first communication system, A first eUICC (Embedded Universal Integrated Circuit Card) that holds profile information used for connecting to a first carrier network selected and contracted by the user as the access network, Using the profile information, authentication is performed on the first carrier network, and a connection to the first carrier network is established. After the connection is established, a logical tunnel is established between the gateway device in the first communication system and the first carrier network. Through the aforementioned logical tunnel, authentication is performed in the first communication system using the authentication information, and a connection with the first communication system is established. After establishing a connection with the first communication system, communication with the external network is performed through the logical tunnel and the first communication system. A control unit that performs the following: An information processing device comprising, The aforementioned information processing device is an in-vehicle device mounted on a vehicle, The first communication system is a communication system managed by the vehicle manufacturer. Information processing device.

2. The authentication information is profile information issued by the first communication system and used to connect to the first communication system. The aforementioned storage unit is a second eUICC, The information processing apparatus according to claim 1.

3. The authentication information includes an electronic certificate issued by a designated certification authority when the owner of the information processing device has been verified for the key information used in authentication in the first communication system, and the key information, The information processing apparatus according to claim 1.

4. A storage unit that stores authentication information used for connecting to the first communication system, A first eUICC (Embedded Universal Integrated Circuit Card) that holds profile information used for connecting to a first carrier network selected and contracted by the user as the access network, An information processing device equipped with, Using the profile information, authentication is performed on the first carrier network, and a connection to the first carrier network is established. After the connection is established, a logical tunnel is established between the gateway device in the first communication system and the first carrier network. Through the aforementioned logical tunnel, authentication is performed in the first communication system using the authentication information, and a connection with the first communication system is established. After establishing a connection with the first communication system, communication with the external network is performed through the logical tunnel and the first communication system. Execute, The aforementioned information processing device is an in-vehicle device mounted on a vehicle, The first communication system is a communication system managed by the vehicle manufacturer. method.

Images