Communication device and communication control method

Abstract

To make it possible to ensure reliability of communication between an in-vehicle terminal and a communication device.SOLUTION: A communication device configured to communicate with an in-vehicle terminal includes a control unit that performs authentication based on authentication information received by the communication device from the in-vehicle terminal using a tunnel established on an access network selected from a plurality of access networks available for communication between the in-vehicle terminal and the communication device, and, if the authentication is successful, performs routing of data received from the in-vehicle terminal.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present disclosure relates to a communication device and a communication control method.

Background Art

[0002] Conventionally, there is a case where an in-vehicle terminal transmits request data including the current position data of the in-vehicle terminal to a data center via the Internet, and the data center extracts only information that matches the current position of the user from the latest information after user authentication and supplies it to the in-vehicle terminal (for example, Patent Document 1).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] An object of the present disclosure is to provide a communication device and a communication control method capable of ensuring the reliability of communication between an in-vehicle terminal and a communication device.

Means for Solving the Problems

[0005] One aspect of the present disclosure is a communication device that communicates with an in-vehicle terminal, and performs authentication based on authentication information received from the in-vehicle terminal using a tunnel established on an access network selected from a plurality of access networks available for communication between the in-vehicle terminal and the communication device, and when the authentication is successful, a communication device including a control unit that performs routing of data received from the in-vehicle terminal.

[0006] Other aspects of the present disclosure include a communication control method by the above communication device, a program for operating a computer as the above communication device, a recording medium on which the program is recorded, and the like.

Effects of the Invention

[0007] According to one aspect of this disclosure, it becomes possible to ensure the reliability of communication between an in-vehicle terminal and a communication device. [Brief explanation of the drawing]

[0008] [Figure 1] Figure 1 shows an example of a communication system according to an embodiment. [Figure 2] Figure 2 shows an example of a DCM configuration. [Figure 3] Figure 3A shows an example of a communication device configuration, and Figure 3B shows an example of a smart device configuration. [Figure 4] Figure 4 is a flowchart showing an example of DCM processing. [Figure 5] Figure 5 is a sequence diagram showing an example of operation in a communication system. [Modes for carrying out the invention]

[0009] Businesses involved with vehicles equipped with communication functions, such as connected cars and autonomous vehicles (e.g., vehicle manufacturers, dealers, and rental companies), may want to collect data related to the vehicles (e.g., data related to vehicle operation and data related to vehicle communication). For this reason, it is conceivable that the business's communication equipment (communication facilities) would receive predetermined data (IoT data) transmitted from in-vehicle terminals installed in the vehicles via a network.

[0010] One possible network connecting the in-vehicle terminal and the communication device is the network of the mobile network operator (MNO: also called a communication carrier) contracted by the vehicle user (referred to as the communication carrier network). However, access to the communication device may also be via the communication carrier network of other communication carriers and the internet, or via Wi-Fi and the internet using tethering. Allowing users to select from multiple access networks to access the communication device would enable the transmission of vehicle-related data to the communication device under conditions favorable to the user, thus making it easier to obtain user cooperation in collecting vehicle-related data. On the other hand, it would enable the operator to collect more data.

[0011] However, in cases where the network path from the in-vehicle terminal to the communication device includes the internet, there was a problem of reduced communication reliability compared to cases where only the communication carrier network was used as the path. Furthermore, if the information exchanged between the in-vehicle terminal and the communication device differed depending on the method of access from the in-vehicle terminal to the communication device, particularly regarding authentication information for the in-vehicle terminal, it led to problems of increased complexity in the configuration and required information on the in-vehicle terminal side.

[0012] The embodiments described below describe a communication system that can solve the above-mentioned problems. Specifically, the invention describes a communication system that can ensure the reliability of communication (secure communication) even when the method of accessing the communication device is left to the user, while suppressing the complexity of the in-vehicle terminal configuration caused by allowing the user to select the access method.

[0013] Embodiments of this disclosure will be described below with reference to the drawings. The configurations of the following embodiments are illustrative, and this disclosure is not limited to the configurations of the embodiments. Figure 1 is a diagram showing an example of a communication system according to an embodiment. The communication system includes a DCM (Data Communication Module) 10, which is an example of an in-vehicle terminal mounted on a vehicle, and a communication device 20. The in-vehicle terminal is connected to the DCM. It may also be an external information processing device. The in-vehicle terminal may be a stationary type or a portable type.

[0014] The DCM10 collects vehicle-related information (such as location and vehicle speed) from in-vehicle devices (e.g., car navigation systems, drive recorders, and ECUs (Electronic Control Units)). Data related to the operation of both vehicles can be collected. The DCM10 can also collect data related to vehicle (in-vehicle terminal) communication. Data transmitted from the DCM10 (user data) is sent to a predetermined communication partner (for example, server 51 or server 52) via the communication device 20. However, the destination of the user data may also be the communication device 20.

[0015] The default network used by the DCM10 for communication with the communication device 20 is the communication carrier network 2 contracted by the vehicle user. The communication carrier network may be either an MNO (Mobile Network Operator) network or an MVNO (Mobile Virtual Network Operator) network. The communication carrier network 2 has a wireless access network (base stations) and a core network. When the communication carrier network 2 is used, the communication device 10 constitutes a part of the core network of the communication carrier network 2. For authentication of the DCM10 in the communication carrier network 2, the authentication information stored in the first SIM (Subscriber Identity Module) 105 of the DCM10 is used.

[0016] In this embodiment, the user can use an access network other than the communication carrier network 2, which is an MNO or MVNO network other than the MNO or MVNO of the communication carrier network 2 (MVNO network 3 is exemplified in Figure 1). In this case, authentication information stored in the second SIM 106) is used for authentication of the DCM 10 in the MVNO network 3. The communication carrier network 2 and the MVNO network 3 may each be a 4G (LTE) network, a 5G network, or a 6G network.

[0017] Furthermore, users can also use Wi-Fi 4 as an access network by tethering using a tethering device 13. Tethering can be Wi-Fi tethering, Bluetooth® tethering, or USB (Universal Serial Bus) tethering. Tethering is also acceptable. When MVNO network 3 or wireless LAN 4 is used as the access network, the path from DCM 10 to communication device 20 goes through the Internet 1. In this way, regarding access to communication device 20, the user can select the access network they wish to use from multiple access networks, such as MVNO network 3 or wireless LAN 4, in addition to the communication carrier network 2. That is, DCM 10 can access communication device 20 using the access method selected by the user from among multiple access methods. The communication carrier network is an example of a cellular network (first cellular network). MVNO network 3 is an example of a second cellular network and the first access network that goes through the second cellular network. Wireless LAN 4 is an example of a network other than the first cellular network used by tethering and the second access network that goes through that network.

[0018] The communication device 20 can consist of one computer or a collection of two or more computers (cloud). The communication device 20 has a gateway (GW) 21 connected to the Internet 1. The GW 21 is a gateway that accommodates untrusted non-3GPP® IP access such as the Internet. For example, if the communication device is compatible with 4G, it is an ePDG (Evolved Packet Data Gateway), if it is compatible with 5G, it is an N3IWF (non-3GPP® Interworking Function), and if it is compatible with 3G, it is a PDG. The GW 21 is connected to the Internet 1 or The received signal format can be converted into a format adapted to the core network of the communication carrier network 2 used within the communication device 20. The Internet 1 has lower communication reliability (security) compared to the communication carrier network 2 (3GPP (registered trademark) radio access). Therefore, when the DCM10 communicates with the communication device 20 using an access network other than the communication carrier network 2, a logical tunnel is established between the DCM10 and the GW21. The tunnel is, for example, an IPsec tunnel established in IPsec tunnel mode. However, the tunnel may be other than an IPsec tunnel.

[0019] The communication device 20 includes an authentication unit 22 and a routing unit 23. After the tunnel is established, the authentication unit 22 receives the authentication information sent through the tunnel from the DCM10 via the GW21 and authenticates the DCM10 (user). In this embodiment, the authentication information stored in the first SIM 105 for authentication in the communication carrier network 2 is used as the authentication information. However, the authentication information may be stored in a secure storage area of the DCM10 other than the first SIM 105. When the communication device 20 operates as part of the core network of LTE (4G), the authentication unit 22 operates as a HSS (Home Subscriber Server) that performs authentication processing. However, the authentication unit 22 may operate as a combination of HSS and AAA (Authentication Authorization Accounting). When the communication device 20 operates as part of the core network of 5G the authentication unit 21 operates as an AUSF (Authentication Server Function), that is, a network function that authenticates the subscriber / UE (DCM10) with respect to the subscriber information stored in the UDM (Unified Data Management). As the authentication method, for example, EPA-AKA is applied. However, the authentication method may be other than this. For example, EPA-AKA is applied. However, the authentication method may be other than this.

[0020] When DCM10 accesses the communication device 20 using an access network (access line) other than the communication carrier network 2, the authentication information used is the same regardless of whether the MVNO network 3 or tethering is used. In this embodiment, the authentication information stored in the first SIM 105 (authentication information for the communication carrier network 2) is used as the common authentication information for multiple access networks.

[0021] The routing unit 23 determines the destination of user data from DCM10 (communication partner: for example, Sa The routing unit 23 sets and determines the route to the server 51 or server 52. A communication path (session) is established between the routing unit 23 and the DCM 10. The routing unit 23 operates as a PGW (Packet data network Gateway) when the communication device 20 operates as part of the LTE (4G) core network. When the communication device 20 operates as part of the 5G core network... In this configuration, the routing unit 23 operates as a UPF (User Plane Function).

[0022] When DCM10 communicates with server 51 or server 52, the routing unit 23 ensures that data destined for server 51 or server 52 always passes through the tunnel to the communication device 20 and is transmitted to server 51 or server 52 via the routing unit 23. Data sent from server 51 or server 52 to DCM10 always passes through the communication device 20 and is transferred through the tunnel.

[0023] While communication is taking place using the path between DCM10 and communication device 20 via the communication carrier network 2 (referred to as the first route), a communication path between DCM10 and GW21 (referred to as the second route) may be established. In other words, the first route and the second route may be used in parallel.

[0024] Figure 2 shows an example configuration of DCM10. DCM10 comprises a CPU 101, memory 102, auxiliary storage device 103, wireless communication unit 104, first SIM 105, and second SIM 106. The auxiliary storage device 103 is, for example, an HDD (Hard Disk Drive), and These include SSDs (Solid State Drives), EEPROMs, etc. The auxiliary storage device 103 is, for example, For example, the OS (Operating System) and multiple types of application programs (apps) are stored. Apps include programs that implement various functions such as communication control programs. Memory 102 includes, for example, ROM (Read Only Memory) and RAM (Random This includes semiconductor memory such as Access Memory. Memory 102 and auxiliary storage device 103 (collectively referred to as storage device) are examples of computer-readable recording media.

[0025] The wireless communication unit 104 includes a DCE (Data Circuit terminating Equipment) and communicates with external devices according to wireless communication methods such as cellular networks (LTE, 4G, 5G, or 6G, etc.), Bluetooth®, and wireless LAN (IEEE 802.11 series, including Wi-Fi). The external devices are base stations in the case of a communication carrier network, access points in the case of wireless LAN (Wi-Fi), and Bluetooth®-compatible communication devices in the case of Bluetooth®.

[0026] The first SIM 105 and the second SIM 106 are both eUICC. The first SIM 105 is for the communication carrier network 2, and the second SIM 106 is for the MVNO network 3. The first SIM 105 and the second SIM 106 may be chip type or card type. If the SIM is card type, the DCM 10 is equipped with a SIM slot and a SIM card reader, etc.

[0027] The DCM10 also includes a USB connector 107, an input device 108, and a display 109. A USB dongle 13B can be connected to the USB connector 107. A smart device 13A can also be connected to the USB connector 107 via a USB cable. The USB dongle 13B and the smart device 13A are examples of tethering devices 13. The smart device 13A is a smartphone or a tablet device, etc.

[0028] The input device 108 is a button, key, touch panel, etc., and is used for inputting and setting information. The display 109 is used for displaying information. The input device 108 is a display The user interface displayed in Play 109 is also acceptable.

[0029] The CPU 101 executes various processes related to the operation of the DCM 10 (such as data acquisition, receiving of acquired data, and sending and receiving data) by executing various programs stored in the memory. The CPU 101 is an example of a control unit, controller, or processor.

[0030] Figure 3 shows an example configuration of the communication device 20, and Figure 3B shows an example configuration of the smart device 13A. In Figure 3A, the communication device 20 includes, as an example, a processor 31, a storage device 32, a communication interface (communication IF) 33, an input device 34, and a display 35.

[0031] The storage device 32 stores various programs and data. The processor 31 is an example of a control unit, and can be a CPU, DSP, GPU, or a combination thereof. The processor 31 executes programs stored in the storage device 32 and performs various processes such as calculations or processing using data stored in the storage device 32. Through program execution, the communication device 20 operates as a device equipped with a GW 21, an authentication unit 22, and a routing unit 23. The processor 31 corresponds to the control unit that operates as the GW 21, authentication unit 22, and routing unit 23. The communication IF 33 includes a communication interface circuit with the communication carrier network 2 and a communication interface circuit with the Internet 1, and performs transmission and reception of communication signals, format (protocol) conversion, etc. The input device 34 is a button, key, touch panel, etc., used for inputting and setting information. The display 35 is used to display information.

[0032] In Figure 3B, the smart device 13A includes, as an example, a processor 131, a storage device 132, an input device 134, and a display 135. Although they differ in performance and type, these have similar functions to the processor 31, storage device 32, input device 34, and display 35. The wireless communication interface (wireless communication IF) 133 provides wireless interfaces for the communication carrier network, Bluetooth®, and wireless LAN (Wi-Fi). It includes a communication interface circuit that enables access. The processor 131 can perform various processes by executing a program stored in the memory device 132.

[0033] Figure 4 is a flowchart illustrating an example of processing by DCM10. Figure 5 is a sequence diagram showing an example of operation in the communication system. The flowchart shown in Figure 4 indicates that processing begins, for example, when a vehicle user operates DCM10 to bring up the screen for selecting the access line (access method) to the communication device 20 on the display 109.

[0034] In step S01, the CPU 101 of the DCM 10 receives confirmation input of the access line selection result entered by the user using the input device 108. In step S02, the CPU 101 determines whether the selection result is communication carrier network 2 or not. If it is determined that communication carrier network 2 has been selected, the process proceeds to step S07; otherwise, the process proceeds to step S03.

[0035] If the process proceeds to step S07, the CPU 101 performs the process of establishing a communication path with the communication device 20 via the communication carrier network 2. In establishing the communication path, the DCM 10 sends a connection request containing information about the communication partner to the communication carrier network 2.

[0036] The information stored in the first SIM 105 (such as subscriber information and authentication information) is used to register the location of the DCM 10 on the communication carrier network 2 and perform authentication. The CPU 101 reads the authentication information stored in the first SIM 105 and transmits it to the communication carrier network 2 for authentication. The following processing is performed. The communication carrier network 2 is equipped with an authentication unit different from the authentication unit 22, and authentication using authentication information is performed by this authentication unit. The authentication unit 22 is used to perform authentication when an access line other than the communication carrier network 2 is used.

[0037] In establishing a communication channel between the DCM10 and the communication device 20, if authentication in the communication carrier network 2 is successful, the communication carrier network 2 performs control to establish a communication channel between the routing unit 23 of the communication device 20 and the DCM10. In establishing this communication channel, the routing unit 23 performs routing between the DCM10 and its communication partner (for example, server 51 or 52). Through routing, communication (sending and receiving data) between the DCM10 and its communication partner becomes possible via the communication device 20 (routing unit 23).

[0038] If the process proceeds to step S03, the CPU 101 performs connection processing with GW21. For example, if MVNO network 3 is selected as the access line selection result, the DCM 10 uses the information stored in the second SIM 106 (such as subscriber information and authentication information) to register the location of the DCM 10 on MVNO network 3 and perform authentication. For authentication, the CPU 101 reads the authentication information stored in the second SIM 106 and performs processing to send it to the communication carrier network 2. If authentication is successful, MVNO network 3 routes the DCM 10 to GW21, which is the communication partner, and establishes a communication path between the DCM 10 and GW21 (Figure 5). <1> ).

[0039] If tethering using a tethering device 13 (smart device 13A or USB dongle 13B) is selected as the result of selecting an access line, the user connects the DCM 10 and the tethering device 13 using the USB connector 107. Alternatively, the DCM 10 and the smart device 13A are connected wirelessly (Bluetooth®). Pairing is configured via Wi-Fi. DCM10 sends data for GW21 to tethering device 13. Tethering device 13 acts like a mobile router, accessing a designated wireless LAN access point and transmitting data to GW21 via wireless LAN 4 and the internet. In this way, DCM10 and GW21 can communicate via wireless LAN 4 and the internet 1 (Figure 5). <1> ).

[0040] In step S04, the CPU 101 performs the process of establishing a tunnel (IPsec tunnel) between the DCM 10 and the GW 21 using IPsec tunnel mode. For example, the DCM 10 is the terminal and the GW 21 is the VPN device, thus establishing a remote access VPN (Figure 5). <2> ). Note that the tunnel can use SSL / TLS instead of IPsec. It's possible.

[0041] Once the tunnel is established, the CPU 101 reads the authentication information from the first SIM 105 and sends it to the GW 21 (Figure 5). <3> The authentication information is transferred to GW21 via the tunnel. GW21 then transfers the authentication information to the authentication unit 22. The authentication unit 22 performs authentication processing using the authentication information (Figure 5). <4> ).

[0042] Furthermore, upon successful authentication, the routing unit 23 uses the authentication information along with the information of the communication partner (server 51 or 52) transmitted from the DCM 23 (at a different time) to perform routing for the data transmitted and received between the two (Figure 5). <5> As a result of routing, the routing unit 23 enters a state where it sends data from DCM10 to the communication partner and sends data from the communication partner back to DCM10. In other words, DCM10 becomes capable of communicating with the communication partner (Figure 5). <6> ).

[0043] Subsequently, information indicating successful authentication (communication possible) is sent from the communication device 20 to the DCM 10. (Figure 5) <7> ), is received by DCM10 (step S06). Subsequently, user data such as vehicle data transmitted from DCM10 reaches the communication device 20 through the tunnel and is received by the communication partner via the routing unit 23 of the communication device 20 (Figure 5). <8> and <9> ). In addition, data from the communication partner destined for DCM10 is received by DCM10 via the routing unit 23 and through the tunnel (Figure 5). <10> and <11> ).

[0044] According to the communication system of this embodiment, authentication information is passed from the DCM 10 (in-vehicle terminal) to the communication device 20 using a tunnel established between the DCM 10 and the communication device 20. Therefore, the reliability of the access network between the DCM 10 and the communication device 20 can be disregarded. In other words, communication between the DCM 10 and the communication device 20 is performed in an encrypted state via the tunnel (VPN connection). This ensures the reliability of communication even if the route goes through the Internet 1. This allows the user to flexibly select the access line.

[0045] Furthermore, if an access line other than the communication carrier network 2 is used, authentication using common authentication information is performed by the authentication unit 22 of the communication device 20, regardless of the selection of the access line. This authentication information common to access lines (access networks) is the same as the authentication information used when using the communication carrier network 2. This allows the DCM 10 (user (subscriber)) to be authenticated in the same way as when using the communication carrier network 2, thus reducing the complexity of the DCM 10 (in-vehicle terminal) configuration.

[0046] Furthermore, the DCM10 can be configured to receive only data from the communication device 20 and reject data from sources other than the communication device 20. With such a configuration, the DCM10 does not need to determine whether the communication partner is trustworthy, thus simplifying the configuration of the DCM10. Since the DCM10 can be specialized solely for communication with the communication device 20, all functions, including routing, can be placed on the communication device 20 side, with future advanced application provision in mind.

[0047] Furthermore, when DCM10 and communication device 20 communicate using tethering with a smart device 13A (for example, the user's smartphone), the communication charges are billed by a billing mechanism 40 (Figure 1) on the network. In this case, the communication charges can be billed to the user. For example, if a user has a flat-rate contract for smartphone communication charges up to a certain amount of data usage, the tethering communication described above can be performed within the remaining data allowance of the flat rate. In this way, the carrier does not have to bear the communication costs related to tethering. The user also benefits from not having to bear any communication costs since the communication is within the flat rate. In addition, in the future, if the amount of data that can be used for a flat rate increases, the application program used by DCM10 can be changed to one that uses more data but is more convenient.

[0048] In managing tethering communication charges in this manner, an application program (app) that performs the following processing may be installed on the smart device 13A. - Notify the user that communication charges will be incurred when tethering is performed. This notification is done, for example, by displaying it on the display 125. When tethering is enabled, the system will either notify the user of the amount of data already used from the unlimited data allowance, or the remaining amount of data available from the unlimited data allowance. - If the amount of data already used exceeds a threshold (or if the remaining data falls below a threshold) within the flat-rate data allowance, a warning will be issued regarding tethering use (for example, displayed on display 125). Alternatively, tethering use will be prohibited (DCM10 and smart device (This will result in a state where the S10A cannot be connected or paired.)

[0049] Alternatively, the following configuration may be adopted. • The DCM10 controls the amount of data it can handle based on the user's acceptable level of data transfer. The DCM10 may increase or decrease the amount of data sent to the communication device 20, or it may increase or decrease the amount of data sent from the communication device 20 to the DCM10. The communication device 20, in response to an application installation request from the DCM 10, permits the installation of applications according to the amount of data the user allows. In other words, it controls the types of applications that can be installed on the DCM 10 according to the amount of data the user has available for a fixed-rate plan.

[0050] The processes and means described in this disclosure can be freely combined and implemented, provided that no technical inconsistencies arise. Furthermore, processes described as being performed by one device may be divided and executed by multiple devices. Alternatively, processes described as being performed by different devices may be executed by a single device. In a computer system, the hardware configuration (server configuration) by which each function is implemented can be flexibly changed. This disclosure can also be implemented by supplying a computer program implementing the functions described in the embodiments described above to a computer, and having one or more processors in the computer read and execute the program. Such a computer program may be provided to the computer by a non-temporary computer-readable storage medium connectable to the computer's system bus, or it may be provided to the computer via a network. Non-temporary computer-readable storage media include, for example, any type of disk such as magnetic disks (floppy disks, hard disk drives (HDDs), etc.), optical disks (CD-ROMs, DVDs, Blu-ray discs, etc.), read-only memory (ROM), random access memory (RAM), EPROM, EEPROM, magnetic cards, flash memory, optical cards, and any type of media suitable for storing electronic instructions. [Explanation of Symbols]

[0051] 1. Internet, 2. Communication carrier network, 3. MCNO network, 4. Wireless LAN, 10. DCM, 20. Communication equipment, 31. Processor, 21. Gateway, 22. Authentication unit, 23. Routing unit

Claims

1. A communication device that communicates with an in-vehicle terminal, The communication device performs authentication based on authentication information received from the vehicle terminal using a tunnel established on an access network selected from among multiple access networks available for communication between the vehicle terminal and the communication device. If the aforementioned authentication is successful, the data received from the in-vehicle terminal will be routed. Control unit that executes Includes, The authentication information is used when the in-vehicle terminal accesses the communication device via a cellular network different from the multiple access networks, and the communication device operates as part of the core network of the cellular network. Communication device.

2. The authentication based on the aforementioned authentication information is a common procedure for the multiple access networks. The communication device according to claim 1.

3. The communication device receives the authentication information using an access network selected from among the plurality of access networks, which include a first access network that passes through a second cellular network different from the first cellular network that is the cellular network, and a second access network that passes through a network other than the first cellular network used by tethering. The communication device according to claim 1.

4. A communication device that communicates with an in-vehicle terminal, The communication device performs authentication based on authentication information received from the vehicle terminal using a tunnel established on an access network selected from among multiple access networks available for communication between the vehicle terminal and the communication device. If the aforementioned authentication is successful, the data received from the in-vehicle terminal will be routed, Includes, The authentication information is transmitted when the in-vehicle terminal uses a cellular network different from the multiple access networks. This is authentication information used when accessing the communication device and when the communication device operates as part of the core network of the cellular network. Communication control method.

5. The communication device receives the authentication information using an access network selected from among the plurality of access networks, which include a first access network that goes through a second cellular network different from the first cellular network that is the cellular network, and a second access network that goes through a network other than the first cellular network used by tethering. The communication control method according to claim 4.

Images