Secure network rollover

A wireless mobile communication device, comprising:

• a transceiver configured to send and receive wireless data;
• and
• one or more processors in communication with one or more non-transitory computer-readable media comprising computer-executable instructions that when executed by the one or more processors, cause the one or more processors to:
• receive one or more network parameters,
• identify a network associated with the received one or more network parameters,
• determine, based at least in part on network information that is stored on the wireless mobile communication device, that the identified network is a network with which the wireless mobile communication device is configured to join,
• identify private network information from the stored network information based at least in part on identification of the network, wherein the private network information enables the wireless mobile communication device to access a first private network and a second private network,
• establish, using a first virtual private network (VPN) client, a first VPN tunnel to the first private network based at least in part on a network identifier associated with the network and the private network information, and
• receive a first private network identifier associated with the first private network,
• establish, using a second VPN client, a second VPN tunnel to the second private network based at least in part on the first private network identifier and the private network information, wherein the second VPN tunnel is nested within the first VPN tunnel, and wherein the second VPN client is different from the first VPN client, and
• receive a second private network identifier associated with the second private network.

A method for rolling over from a second mobile cellular network (MCN) communication system to a first MCN communication system, the method comprising:

• receiving one or more network parameters at a wireless mobile communication device;
• identifying a first network associated with the first MCN communication system based at least in part on the received one or more network parameters;
• determining, based at least in part on stored network information, that the first network is a network with which the wireless mobile communication device is configured to join;
• identifying private network information from the stored network information based at least in part on the identification of the first network, wherein the private network information enables the wireless mobile communication device to access a first private network and a second private network;
• establishing, using a first virtual private network (VPN) client, a first VPN tunnel to the first private network based at least in part on a first network identifier associated with the first network and the private network information;
• establishing, using a second VPN client that is different from the first VPN client, a second VPN tunnel to the second private network based at least in part on a first private network identifier associated with the first private network and the private network information, wherein the second VPN tunnel is nested within the first VPN tunnel;
• and
• receiving a second private network identifier associated with the second private network.