Cloud access to communications and/or media by an incarcerated individual via a virtual private network secured personal communication and/or media device

A virtual private network secured personal incarcerated individual communication and/or media device comprising:

• an operating system that incorporates a secured virtual private network, wherein the operating system is configured to launch the secured virtual private network upon device boot as a persistent always on secure channel to connect only to a wireless carrier designated by an embedded Subscriber Identity/Identification Module (eSIM) configured in the device;
• a designation, configured in the eSIM, of the wireless carrier that the virtual private network secured incarcerated individual personal communication and/or media device is allowed to connect with and/or communicate through,
• wherein the wireless carrier designated by the eSIM is configured to terminate communications from, and to, the device,
• and wherein the virtual private network secured personal incarcerated individual communication and/or media device is configured to:
• invoke the secured virtual private network in response to start of a wireless communications application and/or an application program that makes use of wireless communications;
• and
• connect securely directly to the wireless carrier, via the secured virtual private network.

An incarcerated individual communications and/or media access system comprising:

• a virtual private network secured personal incarcerated individual communication and/or media device comprising:
• an operating system that incorporates a secured virtual private network, wherein the operating system is configured to launch the secured virtual private network upon device boot as a persistent always on secure channel to connect only to a wireless carrier designated by an embedded Subscriber Identity/Identification Module (eSIM) configured in the device;
• and
• a designation, configured in the eSIM, of the wireless carrier that the virtual private network secured incarcerated individual personal communication and/or media device is allowed to connect with and/or communicate through,
• wherein the wireless carrier designated by the eSIM is configured to terminate communications from, and to, the device to a computing cloud,
• and wherein the virtual private network secured personal incarcerated individual communication and/or media device is configured to:
• invoke the secured virtual private network in response to start of a wireless communications application and/or an application program that makes use of wireless communications;
• and
• connect securely directly to the wireless carrier, via the secured virtual private network;
• and
• an incarcerated individual communications and/or media cloud access platform hosted by the computing cloud, the incarcerated individual communications and/or media cloud access platform configured to:
• receive from the wireless carrier, communications terminated by the wireless carrier from, and to, the virtual private network secured personal communication and/or media device;
• and
• process and/or control the communications.