It's probably an unsolvable problem without huge funding. Perhaps the better approach is to treat the cellular modem as part of the untrusted network.