Abstract: A method performed by a trusted network device and a network device for transmitting a trusted state representation of a state of a DLT network to one or more network devices is described. The trusted network device determines a state indicator. The state indicator is a representation of a state of the DLT network at a given time. The trusted network device transmits to one or more network devices a beacon message including the state indicator. The beacon message is signed based on authentication information associated with the trusted network device. The state indicator is to be used by the one or more network devices as a trusted current state of the DLT network.

Abstract: A method of ending a subscription performed in a network entity is disclosed. The method comprises receiving, from a device comprising an Embedded Universal Integrated Circuit Card, eUICC, a signed confirmation of a profile having been deleted in the device, the profile being associated with a subscription for the device; sending, to a Subscription Manager Data Preparation entity, a command for deletion of the profile; and deleting the user subscription and related profile in case an acknowledgement of the deletion of the profile is received from the Subscription Manager Data Preparation entity. Method in a device, method in a Subscription Manager Data Preparation entity, devices and entities, computer programs and computer program products are also provided.

Abstract: An enterprise entitlement server is deployed on an enterprise communication platform. The enterprise entitlement server retrieves authorization data from an authorization server controlled by an enterprise. The authorization data indicates to which one or more resources a subject of the enterprise is entitled to subscribe and/or indicates which one or more types of subscription management actions the subject is authorized to perform. The enterprise entitlement server controls management of a subscription for the subject in accordance with the authorization data.

Abstract: There is provided mechanisms for handling a subscription profile for a subscriber entity. A method is performed by a subscription management entity. The method comprises obtaining a request from a mobile network operator entity to configure the subscription profile for the subscriber entity. The method comprises configuring the subscription profile with a customized PIN/PUK code for the subscriber entity. The method comprises providing an indication of the customized PIN/PUK code being configured in the subscription profile in a response to the mobile network operator entity.

Abstract: There is provided mechanisms for enabling subscription profile download to a subscriber entity. A method is performed by a network node of an SNPN. The method comprises receiving a request from the subscriber entity for network registration with EAP based authentication to the SNPN. The method comprises granting network connectivity for the subscriber entity to the SNPN by completing the network registration upon successful EAP based authentication of the subscriber entity and upon verification that there is a pending subscription profile available for download to the subscriber entity. The network connectivity enables subscription profile download to the subscriber entity.

Abstract: There is provided mechanisms for creating a subscription profile for a subscriber entity. A method is performed by a subscription provisioning server. The method comprises obtaining, from the subscriber entity, a request for download of the subscription profile. The request comprises capability information of the subscriber entity. The method comprises creating the subscription profile based on the capability information as obtained from the subscriber entity.

Abstract: A method enabling migration of a subscription from a source device to a destination device is disclosed. The method may be performed in a migration entity and comprises: receiving, from the source device, a confirmation of a first profile associated with the subscription having been deleted in the source device, securing a second profile associated with the subscription to be provisioned onto the eUICC of the destination device, wherein at least one piece of subscription information is the same for the first and second profiles, and providing an activation code for use in migration of the subscription to the destination device. A method in a source device, migration entity, source device, computer programs and computer program products are also provided.

Abstract: There is provided mechanisms for handling subscription profiles for a set of wireless devices. A method is performed by an MNO entity. The method includes obtaining a single request for handling subscription profiles for the set of wireless devices. The method includes performing, with a profile provisioning server, a preparation procedure for the set of wireless devices wherein a common batch profile handling parameter for the set of wireless devices is created, and whereby the set of wireless devices are associated with at least one matching identifier for tracking actions relating to the handling of the subscription profiles at the MNO entity and the profile provisioning server.

Abstract: There is provided mechanisms for remote provisioning of a SIM profile to a subscriber entity. A method is performed by a remote SIM provisioning server. The method comprises obtaining a request from an MNO entity for generation of the SIM profile. The method comprises generating the SIM profile. The method comprises providing, to a storage entity, a key-value pair of the SIM profile. The key-value pair comprises a unique identifier comprising at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value. The unique identifier comprising at least one profile specific element of the SIM profile is represented by profile/subscription unique data elements for the SIM profile. The binding information of the at least one profile specific element is represented by an BID of the subscriber entity, ICCID of the SIM profile, IMSI, and an MNO identifier.

Abstract: There is provided mechanisms for remote provisioning of a SIM profile to a subscriber entity. A method is performed by a remote SIM provisioning server. The method includes obtaining a request from an MNO entity for generation of the SIM profile. The method includes generating the SIM profile. The method includes providing, to a storage entity, a key-value pair of the SIM profile. The key-value pair includes a unique identifier including at least one profile specific element of the SIM profile as key and binding information of the at least one profile specific element as value. The unique identifier including at least one profile specific element of the SIM profile is represented by an ICCID of the SIM profile. The binding information of the at least one profile specific element is represented by an EID and profile/subscription unique data elements for the SIM profile.

Abstract: There is provided mechanisms for event handling for at least one subscriber entity. A method is performed by an event handling server. The method comprises obtaining, from an RSP entity, an event registration message of the event. The event registration message comprises an identifier field containing a string of characters identifying the at least one subscriber entity. The string of characters comprises at least one marker character specifying an event type and/or indicating that the event is valid for more than one subscriber entity. The method comprises storing an event record of the event. The event record comprises the identifier field and an address of that RSP entity from which data of the event is to be fetched. The method comprises providing the event record to the at least one subscriber entity.

Abstract: There is provided mechanisms for certificate revocation check during a subscription related procedure for a subscriber entity. A method is performed by the subscriber entity. The method comprises receiving a message from a subscription management entity during the subscription related procedure for the subscriber entity. The message comprises a certificate and an OCSP response for the certificate. The OCSP response indicates a revocation state of the certificate. The method comprises determining whether the certificate has been revoked or not by checking the revocation state as indicated in the OCSP response.

Abstract: Methods and network devices for determining a state of an account of interest in a distributed ledger technology (DLT) network are described. The determination of the state of the account of interest is performed based on a DLT state indicator that is a representation of a state of the DLT network that is trusted by the network device. The network device determines whether the DLT state indicator is indicative of the state of the account of interest. Responsive to determining that the DLT state indicator is indicative of the state of the account of interest, the network device retrieves the state of the account of interest based on the DLT state indicator. Responsive to determining that the DLT state indicator is not indicative of the state of the account of interest, the network device performs the following operations: determining a first set of one or more transactions that include the account of interest and executing the first set of transactions to obtain the state of the account of interest.

Abstract: A method performed by a trusted network device and a network device for transmitting a trusted state representation of a state of a DLT network to one or more network devices is described. The trusted network device determines a state indicator. The state indicator is a representation of a state of the DLT network at a given time. The trusted network device transmits to one or more network devices a beacon message including the state indicator. The beacon message is signed based on authentication information associated with the trusted network device. The state indicator is to be used by the one or more network devices as a trusted current state of the DLT network.

Abstract: There is provided mechanisms for handling subscription profiles for a set of wireless devices. A method is performed by an MNO entity. The method includes obtaining a single request for handling subscription profiles for the set of wireless devices. The method includes performing, with a profile provisioning server, a preparation procedure for the set of wireless devices wherein a common batch profile handling parameter for the set of wireless devices is created, and whereby the set of wireless devices are associated with at least one matching identifier for tracking actions relating to the handling of the subscription profiles at the MNO entity and the profile provisioning server.

Abstract: There is provided mechanisms for enabling management of a subscriber entity. A method is performed by the subscriber entity. The method comprises obtaining a message from a subscription server. The message comprises an event record. The event record is addressed to the subscriber entity and comprises a pointer to a primary entity. The method comprises establishing a connection to the primary entity for management of the subscriber entity.

Abstract: A method of ending a subscription performed in a network entity is disclosed. The method comprises receiving, from a device comprising an Embedded Universal Integrated Circuit Card, eUICC, a signed confirmation of a profile having been deleted in the device, the profile being associated with a subscription for the device; sending, to a Subscription Manager Data Preparation entity, a command for deletion of the profile; and deleting the user subscription and related profile in case an acknowledgement of the deletion of the profile is received from the Subscription Manager Data Preparation entity. Method in a device, method in a Subscription Manager Data Preparation entity, devices and entities, computer programs and computer program products are also provided.

Abstract: A method (30) of ending a subscription performed in a network entity (20) is disclosed. The method (30) comprises receiving (33), from a device (10) comprising an Embedded Universal Integrated Circuit Card, eUICC, (14), a signed confirmation of a profile having been deleted in the device (10), the profile being associated with a subscription for the device (10); sending (34), to a Subscription Manager Data Preparation entity (19), a command for deletion of the profile; and deleting (35) the user subscription and related profile in case an acknowledgement of the deletion of the profile is received from the Subscription Manager Data Preparation entity (19). Method (60) in a device (10), method (90) in a Subscription Manager Data Preparation entity, devices and entities, computer programs and computer program products are also provided.

Abstract: There is provided mechanisms for initial network access of a subscriber entity to a radio access network. A method is performed by the subscriber entity. The method comprises transmitting an attach message towards a network node. The attach message indicates a request for network access of the subscriber entity to a radio access network of the network node. The method comprises receiving an identification request originating from the network node. The identification request requests identification of the subscriber entity. The method comprises transmitting a response message towards the network node. The response message comprises an Access Identifier of the subscriber entity. The Access Identifier indicates that the subscriber entity is subscription-less. The method comprises receiving a grant from the network node. The grant allows the subscriber entity limited network access.

Abstract: A method enabling migration of a subscription from a source device to a destination device is disclosed. The method may be performed in a migration entity and comprises: receiving, from the source device, a confirmation of a first profile associated with the subscription having been deleted in the source device, securing a second profile associated with the subscription to be provisioned onto the eUICC of the destination device, wherein at least one piece of subscription information is the same for the first and second profiles, and providing an activation code for use in migration of the subscription to the destination device. A method in a source device, migration entity, source device, computer programs and computer program products are also provided.