Abstract: A method for identifying legal user equipments in a communication network is provided. The method comprises: sending to a user equipment a request for an identity of the user equipment; receiving from the user equipment a response to the request, the response comprising the identity of the user equipment and an associated credential; and determining whether the user equipment is a legal one, according to a result of authentication based at least in part on the received identity and the credential.