Abstract: Embodiments include methods, electronic device, storage medium, and computer program for policy and charging control rule generation. In one embodiment, a method is to be implemented for policy and charging control rule generation, the method comprising: receiving a first policy and charging control rule that identifies an edge application, a location of the edge application, and policy information for the edge application; generating a second policy and charging control rule for a user equipment (UE) interacting with an edge application server of the edge application based on the first policy and charging control rule, the second policy and charging control rule identifying the policy information for the edge application and an Internet Protocol (IP) address corresponding to the edge application server; and causing application of the second policy and charging control rule on a traffic flow between the UE and the edge application server.

Abstract: A method by a computing system implementing a service level agreement (SLA) monitoring client to determine whether a SLA fulfillment status reported by a SLA monitoring agent is valid. The method includes verifying a proof of SLA fulfillment status based on manipulation detection codes of measurements, a SLA fulfillment status, and a verification key, determining whether the measurements are valid based on whether the distributed ledger includes measurement attestations having manipulation detection codes matching the manipulation detection codes of the measurements, and determining that the SLA fulfillment status is valid in response to successfully verifying the proof of SLA fulfillment status and determining that the measurements are valid.

Abstract: A method and a DL node for processing a transaction in a distributed ledger (DL) network based on policies are described. A request for a transaction including data is received at a DL node from a user device. A first set of one or more DL nodes of the DL network that have characteristics that satisfy one or more policies associated with the data of the transaction are determined. In response to determining that the DL node is one of the set of DL nodes, the transaction is executed at the DL node, and the transaction is inserted as a private transaction in a digital ledger of the DL network causing a second set of one or more DL nodes of the DL network that is different from the first set of DL nodes to access only an identifier of the transaction and not a payload of the transaction.

Abstract: A method by a computing system implementing a service level agreement (SLA) monitoring client to determine whether a SLA fulfillment status reported by a SLA monitoring agent is valid. The method includes verifying a proof of SLA fulfillment status based on manipulation detection codes of measurements, a SLA fulfillment status, and a verification key, determining whether the measurements are valid based on whether the distributed ledger includes measurement attestations having manipulation detection codes matching the manipulation detection codes of the measurements, and determining that the SLA fulfillment status is valid in response to successfully verifying the proof of SLA fulfillment status and determining that the measurements are valid.

Abstract: A method by a network device implementing a first peer of a distributed ledger to provide trusted execution of a smart contract that uses private data accessible to a second peer of the distributed ledger but not accessible to the first peer. The method includes detecting, during execution of the smart contract, a subroutine of the smart contract that uses the private data, providing an identifier of the subroutine and a proving key to the second peer, obtaining a zero-knowledge proof of computation of the subroutine and a public input to a program adapted for a zero-knowledge proving scheme, wherein the zero-knowledge proof was generated by the second peer, and determining whether the zero-knowledge proof is valid using the zero-knowledge proving scheme based on the public input and a verification key.

Abstract: A method and device for registering an embedded Universal Integrated Circuit Card (eUICC) for a device and a method and device for controlling authorization of operation of a device being equipped with an eUICC. In an aspect, a method of a service node of registering an eUICC for a device is provided. The method comprises receiving information specifying ownership of the device and an identifier of the device, receiving an identifier of the eUICC and an identifier of the device, and storing the received information, wherein ownership of the device and the identifier of the eUICC being arranged in the device is registered with the service node.

Abstract: A method and a DL node for processing a transaction in a distributed ledger (DL) network based on policies are described. A request for a transaction including data is received at a DL node from a user device. A first set of one or more DL nodes of the DL network that have characteristics that satisfy one or more policies associated with the data of the transaction are determined. In response to determining that the DL node is one of the set of DL nodes, the transaction is executed at the DL node, and the transaction is inserted as a private transaction in a digital ledger of the DL network causing a second set of one or more DL nodes of the DL network that is different from the first set of DL nodes to access only an identifier of the transaction and not a payload of the transaction.

Abstract: Methods and devices of determining and controlling whether or not a user subscription profile hosted on an embedded Universal Integrated Circuit Card (eUICC) of a user device is allowed to be modified. In an aspect, a method of a network node of determining whether or not a user subscription profile hosted on an eUICC of a user device is allowed to be modified is provided. The method includes receiving a request to modify the user subscription profile of the user device, acquiring, from a network node configured to store user subscription information, information indicating if the user device is an autonomous device, and if so acquiring, information indicating operational status of the user device, and allowing the user subscription profile to be modified if the information indicating operational status of the user device indicates that the user device currently not is in operation.

Abstract: A method and device for registering an embedded Universal Integrated Circuit Card (eUICC) for a device and a method and device for controlling authorization of operation of a device being equipped with an eUICC. In an aspect, a method of a service node of registering an eUICC for a device is provided. The method comprises receiving information specifying ownership of the device and an identifier of the device, receiving an identifier of the eUICC and an identifier of the device, and storing the received information, wherein ownership of the device and the identifier of the eUICC being arranged in the device is registered with the service node.

Abstract: An embedded Universal Integrated Circuit Card (eUICC) for a device and an entity configured to perform the method. The method further relates to eUICC profile provisioning of a device and an entity configured to perform the method. The method further provides for a device manufacturer of registering an eUICC for a device. The method comprises registering an eUICC identifier and a device identifier with a registering authority being responsible for registering ownership of the device, wherein an owner of the device subsequently registers ownership of the device by providing the device identifier to the registering authority along with an owner identifier.