Method and an apparatus for publishing assertions in a distributed database of a mobile telecommunication network and for personalising internet-of-things devices

1. A method for granting, for a mobile device which is not provisioned with a subscription to access a wireless network, the mobile device being associated to a secure element adapted to be provisioned with a mobile network subscription, the establishment of an initial wireless communication over a second mobile network operated by a second mobile network operator, the mobile device belonging to a user, the method comprising the steps of:

receiving by the second mobile network an identifier of the mobile device;

verifying, in an immutable distributed database hosted at least by a first mobile network operator and the second mobile network operator in which the same data is stored replicated across a plurality of compute nodes of a network, if at least a published assertion comprising said identifier of the mobile device demonstrates that the user owns a first subscription to the first mobile network operator, said first subscription allowing said first mobile operator to be charged by the second mobile network operator for the establishment of a wireless communication over the second mobile network;

in case of a positive verification, granting the establishment of a wireless communication over the second mobile network for the mobile device to be provisioned with a second subscription of a third mobile network operator; and

publishing an assertion in the immutable distributed database providing an identifier of the secure element and an indicator of the level of security offered by the secure element.

2. The method according to claim 1 , further comprising the step of verifying that the first mobile network operator allows being charged by the second mobile network operator for the establishment of a wireless communication over the second mobile network.

3. The method according to claim 1 , wherein the second mobile network operator and the third mobile network operator are designating the same mobile network operator.

4. The method according to claim 1 , wherein the assertion published in the immutable distributed database providing an identifier of the secure element and an indicator of the level of security offered by the secure element is published by a manufacturer of said secure element, said assertion allowing to propose the user a second subscription that takes into account said level of security.

5. The method according to claim 1 , further comprising a step of verifying that the mobile device belongs to the user, this verification being performed by checking if there is a published assertion in the immutable distributed database identifying the user as the owner of the mobile device.

6. The method according to claim 1 , wherein the immutable distributed database is composed of a plurality of compute nodes named stakeholders, a stakeholder being registered with a trusted entity, an assertion publication being requested by a declaration entity and comprising at least an identifier of said declaration entity.

7. The method according to claim 1 , comprising the step of verifying the level of security provided by a secure element embedded into the mobile device adapted to be provisioned with the second subscription by reading the assertion published in the immutable distributed database providing an identifier of the secure element and an indicator of the level of security offered by the secure element is published, said assertion linking the identifier of the secure element and the security level.

8. The method according to claim 1 , wherein the immutable distributed database is a blockchain.

9. A mobile device which is not provisioned with a subscription to access a mobile network, comprising:

a secure element;

configured to:

send to a second mobile network an identifier of the mobile device so that the second mobile network operator is able to verify, in an immutable distributed database hosted by a first mobile network operator and the second mobile network operator in which data is replicated across a plurality of compute nodes of a network, if at least a published assertion comprising said identifier of the mobile device demonstrates that the user owns a first subscription to the first mobile network operator, said first subscription allowing said first mobile operator to be charged by the second mobile network operator for the establishment of a wireless communication over the second mobile network, the establishment of a wireless communication over the second mobile network being granted in case of a positive verification;

download a second subscription from a third wireless network operator (Th-MNO) into the secure element, wherein the secure element is associated to a security level that is published in an assertion of the immutable distributed database.

10. A server of a second mobile network adapted for granting, for a mobile device which is not provisioned with a subscription to access a wireless network, the establishment of an initial wireless communication over a second mobile network (Se-PLMN) operated by a second wireless network operator, the mobile device belonging to a user, the server being configured to:

receive an identifier of the mobile device;

verify, by consulting an immutable distributed database hosted by a first wireless network operator and the second mobile network operator in which data is replicated across a plurality of compute nodes of a network, if at least a published assertion comprising said identifier of the mobile device demonstrates that the user owns a first subscription to the first mobile network operator, said first subscription allowing said first mobile operator to be charged by the second mobile network operator for the establishment of a wireless communication over the second wireless network;

grant, in case of a positive verification, the establishment of a wireless communication over the second mobile network for the mobile device to be provisioned with a second subscription from a third wireless network operator; and

publish an assertion in the immutable distributed database providing an identifier of a secure element associated with the mobile device and an indicator of the level of security offered by the secure element.