A system for managing and distributing of a blacklist of User Equipment ID, UE ID, in a network comprising: a plurality of groups (1, 2) of the network, each of the plurality of groups (1, 2) of the network comprising a blacklist server (220, 221), a plurality of authentication servers (210..213); and a Package Key Generator, PKG, wherein the blacklist servers (220, 221) of the groups (1, 2) of the network are each configured to: store a blacklist containing UE IDs that are not supposed to gain access to the network; transmit the blacklist to the plurality of authentication servers (210..213) in the same group (1, 2); receive a message; determine a content in the message is an order to add a new revoked UE ID in the blacklist; update the blacklist to include the new revoked UE ID; and send an update blacklist message to the plurality of authentication servers (210..213) in the same group (1, 2), wherein the PKG is configured to: receive an order to add the new revoked UE ID in the blacklist; determine the groups (1, 2) of the network associated to the new revoked UE ID; send an update blacklist message to the blacklist servers (220, 221) of the determined relevant groups (1, 2), and wherein the blacklist servers (220, 221) are further configured to: receive a query from one of the plurality of authentication servers (210..213) from another group (1, 2), the query containing a received UE ID; determine whether the received UE ID is in the blacklist; and transmit a response to the authentication server (210..213) from another group (1, 2) that the received UE ID is not in the blacklist in response to determining the received UE ID is not in the blacklist, or a response to the authentication server (210..213) from another group (1, 2) that the received UE ID is in the blacklist in response to determining the received UE ID is in the blacklist. a plurality of groups (1, 2) of the network, each of the plurality of groups (1, 2) of the network comprising a blacklist server (220, 221), a plurality of authentication servers (210..213); and a Package Key Generator, PKG, wherein the blacklist servers (220, 221) of the groups (1, 2) of the network are each configured to: store a blacklist containing UE IDs that are not supposed to gain access to the network; transmit the blacklist to the plurality of authentication servers (210..213) in the same group (1, 2); receive a message; determine a content in the message is an order to add a new revoked UE ID in the blacklist; update the blacklist to include the new revoked UE ID; and send an update blacklist message to the plurality of authentication servers (210..213) in the same group (1, 2), wherein the PKG is configured to: receive an order to add the new revoked UE ID in the blacklist; determine the groups (1, 2) of the network associated to the new revoked UE ID; send an update blacklist message to the blacklist servers (220, 221) of the determined relevant groups (1, 2), and wherein the blacklist servers (220, 221) are further configured to: receive a query from one of the plurality of authentication servers (210..213) from another group (1, 2), the query containing a received UE ID; determine whether the received UE ID is in the blacklist; and transmit a response to the authentication server (210..213) from another group (1, 2) that the received UE ID is not in the blacklist in response to determining the received UE ID is not in the blacklist, or a response to the authentication server (210..213) from another group (1, 2) that the received UE ID is in the blacklist in response to determining the received UE ID is in the blacklist. store a blacklist containing UE IDs that are not supposed to gain access to the network; transmit the blacklist to the plurality of authentication servers (210..213) in the same group (1, 2); receive a message; determine a content in the message is an order to add a new revoked UE ID in the blacklist; update the blacklist to include the new revoked UE ID; and send an update blacklist message to the plurality of authentication servers (210..213) in the same group (1, 2), receive an order to add the new revoked UE ID in the blacklist; determine the groups (1, 2) of the network associated to the new revoked UE ID; send an update blacklist message to the blacklist servers (220, 221) of the determined relevant groups (1, 2), and receive a query from one of the plurality of authentication servers (210..213) from another group (1, 2), the query containing a received UE ID; determine whether the received UE ID is in the blacklist; and transmit a response to the authentication server (210..213) from another group (1, 2) that the received UE ID is not in the blacklist in response to determining the received UE ID is not in the blacklist, or a response to the authentication server (210..213) from another group (1, 2) that the received UE ID is in the blacklist in response to determining the received UE ID is in the blacklist.