A secure-communications-manager device for managing secure communications between devices in a network, comprising: an authorization module configured to determine whether or not a first communications device is authorized to access at least a service provided by a second communications device; a security-policy-specifying module configured to output to said second communications device security policy rules which prevent or permit communications between said second communications device and said first communications device, dependent on a determination made by the authorization module; and a secure-communications-channel setup module configured to setup a secure communications channel between said second communications device and said first communications device using data provided by a secure element associated with said secure-communications-manager device, said secure-communications-channel setup module being configured to operate in either a first mode when the first communications device possesses a secure element, or in a second mode when the first communications device does not possess a secure element, wherein: - in the first mode, the secure-communications-manager device is configured to instruct the first and the second communications devices (MT2, PT1) to set up a direct secure communications channel between the second communications device and the first communications device, and - in the second mode, a first secure communications channel is setup between the secure-communications manager device and the second communications device, and a second secure communications channel is set up between the secure-communications manager device and the first communications device, and the secure-communications manager device is configured to enable communications between the first and second communications devices (MT2, PT1) to take place using the first and second secure communications channels. an authorization module configured to determine whether or not a first communications device is authorized to access at least a service provided by a second communications device; a security-policy-specifying module configured to output to said second communications device security policy rules which prevent or permit communications between said second communications device and said first communications device, dependent on a determination made by the authorization module; and a secure-communications-channel setup module configured to setup a secure communications channel between said second communications device and said first communications device using data provided by a secure element associated with said secure-communications-manager device, said secure-communications-channel setup module being configured to operate in either a first mode when the first communications device possesses a secure element, or in a second mode when the first communications device does not possess a secure element, wherein: - in the first mode, the secure-communications-manager device is configured to instruct the first and the second communications devices (MT2, PT1) to set up a direct secure communications channel between the second communications device and the first communications device, and - in the second mode, a first secure communications channel is setup between the secure-communications manager device and the second communications device, and a second secure communications channel is set up between the secure-communications manager device and the first communications device, and the secure-communications manager device is configured to enable communications between the first and second communications devices (MT2, PT1) to take place using the first and second secure communications channels. - in the first mode, the secure-communications-manager device is configured to instruct the first and the second communications devices (MT2, PT1) to set up a direct secure communications channel between the second communications device and the first communications device, and - in the second mode, a first secure communications channel is setup between the secure-communications manager device and the second communications device, and a second secure communications channel is set up between the secure-communications manager device and the first communications device, and the secure-communications manager device is configured to enable communications between the first and second communications devices (MT2, PT1) to take place using the first and second secure communications channels.