A secure access gateway for a telecommunications architecture, the access gateway comprising: a profiling database comprising third party authorization data; a subscriber communication interface; a service broker communication interface; a service provider communication interface; an application communication interface; a service request handler coupled to the subscriber communication interface and the profiling database, the service request handler operable to: receive a communication network access request through the subscriber communication interface, wherein the communication network access request comprises an access request for information provided by a communication network service provider; extract a subscriber device identifier from the communication network access request, wherein the subscriber device identifier identifies a subscriber device requesting access to the information provided by the communication network service provider; search the profiling database for an authorized subscriber device identifier record associated with the subscriber device identifier; and when the authorized subscriber device identifier record exists, forward the communication network access request to the communication network service provider through the service provider communication interface; a capability handler coupled to the application communication interface, the capability handler operable to: receive an exposed service request through the application communication interface, wherein the exposed service request comprises a use request for a telecommunications service established in the telecommunications architecture and exposed through a service broker; authenticate the exposed service request to obtain a certificate identifier from the exposed service request; search the profiling database for an authorized third party application record associated to the certificate identifier; and when the authorized third party application record exists, forward the exposed service request to the service broker through the service broker communication interface. a profiling database comprising third party authorization data; a subscriber communication interface; a service broker communication interface; a service provider communication interface; an application communication interface; a service request handler coupled to the subscriber communication interface and the profiling database, the service request handler operable to: receive a communication network access request through the subscriber communication interface, wherein the communication network access request comprises an access request for information provided by a communication network service provider; extract a subscriber device identifier from the communication network access request, wherein the subscriber device identifier identifies a subscriber device requesting access to the information provided by the communication network service provider; search the profiling database for an authorized subscriber device identifier record associated with the subscriber device identifier; and when the authorized subscriber device identifier record exists, forward the communication network access request to the communication network service provider through the service provider communication interface; receive a communication network access request through the subscriber communication interface, wherein the communication network access request comprises an access request for information provided by a communication network service provider; extract a subscriber device identifier from the communication network access request, wherein the subscriber device identifier identifies a subscriber device requesting access to the information provided by the communication network service provider; search the profiling database for an authorized subscriber device identifier record associated with the subscriber device identifier; and when the authorized subscriber device identifier record exists, forward the communication network access request to the communication network service provider through the service provider communication interface; a capability handler coupled to the application communication interface, the capability handler operable to: receive an exposed service request through the application communication interface, wherein the exposed service request comprises a use request for a telecommunications service established in the telecommunications architecture and exposed through a service broker; authenticate the exposed service request to obtain a certificate identifier from the exposed service request; search the profiling database for an authorized third party application record associated to the certificate identifier; and when the authorized third party application record exists, forward the exposed service request to the service broker through the service broker communication interface. receive an exposed service request through the application communication interface, wherein the exposed service request comprises a use request for a telecommunications service established in the telecommunications architecture and exposed through a service broker; authenticate the exposed service request to obtain a certificate identifier from the exposed service request; search the profiling database for an authorized third party application record associated to the certificate identifier; and when the authorized third party application record exists, forward the exposed service request to the service broker through the service broker communication interface.