Personalized connectivity service offerings

A wireless communication system, comprising:

• a satellite providing a communication service to a plurality of devices within a mobile platform via one or more satellite beams;
• a database of access profiles for accessing a network via the wireless communication system, wherein each of the access profiles defines a set of rules that authorize a respective service offering of a plurality of service offerings selectable via the plurality of devices for one or more devices of the plurality of devices, and wherein the network is associated with a set of network destinations;
• a processor;
• memory in electronic communication with the processor;
• and
• instructions stored in the memory and executable by the processor to cause the wireless communication system to:
• receive a request from a device of the plurality of devices for a particular service offering of the plurality of service offerings;
• in response to receiving the request from the device, update a device-specific profile that is associated with the device to include an indication of the request for the particular service offering from the device, wherein the device-specific profile is included in a device-specific profile database, and wherein each device-specific profile of the device-specific profile database is associated with a respective one of the plurality of devices;
• identify an access profile from the database of access profiles that is associated with the particular service offering;
• determine from the identified access profile one or more rules associated with the device accessing the particular service offering, wherein the one or more rules indicate that the device is approved for the particular service offering and that access to the set of network destinations is to be restricted to a subset of network destinations of the set of network destinations based at least in part on the particular service offering;
• and
• permit communications between the device and the subset of network destinations of the set of network destinations associated with the identified access profile based on the identified access profile, the device-specific profile that is associated with the device, and the one or more rules.