Authentication and authorization architecture for an access gateway

A product comprising:

• a machine readable medium;
• and
• instructions encoded on the machine readable medium which, when executed, cause a processor in an access gateway to perform a method comprising:
• receiving an exposed service request from a first type of service requester for access to an exposed service;
• authenticating the exposed service request
• decoding a secure authorization identifier from the exposed service request to obtain a decoded secure authorization identifier;
• obtaining first search results from a first service requester branch defined in a profiling database based on the decoded secure authorization identifier;
• determining when a matching authorization identifier exists between the first search results and the decoded secure authorization identifier;
• when the matching authorization identifier exists, authorizing the first type of service requester based on a first type of service requester status identifier in the first search results and allowing access to the exposed service;
• receiving a network communication service request from a second type of service requester for access to a network communication service;
• extracting a device identifier from the network communication service request;
• obtaining second search results from a second service requester branch of a profiling database based on the device identifier;
• determining when a matching subscriber device in exists between the second search results and the device identifier;
• and
• when the matching subscriber device exists, authorizing the second type of service requester based on a second type of service requester status identifier in the second search results and allowing access to the network communication service.

A data model stored in a machine readable medium for access by a processor in a third party access gateway in a telecommunications architecture, the data model comprising:

• a root table;
• a first service requester branch comprising a company application table off the root table, the company application table comprising:
• a company application identifier specifying an authorized service requester, wherein the company application identifier establishes a relation between the company application table and the root table;
• and
• a company application status identifier establishing a status for the authorized service requester identified by the company application identifier;
• a second service requester branch comprising a device identifier table off the root table, the device identifier table comprising:
• a subscriber device identifier specifying an authorized subscriber device;
• and
• a subscriber device status identifier that provides a status for a subscriber device identified by the subscriber device identifier.