Open access network secure authentication systems and methods

Authentication of devices to receive services provided by service providers over communications networks such as open access networks, wherein the provider of the network need not have access to secret information shared between the devices and the service providers. A request is received from a device to receive services from a service provider and is forwarded to the service provider. A challenge and an expected response is received from the service provider and the challenge is forwarded to the device. A response to the challenge is received from the device the device is authenticated to receive services from the service provider if the response received from the device matches the expected response provided by the service provider.