A method for running an application on a terminal (100, 1000), applied to a terminal (100, 1000) comprising a rich execution environment REE, a trusted execution environment TEE, and a secure element SE, wherein a security application on the terminal uses a client application that corresponds to the security application and that is in the REE, a general trusted application in the TEE, and a secure element application that corresponds to the security application and that is in the SE; the general trusted application is shared by at least two security applications; and the method comprises: receiving, by the general trusted application, a first request from a first client application, and determining, by the general trusted application based on the first request, a first secure element application corresponding to the first client application; sending, by the general trusted application, the first request to the first secure element application; sending, by the first secure element application, a first command to the general trusted application based on the first request; executing, by the general trusted application, the first command, and returning a first execution result to the first secure element application; sending, by the first secure element application, a first response to the general trusted application based on the first execution result; and sending, by the general trusted application, the first response to the first client application; the method characterized by further comprising: downloading a target resource from a background of a service provider by the terminal (100, 1000), wherein the target source has been encrypted in the background by using an encryption key stored in the first secure element application; downloading comprising: receiving the encrypted target resource from the background at the general trusted application by using the first client application; obtaining the encryption key from the first secure element application by the general trusted application; performing by the general trusted application a signature authentication on the encrypted target resource, to determine validity of the target resource; and storing the target resource in the general trusted application if the signature authentication succeeds. receiving, by the general trusted application, a first request from a first client application, and determining, by the general trusted application based on the first request, a first secure element application corresponding to the first client application; sending, by the general trusted application, the first request to the first secure element application; sending, by the first secure element application, a first command to the general trusted application based on the first request; executing, by the general trusted application, the first command, and returning a first execution result to the first secure element application; sending, by the first secure element application, a first response to the general trusted application based on the first execution result; and sending, by the general trusted application, the first response to the first client application; the method characterized by further comprising: downloading a target resource from a background of a service provider by the terminal (100, 1000), wherein the target source has been encrypted in the background by using an encryption key stored in the first secure element application; downloading comprising: receiving the encrypted target resource from the background at the general trusted application by using the first client application; obtaining the encryption key from the first secure element application by the general trusted application; performing by the general trusted application a signature authentication on the encrypted target resource, to determine validity of the target resource; and storing the target resource in the general trusted application if the signature authentication succeeds. receiving the encrypted target resource from the background at the general trusted application by using the first client application; obtaining the encryption key from the first secure element application by the general trusted application; performing by the general trusted application a signature authentication on the encrypted target resource, to determine validity of the target resource; and storing the target resource in the general trusted application if the signature authentication succeeds.