An access control device for controlling an access by a communication terminal to an application, the access control device comprising: an authentication method management means configured to manage each of the applications in association with authentication information, which indicates an effective authentication method effective for authenticating an access request source of an access request to access the application; an authenticating means configured to authenticate the access request source using a usable authentication method, which can be used in the communication terminal, based on the access request; an access request receiving means configured to receive the access request to access an intended application from the communication terminal; an access control means configured to control the communication terminal so that the communication terminal does not access the intended application if the communication terminal is authenticated by an authentication method which is not an authentication method effective for authenticating the access request source, and is further configured so that the communication terminal does not access the intended application in a case where the authentication method management means does not manage the authentication information, which indicates the authentication method used for the authentication, and the communication terminal accesses the intended application in a case where the authentication method management means manages the authentication information, which indicates the authentication method used for the authentication; and an application management means configured to manage each of the access request source to access the application in association with application information, which indicates the application usable in the access request source, wherein the access control means controls such that the communication terminal is prevented from accessing the intended application in a case where the application management means does not manage the application information indicative of the intended application in association with the access request source to the intended application, and the communication terminal accesses the intended application in a case where the application management means manages the application information indicative of the intended application in association with the access request source to the intended application. an authentication method management means configured to manage each of the applications in association with authentication information, which indicates an effective authentication method effective for authenticating an access request source of an access request to access the application; an authenticating means configured to authenticate the access request source using a usable authentication method, which can be used in the communication terminal, based on the access request; an access request receiving means configured to receive the access request to access an intended application from the communication terminal; an access control means configured to control the communication terminal so that the communication terminal does not access the intended application if the communication terminal is authenticated by an authentication method which is not an authentication method effective for authenticating the access request source, and is further configured so that the communication terminal does not access the intended application in a case where the authentication method management means does not manage the authentication information, which indicates the authentication method used for the authentication, and the communication terminal accesses the intended application in a case where the authentication method management means manages the authentication information, which indicates the authentication method used for the authentication; and an application management means configured to manage each of the access request source to access the application in association with application information, which indicates the application usable in the access request source, wherein the access control means controls such that the communication terminal is prevented from accessing the intended application in a case where the application management means does not manage the application information indicative of the intended application in association with the access request source to the intended application, and the communication terminal accesses the intended application in a case where the application management means manages the application information indicative of the intended application in association with the access request source to the intended application.