An electronic device comprising: a memory ; and a processor configured to: execute at least one operating system executed in a first region of the processor allowing an operation based on a first authority; execute at least one application executed in a second region of the processor allowing an operation based on a second authority; and in response to detection of access to at least one device resource by the at least one application, configure authority of access to the at least one device resource by using an authority determination module executed in a third region of the processor allowing an operation based on a third authority; the electronic device wherein the processor is further configured to: store an authority policy defining a device resource restricted from being accessed by the at least one application, in the third region allowing an operation based on the third authority; and provide the authority policy through a secure region of the processor to a non-secure region of the processor allowing an operation based on the third authority. a memory ; and a processor configured to: execute at least one operating system executed in a first region of the processor allowing an operation based on a first authority; execute at least one application executed in a second region of the processor allowing an operation based on a second authority; and in response to detection of access to at least one device resource by the at least one application, configure authority of access to the at least one device resource by using an authority determination module executed in a third region of the processor allowing an operation based on a third authority; the electronic device wherein the processor is further configured to: store an authority policy defining a device resource restricted from being accessed by the at least one application, in the third region allowing an operation based on the third authority; and provide the authority policy through a secure region of the processor to a non-secure region of the processor allowing an operation based on the third authority. execute at least one operating system executed in a first region of the processor allowing an operation based on a first authority; execute at least one application executed in a second region of the processor allowing an operation based on a second authority; and in response to detection of access to at least one device resource by the at least one application, configure authority of access to the at least one device resource by using an authority determination module executed in a third region of the processor allowing an operation based on a third authority; the electronic device wherein the processor is further configured to: store an authority policy defining a device resource restricted from being accessed by the at least one application, in the third region allowing an operation based on the third authority; and provide the authority policy through a secure region of the processor to a non-secure region of the processor allowing an operation based on the third authority. store an authority policy defining a device resource restricted from being accessed by the at least one application, in the third region allowing an operation based on the third authority; and provide the authority policy through a secure region of the processor to a non-secure region of the processor allowing an operation based on the third authority. <EOS>