A method applied to a hardware system in a user equipment for improving efficiency of protecting a multi-content process; the system cooperating with a memory , and comprising one or more modules (ip -ip[N]), being hardware for content processing; wherein: a subset of the one or more modules implements a secure CPU and a non-secure CPU ; one (ip[n], ip , ip , ip , ip[n5], ip[n5'], ip[n6] or ip[n7]) of the one or more modules is associated with multiple access identities (aid[n]_1-aid[n]_K, aid _1-aid _2, aid _1-aid _2 or aid _1-aid _2); the memory comprises multiple different ranges (sr1-sr4); and the method comprises: by the secure CPU, configuring each said range of the memory to register an access of one of the multiple access identities as a permissible access by said module, selecting one of the multiple access identities for processing a first content , and using the selected access identity when said module accesses the memory during processing of the first content ; and by said module, selecting a different one of the multiple access identities for processing a second content , and using the selected different access identity when said module accesses the memory during processing of the second content , and wherein between processing of the first content and the second content, the secure CPU does not reconfigure the registered permissible access of each said range. a subset of the one or more modules implements a secure CPU and a non-secure CPU ; one (ip[n], ip , ip , ip , ip[n5], ip[n5'], ip[n6] or ip[n7]) of the one or more modules is associated with multiple access identities (aid[n]_1-aid[n]_K, aid _1-aid _2, aid _1-aid _2 or aid _1-aid _2); the memory comprises multiple different ranges (sr1-sr4); and the method comprises: by the secure CPU, configuring each said range of the memory to register an access of one of the multiple access identities as a permissible access by said module, selecting one of the multiple access identities for processing a first content , and using the selected access identity when said module accesses the memory during processing of the first content ; and by said module, selecting a different one of the multiple access identities for processing a second content , and using the selected different access identity when said module accesses the memory during processing of the second content , and wherein between processing of the first content and the second content, the secure CPU does not reconfigure the registered permissible access of each said range. by the secure CPU, configuring each said range of the memory to register an access of one of the multiple access identities as a permissible access by said module, selecting one of the multiple access identities for processing a first content , and using the selected access identity when said module accesses the memory during processing of the first content ; and by said module, selecting a different one of the multiple access identities for processing a second content , and using the selected different access identity when said module accesses the memory during processing of the second content , and wherein between processing of the first content and the second content, the secure CPU does not reconfigure the registered permissible access of each said range. <EOS>