Patent ID: 8135385

Claim:
A mobile terminal, comprising: an application execution unit configured to execute an application program; an access control rule management unit configured to retain an access control rule defining whether the application program has an access authorization to a confidential resource in the mobile terminal and a determining unit; an access control rule query unit configured to acquire, from an external device, the access control rule by designating at least one of an identifier of a user identity module installed in the mobile terminal and an identifier of the mobile terminal, and to retain the acquired access control rule in the access control management unit; a query requirement determination unit configured to determine whether to update the access control rule when the application program accesses to the confidential resource, and to update the access control rule; an authorization management unit configured to determine whether the application program has the access authorization based on the access control rule; and a confidential resource management unit configured to determine whether to permit an access request to the confidential resource by the application program, based on a result of the determination of the authorization management unit; wherein the query requirement determination unit is configured to add, to the access control rule, at least one of a user authentication command, a lock command, and a deletion command for deleting confidential data and to update the access control rule when the mobile terminal is out of service for a certain period or more.