Patent ID: 8321864

Claim:
A mobile telecommunications terminal configured to receive instructions from a device management server, the mobile telecommunications terminal comprising: a first execution environment that executes a first device management agent which issues management actions that act upon one or more management entities running within the first execution environment in accordance with instructions received from the device management server, the first execution environment being a secure execution environment; and a second execution environment that executes a second device management agent which issues management actions that act upon one or more management entities running within the second execution environment in accordance with instructions received from the device management server, the second device management agent executing separately from the first device management agent, the second execution environment being a secure execution environment having a level of trust higher than the first execution environment and having a management tree that can be independently protected and authenticated; wherein the management entities of the second execution environment are grouped into a management structure, the management structure being one of the management entities within the first execution environment, whereby applications and services running within the first execution environment and applications and services running within the second execution environment are manageable by the device management server.