Patent ID: 8443451

Claim:
A first apparatus implemented in hardware which is used for implementing access protection for applications running in a second apparatus, said first apparatus comprising: (a) a mechanism to accept a first manual action to delete a first application security environment in said second apparatus, wherein an application security environment is an environment in which at least one application is run, wherein privileges of an application security environment are applied to applications running in that application security environment; (b) a mechanism which allows a device driver running in said second apparatus to read information about said first manual action to delete said first application security environment; (c) a mechanism to accept a first command from said second apparatus to delete said first application security environment; (d) a mechanism to delete said first application security environment; (e) a mechanism to store list of application security environments in said second apparatus; (f) a mechanism to prevent software from modifying said list of application security environments by keeping said list of application security environments not writable by said software, wherein said software runs on any apparatus other than said first apparatus; and (g) a mechanism to couple said first apparatus to said second apparatus.