Patent ID: 8112814

Claim:
An information processing apparatus to which a software application can be added, the information processing apparatus comprising: a CPU connected to a memory; an access control unit, under control of the CPU, configured to determine whether access to a resource attempted by the software application is allowable, based on access control information defining whether the software application is given access authority to access the resource; and a security manager configured to mediate access to the resources by the software application based on an access authority assigned to the software application in a policy specification file, wherein: the access control unit saves information regarding the attempted access in a log file in the event that the software application attempts to access the resource the security manager communicates with an extended subclass security manager to output a history of access logs, to be stored a security log file through a security log manager, every time an access authority is checked wherein the access history stored in the security log file includes a time of the attempted access, a product ID of the software application attempting the access, and a result of the access attempt, and the extended subclass security manager is capable of directly outputting the history of access logs to the security log file wherein the extended subclass security manager and the security log manager are configured to encrypt the security log file.