Patent ID: 8613076

Claim:
An information processing apparatus including an application execution environment in which a first application belongs to a first security domain and a second application belongs to the first security domain and a second security domain, the information processing apparatus comprising: a memory; a processor in communication with the memory, the processor configured to control a resource management unit that does not belong to either the first security domain or the second security domain and that is configured to manage resources of a plurality of applications including the first application, wherein if the resource management unit receives an access request to a resource of the first application from the second application, the resource management unit transfers an authentication result for the first application included in the access request to the first application, and if the resource management unit receives a determination result on whether access of the second application to the resource is permitted from the first application, the resource management unit returns the determination result to the second application, wherein if the resource management unit receives the access request to the resource of the first application from the second application, the resource management unit determines whether an interface for an inquiry to the first application is associated with the resource, and if the interface for the inquiry to the first application is associated with the resource, the resource management unit transfers the authentication result for the first application included in the access request to the first application via the interface, and wherein the resource management unit is embodied by one or more central processing units of the information processing apparatus.