MOBILE TERMINAL, ACCESS CONTROL MANAGEMENT DEVICE, AND ACCESS CONTROL MANAGEMENT METHOD

摘要

A mobile terminal (200) includes: an application execution unit (240); an access control rule management unit (270) for holding an access control rule for defining presence/absence of the access authority to a confidential resource in the terminal by an application program and decision means; an access control rule query unit (220) for specifying an identifier of a user identification module owned by the mobile terminal or an identifier of the mobile terminal itself, acquiring the access control rule from an external device, and storing the it in the access control rule management unit; a query required/non-required judgment unit (260) for calling the access control rule query unit when the application program accesses a confidential resource and judging whether to update the access control rule; an authority management unit (230) for judging presence/absence of the access authority according to the access control rule; and a confidential resource management unit (250) for permitting on not permitting the request to access the confidential resource by the application program according to the authority management unit (230).