SYSTEM AND METHOD FOR CONTROLLING ACCESS TO APPLET
A system and method for controlling access to an applet is provided. According to the applet access control method, when an application requests a management program for access to an applet stored in an SE, the management program controls access of the application to the requested applet. Accordingly, since an application that has no access right is prohibited from accessing an applet, security for information stored in the applets can be increased.
1 . A method for controlling access to an applet, the method comprising:
requesting by an application, a management program for access to an applet stored in an SE; and
controlling by the management program, access of the application to the requested applet.
2 . The method of claim 1 , wherein the application is installed in a memory,
wherein the management program comprises a management application installed in the memory and a management applet installed in the SE, and
wherein the controlling is performed by an interaction between the management application and the management applet.
3 . The method of claim 2 , wherein the requesting comprises requesting by the application, the management application for access to the applet, and
wherein the controlling comprises:
establishing by the management application, communication with the management applet;
transmitting by the management application, the request for access of the application to the management applet; and
determining by the management applet, whether the application is authorized to access the requested applet.
4 . The method of claim 3 , wherein the controlling comprises:
when it is determined that the application is authorized to access, transmitting by the management application, the request for access to the requested applet;
transmitting by the management application, an access acceptance response to the application; and
establishing by the application, communication with the requested applet.
5 . The method of claim 4 , wherein the application communicates with the requested applet via the management application.
6 . The method of claim 3 , wherein the controlling comprises:
when it is determined that the application is not authorized to access, disregarding by the management application, the request for access; and
transmitting by the management application, an access denial response to the application.
7 . The method of claim 1 , wherein the application is not able to access the management applet.
8 . The method of claim 1 , wherein the application is a wallet application and the applet is a financial service applet.
9 . A mobile terminal comprising:
a storage in which an application which requests a management program for access to an applet stored in an SE is installed; and
a processor configured to execute the management program which controls the application and access of the application to the requested applet.