The present disclosure relates generally to the management of privileges
associated with certain applications that are accessible by users of
electronic equipment, such as, for example, networked computers, mobile
wireless communications devices, and the like. In particular, the
disclosure is directed to systems and methods for managing privileges
associated with particular applications and for revoking these privileges
in a timely and robust manner. For example, the device keeps track of
which applications get access to which privileges. When policies or
application control changes, the system detects which privileges have
been revoked for which applications. This can be accomplished by simply
comparing the old set of privileges with the new set of privileges. For
each revoked privilege for a given application, the system determines if
the application has ever accessed that privilege in the past. If an
application has accessed a privilege that is now revoked at any time in
the past, the device is reset. To ensure that privileges that may be
passed between applications are not overlooked, the device is arranged to
perform a reset if any revoked privilege accessible by the device is one
that may be passed between applications.