controlling access to a specific resource on a mobile telephone comprises the steps of associating an identity with a permission state , in which an identity is a label applicable to one of several entities on whose behalf the resource could potentially be used and the permission state defines whether or not the resource can actually be used ; and allowing use of the resource solely to an entity or entities labelled with an identity associated with a permission state that does permit such use .