The invention discloses a method for controlling access to a memory by an application program. The method comprises the steps that a first access request which is provided by the application program and contains a first access key is received; the first access key is verified; when the first access key is successfully verified, a second access key for the application program is generated; the second access key is stored and provided for the application program; a second access request provided by the application program is received, wherein the second access request contains a destination address and the second access key; whether the destination address belongs to a reference address space of a predetermined storage position in the designated memory is monitored, and the second access keyis verified; and an access control command is generated according to the monitoring result of whether the destination address belongs to the reference address space and the verification result of thesecond access key to restrict or permit access to the memory by the application program.