An attribute detector detects the attributes of a user of a program. A determining unit determines, based on the detected attribute of a user, whether the user is a superior user for whom usage restriction is not necessary or a subordinate user for whom the usage restriction is necessary, for a program of a first type. The program of the first type is a program appealing to the taste of the user and that is frequently run by the user for many hours. When the user is verified to be the subordinate user and also when the user has executed a program of a second type for a predetermined number of recommended executions, a permission/rejection determining unit permits the execution of the program of the first type.