To prevent illegal analysis of an apparatus to be managed which is easily to be a target of analysis, with respect to a system for performing mutual authentication which comprises a management apparatus and the apparatus to be managed.

Authentication processing (S153) in which the apparatus to be managed authenticates the management apparatus, and authenticated processing (S102) in which the management apparatus is authenticated by the apparatus to be managed, are previously performed. If the authentication processing is successful (S155), authentication processing (S106) in which the management apparatus authenticates the apparatus to be managed, and authenticated processing (S157) in which the apparatus to be managed is authenticated by the management apparatus, are performed. Also, if the number of failures of authentication exceeds the predetermined number, the authentication is rejected (S152).