According to an embodiment, an information processing apparatus stores user information including user attribute information and stores accessibility information indicating whether a use of the user attribute information is allowed, for each piece of user attribute information and each attribute value. The apparatus receives, from a server, a program for access to the user information, analyzes the program to extract the user attribute information to be used, and determines whether the use of the attribute value of the user attribute information is allowed by using the accessibility information of the extracted user attribute information. When the determination is negative, the apparatus does not execute the program to deny access to the attribute value of the user attribute information from the program, but when the determination is positive, the apparatus executes the program to allow access to the attribute value of the user attribute information from the program.