A method, apparatus and system for software management are provided that relate to the technical field of communications, and that allow software installed on a Universal Plug and Play (UPnP) device by a service provider to be managed only by that service provider. The method comprises receiving a software installation command sent by a first control device, installing software according to the software installation command and storing a first authentication information required during management of the software; receiving a software management command sent by a second control device, and acquiring a second authentication information corresponding to the software management command, which command is used in managing the software; when the second authentication information is consistent with the first authentication information, executing the software management command.