In this paper, we propose a security management middleware in ubiquitous computing environments. This security management should be applicationoriented security and provides user-centric security. This middleware provides the services for user or administrator to define security policies which can reflect dynamic context and trust management. We define a new security specification policy language for policy management. It also provides management services which can monitor and control the managed objects and sensors for the domain security management.