An apparatus and method for managing security of an IC card such as a cashless payment card, an ID card, a medical health management card, a local government service card, etc. in each transaction with an object to improve a level of the security. The permissible number of accesses to a data file (32c) in each transaction is beforehand set. When a transaction is started between a card-type storage medium (1A) and a transaction apparatus, the number of accesses to the data file after the start of the transaction is counted and the counted number of accesses is compared with the permissible number of accesses. If the number of accesses exceeds the permissible number of accesses, it is judged that an error has occurred so as to interrupt the transaction.