An apparatus and method for managing security of an IC card such as a cashless payment card, an ID card, a medical health management card, a local government service card, etc., in each transaction with an object to improve a level of the security. The method comprises the steps of generating a unique identifier for a transaction in said card-type storage medium (11) when the transaction is started between said card-type storage medium (11) and a transaction apparatus (21) accessing to said card-type storage medium to execute the transaction therewith and the data file that is an object of an access of said transaction apparatus (21), notifying said unique identifier to said transaction apparatus (21); giving said unique identifier to an access command of said transaction apparatus (21) to said card-type storage medium (11) until an end of said transaction; and comparing said unique identifier given to the access command from said transaction apparatus (21) with another unique identifier generated for said transaction in said card-type storage medium (11), and performing a process according to the access command from said transaction apparatus (21) if these unique identifiers are in agreement.