Secure access system and operating method thereof

A method of operating a secure access module (SAM) includes receiving an operation parameter via a terminal from a management server, the operation parameter including a registered value indicating a permissible range for operation of the SAM, receiving an authentication request for providing a card-related service from the terminal when a corresponding card is coupled to the terminal, determining whether the SAM is within the permissible range for operation in response to the authentication request, and transmitting information on a determination result to the terminal.

BACKGROUND

The background section provided herein is for the purpose of generally presenting the context of the disclosure. Work of the presently named inventors, to the extent the work is described in this section, as well as aspects of the description that may not otherwise qualify as prior art at the time of filing, are neither expressly nor impliedly admitted as prior art against the present disclosure.

A secure access module or secure application module (SAM), which is provided for a smart card, encrypts communication data so as to prevent information exposure, and authenticates and verifies communication messages. The SAM may be implemented in hardware or software. Furthermore, the SAM may store electronic values transferred from the smart card. Thus, when unauthorized use occurs compromising the stored electronic values due to loss or robbery, secure transactions cannot be ensured.

SUMMARY

Embodiments of the present disclosure have been made in an effort to provide an operating method of a secure access system. Embodiments are directed to preventing a loss caused by unauthorized use due to loss or robbery of a secure access module (SAM), which is used for on/offline transaction of a smart card.

In accordance with an embodiment of the preset disclosure, a method of operating a secure access module (SAM) includes: receiving an operation parameter via a terminal from a management server, the operation parameter including a registered value indicating a permissible range for operation of the SAM; receiving an authentication request for providing a card-related service from the terminal when a corresponding card is coupled to the terminal; determining whether the SAM is within the permissible range for operation in response to the authentication request; and transmitting information on a determination result to the terminal.

Determining whether the SAM is within the permissible range may include: decreasing a current value of the operation parameter in response to the authentication request; and determining whether the SAM is within the permissible range for operation using the changed current value of the operation parameter. Transmitting the information on the determination result may include: transmitting a result of authenticating the SAM to the terminal when the decreased value of the operation parameter is larger than a first value; and transmitting a SAM authentication request for authenticating the SAM to the terminal when the decreased value of the operation parameter is smaller than or equal to the first value.

Determining whether the SAM is within the permissible range may include: increasing a counter value in response to the authentication request; and determining whether the SAM is within the permissible range for operation using the counter value. Transmitting the information on the determination result may include: transmitting a result of authenticating the SAM to the terminal when the increased counter value is smaller than the registered value of the operation parameter; and transmitting a SAM authentication request for authenticating the SAM to the terminal when the increased counter value is larger than or equal to the registered value of the operation parameter.

The method further may include updating the current value of the operation parameter using authentication information received via the terminal from the management server as a response to the SAM authentication request, the authentication information being transmitted according to a result of checking a state of the SAM in the management server.

In accordance with another embodiment of the preset disclosure, a method of operating a terminal includes: transmitting, to a secure access module (SAM), an authentication request for providing a card-related service when a corresponding card is coupled to the terminal; determining whether to provide the card-related service or stop operation, according to information received from the SAM as a response to the authentication request; transmitting a SAM authentication request for authenticating the SAM to a management server when an operation of the terminal is stopped according to a determination result; and transmitting, to the SAM, authentication information received from the management server as a response to the SAM authentication request.

The method may further include stopping the operation of the terminal when the information received from the SAM is the SAM authentication request.

The method may further include providing the card-related service when the information received from the SAM is a result of authenticating the SAM.

The method may further include: receiving an operation parameter from the management server, the operation parameter including a registered value indicating a permissible range for operation of the SAM; and storing the operation parameter.

The method may further include: transmitting the operation parameter to the SAM; and transmitting a transmission result of the operation parameter to the management server.

In accordance with still another embodiment of the present disclosure, a method of operating a management server includes: receiving a SAM authentication request for authenticating a SAM from a terminal; checking a state of the SAM in response to the SAM authentication request; and transmitting authentication information on the SAM to the terminal based on a result of checking the state of the SAM.

Checking the state of the SAM may include checking the state of the SAM using identification information of the SAM.

Transmitting the authentication information on the SAM may include transmitting the authentication information on the SAM to the terminal when it is determined that the SAM is in an authorized use state.

The method may further include announcing access to an abnormal SAM when it is determined that the SAM is in an unauthorized use state.

The method may further include: registering an operation parameter indicating a permissible range for operation of the SAM; and transmitting the operation parameter to the terminal.

In accordance with further still another embodiment of the present disclosure, a SAM includes: at least one storage circuit configured to store an operation parameter transmitted via a terminal from a management server, the operation parameter including a registered value indicating a permissible range for operation of the SAM, and have stored therein instructions; and a processor configured to execute the instructions. When the processor executes the instructions, the processor may perform a method including: receiving an authentication request for providing a card-related service from the terminal when a corresponding card is coupled to the terminal; determining whether the SAM is within the permissible range for operation in response to the authentication request; and transmitting, through a transmitter, information on a determination result to the terminal.

Determining whether the SAM is within the permissible range may include: decreasing a current value of the operation parameter in response to the authentication request; and determining whether the SAM is within the permissible range for operation using the changed current value of the operation parameter. Transmitting the information on the determination result may include: transmitting a result of authenticating the SAM to the terminal when the decreased value of the operation parameter is larger than a first value; and transmitting a SAM authentication request for authenticating the SAM to the terminal when the decreased value of the operation parameter is smaller than or equal to the first value.

Determining whether the SAM is within the permissible range may include: increasing a counter value in response to the authentication request; and determining whether the SAM is within the permissible range for operation using the counter value. Transmitting the information on the determination result may include: transmitting a result of authenticating the SAM to the terminal when the increased counter value is smaller than the registered value of the operation parameter; and transmitting a SAM authentication request for authenticating the SAM to the terminal when the increased counter value is equal to or larger than the registered value of the operation parameter.

The method may further include updating the current value of the operation parameter using authentication information received via the terminal from the management server as a response to the SAM authentication request, the authentication information being transmitted according to a result of checking a state of the SAM in the management server.

In accordance with further still another embodiment of the present disclosure, a terminal includes: a memory having stored therein instructions; and a processor configured to execute the instructions. When the processor executes the instructions, the processor performs a method including: transmitting, to a SAM, an authentication request for providing a card-related service when a corresponding card is coupled to the terminal; determining whether to provide the card-related service or stop operation, according to information which is received from the SAM as a response to the authentication request; transmitting, through a transmitter, a SAM authentication request for authenticating the SAM to the management server when an operation of the terminal is stopped according to a determination result; and transmitting, through the transmitter, authentication information received from the management server as a response to the SAM authentication request, to the SAM.

The method may further include: stopping the operation of the terminal when the information received from the SAM is the SAM authentication request; and providing the card-related service when the information received from the SAM is a result of authenticating the SAM.

In accordance with further still another embodiment of the present disclosure, a management server includes: a memory having stored therein instructions; and a processor configured to execute the instructions. When the processor executes the instruction, the processor performs a method including: receiving a SAM authentication request for authenticating a SAM from a terminal; checking a state of the SAM in response to the SAM authentication request; transmitting, through a transmitter, authentication information on the SAM to the terminal when it is determined that the SAM is in an authorized use state; and announcing access to an abnormal SAM when it is determined that the SAM is in an unauthorized use state.

In accordance with further still another embodiment of the present disclosure, a non-transitory computer readable medium has stored thereon a program that, when executed, causes a processor to perform a method, the method including: receiving an operation parameter via a terminal from a management server, the operation parameter including a registered value indicating a permissible range for operation of a SAM; receiving an authentication request for providing a card-related service from the terminal when a corresponding card is coupled to the terminal; determining whether the SAM is within the permissible range for operation in response to the authentication request; and transmitting information on a determination result to the terminal.

In accordance with further still another embodiment of the present disclosure, a non-transitory computer readable medium has stored thereon a program that, when executed, causes a processor to perform a method, the method including: transmitting, to a SAM, an authentication request for providing a card-related service when a corresponding card is coupled to a terminal; determining whether to provide the card-related service or stop operation, according to information which is received from the SAM as a response to the authentication request; transmitting a SAM authentication request for authenticating the SAM to a management server when an operation of the terminal is stopped according to a determination result; and transmitting, to the SAM, authentication information received from the management server as a response to the SAM authentication request.

In accordance with further still another embodiment of the present disclosure, a non-transitory computer readable medium has stored thereon a program that, when executed, causes a processor to perform a method, the method including: receiving a SAM authentication request for authenticating a SAM from a terminal; checking a state of the SAM in response to the SAM authentication request; and transmitting authentication information on the SAM to the terminal based on a checking result.

According to embodiments of the present disclosure, a permissible range for operation of a SAM may be set by an operation parameter. When the SAM is out of the permissible range for operation, the SAM may be set so that it cannot be used without authentication of a management server. Thus, unauthorized use, which may occur due to loss or robbery of the SAM, may be prevented, and a loss of money caused by the unauthorized use may be prevented.

DESCRIPTION OF SPECIFIC EMBODIMENTS

Hereafter, embodiments of the present disclosure will be described below in more detail with reference to the accompanying drawings. Throughout the drawings, like reference numerals refer to like parts.

The present disclosure describes several specific embodiments. However, embodiments are not limited by the description of specific embodiments provided herein, but may include modifications, equivalents or substitutes thereof.

The terms used herein to describe embodiments are used only for explaining the specific embodiments, and do not limit the embodiments. Terms of a singular form do not exclude the possibility of plural forms unless the contrary is indicated. In this specification, the meaning of “include/comprise” or “have” specifies a property, a figure, a step, a process, an element, a component, or a combination thereof which is described in the specification, but does not exclude one or more other properties, numbers, steps, processes, elements, components, or combinations thereof.

Terms used herein having technical or scientific meanings have the same meanings as the terms which are generally understood by those skilled in the art to which the present disclosure pertains, unless they are differently defined. Terms defined in a generally used dictionary may be interpreted to have meanings which coincide with contextual meanings in the related art. Unless clearly defined in this specification, terms should not be interpreted as having excessively formal or technical meaning.

In the accompanying drawings, like reference numerals refer to like elements and duplicative descriptions thereof may be omitted. In addition, detailed descriptions related to well-known functions or configurations may be omitted so that features of embodiments are not unnecessarily obscured.

FIG. 1illustrates a secure access system100according to an embodiment of the present disclosure. The secure access system100includes a management server110, a terminal130, and a secure access module (SAM)150. The management server110and the terminal130communicate with each other through a wired or wireless network50such as the Internet. The secure access system100may include one or more management servers110communicating with the terminal130. However, embodiments are not limited thereto. In other embodiments, the secure access system100includes one or more other components in addition to the above components.

The terminal130and the SAM150may be coupled through wired or wireless communications, and a plurality of SAMs150may be coupled to the terminal130. The management server110may also be referred to as a ‘management center’.

The management server110may set and register an operation parameter indicating a permissible range for operation of the SAM150. The management server110may transmit the operation parameter to the SAM150via the terminal130so as to set a minimum use standard of the SAM150.

The SAM150receives and stores the operation parameter. After that, the SAM150may receive an authentication request for providing a card-related service from the terminal130, and check whether the SAM150is out of the permissible range for operation or not based on information obtained by processing a corresponding card in response to the authentication request.

For example, the SAM150receiving the authentication request may change a current value of the operation parameter so as to operate only within the predetermined permissible range for operation (for example, a number of operations).

If the current value of the operation parameter of the SAM150is out of the permissible range for operation thereof (i.e., a permissible range of the operation parameter), the SAM150may send a request to authenticate the SAM150(hereinafter, referred to as “SAM authentication request”) to the management server110via the terminal130. The SAM150may receive authentication information which the management server110provides in response to the SAM authentication request, and update the current value of the operation parameter based on the authentication information. As a result, the SAM150can operate normally.

The terminal130may receive from a user a request for providing a card-related service, and send an authentication request to the SAM150. The request for providing the card-related service may be generated, for example, when the smart card170is coupled to the terminal130. For example, a user may couple the smart card170to the terminal130so as to transfer money to the smart card170or to settle an amount.

If the authentication is not successfully performed in the SAM150, the terminal130may stop providing a corresponding card-related service, and inquire of the management server110about whether a state of the SAM150coupled to the terminal130is normal, e.g., whether the SAM150is in an authorized use state.

If the terminal130receives authentication information from the management server110, the terminal130may resume providing the corresponding card-related service. The management server110may transmit the authentication information when the state of the SAM150coupled to the terminal130is normal.

The management server110may determine the state of the SAM150coupled to the terminal130. If it is determined that the state of the SAM150is abnormal, i.e., it is determined that the SAM150is in an unauthorized use state, the management server110may announce the access of the abnormal SAM and stop an operation of the corresponding SAM.

When identification information of the SAM150is not registered or corresponds to lost or stolen identification information, the management server110may determine that the state of the SAM150is abnormal.

If it is determined that the state of the SAM150is normal, the management server110may transmit authentication information to the SAM150via the terminal130.

The SAM150receiving the authentication information from the management server110may update the current value of the operation parameter based on the authentication information and resume its operation.

FIG. 2is a flowchart illustrating an operating method of a SAM according to an embodiment of the present disclosure.

Referring toFIG. 2, the SAM receives an operation parameter transmitted from a management server via a terminal at210, and stores the operation parameter at220. The operation parameter transmitted from the management server may include a registered value indicating a permissible range for operation of the SAM. In an embodiment, the permissible range for operation includes a predetermined number of operations.

After that, whenever a corresponding card is processed, the SAM receives an authentication request for providing a card-related service from the terminal at230, and then the SAM changes a current value of the operation parameter in response to the authentication request from the terminal at240. In an embodiment, the SAM may decrease the value of the operation parameter after providing the card-related service according to the authentication request from the terminal. In another embodiment, the SAM may increase a counter value after providing the card-related service according to the authentication request from the terminal. The counter value is separately generated from the operation parameter.

At250, the SAM transmits an authentication result to the terminal based on the current value of the operation parameter that is changed at240.

FIG. 3is a flowchart illustrating an operating method of a SAM according to another embodiment of the present disclosure.

Referring toFIG. 3, the SAM receives an operation parameter transmitted from a management server via a terminal at310, and stores the operation parameter at320.

The SAM receives an authentication request for providing a card-related service from the terminal at330.

The SAM decreases a current value of the operation parameter in response to the authentication request from the terminal at340.

The SAM determines whether the value of the operation parameter, decreased at340, is smaller than or equal to a first value, at350.

If it is determined at350that the value of the operation parameter is larger than the first value, the SAM transmits an authentication result to the terminal at390. The first value may be set to ‘0’.

If it is determined at350that the value of the operation parameter is smaller than or equal to the first value, the SAM transmits a SAM authentication request to the terminal at360.

At370, the SAM receives authentication information which is transmitted from the management server via the terminal. The management server checks a state of the SAM and generates the authentication information, in response to the SAM authentication request transmitted at360.

At step S380, the SAM updates the current value of the operation parameter based on the authentication information from the management server.

The authentication information may be transmitted from the management server according to a result obtained by checking a state of the SAM. The authentication information may include information indicating whether the corresponding SAM is normal or abnormal and/or a new value of the operation parameter for the corresponding SAM.

The SAM receiving the authentication information may update the current value of the operation parameter with a previously stored registered value of the operation parameter, or update the current value of the operation parameter with a new value of the operation parameter that is included in the authentication information transmitted from the management server.

FIG. 4is a flowchart illustrating an operating method of a terminal according to an embodiment of the present disclosure.

Referring toFIG. 4, the terminal receives an operation parameter indicating a permissible range for operation of a SAM from a management server at405, and stores the operation parameter at410.

The terminal transmits the operation parameter to the SAM at415, and transmits a transmission result of the operation parameter to the management server at420.

The terminal receives from a user a request for providing a card-related service at425.

The terminal receiving the request from the user at425sends an authentication request to the SAM at430.

At435, the terminal receives information from the SAM as a response to the authentication request at430. The information received from the SAM may include a SAM authentication request or an authentication result of the SAM.

The terminal may receive the authentication result of the SAM from the SAM when the SAM is available, that is, when the SAM is within the permissible range for operation.

The terminal may receive the SAM authentication request from the SAM when the SAM is not available, that is, when the SAM is out of the permissible range for operation.

At440, the terminal determines whether to provide a card-related service or stop operation according to the information received at435.

At445, the terminal requests the management server for authenticating the SAM according to a determination result at440.

The terminal receives authentication information from the management server at450, and transmits the received authentication information to the SAM at455. The management server checks a state of the SAM and generates the authentication information, in response to the request at445.

FIG. 5is a flowchart illustrating an operating method of a terminal according to another embodiment of the present disclosure.

Referring toFIG. 5, the terminal receives from a user a request to provide a card-related service at510.

The terminal receiving the request at510makes an authentication request to a SAM at520.

At530, the terminal receives information from the SAM as a response to the authentication request at520. The information received from the SAM may include a SAM authentication request or an authentication result of the SAM.

At540, the terminal determines whether the information received at530is the SAM authentication request.

If it is determined at540that the received information is not the SAM authentication request, that is, if it is determined that the received information is the authentication result of the SAM, the terminal transmits the authentication result to a management server at590.

On the other hand, if it is determined at540that the received information is the SAM authentication request, the terminal determines to stop operation thereof at550.

According to a determination result of550, the terminal transmits the SAM authentication request to the management server at560.

At570, the terminal receives authentication information from the management server. The management server checks a state of the SAM and generates the authentication information, in response to the SAM authentication request.

The terminal transmits the authentication information received at570to the SAM at580.

FIG. 6is a flowchart illustrating an operating method of a management server according to an embodiment of the present disclosure.

Referring toFIG. 6, the management server receives a SAM authentication request from a terminal at610.

At620, the management server checks a state of the SAM in response to the SAM authentication request received at610. In an embodiment, the management server may check the state of the SAM using identification information of the SAM.

The management server determines whether the SAM is normal or not at630.

If it is determined at630that the SAM is normal, the management server transmits authentication information on the SAM to the terminal at640.

On the other hand, if it is determined at630that the SAM is abnormal, the management server announces the access of the abnormal SAM at650.

In addition to the steps illustrated inFIG. 6, a method in accordance with an embodiment may further include registering an operation parameter indicating a permissible range for operation of the SAM and transmitting the operation parameter to the terminal.

FIG. 7illustrates a method for setting an operation parameter of a SAM in a secure access system according to an embodiment of the present disclosure.

Referring toFIG. 7, the secure access system includes a management server701, a terminal703, and a SAM705.

The management server701sets and registers an operation parameter for the SAM705at710. The operation parameter indicates a permissible range for operation of the SAM705. In an embodiment, the permissible range for operation includes a permissible number of operations. The management server701may store the operation parameter to correspond to the SAM705.

The management server701transmits the operation parameter to the terminal703at720.

The terminal703stores the operation parameter received from the management server701, and then transmits the operation parameter to the SAM705at730.

The SAM705stores the operation parameter received from the terminal703, and applies a registered value of the operation parameter thereto at740. The registered value of the operation parameter is determined when the management server701registers the operation parameter at710.

After transmitting the operation parameter to the SAM705, the terminal703transmits a transmission result of the operation parameter to the SAM705to the management server701at750.

At760, a result of applying the operation parameter is transmitted to the management server701via the terminal703.

FIG. 7shows that the transmission result of the operation parameter and the result of applying the operation parameter are separately transmitted to the management server701. However, in another embodiment, the terminal703transmits the transmission result of the operation parameter together with the result of applying the operation parameter.

The management server701receiving the result of applying the operation parameter from the terminal703stores the result of applying the operation parameter at770.

FIG. 8illustrates operations performed among a management server, a terminal, and a SAM in a secure access system according to an embodiment of the present disclosure.

Referring toFIG. 8, the secure access system includes a management server801, a terminal802, and a SAM803.

When a request for providing a card-related service is received from a user as a corresponding card is coupled to the terminal802, the terminal802, in attempting to process a card-related service for the corresponding card, makes an authentication request to the SAM803at810.

The SAM803receiving the authentication request for providing the card-related service from the terminal802determines whether the SAM802is out of a permissible range for operation thereof, at815.

A method for checking whether the SAM803is out of the permissible range for operation may be performed as follows.

The SAM803may decrease a current value of the operation parameter by ‘1’ in response to the authentication request from the terminal802, and determine whether the decreased value of the operation parameter is larger than ‘0’.

If the decreased value of the operation parameter is larger than ‘0’, the SAM803may determine that the SAM803is within the permissible range for operation, i.e., that the SAM803is available. On the other hand, if the decreased value of the operation parameter is smaller than or equal to ‘0’, the SAM803may determine that the SAM803is out of the permissible range for operation, i.e., that the SAM803is not available.

In another embodiment, the SAM803may increase a counter value, which is separately generated from the operation parameter, in response to the authentication request from the terminal802, and compare the increased counter value with a registered value of the operation parameter so as to check whether the counter value is out of the permissible range for operation. The registered value of the operation parameter is determined when the management server801registers the operation parameter for the SAM803. For example, if the registered value of the operation parameter is ‘10’ and the increased counter value is equal to or larger than ‘10’, the SAM803may determine that the SAM803is out of the permissible range for operation. On the other hand, if the registered value of the operation parameter is ‘10’ and the increased counter value is smaller than ‘10’, the SAM803may determine that the SAM803is within the permissible range for operation.

If it is determined at815that the SAM803is within the permissible range for operation, the SAM803transmits an authentication result to the terminal802, at820. The terminal802receiving the authentication result from the SAM803may provide a card-related service for the corresponding card. The card-related service may include transferring money to the card or reducing the amount of money on the card.

If it is determined at815that the SAM803is out of the permissible range for operation, the SAM803transmits a SAM authentication request to the terminal802at825.

The terminal802receiving the SAM authentication request from the SAM803stops operation at830, and requests the management server801to authenticate the SAM803at835.

In response to the SAM authentication request, the management server801checks a state of the SAM803at840. At840, the management server801may check the state of the SAM803using identification information of the SAM803. In an embodiment, if the identification information of the SAM803is not registered in the management server801or corresponds to lost or stolen identification information, the management server801determines that the state of the SAM803is abnormal.

If it is determined at840that the state of the SAM803is abnormal, the management server801announces the access to the abnormal SAM at860. In an embodiment, if it is determined at840that the state of the SAM803is abnormal, the management server801transmits an operation parameter having ‘0’ to the terminal802. As a result, the SAM803is set not to operate, in response to the operation parameter having ‘0’.

If it is determined at840that the state of the SAM803is normal, the management server801transmits authentication information on the SAM803to the terminal802at845.

The terminal802receiving the authentication information from the management server801transmits the authentication information to the SAM803at850.

The SAM803receiving the authentication information from the terminal802updates the current value of the operation parameter based on the authentication information at855.

FIG. 9illustrates a SAM according to an embodiment of the present disclosure. The SAM900includes a storage circuit910, a communicator920, and a processor930. However, embodiments are not limited thereto. In other embodiments, the SAM900includes one or more other components, such as a memory, in addition to the above components. In an embodiment, the communicator920may include a receiver and/or a receiver.

The storage circuit910may store an operation parameter transmitted from a management server through a terminal. The operation parameter from the management server may include a registered value indicating a permissible range for operation of the SAM900.

The communicator920may receive an authentication request for providing a card-related service from the terminal when a user couples a corresponding card to the terminal.

The processor930may change a current value of the operation parameter in response to the authentication request provided through the communicator920, determine whether the SAM is within the permissible range for operation, and transmit a determination result to the terminal.

For example, if the changed value of the operation parameter is larger than a first value (for example, ‘0’), the processor930may determine that the SAM900is within the permissible range for operation, and transmit the authentication result to the terminal. On the other hand, if the changed value of the operation parameter is smaller than or equal to the first value, the processor930may determine that the SAM900is out of the permissible range for operation, and transmit a SAM authentication request to the terminal.

In another embodiment, the processor930may increase a counter value, which is separately generated from the operation parameter, in response to the authentication request provided through the communicator920, compare the increased counter value to the registered value of the operation parameter, and transmit the authentication result to the terminal.

For example, when the registered value of the operation parameter is ‘10’ and the increased counter value is equal to ‘10’, the processor930may transmit a SAM authentication request to the terminal. On the other hand, when the increased counter value is smaller than ‘10’, the processor930may transmit the authentication result of the SAM900to the terminal.

Furthermore, the processor930may update the current value of the operation parameter using authentication information transmitted from the management server through the terminal, the authentication information being provided to the SAM900as a response to the SAM authentication request. The authentication information may include information which is determined according to a result of checking a state of the SAM900in the management server.

FIG. 10illustrates a terminal according to an embodiment of the present disclosure. The terminal1000includes a communicator1010and a processor1020. However, embodiments are not limited thereto. In other embodiments, the terminal1000includes one or more other components, such as a memory, in addition to the above components. In an embodiment, the communicator1010may include a receiver and/or a receiver.

The communicator1010may receive a request for providing a card-related service from a user as the user couples a corresponding card to the terminal1000, and make an authentication request to a SAM in response to the request for providing the card-related service.

The processor1020may determine whether to provide the card-related service or stop operation based on information which is received from the SAM as a response to the authentication request. The information received from the SAM may include a SAM authentication request for authenticating the SAM or an authentication result of the SAM.

If the information received from the SAM is the SAM authentication request, the processor1020may determine whether to stop the operation of the terminal. If the information received from the SAM is the authentication result of the SAM, the processor1020may provide the card-related service.

The communicator1010may provide the SAM authentication request to a management server when its operation is stopped. The communicator1010may transmit authentication information, which is received from the management server as a response to the SAM authentication request, to the SAM.

FIG. 11illustrates a management server according to an embodiment of the present disclosure. The management server1100includes a communicator1110and a processor1120. However, embodiments are not limited thereto. In other embodiments, the management server1100includes one or more other components, such as a memory, in addition to the above components. In an embodiment, the communicator1110may include a receiver and/or a receiver.

The communicator1110may receive a SAM authentication request from a terminal.

The processor1120may check a state of a SAM in response to the SAM authentication request received through the communicator1110. If it is determined that the state of the SAM is normal, the processor1120may transmit authentication information on the SAM to the terminal. If it is determined that the state of the SAM is abnormal, the processor1120may announce the access to the abnormal SAM.

In accordance with an embodiment of the present disclosure, the above methods may be implemented in the form of program commands which can be executed by various computer devices, and the program commands may be written in a non-transitory computer readable medium. The computer readable medium may store program command(s), data file, a data structure, or a combination thereof. Examples of computer readable media may include magnetic media such as a hard disk, a floppy disk and a magnetic tape, optical media such as CD-ROM and DVD, magneto-optical media such as a floptical disk, and hardware devices, such as ROM, RAM and flash memory, configured to store and execute program command(s). Examples of the program commands may include a machine language code created by a compiler and a high-level language code executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules to perform embodiments of the present disclosure.

While the present disclosure has described specific embodiments, the present invention is not limited to the above-described embodiments, and it will be apparent to those skilled in the art that various changes and modifications may be made from the embodiments.

Thus, the scope of the present invention is not limited to the above-described embodiments, but may be defined by the following claims and equivalents to the claims.