Secure access system and operating method thereof

1. An operating method of a secure access module (SAM), the operating method comprising:

storing an operation parameter transmitted via a terminal from a management server, the operation parameter including a registered value indicating a permissible range for operation of the SAM;

receiving an authentication request for providing a card-related service from the terminal when a corresponding card is coupled to the terminal;

determining whether the SAM is within the permissible range for operation in response to the authentication request; and

transmitting information on a determination result to the terminal,

wherein the determining step comprises:

decreasing a current value of the operation parameter in response to the authentication request; and

determining whether the SAM is within the permissible range for operation using the changed current value of the operation parameter,

wherein transmitting the information on the determination result comprises:

transmitting a result of authenticating the SAM to the terminal when the decreased value of the operation parameter is larger than a first value; and

transmitting a SAM authentication request for authenticating the SAM to the terminal when the decreased value of the operation parameter is smaller than or equal to the first value,

wherein the method further comprises updating the current value of the operation parameter using authentication information transmitted via the terminal from the management server as a response to the SAM authentication request, the authentication information being transmitted according to a result of checking a state of the SAM in the management server, and at least one of the method steps is implemented by a hardware processor.

2. The operating method according to claim 1 ,

wherein the determining step comprises:

increasing a counter value in response to the authentication request; and

determining whether the SAM is within the permissible range for operation using the counter value, and

wherein transmitting the information on the determination result comprises:

transmitting a result of authenticating the SAM to the terminal when the increased counter value is smaller than the registered value of the operation parameter; and

transmitting a SAM authentication request for authenticating the SAM to the terminal when the increased counter value is larger than or equal to the registered value of the operation parameter.

3. A SAM comprising:

a storage circuit configured to store an operation parameter transmitted via a terminal from a management server, the operation parameter including a registered value indicating a permissible range for operation of the SAM;

a memory having stored therein instructions; and

a processor being controlled by the instructions and performing a method, the method comprising:

receiving an authentication request for providing a card-related service from the terminal when a corresponding card is coupled to the terminal;

determining whether the SAM is within the permissible range for operation in response to the authentication request; and

transmitting information on a determination result to the terminal,

wherein the determining step comprises:

decreasing a current value of the operation parameter in response to the authentication request; and

determining whether the SAM is within the permissible range for operation using the changed current value of the operation parameter, and

wherein transmitting the information on the determination result comprises:

transmitting a result of authenticating the SAM to the terminal when the decreased value of the operation parameter is larger than a first value; and

transmitting a SAM authentication request for authenticating the SAM to the terminal when the decreased value of the operation parameter is smaller than or equal to the first value, and

wherein the method further comprises updating the current value of the operation parameter using authentication information transmitted via the terminal from the management server as a response to the SAM authentication request, the authentication information being transmitted.

4. The SAM according to claim 3 ,

wherein the determining step comprises:

increasing a counter value in response to the authentication request; and

determining whether the SAM is within the permissible range for operation using the counter value, and

wherein transmitting the information on the determination result comprises:

transmitting a result of authenticating the SAM to the terminal when the increased counter value is smaller than the registered value of the operation parameter; and

transmitting a SAM authentication request for authenticating the SAM to the terminal when the increased counter value is equal to or larger than the registered value of the operation parameter.