The electronic device includes: a sensor unit configured to detect biometric information, a security module to extract a genuine score from the detected biometric information and generate a biometric authentication model, and perform user authentication based on feature points acquired from the detected biometric information and the biometric authentication, and a controller to control an operation of the electronic device based on a result of the user authentication, wherein the security module determines whether or not the biometric information used for the user authentication is biometric information acquired from a genuine user when the user authentication fails, and updates the biometric authentication model based on the genuine score extracted from the acquired biometric information. The present invention may provide an electronic device performing complex biometric authentication by using TOT (Internet of Things).