An electronic device according to an embodiment includes a first biometric sensor to detect first biometric information, a second biometric sensor to detect second biometric information, a security module to normalize a first decision score for the first biometric information and a second decision score for the second biometric information, generate a decision function model for combined matching of the normalized first and second decision scores, set a threshold score corresponding to a sensitivity level in the decision function model, and perform user authentication for the first and second biometric information based on the decision function model to which the threshold score is applied, and a controller configured to control an operation of the electronic device based on a result of the user authentication performed by the security module. According to the present invention, the electronic device may perform user authentication by an Internet of Things (IoT).