An electronic device comprising: a memory configured to store a plurality of execution environments including a first execution environment and a second execution environment, wherein a security level of the first execution environment is higher than that of the second execution environment; and a processor configured to: generate a first authentication value, using a first application executed in the first execution environment, transmit the first authentication value from the first application through the second execution environment to a second application executed in the first execution environment, encrypt, using the second application, a second authentication value and user authentication success-or-failure information into a result of authentication, transmit the encrypted result of authentication, from the second application through the second execution environment to the first application, detect, using the first application, the second authentication value and the user authentication success-or-failure information by decrypting the result of authentication, and perform payment at the first application in the first execution environment, when the detected second authentication value corresponds to the first authentication value and the authentication of the user has succeeded, wherein, when the first authentication value and the detected second authentication value do not correspond to each other, the processor does not perform payment. a memory configured to store a plurality of execution environments including a first execution environment and a second execution environment, wherein a security level of the first execution environment is higher than that of the second execution environment; and a processor configured to: generate a first authentication value, using a first application executed in the first execution environment, transmit the first authentication value from the first application through the second execution environment to a second application executed in the first execution environment, encrypt, using the second application, a second authentication value and user authentication success-or-failure information into a result of authentication, transmit the encrypted result of authentication, from the second application through the second execution environment to the first application, detect, using the first application, the second authentication value and the user authentication success-or-failure information by decrypting the result of authentication, and perform payment at the first application in the first execution environment, when the detected second authentication value corresponds to the first authentication value and the authentication of the user has succeeded, wherein, when the first authentication value and the detected second authentication value do not correspond to each other, the processor does not perform payment. generate a first authentication value, using a first application executed in the first execution environment, transmit the first authentication value from the first application through the second execution environment to a second application executed in the first execution environment, encrypt, using the second application, a second authentication value and user authentication success-or-failure information into a result of authentication, transmit the encrypted result of authentication, from the second application through the second execution environment to the first application, detect, using the first application, the second authentication value and the user authentication success-or-failure information by decrypting the result of authentication, and perform payment at the first application in the first execution environment, when the detected second authentication value corresponds to the first authentication value and the authentication of the user has succeeded, wherein, when the first authentication value and the detected second authentication value do not correspond to each other, the processor does not perform payment.