An electronic device, comprising: a memory, and at least one processor, wherein the at least one processor is configured to: store, in the memory, a UE route selection policy, URSP, rule comprising identification information of at least one application, verification type for each of the at least one application, verification value for verifying each of the at least one application, and information for establishing a protocol data unit, PDU, session corresponding to the at least one application; identify that a verification type of a first application which has a first identification information is a signing key method, the first identification information corresponding to the signing key method in the URSP rule; based on identifying that the verification type of a first application is the signing key method, request a first signing key of the first application; obtain the first signing key of the first application from the first application, wherein the first application provides the first signing key of the first application in response to the request; based on the first signing key of the first application being identical to a second signing key of the URSP rule corresponding to the first identification information, identify that the first application is valid; establish a first PDU session using information for establishing the PDU session corresponding to the first application in the URSP rule, based on the first application being valid; and transmit or receive data associated with the first application using the first PDU session. a memory, and at least one processor, wherein the at least one processor is configured to: store, in the memory, a UE route selection policy, URSP, rule comprising identification information of at least one application, verification type for each of the at least one application, verification value for verifying each of the at least one application, and information for establishing a protocol data unit, PDU, session corresponding to the at least one application; identify that a verification type of a first application which has a first identification information is a signing key method, the first identification information corresponding to the signing key method in the URSP rule; based on identifying that the verification type of a first application is the signing key method, request a first signing key of the first application; obtain the first signing key of the first application from the first application, wherein the first application provides the first signing key of the first application in response to the request; based on the first signing key of the first application being identical to a second signing key of the URSP rule corresponding to the first identification information, identify that the first application is valid; establish a first PDU session using information for establishing the PDU session corresponding to the first application in the URSP rule, based on the first application being valid; and transmit or receive data associated with the first application using the first PDU session. store, in the memory, a UE route selection policy, URSP, rule comprising identification information of at least one application, verification type for each of the at least one application, verification value for verifying each of the at least one application, and information for establishing a protocol data unit, PDU, session corresponding to the at least one application; identify that a verification type of a first application which has a first identification information is a signing key method, the first identification information corresponding to the signing key method in the URSP rule; based on identifying that the verification type of a first application is the signing key method, request a first signing key of the first application; obtain the first signing key of the first application from the first application, wherein the first application provides the first signing key of the first application in response to the request; based on the first signing key of the first application being identical to a second signing key of the URSP rule corresponding to the first identification information, identify that the first application is valid; establish a first PDU session using information for establishing the PDU session corresponding to the first application in the URSP rule, based on the first application being valid; and transmit or receive data associated with the first application using the first PDU session.