A broadcast receiver comprising: a communicator configured to receive broadcast data including metadata associated with an application from a broadcast provider; characterized in that the metadata comprises authorized server identification information for identifying at least one authorized server authorized to communicate information regarding the application, and the broadcast receiver further comprises: a controller configured to: generate a metadata hash by applying a hashing algorithm to the received metadata, control the communicator to transmit, to an authentication server, an authentication request including the generated metadata hash and not including the metadata, control the communicator to receive, from the authentication server, a comparison result between a reference hash stored at the authentication server and the metadata hash, authenticate the metadata based on the comparison result, launch the application based on a result of the authentication, and prevent the application from communicating with an unauthorized server based on the authorization server identification information, wherein the reference hash is generated by the broadcast provider by applying the hashing algorithm to the metadata, and the generated reference hash is transmitted to the authentication server and stored at the authentication server. a communicator configured to receive broadcast data including metadata associated with an application from a broadcast provider; characterized in that the metadata comprises authorized server identification information for identifying at least one authorized server authorized to communicate information regarding the application, and the broadcast receiver further comprises: a controller configured to: generate a metadata hash by applying a hashing algorithm to the received metadata, control the communicator to transmit, to an authentication server, an authentication request including the generated metadata hash and not including the metadata, control the communicator to receive, from the authentication server, a comparison result between a reference hash stored at the authentication server and the metadata hash, authenticate the metadata based on the comparison result, launch the application based on a result of the authentication, and prevent the application from communicating with an unauthorized server based on the authorization server identification information, wherein the reference hash is generated by the broadcast provider by applying the hashing algorithm to the metadata, and the generated reference hash is transmitted to the authentication server and stored at the authentication server. a controller configured to: generate a metadata hash by applying a hashing algorithm to the received metadata, control the communicator to transmit, to an authentication server, an authentication request including the generated metadata hash and not including the metadata, control the communicator to receive, from the authentication server, a comparison result between a reference hash stored at the authentication server and the metadata hash, authenticate the metadata based on the comparison result, launch the application based on a result of the authentication, and prevent the application from communicating with an unauthorized server based on the authorization server identification information, generate a metadata hash by applying a hashing algorithm to the received metadata, control the communicator to transmit, to an authentication server, an authentication request including the generated metadata hash and not including the metadata, control the communicator to receive, from the authentication server, a comparison result between a reference hash stored at the authentication server and the metadata hash, authenticate the metadata based on the comparison result, launch the application based on a result of the authentication, and prevent the application from communicating with an unauthorized server based on the authorization server identification information, wherein the reference hash is generated by the broadcast provider by applying the hashing algorithm to the metadata, and the generated reference hash is transmitted to the authentication server and stored at the authentication server.