A method for setting up security of a controlled device in a control point in a home network, comprising the steps of: generating a first self-assigned certificate and transmitting the first self-assigned certificate to the controlled device; receiving a second self-assigned certificate of the controlled device from the controlled device; encrypting credential generation information used for generating a credential by using the received second self-assigned certificate of the controlled device and transmitting the encrypted credential generation information to the controlled device; establishing a security channel with generating a credential by using the credential generation information and a predefined initial encryption key, encrypting data by using the credential and transmitting the encrypted data to the controlled device, the method further comprising the steps of: transitioning to administration mode and acquiring an administrator authority of a new controlled device, upon discovery of the new controlled device in the home network; determining whether there exists at least one controlled device for which credentials are set, among controlled devices of the home network; acquiring a credential setting list from the at least one controlled device for which credentials are set and acquiring an access control list from the new controlled device, if there exists the at least one controlled device for which credentials are set; changing the credential setting list and the access control list, upon request of a user; transmitting the changed access control list to the new controlled device and synchronizing a credential setting with the at least one controlled device for which credentials are set by using the changed credential setting list. generating a first self-assigned certificate and transmitting the first self-assigned certificate to the controlled device; receiving a second self-assigned certificate of the controlled device from the controlled device; encrypting credential generation information used for generating a credential by using the received second self-assigned certificate of the controlled device and transmitting the encrypted credential generation information to the controlled device; establishing a security channel with generating a credential by using the credential generation information and a predefined initial encryption key, encrypting data by using the credential and transmitting the encrypted data to the controlled device, the method further comprising the steps of: transitioning to administration mode and acquiring an administrator authority of a new controlled device, upon discovery of the new controlled device in the home network; determining whether there exists at least one controlled device for which credentials are set, among controlled devices of the home network; acquiring a credential setting list from the at least one controlled device for which credentials are set and acquiring an access control list from the new controlled device, if there exists the at least one controlled device for which credentials are set; changing the credential setting list and the access control list, upon request of a user; transmitting the changed access control list to the new controlled device and synchronizing a credential setting with the at least one controlled device for which credentials are set by using the changed credential setting list. transitioning to administration mode and acquiring an administrator authority of a new controlled device, upon discovery of the new controlled device in the home network; determining whether there exists at least one controlled device for which credentials are set, among controlled devices of the home network; acquiring a credential setting list from the at least one controlled device for which credentials are set and acquiring an access control list from the new controlled device, if there exists the at least one controlled device for which credentials are set; changing the credential setting list and the access control list, upon request of a user; transmitting the changed access control list to the new controlled device and synchronizing a credential setting with the at least one controlled device for which credentials are set by using the changed credential setting list.