A terminal comprising: • a communication circuit; • a processor operatively connected to the communication circuit; and • a memory operatively connected to the processor and configured to store a target application and an access control application, • wherein the memory stores instructions that cause, when executed by the processor, the terminal to: • detect a network access event for a destination network of the target application through the access control application; • determine whether data flow information corresponding to identification information of the target application and the destination network and generated from external server is present, through the access control application; • determine whether authentication of data flow is valid based on a authentication information included in the data flow information, through the access control application; • when ∘ a valid data flow is not present, or ∘ the authentication of a data flow is not valid, or ∘ an authorized tunnel is not present, • perform a network connection request to the external server and • receive the data flow containing authentication information transmitted from the external server, and process a data packet of the target application, when the data flow information does not exist or the authentication of the data flow is invalid; and • transmit a data packet of the target application, when the data flow information exists and authentication of the data flow is valid; and • the authentication information includes information for performing an authentication request including authentication method or authentication target. • a communication circuit; • a processor operatively connected to the communication circuit; and • a memory operatively connected to the processor and configured to store a target application and an access control application, • wherein the memory stores instructions that cause, when executed by the processor, the terminal to: • detect a network access event for a destination network of the target application through the access control application; • determine whether data flow information corresponding to identification information of the target application and the destination network and generated from external server is present, through the access control application; • determine whether authentication of data flow is valid based on a authentication information included in the data flow information, through the access control application; • when ∘ a valid data flow is not present, or ∘ the authentication of a data flow is not valid, or ∘ an authorized tunnel is not present, • perform a network connection request to the external server and • receive the data flow containing authentication information transmitted from the external server, and process a data packet of the target application, when the data flow information does not exist or the authentication of the data flow is invalid; and • transmit a data packet of the target application, when the data flow information exists and authentication of the data flow is valid; and • the authentication information includes information for performing an authentication request including authentication method or authentication target. • detect a network access event for a destination network of the target application through the access control application; • determine whether data flow information corresponding to identification information of the target application and the destination network and generated from external server is present, through the access control application; • determine whether authentication of data flow is valid based on a authentication information included in the data flow information, through the access control application; • when ∘ a valid data flow is not present, or ∘ the authentication of a data flow is not valid, or ∘ an authorized tunnel is not present, ∘ a valid data flow is not present, or ∘ the authentication of a data flow is not valid, or ∘ an authorized tunnel is not present, • perform a network connection request to the external server and • receive the data flow containing authentication information transmitted from the external server, and process a data packet of the target application, when the data flow information does not exist or the authentication of the data flow is invalid; and • receive the data flow containing authentication information transmitted from the external server, and process a data packet of the target application, when the data flow information does not exist or the authentication of the data flow is invalid; and • transmit a data packet of the target application, when the data flow information exists and authentication of the data flow is valid; and • the authentication information includes information for performing an authentication request including authentication method or authentication target.