A device authentication method comprising: connecting to a device through a network; receiving, from the device, a certificate of the device comprising device binding information about the device, the device binding information comprising first device information associated with the device binding information; transmitting, to the device, a request message requesting second device information about the device when a management device does not store the second device information in a storage of the management device; receiving, from the device, the second device information in response to the request message; determining, by the management device, whether the device binding information included in the certificate is generated based on the second device information; determining, by the management device, whether the certificate is valid by comparing a first hash data related to pre-stored certificate information with a second hash data related to the certificate; and establishing a protected communication session with the device in response to the certificate being determined to be valid, wherein if at least a portion of the second device information is included in the device binding information, the device binding information is generated based on the second device information, wherein if the first hash data matches the second hash data, the certificate is valid, and wherein the first device information contains at least a part of a medium access control, MAC, address of a communication interface included in the device, hardware information that is determined during the manufacture or assembly of the device and information about at least a part of components of the device selected from a controller, a storage, a lens or an image sensor and wherein the first device information and the second device information represent identification information about the device for uniquely identifying the device from other devices. connecting to a device through a network; receiving, from the device, a certificate of the device comprising device binding information about the device, the device binding information comprising first device information associated with the device binding information; transmitting, to the device, a request message requesting second device information about the device when a management device does not store the second device information in a storage of the management device; receiving, from the device, the second device information in response to the request message; determining, by the management device, whether the device binding information included in the certificate is generated based on the second device information; determining, by the management device, whether the certificate is valid by comparing a first hash data related to pre-stored certificate information with a second hash data related to the certificate; and establishing a protected communication session with the device in response to the certificate being determined to be valid, wherein if at least a portion of the second device information is included in the device binding information, the device binding information is generated based on the second device information, wherein if the first hash data matches the second hash data, the certificate is valid, and wherein the first device information contains at least a part of a medium access control, MAC, address of a communication interface included in the device, hardware information that is determined during the manufacture or assembly of the device and information about at least a part of components of the device selected from a controller, a storage, a lens or an image sensor and wherein the first device information and the second device information represent identification information about the device for uniquely identifying the device from other devices.