An electronic device comprising: a communication unit ; a memory storing programs and data for performing digital key provisioning; and a processor configured to, by executing the programs stored in the memory, perform device authentication on a target device via short-range communication with the target device, obtain information for user identification related to the target device, receive, from the target device, a service access right request, transmit, to a service manager server, a service access right identification request for the target device including the information for user identification, receive, from the service manager server, a service activation request including an access token, store the access token for a digital key provision of the target device, change a digital key generation service status to activated based on the access token, transmit, to the service manager server, a service activation response, receive, from the service manager server, a service access right identification response for the target device including an encrypted access token with a public key of the target device by the service manager sever, transmit, to the target device, a service access right response including the encrypted access token based on the service access right identification response, receive, from the target device, a digital key generation request including a digital key configuration and a hashed token, and in case that the status indicates that the digital key generation service is activated, generate a a digital key for the target device based on the digital key generation request. a communication unit ; a memory storing programs and data for performing digital key provisioning; and a processor configured to, by executing the programs stored in the memory, perform device authentication on a target device via short-range communication with the target device, obtain information for user identification related to the target device, receive, from the target device, a service access right request, transmit, to a service manager server, a service access right identification request for the target device including the information for user identification, receive, from the service manager server, a service activation request including an access token, store the access token for a digital key provision of the target device, change a digital key generation service status to activated based on the access token, transmit, to the service manager server, a service activation response, receive, from the service manager server, a service access right identification response for the target device including an encrypted access token with a public key of the target device by the service manager sever, transmit, to the target device, a service access right response including the encrypted access token based on the service access right identification response, receive, from the target device, a digital key generation request including a digital key configuration and a hashed token, and in case that the status indicates that the digital key generation service is activated, generate a a digital key for the target device based on the digital key generation request. <EOS>