A method for controlling a system including an electronic device , a first server , a second server , the method comprising: obtaining (S510), by the electronic device , first biometric information; obtaining (S520), by the electronic device , first encrypted data, in which the first biometric information is encrypted, by using the obtained first biometric information and a first encryption key, and transmitting (S530) the obtained first encrypted data to the first server ; obtaining (S540), by the first server , second encrypted data, in which the first encrypted data is encrypted, by using the first encrypted data received from the electronic device and a second encryption key, and first user identification information corresponding to the first biometric information, and transmitting (S550) same to the second server ; matching (S560), by the second server , the second encrypted data received from the first server and first user identification information corresponding to the first biometric information and storing same based on transmitting a request for confirming whether the first user identification information corresponds to the second encrypted data to a user terminal device corresponding to the first user identification information; obtaining (S570), by the second server , authentication information based on the matched second encrypted data and the first user identification information and transmitting (S580) same to the first server ; and registering (S590), by the first server , the authentication information about the first biometric information to indicate that second encrypted data and the first user identification are authenticated for a service. obtaining (S510), by the electronic device , first biometric information; obtaining (S520), by the electronic device , first encrypted data, in which the first biometric information is encrypted, by using the obtained first biometric information and a first encryption key, and transmitting (S530) the obtained first encrypted data to the first server ; obtaining (S540), by the first server , second encrypted data, in which the first encrypted data is encrypted, by using the first encrypted data received from the electronic device and a second encryption key, and first user identification information corresponding to the first biometric information, and transmitting (S550) same to the second server ; matching (S560), by the second server , the second encrypted data received from the first server and first user identification information corresponding to the first biometric information and storing same based on transmitting a request for confirming whether the first user identification information corresponds to the second encrypted data to a user terminal device corresponding to the first user identification information; obtaining (S570), by the second server , authentication information based on the matched second encrypted data and the first user identification information and transmitting (S580) same to the first server ; and registering (S590), by the first server , the authentication information about the first biometric information to indicate that second encrypted data and the first user identification are authenticated for a service. <EOS>