Disclosed is a method for access authentication. The method includes: receiving profile information of a visitor through a server, and generating a visitor code and transmitting the same to a visitor terminal, and generating a random code based on a valid visitor code, and receiving a decoding result based on decoding the random code and the visitor code by the visit terminal, and predetermining an access authority for the visitor for a predetermined time as the decoding result is successfully matched.