A control method for preventing an unnecessary control command from being transmitted to a reception Internet of things (IoT) device in an IoT system, and an electronic device thereof are provided. The control method includes receiving first access control information generated from an external electronic device and storing the first access control information, in response to occurrence of an event for transmitting a first control command to the external electronic device, determining whether the first control command has an authority to control the external electronic device using the first access control information, and, in response to a determination that the first control command has the authority to control the external electronic device, transmitting the first control command to the external electronic device.