A system with at least one access control device (1) exhibiting an access authorization reader (4) for data carrier (8) containing access authorization and identification data, a database (9) and a camera (7). Once a valid access authorization is read, the identification data from the data carrier in question (8) and a digitized image of the user taken by the camera (7) are stored in the database. The stored image of the user of the particular data carrier can be transferred from the database (9) to terminals (11 to 13), in order to compare it with a image of the user previously taken and stored in the database (9). If the images of the user do not match, further access is denied for that particular data carrier (8).