Abstract: A method and system for remotely controlling access to a value unit. The system includes a central control means which includes control data relating to the control of access to one or more value units by associated access controllers. The system includes remote communication means between the central control means and operator control units, and between those units and access controllers. The control data includes an identity structure for the access controller that defines its permissible behaviour, and access control data defining operator control over the access controller. The access controller remains inaccessible until its identity structure is loaded and implemented. The identity structure may be encrypted so that only the central control means and the access controller can decipher it, thus creating a virtual configuration link between the central control means and the access controller via the operator control unit. The operator control unit only has access to the access control data.