Method for controlling user accessto a medical system, the medical system including a medical device and remote controller, the method including: a) providing the medical device as extracorporeal body-wearable device including an insulin infusion pump and/or a continuous glucose measurement device, the medical device further comprising a medical device communication unit; b) providing the remote controller as separate device from the medical device, the remote controller comprising a remote controller user interface (24a, 24b) and a remote controller communication unit; the remote controller being designed for entering, via the remote controller user interface (24a, 25b), at least one medical device command for execution by the medical device; wherein the medical device communication unit and the remote controller communication unit are adapted for data exchange; c) controlling the remote controller to be in a locked state, wherein, in the locked state, entering of the at least one medical device command is disabled; the method further including, in the locked state, d) requesting the entry of an identification code via the remote controller user interface (24a, 24b) and switching, upon correct entry of the identification code, the remote controller into an unlocked state, wherein, in the unlocked state, entering of the at least one medical device command is enabled; and alternatively, receiving a user input indicative of the identification code being unavailable and e) determining by the medical system, whether a safety condition is met, and executing, if the safety condition is met, a further command, wherein determining whether the safety condition is met is associated with determining whether the medical system is under control of the authorized user, and wherein the further command provides an alternative route for allowing fully or partly controlling the medical system without the identification code being available, wherein a further identification code is provided on or by the medical device, wherein the remote controller includes a remote controller sensor, the remote controller sensor being an optical sensor, and wherein determining whether the safety condition is met includes determining whether the further identification code is recognized by the remote controller sensor. a) providing the medical device as extracorporeal body-wearable device including an insulin infusion pump and/or a continuous glucose measurement device, the medical device further comprising a medical device communication unit; b) providing the remote controller as separate device from the medical device, the remote controller comprising a remote controller user interface (24a, 24b) and a remote controller communication unit; the remote controller being designed for entering, via the remote controller user interface (24a, 25b), at least one medical device command for execution by the medical device; wherein the medical device communication unit and the remote controller communication unit are adapted for data exchange; c) controlling the remote controller to be in a locked state, wherein, in the locked state, entering of the at least one medical device command is disabled; the method further including, in the locked state, d) requesting the entry of an identification code via the remote controller user interface (24a, 24b) and switching, upon correct entry of the identification code, the remote controller into an unlocked state, wherein, in the unlocked state, entering of the at least one medical device command is enabled; and alternatively, receiving a user input indicative of the identification code being unavailable and e) determining by the medical system, whether a safety condition is met, and executing, if the safety condition is met, a further command, wherein determining whether the safety condition is met is associated with determining whether the medical system is under control of the authorized user, and wherein the further command provides an alternative route for allowing fully or partly controlling the medical system without the identification code being available, wherein a further identification code is provided on or by the medical device, wherein the remote controller includes a remote controller sensor, the remote controller sensor being an optical sensor, and wherein determining whether the safety condition is met includes determining whether the further identification code is recognized by the remote controller sensor.