Control system for establishing a secure communication link for controlling at least one medical device, in particular a dialysis machine, with a control device remote from the medical device, comprising the following units: the at least one medical device, which is controlled via the remote control device, with - a client-side communication device (cK), which is confirmed to exchange data with a server-side communication device (sK) of the control device, and - an integrated circuit module (cMC) which is confirmed to implement a security protocol for establishing a secure communication connection to the control device, and wherein the security protocol exchanges identification messages for uniquely identifying the medical device and for uniquely identifying a respective control instance on the control device, wherein a respective control instance is intended for the dedicated control of a specific medical device; the control device, comprising at least one control instance, each assigned to control at least one medical device, with - a server-side communication device (sK) for communicating with the medical device; and - an integrated circuit module (cMC) which is confirmed to implement a security protocol for establishing a secure communication link for controlling the medical device, and wherein the security protocol exchanges identification messages for uniquely identifying the medical device and for uniquely identifying the respective control instance on the control device between the medical device and the control device, wherein the control device has a user interface for detecting control signals (s) for controlling the medical device and/or for outputting status data of the medical device, wherein the user interface is formed on a separate device outside the control device, which is in bidirectional data exchange with the control device, wherein the user interface can only communicate with the remote control device - in particular via the medical device - if a position sensor detects that the user interface is in a spatial proximity to the medical device; and whereby all of the units exchange data at least one network. the at least one medical device, which is controlled via the remote control device, with - a client-side communication device (cK), which is confirmed to exchange data with a server-side communication device (sK) of the control device, and - an integrated circuit module (cMC) which is confirmed to implement a security protocol for establishing a secure communication connection to the control device, and wherein the security protocol exchanges identification messages for uniquely identifying the medical device and for uniquely identifying a respective control instance on the control device, wherein a respective control instance is intended for the dedicated control of a specific medical device; - a client-side communication device (cK), which is confirmed to exchange data with a server-side communication device (sK) of the control device, and - an integrated circuit module (cMC) which is confirmed to implement a security protocol for establishing a secure communication connection to the control device, and wherein the security protocol exchanges identification messages for uniquely identifying the medical device and for uniquely identifying a respective control instance on the control device, wherein a respective control instance is intended for the dedicated control of a specific medical device; the control device, comprising at least one control instance, each assigned to control at least one medical device, with - a server-side communication device (sK) for communicating with the medical device; and - an integrated circuit module (cMC) which is confirmed to implement a security protocol for establishing a secure communication link for controlling the medical device, and wherein the security protocol exchanges identification messages for uniquely identifying the medical device and for uniquely identifying the respective control instance on the control device between the medical device and the control device, - a server-side communication device (sK) for communicating with the medical device; and - an integrated circuit module (cMC) which is confirmed to implement a security protocol for establishing a secure communication link for controlling the medical device, and wherein the security protocol exchanges identification messages for uniquely identifying the medical device and for uniquely identifying the respective control instance on the control device between the medical device and the control device, wherein the control device has a user interface for detecting control signals (s) for controlling the medical device and/or for outputting status data of the medical device, wherein the user interface is formed on a separate device outside the control device, which is in bidirectional data exchange with the control device, wherein the user interface can only communicate with the remote control device - in particular via the medical device - if a position sensor detects that the user interface is in a spatial proximity to the medical device; and whereby all of the units exchange data at least one network.