An access control device for controlling access to an access area using a communication device , wherein a cryptographic token is assigned to the communication device , the access control device comprising: a first communication interface , which is configured to communicate with the communication device via a first communication connection, and to authenticate the communication device via the first communication connection using an authentication protocol, wherein a first communication range is assigned to the first communication interface ; a second communication interface , which is configured to communicate with the communication device via a second communication connection, and to detect a presence of the communication device , wherein a second communication range is assigned to the second communication interface , wherein the second communication range is smaller than the first communication range, wherein the second communication interface is an NFC communication interface; and a processor , which is configured to grant access to the access area if the communication device is authenticated using the authentication protocol and the presence of the communication device is detected, characterized in that the second communication interface is configured to authenticate the communication device via the second communication connection using a further authentication protocol, wherein the processor is configured to grant access to the access area if the communication device is further authenticated using the further authentication protocol, wherein the first communication interface is configured to receive the cryptographic token, and wherein the second communication interface is configured to perform the further authentication protocol using the cryptographic token, wherein the cryptographic token is a cryptographic key. a first communication interface , which is configured to communicate with the communication device via a first communication connection, and to authenticate the communication device via the first communication connection using an authentication protocol, wherein a first communication range is assigned to the first communication interface ; a second communication interface , which is configured to communicate with the communication device via a second communication connection, and to detect a presence of the communication device , wherein a second communication range is assigned to the second communication interface , wherein the second communication range is smaller than the first communication range, wherein the second communication interface is an NFC communication interface; and a processor , which is configured to grant access to the access area if the communication device is authenticated using the authentication protocol and the presence of the communication device is detected, characterized in that the second communication interface is configured to authenticate the communication device via the second communication connection using a further authentication protocol, wherein the processor is configured to grant access to the access area if the communication device is further authenticated using the further authentication protocol, wherein the first communication interface is configured to receive the cryptographic token, and wherein the second communication interface is configured to perform the further authentication protocol using the cryptographic token, wherein the cryptographic token is a cryptographic key. <EOS>