A system and method are disclosed for controlling access to an access-protected unit. A pair of coordinates may be read from a base, such as a card, using a digital pen. The system may then check if the pair of coordinates are within a coordinate area belonging to an authorized user. If so, access may be granted to the authorized user to the access-protected unit or to specific programs or functions of the access-protected unit.