As an embodiment of the present invention, an access control system is comprised of a terminal, and a server arranged to receive an access request for access to a site and to access the site. The terminal has an access request control list holder for holding at least one of a first list of sites to which a request for access is accepted irrespective of setting of the server, and a second list of sites to which an access request for access is prohibited, and an access request controller for performing a control to add an access permit identifier or to prohibit the access request, based on the contents of the list. The server has an access request receiver, an access control list holder for holding an access control list, and an access controller for performing an access control with reference to the access control list and the access permit identifier.