Method for switching over between element controllers (201, 202) by way of a signal box, - in which the signal box detects an error in a first element controller, - in which the signal box activates the second element controller, - in which the second element controller uses a trigger signal to actuate a selection circuit such that the output of the second element controller, instead of the output of the first element controller, is connected to at least one actuator and/or at least one sensor, - in which the first element controller has two interfaces embodied as Ethernet interfaces (206, 207) and communicates with the signal box via two communication connections embodied as Ethernet connections (203, 204), wherein one of the two Ethernet interfaces of the first element controller is connected to one of the two Ethernet connections and wherein the other of the two Ethernet interfaces of the first element controller is connected to the other of the two Ethernet connections, - in which the second element controller has two interfaces embodied as Ethernet interfaces (206, 207) and communicates with the signal box via two communication connections embodied as Ethernet connections (211, 212), wherein one of the two Ethernet interfaces of the second element controller is connected to the one Ethernet connection and wherein the other of the two Ethernet interfaces of the second element controller is connected to the other Ethernet connection, and - in which the signal box has a redundancy logic (218, 219) formed of two individual redundancy logics and therefore designed in a duplicate manner, in which the detection of the error takes place, wherein one of the individual redundancy logics is connected to the one Ethernet connection, wherein the other of the individual redundancy logics is connected to the other Ethernet connection and wherein a communication is provided between the two individual redundancy logics (218, 219). - in which the signal box detects an error in a first element controller, - in which the signal box activates the second element controller, - in which the second element controller uses a trigger signal to actuate a selection circuit such that the output of the second element controller, instead of the output of the first element controller, is connected to at least one actuator and/or at least one sensor, - in which the first element controller has two interfaces embodied as Ethernet interfaces (206, 207) and communicates with the signal box via two communication connections embodied as Ethernet connections (203, 204), wherein one of the two Ethernet interfaces of the first element controller is connected to one of the two Ethernet connections and wherein the other of the two Ethernet interfaces of the first element controller is connected to the other of the two Ethernet connections, - in which the second element controller has two interfaces embodied as Ethernet interfaces (206, 207) and communicates with the signal box via two communication connections embodied as Ethernet connections (211, 212), wherein one of the two Ethernet interfaces of the second element controller is connected to the one Ethernet connection and wherein the other of the two Ethernet interfaces of the second element controller is connected to the other Ethernet connection, and - in which the signal box has a redundancy logic (218, 219) formed of two individual redundancy logics and therefore designed in a duplicate manner, in which the detection of the error takes place, wherein one of the individual redundancy logics is connected to the one Ethernet connection, wherein the other of the individual redundancy logics is connected to the other Ethernet connection and wherein a communication is provided between the two individual redundancy logics (218, 219).