Method for switching over between element controllers (201, 202), - wherein two element controllers are provided, of which a first element controller is operated in a master operating mode and a second element controller is operated in a slave operating mode, - in which the second element controller detects an error in the first element controller and - in which the second element controller switches from the slave operating mode into the master operating mode in that the second element controller uses a trigger signal to actuate a selection circuit such that the output of the second element controller, instead of the output of the first element controller, is connected to at least one actuator and/or at least one sensor, characterised in that - each of the element controllers has two interfaces embodied as Ethernet interfaces, - wherein one of the two interfaces of the first element controller is connected to an interlocking via a communication connection embodied as an Ethernet connection, and the first element controller communicates with the interlocking via said one communication connection, - wherein one of the two interfaces of the second element controller is connected to the interlocking via a further communication connection embodied as a further Ethernet connection, and the second element controller communicates with the interlocking via said further communication connection, and - wherein the other of the two interfaces of the first element controller and the other of the two interfaces of the second element controller are interconnected via a direct connection, and the element controller acting as slave evaluates and monitors messages which it obtains from the interlocking and forwards said messages to the element controller acting as master via a direct connection. - wherein two element controllers are provided, of which a first element controller is operated in a master operating mode and a second element controller is operated in a slave operating mode, - in which the second element controller detects an error in the first element controller and - in which the second element controller switches from the slave operating mode into the master operating mode in that the second element controller uses a trigger signal to actuate a selection circuit such that the output of the second element controller, instead of the output of the first element controller, is connected to at least one actuator and/or at least one sensor, - each of the element controllers has two interfaces embodied as Ethernet interfaces, - wherein one of the two interfaces of the first element controller is connected to an interlocking via a communication connection embodied as an Ethernet connection, and the first element controller communicates with the interlocking via said one communication connection, - wherein one of the two interfaces of the second element controller is connected to the interlocking via a further communication connection embodied as a further Ethernet connection, and the second element controller communicates with the interlocking via said further communication connection, and - wherein the other of the two interfaces of the first element controller and the other of the two interfaces of the second element controller are interconnected via a direct connection, and the element controller acting as slave evaluates and monitors messages which it obtains from the interlocking and forwards said messages to the element controller acting as master via a direct connection.