Method for switching over between element controllers , - wherein two element controllers are provided, of which a first element controller is operated in a master operating mode and a second element controller is operated in a slave operating mode, - in which the second element controller detects an error in the first element controller and - in which the second element controller switches from the slave operating mode into the master operating mode in that the second element controller uses a trigger signal to actuate a selection circuit such that the output of the second element controller , instead of the output of the first element controller , is connected to at least one actuator and/or at least one sensor, characterised in that - each of the element controllers has two interfaces embodied as Ethernet interfaces, - wherein one of the two interfaces of the first element controller is connected to an interlocking via a communication connection embodied as an Ethernet connection, and the first element controller communicates with the interlocking via said one communication connection , - wherein one of the two interfaces of the second element controller is connected to the interlocking via a further communication connection embodied as a further Ethernet connection, and the second element controller communicates with the interlocking via said further communication connection , and - wherein the other of the two interfaces of the first element controller and the other of the two interfaces of the second element controller are interconnected via a direct connection , and the element controller acting as slave evaluates and monitors messages which it obtains from the interlocking and forwards said messages to the element controller acting as master via a direct connection . - wherein two element controllers are provided, of which a first element controller is operated in a master operating mode and a second element controller is operated in a slave operating mode, - in which the second element controller detects an error in the first element controller and - in which the second element controller switches from the slave operating mode into the master operating mode in that the second element controller uses a trigger signal to actuate a selection circuit such that the output of the second element controller , instead of the output of the first element controller , is connected to at least one actuator and/or at least one sensor, - each of the element controllers has two interfaces embodied as Ethernet interfaces, - wherein one of the two interfaces of the first element controller is connected to an interlocking via a communication connection embodied as an Ethernet connection, and the first element controller communicates with the interlocking via said one communication connection , - wherein one of the two interfaces of the second element controller is connected to the interlocking via a further communication connection embodied as a further Ethernet connection, and the second element controller communicates with the interlocking via said further communication connection , and - wherein the other of the two interfaces of the first element controller and the other of the two interfaces of the second element controller are interconnected via a direct connection , and the element controller acting as slave evaluates and monitors messages which it obtains from the interlocking and forwards said messages to the element controller acting as master via a direct connection . <EOS>