Abstract: A vehicle control system is disclosed which comprises a center and a plurality of vehicles carrying two redundant computer systems as on-board control equipment. Each of the computer systems consists of two computers which compare their results and deliver them only if they agree. Which of the two computer systems processes the telegrams received from the center and compiles telegrams to the center from messages of the on-board units is determined from the center. At regular intervals switchover to the other computer system is effected to check whether the latter is functioning correctly or not. Any failure in one computer system need no longer result in the application of the emergency brakes. However, a fault message is sent to the center, and the vehicle is directed to the maintenance shop at the end of the movement.