Abstract: The invention relates to a method for controlling a safety-critical railway operating process in which the program necessary for the above is divided into a system software (V,PMS) and a software (BO) specific for railway management. External commands (K) and messages (M), which affect the control, are recorded and transmitted to commercial computers (R1,R2) in which the actual process control runs, by means of the system software running in one or several secure signalling computers (SR*), as defined by the relevant railway operating condition. The processing of the program specific for railway management can occur in two channels, parallel or serially, whereby the monitoring of whether the commercial computers have reached the same result is carried out in the secure signalling computers.

Abstract: The invention relates to a method for guaranteeing an identical message sequence in several data sinks, according to which several data sources transmit data messages in parallel and independently of one another to said data sinks. To guarantee an identical message sequence, according to the invention a clock-pulse generator delivers a predefined consecutive clock-pulse generator number to all data sources at constant cycle intervals, for example 50 ms, said number being transmitted together with a message counter number that is consecutive during the cycle interval and with the message content to all data sinks.