Method for enforcing that the fail-silent property in a distributed computer system and distributor unit of such a system

The method according to one or more of claims 1 to 5, further characterized in that the at least one distributor unit (101, 102) assumes the “unsynchronized” state after “power-up”.

The method according to one or more of claims 1 to 6, further characterized in that the at least one distributor unit (101, 102) converts the arriving physical signals into digital form, using the local clock of the distributor unit, and converts them back into the physical form before sending them.

A distributor unit (101, 102) of a fault-tolerant distributed computer system, by which a plurality of remote computers (111, . . . , 114) are connected to each other, each remote computer has an independent communications control unit (211) with corresponding connections to the communication channels (201, 202), and access to the communication channels occurs by a cyclical time-division multiple access method,

• further characterized in that
• the at least one distributor unit (101, 102) is designed to make sure, by virtue of the proper transmission behavior of the remote computer that is known a priori by it, that a remote computer can only send successfully to the other remote computers within its statically assigned time slice.