Control device for a safety-critical actuator

A control device for a safety-critical actuator, comprising:

• a first control unit which is configured to output a control signal for actuating the actuator and a monitoring signal on the basis of at least one state signal of the actuator fed back to the first control unit,
• a second control unit which is configured to output a control signal for actuating the actuator and a monitoring signal on the basis of at least one state signal of the actuator fed back to the second control unit, and
• an activation unit which is configured to place either the first control unit or the second control unit into a control state (CON), in which the output control signal is forwarded to the actuator, and to place the other control unit into a monitoring state (MON), in which the output control signal is not forwarded to the actuator,
• wherein the activation unit is configured to receive and evaluate the monitoring signal of the first control unit and the monitoring signal of the second control unit in order, depending thereon, to assign the control state of the first control unit or of the second control unit, wherein the activation unit has a signal input for receiving at least one assignment signal from at least one external source, and
• wherein the activation unit is configured to switch the control state from the control unit in the control state to the control unit in the monitoring state when both the monitoring signal of the control unit in the monitoring state and the assignment signal of the external source indicate a malfunction of the control unit in the control state.