Method for handling faults in a central control device, and control device

A method for handling faults in a central control device, wherein the central control device comprises a distributed computer system (100), to which sensors (112, 113, 122, 123) are operably connectable,

• wherein the distributed computer system (100) is distributed to a first fault containment unit FCU1 (101) and a second fault containment unit FCU2 (102),
• wherein FCU1 (101) and FCU2 (102) each consist of a first subsystem SS1 (110, 120) and a second subsystem SS2 (111, 121), wherein the first subsystems SS1 (110, 120) process sensor data from the sensors and the second subsystems SS2 (111, 121) monitor functioning of the respective first subsystem SS1 (110, 120),
• wherein FCU1 (101) and FCU2 (102) are each supplied with power via a separate, independent power supply,
• wherein FCU1 (101) and FCU2 (102) interchange data solely via galvanically separated lines,
• wherein some of the sensors are connected at least to FCU1 (101) and the remainder of the sensors are connected at least to FCU2 (102),
• wherein FCU1 (101) and FCU2 (102) are connected to a communication system (131, 132) having one or more actuators, and
• wherein FCU1 and FCU2, or one or more components of FCU1 and one or more components of FCU2, have access to a globally synchronized time.