A closed loop system or semi-closed loop system for infusing insulin using sensor values applies a redundant sensor system as a fail-safe method against sensor failure. The redundant glucose sensors are used corroborate each other and a failing sensor is detected if the sensors no longer corroborate each other. The use of redundant sensors has the additional benefit of producing better sensor signals compared to the use of a single sensor.