In a multiple redundant control system each of the control systems detects whether failures occur in the system itself and the other systems, and outputs a control signal corresponding to an amount of control of a controlled object by the control system on the basis of the result of failure detection. In the multiple redundant control system at least one controlled object is driven or controlled by a controller having a plurality of control systems that are connected to each other and each output information regarding the system itself and received input of information regarding other systems. Based on control signals, a main control signal for driving or controlling the controlled object is generated by a main control signal generator.