Vehicle control using multiple sensors

One of the two accelerator sensors 165a and 165b is detected faulty by analyzing variation patterns outputted by the two sensors even when the outputs of two sensors remain within their respective normal output ranges. An accelerator control input is determined using the output of the fault-free sensor if a faulty sensor is detected. The fault detector detects the faulty sensor by analyzing variation patterns of outputs of the first and second accelerator sensors when the outputs of the first and second accelerator sensors remain within respective normal output ranges thereof.