and use the estimated signal instead of a faulty one [3].
The first approach tends to be conservative since a (single) controller
is designed for large model uncertainty to guarantee a
stability of a normal and a faulty system. On the other hand, in
the second approach, which exploits sensor redundancy, a stability
and a control performance can be maintained by exchanging