Abstract: A fault tolerant liquid measurement system includes a plurality of sensors for measuring parameters of a liquid in a container; each sensor generating a measurement signal representative of the liquid parameter measured thereby. The sensors are grouped into a number of sets, each set including some sensors of another set. The measurement signals of each set of sensors are processed in a processor to determine for each set of sensors a first estimate signal representative of a likelihood of measurement signal validity for the measurement signals of the corresponding set, and a second estimate signal representative of liquid quantity in the container based on the measurement signals of the corresponding set. The processor further determines a third estimate signal of liquid quantity in the container based on a function of the first and second estimate signals.