A method and system for controlling a ventilator is disclosed. Oxygen saturation values from pulse oximeters may be used to adjust the settings of a ventilator. Multiple sensors and multiple oxygen saturation values in a fault tolerant pulse oximeter configuration may be used to provide a backup value or confidence measure, thereby increasing reliability and patient safety.