An automated closed-loop blood glucose control system comprises a continuous glucose-monitoring sensor (101), a subcutaneous insulin delivery device (103)； and a controller (105) which determines a maximal allowable insulin injection amount and determines an insulin delivery control signal on the basis of the maximal allowable insulin injection amount and the quantity of insulin to inject.
