An output of a semiconductor impact sensor contained in an air bag ECU is used to make determination in light of a criterion for interrupting a high-voltage power supply, which is different from a criterion for inflating an air bag so that the semiconductor impact sensor forms a redundant system along with a conventional safing sensor to prevent malfunction. Furthermore, an output of the semiconductor impact sensor contained in the air bag ECU is used to make determination for safing and output a safing signal thereby, so that a redundant system can be formed for a front impact sensor, a side impact sensor, and a rear impact sensor. Accordingly, malfunction can be prevented when tampering such as a strike with a hammer occurs.