Fluid Power System Safety with Redundant Sensing

Application context

Industrial fluid power equipment often depends on pressure feedback to operate safely and predictably. In hydraulic and pneumatic systems, pressure is tied to force, motion, holding capability, and machine response. For an OEM building fluid power equipment, reliable pressure monitoring may be needed so the controller can understand what an actuator, load, or circuit is doing before and during movement.

Pressure data can serve several roles at once. The controller may use it to manage motion, sequence operations, stabilize suspended or clamped loads, and recognize conditions that could place operators, tooling, or structures at risk. If pressure rises unexpectedly, drops below an expected level, or behaves differently from the commanded motion profile, the control system can use that information in its response logic.

This connects pressure sensing to fluid power system safety. A pressure transducer may be installed as a measurement device, but its signal can also become part of a safety-related control strategy. The sensor does not make the system safe by itself. It provides information that the controller, valves, actuators, and safety logic can use to detect abnormal conditions and reduce risk.

Mobile and industrial fluid power environments can be demanding. Hydraulic systems may operate at high pressure, and both hydraulic and pneumatic circuits can expose components to pulsation, rapid transients, and mechanical stress. Equipment may also face vibration, shock, outdoor exposure, temperature variation, moisture, contamination, and electrical noise from motors, solenoids, power electronics, and long cable runs.

These conditions affect sensor selection. A pressure sensing approach that works in a controlled indoor test environment may not remain dependable on a machine exposed to vibration, weather, or electrical interference. The transducer must be mechanically robust enough for the installation point, electrically suitable for the controller, and stable enough to provide meaningful data over time.

For this application, the OEM needed pressure monitoring that could support control and safety functions in harsh fluid power service. The requirement was not simply to read pressure accurately under ideal conditions. The sensing approach had to remain suitable for mobile or industrial conditions while fitting the control system’s need for dependable pressure information.

Design challenge

The existing pressure transducer provided accurate measurement for normal control needs, but newer safety-driven design expectations created additional requirements. Accuracy alone was no longer sufficient. The control system needed pressure information in a form that could support validation, comparison, and fault detection.

A standard single-output pressure transducer can provide one measurement signal to a controller. That may be adequate for basic monitoring, closed-loop control, or display. However, when the controller must evaluate whether the measurement itself is trustworthy, one signal can be limiting. If that signal becomes biased, shorted, open, noisy, or otherwise abnormal, the controller may have little basis for distinguishing a real pressure condition from a sensor or wiring problem.

The OEM therefore required independent pressure outputs rather than one conventional measurement path. Multiple outputs can give the controller more information about sensor behavior. The control system may compare pressure signals, check whether they remain within an expected relationship, or validate one channel against another before allowing a motion sequence to continue. The exact diagnostic logic depends on the machine architecture, but the purpose is to make sensor faults easier to detect.

The sensing solution also had to support functional safety expectations without sacrificing practical equipment requirements. Functional safety in machinery and fluid power systems is not based only on component quality. It involves how faults are anticipated, detected, and managed. A pressure sensor in this context must be considered as part of a system that includes electrical inputs, control logic, software behavior, power supply design, wiring, valves, actuators, and the hazards associated with stored energy or moving loads.

At the same time, the transducer still had to meet ordinary engineering requirements. It needed to preserve measurement performance, survive the installation environment, and fit the existing machine design as much as possible. A safety-related upgrade that creates packaging, wiring, durability, or signal compatibility problems can complicate integration and increase risk elsewhere.

The design challenge was therefore a balance: provide redundant pressure information suitable for a safety-conscious control architecture while maintaining accuracy, durability, and integration fit. A standard single-output transducer was not enough for the desired monitoring approach, but the replacement could not be treated as a simple accessory change. It required a sensing design aligned with the machine’s control and environmental demands.

Technical evaluation

The engineering review identified the need for a redundant measurement approach. In safety-related sensing, redundancy is often used to reduce reliance on a single point of information. If two independently generated signals are available, the controller may be able to detect disagreement, implausible behavior, or loss of one channel. This can improve the ability to identify faults before they lead to unsafe motion or incorrect control decisions.

However, redundancy is not achieved merely by copying one pressure signal into two wires. If a single sensing element and electronics path generate one measurement and that measurement is electrically duplicated, both outputs may carry the same error. A failure upstream of the split could affect both signals identically, leaving the controller with little additional diagnostic value. The system may appear redundant at the connector without providing meaningful fault detection.

A more useful approach considers how the outputs are generated, conditioned, powered, routed, and interpreted by the controller. The degree of independence required depends on the machine’s safety concept. Some architectures may need separate measurement channels. Others may use diverse signal behavior, controller-side plausibility checks, or comparison with other machine states. The diagnostic value comes from the relationship between sensing hardware and control logic, not from the number of conductors alone.

The evaluation also had to account for the wider fluid power system. Pressure measurement faults are only one possible source of unsafe behavior. A hydraulic or pneumatic machine may also be affected by valve faults, actuator leakage, hose failures, unexpected startup, trapped energy, load drift, or control software errors. Pressure sensing can help detect some of these conditions, but it must be incorporated into a complete risk reduction strategy.

Several machinery and fluid power safety standards may be relevant. ISO 4413 addresses general rules and safety requirements for hydraulic fluid power systems and components, while ISO 4414 addresses pneumatic fluid power systems and components. ISO 13849 and IEC 62061 are commonly discussed in relation to safety-related control systems and functional safety design. The relevance of any specific standard depends on the machine, market, risk assessment, and safety functions involved. It should not be assumed that a particular standard, performance level, or safety integrity level applies unless confirmed for the project.

From a sensor design perspective, the assessment pointed toward a customized pressure transducer rather than a standard catalog configuration. The application needed multiple outputs that could support controller diagnostics, mechanical construction suitable for fluid power service, and electronics that could maintain stable pressure measurement while providing the required signal behavior. The result was a sensing concept built around redundant output capability and rugged construction rather than simple duplication of an existing single-output device.

Implemented sensing approach

The implemented approach used a customized OEM pressure transducer with dual-output capability. The purpose was to provide the control system with more than one pressure-related signal so the controller could perform validation or comparison logic. This type of design can support improved fault recognition when integrated correctly into the machine’s control architecture.

The solution was not a standard single-output sensor with a minor external wiring change. It required updated electronics and a mechanical platform appropriate for fluid power equipment. In applications where safety-related diagnostics are a design objective, the internal signal architecture matters. The electronics must produce outputs that are useful to the controller, remain stable across operating conditions, and avoid creating avoidable common failure behavior.

Dual-output sensing can be implemented in different ways depending on application requirements. The outputs may be used by separate controller inputs, compared within a control program, or checked against expected pressure behavior during known machine states. If both outputs represent the same pressure variable, the controller can monitor whether they remain within an acceptable relationship. If one channel stops responding, becomes erratic, or deviates from expected behavior, the controller can flag a fault or move the machine into a defined response state.

The diagnostic benefit depends on system design. Multiple pressure outputs do not automatically make a machine safe, and they do not replace a risk assessment. Their value comes from how the signals are interpreted. The control system must recognize abnormal signal relationships and respond appropriately. Wiring, input module behavior, power supply design, software logic, and fault handling all influence diagnostic capability.

The electronics were intended to preserve accuracy, signal stability, and long-term reliability while providing independent outputs. Redundant monitoring should not compromise the basic measurement function. If the pressure signal becomes unstable, excessively noisy, or poorly matched to the controller input, the system may suffer from nuisance faults or reduced control quality. Properly engineered custom electronics can provide specialized output behavior while supporting dependable measurement.

The mechanical design also had to reflect the environment. Fluid power sensors may be installed near pumps, manifolds, valves, cylinders, mobile structures, or exposed machine frames. These locations can subject the transducer to vibration, shock, temperature variation, and contamination. Outdoor installations may add moisture, ultraviolet exposure, washdown, or wide ambient temperature changes. Electrical compatibility is also important because fluid power equipment often includes solenoid coils, electric motors, variable-frequency drives, relays, and other sources of electromagnetic interference.

The customized transducer was therefore designed with ruggedness as a key objective. Resistance to vibration, mechanical shock, thermal variation, and electromagnetic exposure are common design considerations for sensors used in mobile and industrial fluid power systems. Exact ratings depend on the product specification and qualification testing, but the general requirement is clear: a pressure sensor used for safety-related monitoring must continue to provide usable information in the actual machine environment.

Integration fit was another practical consideration. OEM equipment often has established mechanical ports, electrical connectors, controller input ranges, harness routing, and installation constraints. A custom sensing approach must be compatible with these constraints or the machine redesign becomes more extensive. By developing the sensor around the application’s requirements, the OEM could pursue redundant pressure monitoring without treating the transducer as an isolated component.

Project outcome

The customized transducer supported the OEM’s safety-compliance objectives by giving the control system additional pressure information for diagnostic use. Rather than relying on a single pressure signal, the machine could receive multiple outputs and use them to evaluate sensor behavior during operation. This improved the controller’s ability to identify abnormal sensor conditions compared with a basic single-output approach.

Independent pressure signals allow ongoing comparison or validation. If both outputs are expected to track the same pressure event, disagreement between them can indicate a potential fault in the sensor, electronics, wiring, input channel, or signal path. If one signal changes while the other does not, or if one channel moves outside expected behavior, the control system can treat the condition as suspect. The appropriate response depends on the machine’s risk assessment and control strategy, but the additional information can make faults more visible.

This approach is especially relevant in fluid power systems because pressure data may influence motion and load-holding decisions. A controller that cannot trust its pressure feedback may make incorrect assumptions about actuator force, clamp state, lift condition, or stored energy. Redundant pressure outputs can help reduce that uncertainty when paired with suitable diagnostic logic.

The design also maintained the intended field performance for harsh mechanical, thermal, and electrical conditions. The sensing platform was selected and engineered for environments common to mobile and industrial fluid power equipment. The goal was not only to satisfy a signal requirement on paper but to provide a device that could remain dependable when exposed to vibration, shock, temperature changes, outdoor conditions, and electrical noise.

It is important to distinguish between supporting compliance objectives and claiming a specific certification result. A sensor with redundant outputs can be part of a safety-related design, but final compliance depends on the complete system. Applicable standards, required performance level or safety integrity target, validation method, diagnostic coverage, and fault response must be established at the machine level. The pressure transducer contributes to that design but does not define the entire safety function by itself.

Engineering support and localized production can also matter in OEM projects. A customized sensor must be designed, reviewed, documented, built, and supplied in a way that matches production timing. Coordination between sensor engineering, the OEM design team, and manufacturing can help reduce integration delays, especially when the device must fit existing mechanical and electrical constraints. While timing results depend on the project, localized production and application-focused engineering support can help keep a custom component aligned with machine build schedules.

The outcome was a pressure sensing approach better matched to the OEM’s evolving safety needs. It provided redundant pressure information, supported controller-side diagnostics, and preserved rugged characteristics required for fluid power service. The result was not a universal sensor architecture for all machines, but an application-specific solution for a system where pressure feedback had become part of a broader safety strategy.

Practical lessons

Redundant pressure outputs can help a control system validate sensor health and identify faults earlier than a single-output arrangement. When two pressure-related signals are available, the controller can compare them, check plausibility, and detect certain failures that might otherwise remain hidden. This is particularly useful when pressure feedback affects motion, load stabilization, or operator protection.

However, redundancy must be meaningful. Two terminals carrying the same duplicated signal may provide little diagnostic improvement if the same internal fault affects both outputs. Effective redundancy requires attention to how signals are generated and how the control system evaluates them. The architecture should be designed so likely faults can be detected and handled in a defined way.

Functional safety depends on diagnostics, redundancy, and system architecture, not only on measurement accuracy. A highly accurate pressure transducer can still be insufficient if the controller cannot recognize a failed or misleading signal. Conversely, a redundant sensor arrangement must still provide dependable measurement, because poor signal quality can create nuisance trips or incorrect control behavior. Accuracy and diagnostic capability both matter, but they solve different parts of the safety problem.

Custom electronics can be useful when standard pressure transducers do not provide the required output behavior. A custom design may allow multiple outputs, specialized signal conditioning, controller-compatible interfaces, or packaging suited to an OEM installation. The engineering challenge is to add this functionality without undermining stability, durability, or maintainability.

Environmental suitability remains essential. Fluid power sensors may face vibration, shock, temperature extremes, outdoor exposure, moisture, contamination, and electrical interference. These stresses can affect mechanical joints, seals, electronics, connectors, cables, and signal integrity. A sensor used in a safety-related pressure monitoring role should be selected or designed for the conditions at the installation point, not only for the nominal pressure measurement task.

Standards can provide useful context. Hydraulic systems are commonly discussed with reference to ISO 4413, pneumatic systems with ISO 4414, and safety-related control systems with standards such as ISO 13849 or IEC 62061 where applicable. These standards reinforce that safety depends on the complete system, including control functions, components, diagnostics, and validation. Specific requirements for any machine must be determined through the project’s own risk assessment and compliance process.

For technical buyers and engineers, the main selection lesson is to evaluate the pressure sensor as part of the control architecture. Important questions include:

Does the controller need one pressure signal or multiple independently useful signals?
What sensor faults must the system be able to detect?
How will the controller compare, validate, or reject pressure data?
Are the sensor outputs compatible with the input modules and diagnostic logic?
Can the transducer survive the vibration, shock, temperature, outdoor, and EMC conditions at the installation point?
Will the mechanical and electrical design fit the OEM equipment without creating avoidable redesign work?

Application-specific sensing designs can improve integration reliability and help machines adapt to evolving safety expectations. In fluid power systems, where pressure is closely tied to force and motion, redundant pressure sensing can be a practical way to strengthen diagnostic capability. It is not a substitute for complete safety engineering, but when properly designed and integrated, it can be an important part of improving fluid power system safety.