Electrohydraulic and Electropneumatic Control

Introduction and Context

Hydraulic and pneumatic actuators provide high force, rapid motion, and robust operation, but fluid power alone does not determine how a machine behaves. Modern machines require coordinated starting, stopping, sequencing, sensing, fault detection, operator interaction, and safe recovery. These functions are provided by electrical and electronic control systems connected to hydraulic or pneumatic power circuits.

An electrohydraulic system uses electrical signals to control hydraulic components such as solenoid-operated directional control valves, pressure valves, proportional valves, and servo valves. An electropneumatic system performs the same general function using compressed air. The electrical control layer may use relays and timers, programmable logic controllers (PLCs), sensors, drives, and human–machine interfaces (HMIs).

The central engineering task is integration: the control system must command the fluid-power circuit while recognizing physical feedback, preventing unsafe combinations of commands, and responding predictably to failures. A technically correct circuit is therefore more than a collection of valves and wires; it is a controlled machine with defined states, transitions, safeguards, and operating procedures.

Learning Objectives

After studying this chapter, the learner should be able to:

1. Explain the architecture of electrohydraulic and electropneumatic systems.
2. Select and apply relays, solenoids, sensors, timers, and interlocking methods.
3. Interpret and develop ladder diagrams for fluid-power sequences.
4. Design PLC programs using inputs, outputs, memory, timers, counters, and state logic.
5. Integrate HMIs with machine-control systems.
6. Design emergency-stop, fault-reset, and safe-restart functions.
7. Analyze a complete machine-control application and identify limitations and hazards.

1. Control-System Architecture

A typical system has five interacting layers:

A useful distinction is between the power circuit and the control circuit. The power circuit carries hydraulic or pneumatic energy to the actuator. The control circuit carries low-power electrical signals that determine when and how the power circuit operates. A solenoid coil, for example, does not usually supply actuator force; it shifts a valve that directs the working fluid.

Figure: Functional architecture of an electrohydraulic or electropneumatic machine-control system.

2. Relays, Solenoids, and Basic Electrical Control

A relay is an electrically operated switch. Its coil produces a magnetic field that changes the state of one or more contacts. Contacts may be normally open (NO), closing when the relay is energized, or normally closed (NC), opening when energized. Relays provide isolation, signal multiplication, latching, and simple logic functions.

A solenoid is an electromagnetic actuator. In a directional control valve, energizing a solenoid shifts a spool or opens a poppet. The coil must be matched to its supply voltage, current, duty cycle, connector arrangement, and environmental rating. Direct-current coils commonly require suppression of inductive voltage when switched off. A diode may be used with suitable DC circuits, while an AC suppression module is used for AC coils. Suppression reduces electrical interference but can increase de-energization time; the design must therefore consider both electromagnetic compatibility and response speed.

A relay latch, often called a seal-in circuit, allows a momentary START button to maintain a run command. The usual arrangement places a normally closed STOP contact in series with a branch containing the START contact and an auxiliary NO contact of the run relay. The auxiliary contact closes after energization and bypasses the START button. A stop command opens the series path and releases the relay.

Latching must not be used as a substitute for safety design. A machine should not automatically restart merely because a control voltage returns. Safe restart normally requires the hazardous condition to be cleared and a deliberate new start command.

Interlocking

Interlocking prevents incompatible commands from occurring simultaneously. Electrical interlocking may place the NC auxiliary contact of solenoid A in series with solenoid B, and vice versa. Mechanical interlocking may be incorporated into a valve or contactor assembly. Logic interlocking is implemented in a PLC program.

For example, forward and reverse commands for an actuator should satisfy:

Here, F and R are Boolean commands, ∧ means logical AND, and 0 means false. The condition states that forward and reverse outputs must not be true at the same time. In practice, software interlocking should be reinforced by suitable electrical or mechanical measures when a simultaneous command could create a hazard.

3. Sensors and Signal Conditioning

Sensors convert physical conditions into electrical signals. Common devices include:

• Limit switches: mechanically operated position sensors.
• Inductive proximity sensors: detect metallic targets without contact.
• Capacitive sensors: detect conductive and some nonconductive materials.
• Photoelectric sensors: detect interruption or reflection of light.
• Pressure switches: provide discrete switching at a pressure threshold.
• Pressure transducers: provide an analogue signal proportional to pressure.
• Reed switches and Hall sensors: detect magnetic piston position.
• Encoders: report angular position, speed, or displacement.

Sensors may provide discrete signals such as 24 V DC ON/OFF, or analogue signals such as 0–10 V and 4–20 mA. A 4–20 mA loop is useful over long distances because a zero value near 4 mA can distinguish a valid low measurement from an open circuit. Analogue inputs require scaling. If an input range of 0–10 V corresponds to 0–100 bar, a measured 6 V corresponds ideally to:

where p is pressure, V is measured voltage, V_max is the full-scale voltage, and p_max is the full-scale pressure. This linear relationship assumes a correctly calibrated sensor, negligible signal-conditioning error, and a linear transducer.

Sensor placement is as important as sensor selection. A cylinder-retracted sensor should confirm actual retraction, not merely command a valve. Pressure switches should be located where the measured pressure represents the required machine condition. Sensors must also be protected against vibration, contamination, hydraulic shock, and accidental mechanical damage.

4. Ladder Logic and PLC Operation

Ladder logic represents control decisions using contacts, coils, timers, counters, and function blocks. A PLC generally operates through a scan cycle:

1. Read physical inputs.
2. Execute the user program using the input image and internal data.
3. Update physical outputs.
4. Perform diagnostics and communication tasks.

The exact behavior depends on the PLC, but the scan model is essential for understanding response timing and signal changes during a program cycle.

A simple cylinder-extension sequence may use the following signals:

A safe conceptual logic expression for extension is:

The symbol ¬ means NOT. The expression does not replace a validated safety circuit, but it demonstrates permissive conditions: the machine must be enabled, the stop circuit must be healthy, the cylinder must be at the retracted position, the extension limit must not already be active, and the retract output must be off.

Timers and Debouncing

Mechanical contacts can bounce, producing several rapid transitions. PLC input filters or debounce timers prevent false sequence changes. A timer-on-delay changes its done state after an input has remained true for a preset period. A timer-off-delay maintains its done state for a period after the input becomes false. Timer choice must reflect the process: debouncing may require milliseconds, while dwell or pressure-building may require seconds.

A timer is not a substitute for feedback. For example, assuming that a cylinder has extended after 2 s is weaker than confirming extension with a sensor. A time limit should generally be used as a fault detector: if the expected sensor is not received within the permitted time, the controller should stop or enter a fault state.

5. State Sequencing

Complex machines are more reliable when their behavior is described as explicit states rather than as a large collection of unrelated coils. A typical sequence is:

1. Idle: waiting for a start command.
2. Clamping: clamp valve energized.
3. Clamp verification: pressure or position confirmed.
4. Processing: tool or actuator performs its operation.
5. Release: clamp is withdrawn.
6. Complete: cycle indication provided.
7. Fault: outputs move to the defined safe condition and an alarm is recorded.

A state transition should have a clear condition. For example, the transition from CLAMPING to PROCESSING may require both a clamp-position sensor and a pressure-ok signal. The controller should not infer successful clamping merely because it issued the command.

A state-machine approach supports diagnostics because the HMI can display the current state and the transition condition that failed. It also makes expansion easier: inspection, purging, lubrication, and maintenance states can be added without obscuring the original sequence.

6. Emergency Functions and Safe Design

An emergency-stop function is intended to bring a machine to a safe condition when a hazardous event occurs. It is not simply a software bit. Emergency-stop devices, safety relays, safety PLCs, valve-monitoring circuits, and energy-isolation procedures must be selected according to the machine risk assessment and applicable legislation and standards.

Important principles include:

• The emergency-stop actuator should be readily accessible and clearly identifiable.
• The stop function should be independent enough that a single ordinary control-program fault does not defeat it.
• Loss of control power should not create an unexpected hazardous motion.
• Stored hydraulic pressure, compressed air, gravity, and trapped energy must be considered.
• Restart should require deliberate action after the emergency condition is reset.
• Resetting an emergency stop should not itself start the machine.

A de-energize-to-trip philosophy is common: removing power causes the hazardous actuator command to be removed. However, simply dropping a solenoid may not stop motion immediately. A hydraulic accumulator, load inertia, blocked exhaust, or suspended load can preserve energy. Safe stopping may require dump valves, counterbalance valves, brakes, mechanical supports, or controlled deceleration.

Safety-related control functions should be validated, documented, tested, and periodically inspected. Ordinary PLC logic may control production sequencing, but a standard PLC should not automatically be assumed to provide the required safety integrity.

7. HMI and Machine Integration

An HMI enables operators to start cycles, select automatic or manual mode, view pressures and positions, acknowledge faults, and inspect maintenance information. Good HMI design presents the information needed for a decision without overwhelming the operator.

A practical screen hierarchy may contain:

• Overview screen: machine state, cycle status, major alarms.
• Manual screen: individually controlled functions subject to permissives.
• Alarm screen: active alarm, cause, time, and corrective guidance.
• Diagnostics screen: sensor states, output states, and sequence state.
• Maintenance screen: cycle counts, service intervals, and authorized settings.

Commands from an HMI should be treated as requests, not unconditional instructions. For example, an HMI command to extend a cylinder must still pass through mode, safety, pressure, position, and interlock checks. Operator roles should be separated: production users may run cycles, while maintenance personnel may access controlled manual functions. Passwords are not a substitute for physical safety procedures, but they reduce accidental or unauthorized changes.

8. Worked Application: Pneumatic Pick-and-Place Station

Background

Consider an illustrative two-cylinder pneumatic station. Cylinder A clamps a workpiece. Cylinder B pushes the workpiece into a fixture. Each cylinder has retracted and extended sensors. The station includes START, STOP, emergency stop, an HMI, and a PLC.

Required sequence

The intended sequence is:

A− → A+ → B+ → B− → A−

The initial state is both cylinders retracted. Here, A+ means extend cylinder A and A− means retract it; the same notation applies to B.

Analysis

The controller must not extend B until A is confirmed extended. It must not release A until B is confirmed retracted. Each commanded movement requires a time limit. If a confirmation sensor is not received within the limit, the sequence enters FAULT and removes ordinary motion commands.

Control approach

The PLC stores the current state in an integer or enumerated variable. In CLAMP, it energizes the A-extend solenoid only if the emergency circuit is healthy, automatic mode is selected, and no fault is active. When the A-extended input becomes true, the PLC de-energizes A+ and enters PUSH. The same pattern applies to the remaining states.

The design should include mutual exclusion between A+ and A− and between B+ and B−. If both end sensors for one cylinder become true simultaneously, the controller should treat this as an implausible condition and generate a sensor fault. If neither expected sensor is reached before the movement timer expires, the controller should generate a timeout fault.

Outcome

The state-based design prevents premature pushing, identifies failed sensors, and gives the operator a meaningful diagnostic such as “State CLAMP: A-extended confirmation missing.” It is more maintainable than a sequence based only on fixed delays.

Learning points

1. Commands should be separated from confirmation.
2. Every motion should have a permitted condition and a fault limit.
3. State descriptions improve testing and troubleshooting.
4. Manual mode must retain safety and interlocking restrictions.
5. A machine sequence is incomplete until abnormal conditions are defined.

9. Commissioning, Testing, and Troubleshooting

Commissioning should proceed from low risk to full operation:

1. Verify drawings, terminal numbers, voltage levels, and protective devices.
2. Check that hydraulic or pneumatic pressure is isolated during wiring tests.
3. Test emergency-stop and safety circuits independently.
4. Confirm sensor operation and input indications.
5. Test each output without a load where appropriate.
6. Operate the machine in manual mode at reduced risk.
7. Test each sequence transition and timeout.
8. Test loss of sensors, pressure, power, and communication.
9. Test restart behavior after emergency stop and power recovery.
10. Record results and update documentation.

A useful troubleshooting method follows the signal path: operator command → input status → logic permissive → output status → solenoid coil → valve movement → actuator motion → feedback sensor. Do not replace components merely because an actuator fails to move. The fault may be a missing supply, broken common, incorrect sensor polarity, blocked exhaust, insufficient pressure, mechanical obstruction, or a logic interlock that is functioning correctly.

10. Challenges, Limitations, and Contemporary Practice

Relay systems are transparent and easy to understand for small machines, but wiring becomes complex as the number of conditions increases. PLCs reduce wiring and support diagnostics, data collection, and communication, but they introduce software, configuration, and cybersecurity risks. Networked valves and remote I/O simplify installation but create dependence on communication integrity.

Analogue and networked control can improve process quality, but calibration, resolution, sampling, latency, and electromagnetic interference must be considered. Proportional hydraulic valves may require closed-loop feedback to achieve accurate position or force control. A basic ON/OFF solenoid system cannot deliver the same regulation.

Modern machines increasingly connect PLCs to supervisory systems and industrial networks. This enables production monitoring and predictive maintenance, but access control, secure configuration, backups, patch management, and separation of safety functions are essential. Artificial intelligence may assist anomaly detection by identifying unusual pressure, cycle-time, or valve-current patterns. It should support—not replace—validated interlocks and safety functions. An AI prediction is not an adequate emergency-stop mechanism.

Environmental responsibility also matters. Hydraulic leakage contaminates the workplace and environment, while pneumatic leakage wastes compressor energy. Control systems should support leak detection, pressure optimization, efficient standby modes, and maintenance reporting.

Professional Design Principles

A competent designer should:

• Define normal, abnormal, maintenance, and emergency states before wiring.
• Use positive feedback from sensors rather than relying on assumed timing.
• Separate standard control from safety-related control.
• Use fail-safe principles where loss of signal must produce a safe response.
• Document I/O lists, sequence charts, electrical schematics, software versions, and test results.
• Make diagnostic messages specific and actionable.
• Prevent automatic restart after hazardous interruptions.
• Validate both the physical fluid-power circuit and the control logic.
• Train operators and maintenance personnel in isolation and residual-energy hazards.

Chapter Summary

Electrohydraulic and electropneumatic systems combine fluid-power hardware with electrical control. Relays and solenoids provide basic switching and valve actuation; sensors provide evidence of position, pressure, and process condition; PLCs implement sequence logic, timers, interlocks, and diagnostics; and HMIs support operation and maintenance. Reliable control depends on separating commands from feedback, using explicit machine states, preventing incompatible outputs, and defining responses to faults.

Emergency functions require more than software logic because fluid systems may contain stored energy and may continue moving after a command is removed. Safety circuits, risk assessment, isolation, validation, and controlled restart are essential. State-based PLC design, clear HMI information, systematic commissioning, and documented testing provide a practical foundation for safe and maintainable machine integration.

Key Terms

Relay: Electrically operated switch used for logic, isolation, or signal multiplication.

Solenoid: Electromagnetic actuator used to operate a valve or mechanism.

Normally open (NO): Contact that is open in its normal de-energized condition.

Normally closed (NC): Contact that is closed in its normal de-energized condition.

Interlock: Condition that prevents an incompatible or unsafe operation.

Sensor: Device that detects a physical condition and produces a signal.

Limit switch: Mechanically actuated position sensor.

Proximity sensor: Noncontact sensor that detects a nearby object.

Pressure switch: Device that changes electrical state at a pressure setting.

Transducer: Device that converts a measured quantity into a continuous signal.

PLC: Programmable logic controller used to execute industrial control programs.

Ladder logic: Graphical programming representation based on contacts and coils.

Input image: PLC representation of the states read from physical inputs.

State machine: Control model consisting of defined states and transition conditions.

Permissive: Condition that must be true before an action is allowed.

HMI: Human–machine interface used for operator control and information display.

Emergency stop: Function intended to stop hazardous operation during an emergency.

Fail-safe: Design approach in which a failure tends toward a safer condition.

Debouncing: Suppression of false transitions caused by contact vibration.

Residual energy: Stored hydraulic, pneumatic, mechanical, or electrical energy remaining after shutdown.

Review Questions

5 Short Answer Questions

1. What is the difference between a control circuit and a fluid-power circuit?
2. State two functions of an interlock.
3. Why is sensor feedback preferable to a fixed delay for confirming cylinder motion?
4. What is the purpose of a PLC scan cycle?
5. Why should resetting an emergency stop not automatically restart a machine?

5 Long Answer Questions

1. Explain the construction and operation of a relay seal-in circuit, including the roles of START, STOP, and auxiliary contacts.
2. Describe how a PLC can control a two-cylinder pneumatic sequence using sensors, timers, and states.
3. Compare relay control and PLC control in terms of wiring, flexibility, diagnostics, and failure modes.
4. Explain the relationship between an HMI command, PLC permissives, solenoid output, valve movement, and sensor feedback.
5. Discuss the safety implications of stored hydraulic or pneumatic energy during emergency stopping and maintenance.

3 Analytical / Application Questions

1. A cylinder is commanded to extend, but its extended sensor is never detected. Develop a troubleshooting path from the PLC input to the actuator and identify at least three possible causes.
2. Design the states and transition conditions for a machine that clamps a component, drills it, retracts the drill, and releases the component. Include two abnormal conditions and their responses.
3. A machine occasionally energizes forward and reverse solenoids together. Analyze possible hardware and software causes and propose layered corrective measures.

Multiple Choice Questions with Answers

Question 1

Which device converts an electrical command into movement of a directional control valve?

A. Solenoid

B. Pressure reservoir

C. Mechanical filter

D. Flow restriction

Correct Answer: A. Solenoid

Question 2

What is the main purpose of an interlock?

A. To increase reservoir volume

B. To prevent incompatible operations

C. To measure cylinder speed directly

D. To lubricate a valve spool

Correct Answer: B. To prevent incompatible operations

Question 3

A 0–10 V pressure transducer represents 0–100 bar. What pressure corresponds ideally to 6 V?

A. 6 bar

B. 16.7 bar

C. 60 bar

D. 600 bar

Correct Answer: C. 60 bar

Question 4

Which sequence best represents a normal PLC scan?

A. Update outputs, read inputs, erase program

B. Read inputs, execute program, update outputs

C. Execute outputs, replace sensors, read inputs

D. Read outputs, stop program, update inputs

Correct Answer: B. Read inputs, execute program, update outputs

Question 5

Why is a cylinder-position sensor generally preferable to a fixed time delay for sequence confirmation?

A. It confirms the physical condition directly

B. It eliminates the need for any interlock

C. It always operates without electrical power

D. It increases pneumatic pressure automatically

Correct Answer: A. It confirms the physical condition directly

Question 6

In the expression Y1 = RUN ∧ STOP_OK ∧ RET ∧ ¬EXT ∧ ¬Y2, what does ¬Y2 indicate?

A. Y2 must be energized

B. Y2 must be off

C. Y2 is an analogue signal

D. Y2 is a sensor input

Correct Answer: B. Y2 must be off

Question 7

Which HMI design practice is most appropriate?

A. Allow every user to change safety parameters

B. Treat every HMI command as unconditional

C. Display machine state and actionable fault information

D. Hide all sensor information from maintenance staff

Correct Answer: C. Display machine state and actionable fault information

Question 8

What should normally happen if an expected motion sensor is not received before its time limit?

A. The controller should ignore the sensor

B. The controller should enter a defined fault response

C. The controller should increase pressure without limit

D. The controller should automatically bypass the interlock

Correct Answer: B. The controller should enter a defined fault response

Question 9

Which statement about emergency stopping is correct?

A. Removing a solenoid signal always removes all stored energy

B. Emergency stopping may require control of residual hydraulic or pneumatic energy

C. An HMI alarm alone is always an emergency-stop function

D. Resetting the emergency stop should start the cycle

Correct Answer: B. Emergency stopping may require control of residual hydraulic or pneumatic energy

Question 10

What is the principal advantage of explicit state-based sequencing?

A. It removes the need for feedback sensors

B. It makes transitions and diagnostic conditions clear

C. It guarantees that hardware cannot fail

D. It permits simultaneous incompatible outputs

Correct Answer: B. It makes transitions and diagnostic conditions clear