Pressure transmitter (smart, 4-20 mA) — Failure Modes & Failure Rate

Process-mounted differential or gauge pressure sensor with integral electronics outputting 4-20 mA + HART. Backbone of SIS sensing — pressure trips, level inferences, flow inferences via orifice ΔP. Failure rate covers both the silicon sensor element and the transmitter electronics; field-failure data (OREDA, Exida) treats the assembly as one block.

λ typical

1.0×10-6 / h

Range

3.0×10-7 – 5.0×10-6

Source

OREDA / Exida

Failure modes

Drift (calibration / zero shift)

Root causes: Diaphragm fatigue from pressure cycling; oil-fill thermal effects; long-term silicon strain-gauge drift; mounting-stress relaxation after first thermal cycle.
Detection: Comparison against a redundant transmitter or a portable reference; zero check at known low-pressure state; HART diagnostic flag.
Mitigation: Specify drift performance ≤ 0.1% URL/year for SIL applications; calibrate at the actual operating pressure rather than mid-range; compare during proof test against a calibrated reference. See <a href="/tools/lambda-to-pfd">λ → PFD</a> for SIL banding.

Process-side blockage / freezing

Root causes: Filled or frozen impulse line (steam condensate, moist gas); wax / asphaltene deposits; ice plug in cold service.
Detection: Output stuck at a single value while process is known to be varying; HART noise diagnostic shows abnormally low signal variance; sometimes only detected on full proof-stroke of the protected function.
Mitigation: Heat-traced or steam-traced impulse lines in cold or condensable service; remote-seal capillary in fouling service; periodic blow-down of impulse lines.

Electronics failure

Root causes: Component failure on the transmitter PCB (capacitor, microcontroller, ADC); electromagnetic-interference-induced upset; lightning surge through the loop.
Detection: Loop current outside 3.6-21 mA NAMUR alarm band; HART communication lost; output stuck at one extreme.
Mitigation: Surge protection on signal and supply; NAMUR NE 43 alarm-current configuration so out-of-range signals fail to a safe state; periodic HART self-diagnostic readout.

Diaphragm rupture / leak

Root causes: Over-pressure beyond static pressure limit; corrosion of wetted diaphragm; mechanical impact during installation.
Detection: Loss of process containment; obvious external leak; output goes off-scale.
Mitigation: Specify wetted-parts material for the process; verify static-pressure rating against worst credible upset; protect upstream with a relief device.

Typical applications

Pressure-shutdown trips on compressors, pumps, separators; level inference via head pressure; flow inference via orifice / venturi ΔP; line-pressure monitoring in custody-transfer; relief-valve pop indication.

How to model in a fault tree

For SIS verification per IEC 61511, the pressure transmitter is the input element of the safety loop; its λ_DU is one of three contributions to the loop PFD (sensor + logic-solver + final-element). NAMUR NE 43 alarm-current configuration shifts a fraction of failures from λ_DU to λ_DD, raising the diagnostic coverage and lowering loop PFD. Redundant transmitters in 1oo2 or 2oo3 voted architectures benefit substantially from Beta-factor CCF being explicit — same impulse-line condensate or freezing affects all transmitters identically.