Blowout Preventer Control System Reliability Primarily Focused on Subplate Mounted (SPM) Valves

Total Page:16

File Type:pdf, Size:1020Kb

Blowout Preventer Control System Reliability Primarily Focused on Subplate Mounted (SPM) Valves Engineering Technology Assessment Center (ETAC) REDACTED FOR PUBLIC USE August 2016 Blowout Preventer Control System Reliability Primarily Focused on Subplate Mounted (SPM) Valves Prepared by Roy Lindley Edited by David McCalvin BSEE Engineering Technology Assessment Center (ETAC) About the Author Roy Lindley is a mechanical engineer and a national security program manager at Argonne National Laboratory. Lindley has over 32 years of experience in conducting and managing engineering programs including multi-discipline evaluations for major U.S. DOE projects on electric utility applications, and various energy conversion technologies. He has a varied technical scope that includes pressure vessels, structural and seismic support design, data acquisition, and code compliance analysis. Lindley is also a security expert that does laboratory testing of security systems and design recommendations. Disclaimer This report was prepared by Argonne National Laboratory (ANL) under contract to the Department of Energy (DOE) through an inter-agency agreement between the Department of the Interior, Bureau of Safety and Environmental Enforcement (BSEE) and the DOE. The opinions, findings, conclusions, and recommendations expressed in the report are those of the authors and they do not necessarily reflect the views or policies of BSEE. This report was prepared as an account of work sponsored by an agency of the United States Government. Neither the United States Government nor any agency thereof, nor UChicago Argonne, LLC, nor any of their employees or officers, makes any warranty, express or implied, or assumes any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product, or process disclosed, or represents that its use would not infringe privately owned rights. Reference herein to any specific commercial product, process, or service by trade name, trademark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation, or favoring by the United States Government or any agency thereof. The views and opinions of document authors expressed herein do not necessarily state or reflect those of the United States Government or any agency thereof, Argonne National Laboratory, or UChicago Argonne, LLC ii | Blowout Preventer Control System Reliability August, 2016 TABLE OF CONTENTS Section Page About the Author ..................................................................................................................... ii TABLE OF CONTENTS ............................................................................................................iii LIST OF FIGURES ....................................................................................................................iv LIST OF TABLES ......................................................................................................................iv ACRONYMS .............................................................................................................................. v EXECUTIVE SUMMARY ........................................................................................................... 1 1.0 INTRODUCTION AND TECHNICAL APPROACH ............................................................. 3 2.0 OVERVIEW OF SPM-BASED BOP CONTROL .................................................................. 5 2.1 BOP-Controlled Well Barriers .............................................................................................. 5 2.2 Typical Subsea Control Hardware ....................................................................................... 6 3.0 API STANDARDS APPLICABLE TO BOP EQUIPMENT ................................................... 8 3.1 Discussion of API Specification 16D .................................................................................... 8 3.1.1 General Description of Specification Requirements ...................................................... 8 3.1.2 SPM Cyclic Design Basis ............................................................................................. 9 3.1.3 SPM System Design Configuration Control .................................................................. 9 3.2 Discussion of API Standard 53 ...........................................................................................10 4.0 CONTROL SYSTEMS ARE A MAJOR BOP DOWNTIME CONTRIBUTOR ......................11 4.1 Prominent Reliability Studies ..............................................................................................11 4.2 Industry’s Reliability Culture ...............................................................................................13 4.3 Key Industry Reliability-Focused Collaborations .................................................................15 4.3.3 Software Tools ............................................................................................................16 5.0 MANY SPMS ARE MANUFACTURED COMMODITIES ....................................................17 5.1 SPM Supply Chain and Marketplace ..................................................................................17 5.2 SPM Design Improvement and Service Parts Approaches .................................................18 5.3 SPM Operational Influences ...............................................................................................19 5.4 SPM Manufacturer Product Quality Enhancements ............................................................20 5.5 SPM Manufacturer Support ................................................................................................21 5.6 SPM Supplier Maintenance Recommendations .................................................................22 5.7 SPM In-Service Maintenance Realities ..............................................................................23 5.8 Commodity Supplier and Service Reliability Initiatives .......................................................25 6.0 FINDINGS AND CONCLUSIONS ......................................................................................26 6.1 Systems Reliability Targets .................................................................................................26 6.2 Offshore Rebuilding of SPMs .............................................................................................27 6.3 Hydraulic Fluid Quality ........................................................................................................27 6.4 API Standard 16D and 53 Reliability-Related Issues ..........................................................28 7.0 RECOMMENDATIONS ......................................................................................................29 8.0 REFERENCES ..................................................................................................................30 Appendix A: Brief History of Subsea BOP Development ...........................................................32 Appendix B: Overview of Current Subsea BOP Control Systems ..............................................33 Blowout Preventer Control System Reliability | iii BSEE Engineering Technology Assessment Center (ETAC) Surface-Supplied Pilot Signal Systems .................................................................................33 MUX Systems .......................................................................................................................34 Appendix C: Hydraulic Basics and SPM Functional Analogy .....................................................36 Appendix D: SPMs Are Key to Critical BOP Safety Functions ...................................................37 Appendix E: Typical SPM Design ..............................................................................................39 Appendix F: SPM Hydraulic Fluid Properties .............................................................................40 Appendix G: Most Mentioned BOP Operational Issues .............................................................42 Appendix H: BOP OEM Monitoring Systems .............................................................................45 Appendix I: Figure Credits .........................................................................................................47 LIST OF FIGURES Figure 1: Example of SPM Valve Vertical Mounting on Horizontal Plate .................................... 6 Figure 2: Example of SPMs Mounted Horizontally within a Control Pod ..................................... 6 Figure 3: Typical SPM Internal Parts Removed from Valve Body ............................................... 7 Figure B- 1: Functional Schematic of Surface Pilot-Operated BOP System ..............................33 Figure B- 2: Functional Schematic of Basic Multiplex BOP Control System (yellow and blue control pods are represented as active and redundant) .....................................................34 Figure C- 1: Basic Double Acting Hydraulic System ..................................................................36 Figure E- 1: Cross Section of a Typical SPM Valve ...................................................................39 LIST OF TABLES Table 1: Reliability Studies Consolidated Data ..........................................................................11 Table 2: Overview of BOP Failures by Subsystem ....................................................................12 Table F- 1: Typical Recommended BOP Hydraulic Fluid Particulate Limits ...............................40 iv
Recommended publications
  • Bop) Control System
    RISK ASSESSMENT OF THE DEEPWATER HORIZON BLOWOUT PREVENTER (BOP) CONTROL SYSTEM April 2000 - Final Report Prepared for: CAMERON CONTROLS CORP. EQE INTERNATIONAL Confidential Treatment Requested by Transocean Holdings LLC TRN-HCEC-00056391 Deepwater Horizon BOP Control System Risk Assessment April 2000 • 4. EVALUATION RESULTS As discussed in the introduction, the evaluation of the fault trees by boolean reduction results in the identification of the minimal cutsets, or the minimum combinations of failures that will result in the occurrence of the undesired event. Each of these cutsets is composed of one or more failures and each of the failures is assigned a probability of failure as discussed in Section 3. The product of the failure probabilities for all failure events in a cutset represents the probability of occurrence of the cutset. The sum of the cutsets for each fault tree model represents the probability of occurrence of the associated undesired event. In addition to these quantitative results, potential problem areas are often identified durmg the development of the model. These are discussed in Section 5. Table 4·1 summarizes the probability of occurrence of each of the undesired events. The number of cutsets shown in the table are those with a probability of occurrence greater than 1E-1 O. The overall potential for any of the events occurring which lead to the failure to perform the EDS function is 3.1 2E-4 (1183 cutsets). which is less than the sum of the individual events in Table 4-1. This is due to the fact that some of the cutset combinations result in failure of more than one of the functions but are correctly only counted once when looking at the overall likelihood.
    [Show full text]
  • Final Report on the Investigation of the Macondo Well Blowout
    Final Report on the Investigation of the Macondo Well Blowout Deepwater Horizon Study Group March 1, 2011 The Deepwater Horizon Study Group (DHSG) was formed by members of the Center for Catastrophic Risk Management (CCRM) in May 2010 in response to the blowout of the Macondo well on April 20, 2010. A fundamental premise in the DHSG work is: we look back to understand the why‘s and how‘s of this disaster so we can better understand how best to go forward. The goal of the DHSG work is defining how to best move forward – assessing what major steps are needed to develop our national oil and gas resources in a reliable, responsible, and accountable manner. Deepwater Horizon Study Group Investigation of the Macondo Well Blowout Disaster This Page Intentionally Left Blank Deepwater Horizon Study Group Investigation of the Macondo Well Blowout Disaster In Memoriam Karl Kleppinger Jason Anderson Roughneck Senior tool pusher Adam Weise Dewey Revette Roughneck Driller Shane Roshto Stephen Curtis Roughneck Assistant driller Wyatt Kemp Donald Clark Derrick man Assistant driller Gordon Jones Dale Burkeen Mud engineer Crane operator Blair Manuel Mud engineer 1 Deepwater Horizon Study Group Investigation of the Macondo Well Blowout Disaster In Memoriam The Environment 2 Deepwater Horizon Study Group Investigation of the Macondo Well Blowout Disaster Table of Contents In Memoriam...............................................................................................................................................1 Table of Contents .......................................................................................................................................3
    [Show full text]
  • Introduction Blowout Preventer Stack Equipment
    WELL CONTROL EQUIPMENT & PROCEDURES WC-1 Introduction Preventing and, when prevention is not sufficient, respond- ing to potential uncontrolled releases of oil or gas ("blow- out") is critical to safe drilling operations. A kick is an influx of formation fluids into the wellbore. A blowout is an uncon- trolled kick exiting the well at surface. Well control is a process that begins with spudding the well and is not complete until the well is put on production and all drilling operations cease. This chapter will examine equipment commonly used in well control and processes used to control kicks of oil or gas. Blowout preventer stack equipment Annular blowout preventer The annular blowout preventer is installed at the top of the BOP stack (Figure WC-1) and has the capability of closing (sealing off) on anything in the bore or completely shutting off (CSO) the open hole by applying closing pressure. The sealing device of an annular blowout preventer is re- ferred to as the “packing element”. It is basically a do- nut-shaped element made out of elastomeric material. To reinforce the elastomeric material, different shapes of me- tallic material are molded into the element. This keeps the elastomeric material from extruding when operating system pressure or wellbore pressure is applied to the bottom of the packing element. Since the packing element is exposed to different drilling environments (i.e., drilling fluid/mud, cor- rosive H S gas and/or temperature of the drilling fluid), it is 2 Figure WC-1: Schematic (top) and photo of annular blowout important to make sure that the proper packing element is preventers.
    [Show full text]
  • Prepared by Supervised By
    Prepared By 4th Student of Special Geology Supervised By Prof. Dr. of Economic Geology Tanta University Faculty of Science Geology Department 2016 1 Abstract An oil spill is a release of a liquid petroleum hydrocarbon into the environment due to human activity, and is a form of pollution. The term often refers to marine oil spills, where oil is released into the ocean or coastal waters. Oil spills include releases of crude oil from tankers, offshore platforms, drilling rigs and wells, as well as spills of refined petroleum products (such as gasoline, diesel) and their by-products, and heavier fuels used by large ships such as bunker fuel, or the spill of any oily refuse or waste oil. Spills may take months or even years to clean up. During that era, the simple drilling techniques such as cable-tool drilling and the lack of blowout preventers meant that drillers could not control high-pressure reservoirs. When these high pressure zones were breached the hydrocarbon fluids would travel up the well at a high rate, forcing out the drill string and creating a gusher. A well which began as a gusher was said to have "blown in": for instance, the Lakeview Gusher blew in in 1910. These uncapped wells could produce large amounts of oil, often shooting 200 feet (60 m) or higher into the air. A blowout primarily composed of natural gas was known as a gas gusher. Releases of crude oil from offshore platforms and/or drilling rigs and wells can be observed: i) Surface blowouts and ii)Subsea blowouts.
    [Show full text]
  • Snubbing Operations
    IRP 15: Snubbing Operations An Industry Recommended Practice (IRP) for the Canadian Oil and Gas Industry Volume 15 - 2020 EDITION: 4 SANCTION DATE: February 2020 Operational Practices and Procedures IRP 15 Snubbing Operations Copyright/Right to Reproduce Copyright for this Industry Recommended Practice is held by Energy Safety Canada, 2020. All rights reserved. No part of this IRP may be reproduced, republished, redistributed, stored in a retrieval system, or transmitted unless the user references the copyright ownership of Energy Safety Canada. Disclaimer This IRP is a set of best practices and guidelines compiled by knowledgeable and experienced industry and government personnel. It is intended to provide the operator with general advice regarding the specific topic. It was developed under the auspices of the Drilling and Completions Committee (DACC). IRPs are provided for informational purposes. Users shall be fully responsible for consequences arising from their use of any IRP. The recommendations set out in this IRP are meant to allow flexibility and must be used in conjunction with competent technical judgment. It is recognized that any one practice or procedure may not be appropriate for all users and situations. It remains the responsibility of the user of this IRP to judge its suitability for a particular application and to employ sound business, scientific, engineering and safety judgment in using the information contained in this IRP. If there is any inconsistency or conflict between any of the recommended practices contained in this IRP and an applicable legislative or regulatory requirement, the legislative or regulatory requirement shall prevail. IRPs are by their nature intended to be applicable across industry, but each jurisdiction may have different or unique legal requirements.
    [Show full text]
  • Deepwater Horizon Blowout Preventer Failure Analysis Report to the U
    Deepwater Horizon Blowout Preventer Failure Analysis Report To the U. S. Chemical Safety and Hazard Investigation Board CSB-FINAL REPORT-BOP(06-02-2014) The Deepwater Horizon BOP stack at NASA-Michoud (with the upper LMRP portion on left) This analysis considered the BOP examinations that were conducted by Det Norske Veritas (DNV) at the NASA Michoud facility near New Orleans, Louisiana. The examinations were in two phases, the first conducted for the Joint Investigation Team and a Phase 2 funded by BP. CSB and Engineering Services were excluded from Phase 2, but subsequently obtained examination information from that period. Contents 1. Introduction...............................................................................................................................3 2. Summary of incident failures and new opinions.......................................................................4 3. Incident summary timeline.......................................................................................................8 4. Incident progression: initial fluid displacement for the negative pressure test.....................13 5. Incident progression: negative pressure test..........................................................................14 6. Incident progression: final displacement and initial oil flow starts.......................................18 7. Incident progression: oil flow increases..................................................................................20 8. Failure of the upper annular and sealing by a
    [Show full text]
  • Towards Automated Condition Monitoring of Blowout Preventer Wellbore Packers
    Towards Automated Condition Monitoring of Blowout Preventer Wellbore Packers Se Un Park1, Rajesh Kumar Bade2, Daniel Barker3, and Daniel Edgardo Viassolo4 1,4Schlumberger, 1430 Enclave Pkwy., Houston, TX, 77077, USA [email protected], [email protected] 2,3Schlumberger, 4601 Westway Park Blvd., Houston, TX 77041, USA [email protected], [email protected] ABSTRACT of mud serves as primary means of controlling wellbore pressure during drilling, a BOP forms the final layer of According to Bureau of Safety and Environmental protection that prevents a loss of well-control (LOWC) event Enforcement (BSEE), in 2017 a total of 45 out of 59 rigs from becoming a hazardous blowout. A study by Per Holland operating in the Gulf of Mexico reported component failures and the Bureau of Safety and Environmental Enforcement of well control related equipment. The aftermath of the oil (2016) reports that approximately 60% of LOWC events spill from the Deepwater Horizon rig provides stark occur during drilling operations. illustration that acceptance of the equipment failure status quo is untenable. In this work, the authors propose novel A BOP is placed on top of wellhead with drilling equipment automated strategies to monitor the health of blowout going through it into a well. Depending on operating context preventers (BOPs) on offshore drilling rigs. Using physics- of LOWC event, a BOP must either isolate wellbore pressure based models, we demonstrate computational detection of by sealing around a tubular or drill pipe (Figure 1) or shear a pressure tests by identifying characteristic features in time- tubular before isolating wellbore pressure. The task of series pressure data.
    [Show full text]
  • Appendix K BOP Leaks
    Appendix K BOP Leaks Appendix K BOP Leaks Appendix K BOP Leaks There were five minor leaks in the Deepwater Horizon BOP control system: three were identified after the BOP stack was latched to the wellhead in February 2010, and two were identified during the post-incident intervention by the remotely operated vehicle (ROV). None of these leaks caused or contributed to the April 20 incident, and they did not adversely impact the functionality or redundancy of the BOP control system to perform as designed in a well control event. The five leaks were as follows: Identified Pre-Incident • Leak on the open-side function of the test ram BOP • Leak on accumulator surge bottle on the upper annular BOP • Leak on the lower annular BOP close function Identified Post-Incident • Leak on a hose fitting to the lock function on the ST Lock circuit • Leak on blind shear ram ST Lock sequence valve to ST Lock chamber The leaks were small in volume and, in some cases, regardless of volume, they would not have adversely impacted the closure of the well-control components.A Functioning of the well-control components relied on the hydraulic supply from the rig via a hydraulic conduit line, and from surface and subsea accumulator storage bottles. Low-volume leaks did not impede functionality because any fluid lost was recharged by the rigid conduit line being supplied by the Cameron Surface Control System, which included 45 40-gallon accumulators that were continuously replenished to a stored pressure of 5,000 psi.1 In the event the hydraulic conduit line was severed or destroyed, eight 80-gallon accumulator bottles on the BOP stack would have fed hydraulic fluid to function the BOP.2 Importantly, the ST Lock circuit leak on the blind shear ram sequence valve to ST Lock lock chamber confirms that the blind shear ram functioned.
    [Show full text]
  • Macondo Investigation Report Volume 3 4/17/2016
    U.S. CHEMICAL SAFETY AND HAZARD INVESTIGATION BOARD INVESTIGATION REPORT VOLUME 3 DRILLING RIG EXPLOSION AND FIRE AT THE MACONDO WELL (11 Fatalities, 17 Injured, and Serious Environmental Damage) DEEPWATER HORIZON RIG MISSISSIPPI CANYON 252, GULF OF MEXICO KEY ISSUES: APRIL 20, 2010 • HUMAN FACTORS • ORGANIZATIONAL LEARNING • SAFETY PERFORMANCE INDICATORS • RISK MANAGEMENT PRACTICES • CORPORATE GOVERNANCE • SAFETY CULTURE REPORT NO. 2010-10-I-OS 4/17/2016 Macondo Investigation Report Volume 3 4/17/2016 [This page left intentionally blank.] 2 Macondo Investigation Report Volume 3 4/17/2016 Contents VOLUME 3 – INTRODUCTION .............................................................................................................. 15 Moving Beyond the Blowout Preventer ...................................................................................................... 19 Volume Overview ....................................................................................................................................... 20 1.0 HUMAN FACTORS ..................................................................................................................... 21 1.1 Macondo Temporary Abandonment Personnel ............................................................................. 25 1.2 Macondo Temporary Abandonment Activities: Four Phases ........................................................ 26 1.2.1 Phase 1: Presetting of the Diverter System Route ............................................................ 27 1.2.2 Phase 2: Displacement
    [Show full text]
  • Deepwater Horizon – Failure of Blowout Preventer (BOP)
    Deepwater Horizon – Failure of Blowout Preventer (BOP) Jim Thomson September 2016 Jim Thomson September 2016 1 20 April 2010, Gulf of Mexico • 11 dead • $350m (2001 cost) platform destroyed • Largest ever oil spill • BP CEO sacked • New regulator (BSEE) created Total BP liability (2016) $61 bn, plus other lesser liabilities: • Anadarko (junior non-operating partner) • MOEX (junior non-operating partner) • Transocean (operator/owner) • Cameron (BOP designer) • Halliburton (drilling contractor) 129 people on board: Final total cost ~$80 bn ?? 6 BP personnel 30 Halliburton Others mostly Transocean Most expensive ever accident (except Chernobyl and Fukushima) Jim Thomson September 2016 2 1. Why didn’t the Blowout Preventer work? 2. Were there any common causes between Deepwater Horizon and the 2005 Texas City Refinery accident? A cautionary tale of bad standards, weak regulation, and minimal compliance Jim Thomson September 2016 3 Deepwater Horizon Sea level 18360 feet (5564 m) 40 feet Blowout 4992 feet from sea level (13 m) Preventer to reservoir (1513 m) to seabed Seabed The BOP was designed and manufactured to API standards by Production Cameron International (Texas), and owned and operated by Casing Transocean (Switzerland) under contract to BP. Cameron: 20000 employees NOT TO SCALE! $8.5 bn turnover (2012) Cameron International was bought by Schlumberger in 2016 SIMPLIFIED! for $14.8 bn. Transocean: 18000 employees $10 bn turnover (2012) Hydrocarbon Jim Thomson September 2016 Reservoirs 4 The role of the BOP was to shear the drill pipe
    [Show full text]
  • Deepwater Horizon Oil Spill Final Programmatic Damage Assessment
    2. Incident Overview Final Programmatic Damage Assessment and Restoration Plan and page 2–1 Final Programmatic Environmental Impact Statement What Is in This Chapter? • Executive Summary • Introduction (Section 2.1): In brief, what happened after the Deepwater Horizon explosion and how did agencies respond? • Explosion, Well Blowout, and Containment (Section 2.2): What happened in the immediate aftermath of the explosion on the Deepwater Horizon mobile drilling unit? • Consequences of the Blowout (Section 2.3): How much oil and what other spill materials were released into the Gulf of Mexico? What response actions were taken to reduce harm to people and the environment from the Deepwater Horizon incident? 2 Executive Summary Executive • References (Section 2.4) Executive Summary On April 20, 2010, the Deepwater Horizon mobile drilling unit exploded, caught fire, and eventually sank, resulting in a massive release of oil and other substances from BP’s Macondo well. Initial efforts to cap the well following the explosion were unsuccessful, and for 87 days after the explosion, the well blasted oil and natural gas continuously and uncontrollably into the northern Gulf of Mexico. According to the U.S. District Court’s findings of fact, approximately 3.19 million barrels (134 million gallons) of oil were released into the ocean (U.S. v. BP et al. 2015), by far the largest offshore marine oil spill in U.S. history. The total volume of oil released is about 12 times more than the 1989 Exxon Valdez spill; given the continuous release for nearly 3 months, the Deepwater Horizon spill was equivalent to the Exxon Valdez spill re-occurring in the same location every week for 12 weeks.
    [Show full text]
  • Upstream Oil & Gas Glossary
    Upstream Oil & Gas Glossary Now including LNG For updates visit esandaengineering.com Upstream oil and gas training specialists Shortlisted for Energy Industry Proud winners of the IHS Spectrum Excellence Award Communications award 2 esandaegineering.com Contents Introduction Glossary Petroleum Chemistry A Brief Oil and Gas History LNG History Some Useful Conversions SPE Petroleum Reserves Categorisation Esanda Course Offering Delivering integrated upstream oil and gas industry training 1 is an independent upstream oil and gas consultancy specialising in industry specific training and field development planning services. Our operations are supported by our UK and Australia offices. Esanda provides upstream professional development training courses, workshops and coaching/mentoring services throughout the world which are delivered by a core team of industry experts, each with over 30 years’ experience. We cover the gamut of upstream industry topics; geology, geophysics, petrophysics, reservoir engineering, drilling, facilities, costing, commercial, financial and accounting. Our training programmes run from specialist breakfast sessions to Masters level courses as well as graduate training programmes of up to 9 months duration. At Esanda we develop long term relationships with our clients and provide follow up coaching/mentoring and online support as well as tailored in-house coaching/ mentoring programmes to suit our client’s needs. Esanda Course Offerings Open course program visit providing ongoing coaching/mentoring. www.esandaengineering.com Follow on support to client’s specific needs Bespoke courses for NOCs and IOCs through our trainer’s practical industry experience Capacity building programmes Esanda courses are individually accredited by the Graduate training programmes UK CPD certification service. Masters level courses in Energy Management Coaching/mentoring programs.
    [Show full text]