EP2474704A1

EP2474704A1 - Monitoring the operation of a subsea hydrocarbon production control system

Info

Publication number: EP2474704A1
Application number: EP11150315A
Authority: EP
Inventors: Naresh Kunchakoori; Gopalakrishna Gudivada
Original assignee: Vetco Gray Controls Ltd
Current assignee: Baker Hughes International Treasury Services Ltd
Priority date: 2011-01-06
Filing date: 2011-01-06
Publication date: 2012-07-11
Anticipated expiration: 2031-01-06
Also published as: BR102012000058A2; CN102591274A; BR102012000058A8; EP2474704B1; SG182906A1; AU2011265528A1; AU2011265528B2; MY152950A; BR102012000058B1

Abstract

A method of monitoring the operation of a subsea hydrocarbon production control system comprises monitoring at least one subsea device of the system and, if the device fails to a fail-safe condition, sending an indication of that by wireless.

Description

Field of the Invention

The present invention relates to monitoring the operation of a subsea hydrocarbon production control system.

Background of the Invention

A shutdown philosophy is employed in the design of production control systems for subsea oil and gas wells, to ensure the protection of personnel, environment and equipment from the consequences that may occur as a result of abnormal operational conditions, accidental release of hydrocarbons or other accidents. This usually entails the inclusion of production shutdown and emergency shutdown mechanisms being built into the system, so that the system fails to a safe condition.
In this respect it is important that the status of all subsea valves and their actuators, which form part of the production control system, are known at all times but, more essentially, after a fail-safe shutdown has occurred. However, situations can arise where this information is not available and where this knowledge is critical for eliminating the problem (such as oil spilling out of a well or pipeline). Recent events in the Gulf of Mexico have demonstrated this need.
Examples of fail-safe shutdowns resulting from subsea failures, where relevant status information cannot be obtained using the existing system functionality, are those which occur between a well Christmas tree and the power distribution and protection module (PDPM) which is installed subsea and is the main subsea interface with Christmas trees providing electrical power, hydraulic power and communications to each Christmas tree. Such failures include:

failure in communications between a Christmas tree and the PDPM;
failure of the power line between a Christmas tree and PDPM;
failure in the hydraulic line between a Christmas tree and the PDPM; and
a combination of the above three failures.

Other situations are possible. A failure in any of these links will result in no information being available topside on valve status.
In all these situations, flow control valves and protective valves go into a fail-safe condition, but there is no means of verifying the actual status of the valves because communication is not possible between the Christmas tree concerned and the PDPM. A means of overcoming this would significantly improve the functional safety of hydrocarbon production control systems.
As prior art, there may be mentioned WO 2009/122168 ; the Internet article "To the last drop", pages 63-66, XP002532134 (www.abb.com/abbreview ); WO 2005/078233 ; US 2006/0159524 A1 ; US 2003/0098799 A1 ; US 2004/0124994 A1 ; US-A-6 798 338 ; GB-A-2 377 131 ; WO 2006/134331 ; GB-A-2 163 029 ; and Ram Somaraju, et al, "Frequency, Temperature and Salinity Variation of the Permittivity of Seawater", Vol. 54, No. 11, November 2006, IEEE Transactions on Antennas and Propagation, IEEEE Service Center, Piscataway, NJ, US, pages 3441-3448, XP011150333 ISSN: 0018-926X.

Summary of the Invention

According to the present invention from one aspect, there is provided a method of monitoring the operation of a subsea hydrocarbon production control system, the method comprising monitoring at least one subsea device of the system and, if the device fails to a fail-safe condition, sending an indication of that by wireless.
According to the present invention from another aspect, there is provided a subsea hydrocarbon production control system, comprising means for monitoring at least one subsea device of the system and means for, if the device fails to a fail-safe condition, sending an indication of that by wireless.
Typically, said indication is sent to a fail-safe monitoring unit, which could be a subsea unit.
Typically, such a subsea unit is in a subsea power distribution and protection module.
Typically, the at least one device comprises at least one of a valve and an actuating mechanism for a valve.
The indication could be sent from fail-safe monitoring means at a tree of the system with which the device is associated. Typically, the system has at least one further such tree from which, if a device associated with it, fails to a fail-safe condition, an indication to that effect is sent by wireless from fail-safe monitoring means of the further tree.
An embodiment of the invention to be described below entails including a separate, independent, dedicated, health monitoring module on a Christmas tree, for monitoring the status of all actuators and valves installed on the Christmas tree and wellhead. The system has its own dedicated subsea wireless communication link capable of communicating information to a wireless receiving system on the PDPM and on other Christmas trees. Thus, in the event of failure of the normal communication links, the wireless channel is available. The module is provided with its own battery back-up to provide power in the event of power supply failure. The module sits alongside the normal process and control equipment in the Christmas tree mounted subsea control module (SCM) and can also be used to enhance the fail-safe decision making process in the SCM, by providing additional confirmation of the state of actuators and valves. If a shutdown should occur, but an indication that a device has gone to a fail-safe condition is not received, then this is an indication of a problem.
The module can also form part of the normal decision making process by adding some intelligence to process the critical data which is related to a fail-safe condition.
Addition of the module also adds redundancy to the system.

Brief Description of the Drawings

Fig. 1 is a schematic diagram of an embodiment of the invention; and
Fig. 2 is a block diagram of a modification which can be made to Fig. 1.

Description of Embodiments of the Invention.

Fig. 1 illustrates an implementation of the invention. In a conventional production control system, a master control station (MCS) 1, installed topside, provides the operator interface with subsea equipment and displays the current state of the various equipments and sensor information, enabling the operator to control the system. The MCS 1 collates data such as the operational state of all subsea valves and data relating to the state of production fluids across an entire oilfield. The MCS 1 interfaces with the subsea installed power distribution and protection module (PDPM) 2 which feeds electric power on lines 3, hydraulic power on lines 4, and communication on a line 5 to a plurality of Christmas trees 6, only two (A and B) being shown.
Each Christmas tree 6 includes a subsea control module (SCM) 7 which controls all the Christmas tree processes by providing hydraulic power to actuate valves mounted on the Christmas tree and at the wellhead. It also receives process instrumentation signals from sensors mounted on the Christmas tree and at the wellhead. These are received and processed in a subsea electronics module (SEM) 8 housed within the SCM 7 and communicated via the system communication link to the PDPM 2, and then topside. Failure of the communications link between a Christmas tree 6 and the PDPM 2 will result in no valve and other status data being available from that tree.
In accordance with the embodiment of the invention, a dedicated fail-safe monitoring module 9 is at each tree 6, which module provides data on the health of the valves, as well as their actuating mechanisms. The module 9 includes its own interfacing, signal conditioning and processing and have its own dedicated sensors. A back-up battery 10 is built-in so that the module can still operate in the event of electrical power failure. Health monitoring of the module 9 would form part of the normal equipment condition monitoring checks and the battery would be kept charged from the normal power supplies.
The production control system is provided with its own subsea wireless communication arrangement to communicate with the PDPM 2, so that in the event of a normal communication channel failure (copper wire, communications-on-power or fibre-optic) it has an alternative independent communication link. More particularly, at each tree 6, there is an RF antenna 11 for sending data to an RF antenna 12 at the PDPM 2 and thence to a fail-safe monitoring unit 13 in the PDPM 2. Thus, each Christmas tree 6 in the overall production well complex has its own SCM 7 and failsafe monitoring module 9 with a subsea wireless link 14. This enables individual Christmas trees to communicate with the PDPM and each other, providing alternative routes for valve and other status information to reach topside.
Fig. 2 illustrates an example of a configuration in which the fail-safe monitoring module 9 with its fail-safe monitoring (FSM) dedicated sensor package 15 is used in conjunction with the SEM 8 and its sensor package 16. When the sensor signals feeding the SEM 8 result in it triggering the fail-safe mechanism, a check can be made against the output from the fail-safe monitoring module 9 to see if this has also triggered a fail-safe mechanism as a result of the data from its dedicated sensor package. A fail-safe mechanism gets executed if either or both the SEM and the fail-safe monitoring system takes the decision to trigger a fail-safe mechanism. This also adds redundancy to the system.

Advantages of using the Invention

The invention can utilise a wireless communication system between topside and subsurface equipment that forms part of the latest hydrocarbon production control system.
There is no need to rely on hardwired communication systems using communications-on-power techniques or separate wired communication cables. The availability of subsea status information can provide immediate confirmation of a fail-safe situation and enable a rapid response to be achieved to a developing situation.
A rapid response to dangerous situations can save lives, significantly reduce environmental pollution and thereby reduce the cost of rectifying situations which arise.

Claims

A method of monitoring the operation of a subsea hydrocarbon production control system, the method comprising monitoring at least one subsea device of the system and, if the device fails to a fail-safe condition, sending an indication of that by wireless.
A method according to claim 1, wherein said indication is sent to a fail-safe monitoring unit.
A method according to claim 2, wherein said unit is a subsea unit.
A method according to claim 3, wherein said subsea unit is in a subsea power distribution and protection module.
A method according to any preceding claim, wherein the at least one device comprises at least one of a valve and an actuating mechanism for a valve.
A method according to any preceding claim, wherein the indication is sent from fail-safe monitoring means at a tree of the system with which the device is associated.
A method according to claim 6, wherein the system has at least one further such tree from which, if a device associated with it, fails to a fail-safe condition, an indication to that effect is sent by wireless from fail-safe monitoring means of the further tree.
A subsea hydrocarbon production control system, comprising means for monitoring at least one subsea device of the system and means for, if the device fails to a fail-safe condition, sending an indication of that by wireless.
A system according to claim 8, wherein, in use of the system, said indication is sent to a fail-safe monitoring unit of the system.
A system according to claim 9, wherein said unit is a subsea unit.
A system according to claim 10, wherein said subsea unit is in a subsea power distribution and protection module.
A system according to any of claims 8 to 11, wherein the at least one device comprises at least one of a valve or an actuating mechanism for a valve.
A system according to any of claims 9 to 12, wherein, in use of the system, the indication is sent from fail-safe monitoring means at a tree of the system with which the device is associated.
A system according to claim 13, wherein the system has at least one further such tree from which, if a device associated with it, fails to a fail-safe condition, an indication to that effect is sent by wireless from fail-safe monitoring means of the further tree.