GB2352261A

GB2352261A - Apparatus and method for remote firing of a perforating gun

Info

Publication number: GB2352261A
Application number: GB0026179A
Authority: GB
Inventors: Vladimir Vaynshteyn
Original assignee: Schlumberger Holdings Ltd
Current assignee: Schlumberger Holdings Ltd
Priority date: 1998-07-22
Filing date: 1999-07-19
Publication date: 2001-01-24
Anticipated expiration: 2019-07-19
Also published as: GB2352261B; GB0026179D0

Abstract

An apparatus for remotely firing a perforating gun in a subterranean well includes a downhole energy source (e.g. a battery) (52, figure 3), a detonator 56, first and second switches having different states to transfer energy from the energy source to the detonator and first and second controllers to independently detect a predetermined stimulus transmitted from the surface of the well to cause the switches to enter a state where they allow energy transfer, and hence the gun to fire. The predetermined stimulus preferably indicates a unique command not used for any other downhole purpose and may be in the form of a fluid pressure pulse or movement of a line used to position the apparatus downhole. In a method for firing a perforating gun, a predetermined stimulus is transmitted downhole, at least two controllers detect the stimulus and a downhole energy source is coupled to a detonator based on detection of the stimulus by both controllers.

Description

2352261 22.1211 D I SYSTEM FOR INDICATING THE FIRING OF A PERFORATING GUN

BACKGROUND

The invention relates to a system for indicating the firing of a perforating gun.

Referring to Fig. 1, a typical perforating gun string 10 may have several perforating guns 12. Each perforating gun 12 may have phased shaped charges 14 that are used to penetrate a casing of a subterranean well and form fractures in surrounding formations to enhance the production of well fluids from these formations. Because the shaped charges 14 may potentially inflict harm if the charges 14 prematurely detonate, several safety mechanisms typically are used to prevent accidental detonation of the shaped charges 14.

For example, the shaped charges 14 may use detonators that are constructed with secondary explosives that, as compared to primary explosives, are very difficult to detonate. To detonate these type of detonators, the perforating gun string 10 may include a firing head I I that is associated with each perforating gun 12. In this manner, the firing head I I may include a detonator 15 that, when activated, detonates a secondary explosive to initiate a shockwave on a detonating cod 17 that extends to the shaped charges 14. The shockwave, in turn, propagates down the detonating cord 17 and detonates the shaped charges 14.

The detonation of the perforating gun 12 may be rcmotely controlled from the surface of the well, To accomplish this, stimuli may be transmitted downhole to the firing head I I to cause the detonator 15 to initiate the shockwave on the detonating cord 17. As examples of techniques that are used to transmit the stimuli, an internal passageway of the string 10, an annulus that surrounds the string 10, a tubing of the string 10, or a line (a slickline or a wireline, as examples) extending downhole may all be used. Other techniques may also be used to transmit command stimuli downhole.

I Detonation of the primary explosive typically requires energy from an energy source, a source that may either be located at the surface of the well or downhole in the perforating gun string 10. If the energy source is at the surface of the well, then an operator may disconnect the energy source until firing of the perforating guns 12 is desired. However, unfortunately for the other case, connection./disconnection of a downhole energy source may present difficulties, as circuitry (not shown) of the firing head I I must connect/disconnect the energy source. For example, a battery 16 of the string 10 may provide the energy needed to cause the detonator 15 to initiate a shockwave on the detonating cord 17. However, a problem with this arrangement is that the battery 16 is located downhole with the detonator 15. Thus, if the circuitry that couples the battery 16 to the detonator 15 should fail, the shaped charges 14 may be inadvertently detonated.

An operator at the surface of the well needs to know if the firing of a particular perforating gun 12 is successful. If not, then the operator may attempt to fire the perforating gun 12 again or disarm the perforating gun 12 before retrieving the gun 12. When the perforating gun 12 is attached to a tubing, one way to determine whether the perforating gun 12 fired is to place sensors on the tubing at the surface and monitor the acoustic energy that emanates from the tubing. However, this technique is not always reliable due to the length of the string and the contact between the string and the casing of the well, factors that may greatly attenuate acoustic signals that propagate uphole.

Thus, there is a continuing need to address one or more of the abovestated problems.

SUMMARY

In one embodiment of the invention, a system for use in a subterranean well includes a tubing, a perforating gun, a detonator and circuitry. The detonator is adapted to fire the perforating gun. The circultry is adapted to determine whether the perforating gun has fired and based on the determination, operate a valve of the tubing to transmit a stimulus to the surface of the well to indicate whether the perforating gun has fired.

Other embodiments will become apparent from the following description, from the drawing and from the claims.

BRIEF DESCRIPTION OF THE DRAWING

Fig. I is a schematic view of a perforating gun string of the prior art.

Fig. 2 is a view of a perforating gun string according to an embodiment of the invention.

Fig. 3) 'Is a view of a perforating gun tool according to an embodiment of the invention.

Fig. 4 is an electrical schematic diagram of the perforating gun string of Fig. 2.

Figs. 5, 6 and 7 are charts illustrating infori-nation communicated between a fire control circuit and detonators of Fig. 4.

Fig. 8 is a waveform of a signal illustrating a communication protocol between the fire control circuit and the detonators.

Fig. 9 is an electrical schematic diagram of the fire control circuit of Fig. 4.

Figs. 10, 11 and 12 are timing diagrams illustrating signals generated by the fire control circuit.

Figs. I ') and 14 are alternative electrical schematic diagrams of a switch of Fig 9.

Fig. 15 is an electrical schematic diagram of the initiation control circuit of Fig. 4.

Fig. 16 is a more detailed electrical schematic diagram of the initiation control circuit of Fig. 15.

Fig. 17 is a flow diagram illustrating an algorithm to indicate the firing of a particular perforating gun.

Fig. 18 is a schematic diagram of a perforating gun string according to an embodiment of the invention.

Figs. 19 and 20 are waveforms of a pressure fluid illustrating stimuli to cause and indicate firing of a perforating gun according to different embodiments of the invention.

Fig. 21 is a cross-sectional view of a valve of the perforating gun string of Fig. 18 according to an embodiment of the invention.

DETAILED DESCRIPTION

Referring to Fig. 2, 'In a subterranean well, an embodiment, 50 of a tubular perforating gun string in accordance with the invention includes a battery 52 that may be used to fire multiple perforating guns 59 of the gun string 50. Although each perforating 3 gun 59 is fired by an associated electrical detonator, or initiator module 56 (of the gun string 50), the battery 52 remains electrically isolated from the initiator modules 56 until a unique detonation command (i.e., a command used for no other purpose than detonation) is sent from the surface of the well to begin a firing sequence for the guns 59. To accomplish this, the perforating gun string 50 includes a fire control circuit 54 that controls the connection of the battery 52 to the initiator modules 56. The fire control circuit 54, in turn, includes redundant circuits (described below) that independently verify the reception of the detonation command before the initiator modules 56 are connected to the battery 52.

In some embodiments, the perforating gun string 50 may include multiple perforating gun assemblies 60. In this manner, each assembly 60 may include one initiator module 56 and one perforating gun 59. Referring also to Fig. 4, after reception of the detonation command is verified, the fire control circuit 54 selectively transmits commands (described below) to the initiator modules 56. In response, an initiation control circuit 61 of a selected initiator module 56 fires the associated gun 59 by activating an exploding foil initiator (EFI) 58 of the initiator module 56. When activated, the EFI 58 initiates a shockwave on an associated detonating cord 51 that extends to shaped charges of the associated gun 59. The shockwave from the detonator cord 51 fires the shaped charges, and thus, fires the gun 59.

As described below, the string 10 may include circuitry that is located downhole in the approximate vicinity of the perforating guns 59. In this manner, the circuitry may detect the firing of a particular perforating gun 59 and use a valve to transmit a stimulus uphole to indicate the firing of the perforating gun 59. Due to this arrangement, a stronger indication of the firing is received at the surface of the well. This is in contrast to conventional systems in which such factors as the length of the string and contact between the string and the casing cause large attenuation of the acoustic energy that propagates uphole, thereby making the firing of the perforating gun harder to detect.

In some embodiments, after the fire control circuit 54 causes a particular initiator module 56 to fire its associated perforating gun 59, a circulation valve module 350 (of the gun string 50) that is located downhole (in the vicinity of the perforating guns 59) may detect the firing of the perforating gun 59 and transmit a stimuli uphole. In this 4 manner, the valve module 350 is used to selectively alter fluid communication between the central passageway of the string 50 and the annulus 46 to indicate that the perforating gun 59 has been fired. As depicted in Fig. 2, in some embodiments, the circulation valve module 350 may be located above a packer 47.

In some embodiments, the fire control circuit 54 may detect the firing and control the circulation valve module 350 to transmit the stimuli uphole. This arrangement may include wires that extend through the packer 47 and electrically couple the circulation valve module 350 and the initiator modules 56 for purposes of directly communicating the firing of a perforating gun 59 to the circulation valve module. In some embodiments, the fire control circuit 54 may use a power line 82 (see Fig. 4) to serially communicate with a particular initiator module 56 for purposes of instructing the initiator module 56 to fire its associated perforating gun 59. The firing of the perforating gun 59 cuts the power line 82 near the initiator module 56, an event that severs communication between the initiator module 56 and the fire control circuit 54. In some embodiments, the fire control circuit 54 performs a test to deten-nine if a disruption in communication has occurred for purposes of determining whether the perforation gun 59 has fired. In this manner, the fire control circuit 54 first instructs the initiator module 56 to fire its associated perforating gun 59, and subsequently, the fire control circuit 54 attempts to communicate with the initiator module 56. If the initiator module 56 does not respond, then the fire control circuit 54 operates the valve 350 to transmit one or more pressure pulses uphole to indicate that the perforating gun 59 has fired. Alternatively, the fire control circuit 54 may use a sensor (a pressure or acoustic sensor, for example) to detect the firing of a perforating gun 59.

In other embodiments, the circulation valve module.350 operates independently from the fire control circuit 54. In this manner, in these embodiments, the circulation valve module 350 may include a pressure sensor (in contact with the string 50, the fluid in a central passageway of the string 50 or the fluid in the annulus of the string 50, as examples) to independently detect a stimulus that is communicated downhole for purposes of firing a particular perforating gun 59. Afterwards, the circulation valve module 350 may use a sensor (a pressure or acoustic sensor, for example) to detect firing of the perforating gun 59.

The circulation valve module 350 may create the pressure pulses by selectively restricting the flow of fluid between the central passageway of the gun string 50 and an annulus 46 (see Fig. 2) that surrounds the gun string 50. As an example, the circulation valve module 350 may create a pressure pulse to indicate firing of the gun 59 by momentarily decreasing the pressure in the central passageway of the string 50. In this manner, in some embodiments, the central passageway may contain a column of generally stationary fluid, and the circulation valve module 350 creates a negative pressure pulse (as sensed at the surface of the well) by momentarily allowing some of the fluid to escape into the annulus 46. Other embodiments to indicate firing of a perforating gun 59 are described below.

In some embodiments, remote control is used to send commands downhole, as the commands are transmitted to the fire control circuit 54 via stimuli that are transmitted downhole, such as via pressure pulses applied to hydrostatic fluid present in the annulus 46 of the well. The annulus 46 is the annular space accessible from the surface of the well that is between the outside of the string 10 and the interior of a casing 48 of the well. In some embodiments, a duration of the pressure pulse, a pressure of the pressure pulse, and the number of pressure pulses in succession form a signature that uniquely identifies each command. The fire control circuit 54 uses at least one pressure sensor 53 in contact with the hydrostatic fluid in the annulus 46 to receive the commands.

Alternatively, in other embodiments, the commands may be transmitted do\,, ,nhole via other types of stimuli. In this manner, stimuli maN be transmitted downhole via a passageway of the tubing of the string 10, via a casing of the string 10, or via a downhole line, as a few examples. For the case of the downhole line, a ",ireline or a slickline, for example, may be used to lower perforating gun assemblies 60 do"%rnhole when the assemblies 60 are part of a perforating tool 70 (see Fig. 3). In this manner, the line may impart a predetermined movement (a velocity or an acceleration) on the tool 70. This predetermined movement, in turn, indicates downhole commands, such as the detonation command, that are decoded by a motion sensor (not shown) of the tool 70. Similar to the perforating gun string 50, the tool 70 may have one or more perforating gun assemblies 60, the fire control circuit 54, and the battery 52. The perforating gun 6 tool 70 may be alternatively attached to a coiled tubing which may be used in the ways described above to send stimuli downhole.

Referring back to Fig. 4, the fire control circuit 54 is configured to receive the stimuli transmitted down-hole and selectively connect the battery 52 to the initiator modules 56 only if several conditions are met, as described below. Otherwise, the battery 52 remains isolated from the initiator modules 56, and the perforating guns 59 cannot be fired. To accomplish this, the fire control circuit 54 is coupled between the battery 52 and a power line 82 extending to the initiator modules 56. A power line 81 extends between the battery 52 and the fire control circuit 54. If the fire control circuit 54 detects an external fault condition (e. g., the presence of water near circuitry of the tool) or the partial failure of the fire control circuit 54 itself, the fire control circuit 54 shorts the battery 52 to ground which blows a fuse 80 that is serially coupled between the battery 52 and ground. Once the fuse 80 is blown, power from the battery 52 cannot be furnished to the initiator modules 56 which allows the tool 50 to be safely extracted from the well and serviced.

If no fault conditions exist and the fire control circuit 54 is operating properly, then the fire control circuit 54 monitors for transmitted downhole stimuli to detect a detonation command. In some embodiments, the detonation command is a partial key. When the fire control circuit 54 detects a valid (discussed below) detonation command key, the fire control circuit 54 must generate at least three fire control keys. The fire control circuit 54 does not contain within a complete fire key, but only a partial key. In this manner, the partial detonation command key received from the surface must be combined with the internal partial key to form the fire control keys. The importance of this sequence is to prevent the fire control circuit from accidentally jumping to a subroutine and generating a firing sequence without a valid command.

Referring also to Fig. 9, after at least three fire control keys are generated, the fire control circuit 54 starts a sequence of events to connect the battery 52 to the power line 82. When a primary processor 120 and a secondary processor 126 have generated at least three keys that may or may not be valid keys, the processors each send out the first key each to start associated synchronous timers, 122 and 129, respectively. Immediately thereafter, the processors 120 and 126 each start firmware timers. If the key was invalid, 7 the hardware will terminate the sequence by blowing the fuse 80 between the battery 52 and fire control circuit 54. If the key was valid, a certain time later, for example 32 seconds, the processors 120 and 126 send out the second key each. If the key is invalid, the hardware will terminate the sequence by blowing the fuse 80 between the battery 52 and fire control circuit 54. If the key is valid, the key will open (unlock) shunt switch(es) I 10 and 112 and a certain time later (10 milliseconds (ms), for example), the processors 120 and 126 each send out a third key. If the key is invalid, the hardware will terminate the sequence by blowing the fuse 80 between the battery 52 and fire control circuit 54. If the key is valid, the key will close series switches 106 and 108. The battery 52 is now connected to one of the initiator modules 56, as described below.

Once the battery 52 is connected, the fire control circuit 54 selectively and serially communicates with the initiator modules 56 (via the power line 82) to fire the guns 59. Besides selectively instructing the initiator modules 56 to fire the guns 59, the fire control circuit 54 may also selectively request and receive status information from the initiator modules 56. In some embodiments, the guns 59 may be sequentially fired, beginning with the gun 59 farthest from the surface of the well and ending with the gun 59 closest to the surface of the well. In some embodiments, if the closest gun 59 to the fire control circuit 54 is otherwise fired first, the detonation of the detonation cord and shaped charges will cut the power line 82, and thus, no other gun can be fired. Each initiator module 56 has a mechanism to electrically disconnect the power line 8-2 from the next gun 59 below.

Although other addressing schemes may be used. in some embodiments, the fire control circuit 54 may communicate with the initiation control circuit 61 of each initiator module 56, one at a time, beginning with the initiation control circuit 61 nearest from the fire control circuit 54. Each initiation control circuit 61 has a switch 57a which serially couples the terminals of each initiation control circuit 61 to adjacent initiator modules 56 and a switch 57b to connect the power line 82 to circuitry of the initiation control circuit 61. The switches 57a and 57b closest to the fire control circuit 54 are connected to the power line 82. Initially, all of the switches 57a are open which permits the fire control circuit 54 to connect the battery 52 (via the appropriate switch 57b) to communicate with the nearest initiator module 56 first.

8 In communicating with one of the initiator modules 56, the fire control circuit 54 either fires the perforating gun 59 associated with the initiator module 56 or selects the next initiator module 56. When the next gun is selected, the switch 57a of the currently selected initiator module 56 closes, and the switch 57b of the currently selected initiator module 56 opens. In some embodiments, the above-described process may be used to find the bottom gun 59 and fire this gun 59 first.

Referring to Fig. 5, in some embodiments, the initiation control circuit 61 may perform many operations in response to many different types of commands, which include, as examples, control commands and test commands. Control commands such as ID, NEXT_GUN, and FIRE_GUN, in some embodiments, control primary downhole functions.

The fire control circuit 54 sends either the FIRE-GUN command to actuate the initiation control circuit 61 or the NEXT-GUN command to deselect the initiation control circuit 61 that is currently coupled to the fire control circuit 54. Next, the fire control circuit 54 selects the next farther away (as measured from the fire control circuit 54) initiation control circuit 61 from the deselected initiation control circuit 6 1. After the bottom gun 59 is found, the fire control circuit 54 transmits the FIRE-GUN command. After the selected initiation control circuit 61 fires the associated perforating gun 59, a new detonation command must be received by the fire control circuit 54 and processed using the abovedescribed technique before firing the next available perforating gun 59.

Referring to Figs. 6 and 7, the initiation control circuit 61 may, in communications with the fire control circuit 54, communicate status information. After the fire control circuit 54 has detected a valid detonation command and the battery 52 Is connected to one of the initiator modules 56, the initiation control circuit 61, when selected, communicates a PRESENCE status to the fire control circuit 54 acknowledging presence and readiness for a command. The initiator module 56 closest to the fire control circuit 54 is selected by default while all others are selected by command. Each command issued by the fire control circuit 54 is answered by the initiation control circuit 61 with an appropriate STATUS or an ERROR STATUS. The primary downhole command acknowledge responses are for ID, NEXT-GUN, FIRE_GUN, and for initiation control circuit error. All other acknowledge responses are for function testing.

9 The ID command initiates an identification (ID) status which causes the initiation control circuit 61 to transmit an acknowledge response, a year and week that the module was manufactured, an indication of a serial number, an indication of a version of the firmware, and a checksum for correct transmission detection.

The NEXT command initiates a bypass of the initiation control circuit 61, and as a result, the next initiator module 56 further form the fire control circuit 54 is selected. The FIRE-GUN command initiates the firing of the associated perforating gun 59. A status is always sent to acknowledge the reception of a command before the initiation control circuit 61 executes the command. A time delay is incorporated between the status acknowledging the reception of a command and the execution of the command by the initiation control circuit 61 which permits the fire control circuit 54 to terminate the execution of the command if the command is incorrect. If the initiation control circuit 61 receives an invalid command, the initiation control circuit 61 returns an ERROR status.

Referring to Fig. 18, in some embodiments, the fire control circuit 54, the perforating guns 59 and the initiator modules 56 may form part of a string 402 of a system 400. In this manner, the system 400 does not include a packer, and as a result, fluid may be circulated through a circulation valve module 404 between the central passageway of the string 402 and an annulus that surrounds the string 402. Referring also to Fig. 19, the fire control circuit 54 may operate the circulation valve module 404 to indicate the firing of a particular perforating gun 59. In this manner, a pressure P of the circulating fluid may be increased (as indicated by a pressure ramp 140) by restricting the flow to increase the pressure P to a baseline pressure level P0. Next, the flow Is restrictively altered to cause pressure pulses 412 in the fluid that indicate the detonation command for a particular perforating gun 59. In some embodiments, after the targeted perforating gun 59 fires, the fire control circuit 54 recognizes this occurrence and causes the circulation valve module 404 to momentarily close to increase the pressure in the tubing to generate a positive pressure pulse 414 (relative to the baseline pressure P.),. a stimulus that propagates to the surface of the well to indicate firing of the perforating gun 59.

In some embodiments, the fluid does not circulate through the central passageway of the string 402 and the annulus, as described above. Instead, the fluid is generally stationary inside the central passageway of the tubing 402, and after the firing of the perforating gun 59, the fire control circuit 54 causes the circulation valve module 404 to momentarily open to generate a negative pressure pulse 416 (relative to the baseline pressure P.), as depicted in Fig. 20.

In some embodiments, the circulation valve module 404 includes a pressure sensor to detect the firing of the perforating gun, as described below. In this manner, the circulation valve module 404 may either be notified by the fire control circuit 54 or use the pressure sensor to independently detect the detonation command for a perforating gun 59. The pressure sensor may then monitor the downhole acoustic energy to detect firing of the particular perforating gun 59.

Alternatively, the fire control circuit 54 may determine whether the gun 59 has been fired and then interact with the circulation valve module 404 accordingly. For example, the fire control circuit 54 may include a pressure sensor to detect firing of the perforating gun 59 or may attempt to communicate with the initiator module 56 to verif) the firing of the gun 59, as described below.

Referring to Fig. 17, in this manner, the fire control circuit 54 may execute an algorithm 300 to fire the selected perforating gun 59. First, the fire control circuit 54 ify (block 302) the status of the associated initiator module 56 by communicating may verl with the initiation control circuit 61 of the initiator module 56. Based on the information communicated from the initiation control circuit 61, the fire control circuit 54 determines (diamond 304) whether the initiator module 56 is ready to be detonated. If not, in some embodiments, the fire control circuit 54 aborts the detonation and waits for further command(s) from the surface of the well.

If the fire control circuit 54 determines (diamond 304) that the initiator module 56 is ready to be detonated, the fire control circuit 54 transmits (block 306) the FIRE-GL N, command to cause the initiator module 56 to fire the perforating gun 59. Afterwards, the fire control circuit 54 attempts to communicate with the initiator module 56. For example, the fire control circuit 54 may transmit an ID command requesting identification information from the initiator module 56. If the fire control circuit 54 determines (diamond 310) that the initiator module 56 did not respond, then the fire control circuit 54 assumes that the perforating gun 59 has fired. In response, the first 11 control circuit 54 operates (block 312) the valve module 404 via control lines 351 (see Fig. 4) to indicate the firing of the perforating gun 59. Otherwise, the fire control circuit 54 assumes that the perforating gun 59 did not fire, and the fire control circuit 54 waits for further command(s) from the surface of the well.

Other arrangements are possible.

Referring to Fig. 8, for communication purposes, a voltage level VLINE of the power line 82 is biased at a threshold voltage level VTH (e.g., nine volts). A logic zero corresponds to the voltage level VLE being below the voltage level VTH (e.g., eight volts), and a logic one corresponds to the voltage VLIN, being above the voltage V TH (e-g., ten volts). Besides the logical voltage levels, several other measures are in place to maximize the accuracy of serial communications with the initiator modules 56. For example, the duration of a logic zero pulse 150 is one third the duration of a logic one pulse 152. All pulses (i.e., logic one or logic zero pulses) are separated by a separation pulse (a pulse having a logic one voltage level) that has a duration equal to sum of the durations of the logic zero 150 and logic one 152 pulses. The voltage level Vj_r;F is normally at the logical one level if the line 82 is not negated (i.e., pulled to the logic zero voltage level) by one of the initiator modules 56 or the fire control circuit 54. To indicate the beginning of a serial transmission, the line 82 is negated for a start pulse 1-54 that is twice the duration of the logic zero pulse 150.

Referring-, to Fig. 9, to minimize the possibility of connection of the battery 52 to the initiator modules 56 due to partial or total failure ofthe fire control circuit 54, the fire control circuit 54 has two circuits 100 and 102 which must both independently verify reception of the detonation command before the battery 52 is connected to the initiator modules 56. In this manner. no perforating guns 59 may be fired if one of the circuits 100 or 102 falls and incorrectly verifies reception of the detonation command. To accomplish this, the circuit 100 controls a s\vitch 108 that is coupled in series with the batter), 52 (and line 92) and a switch 112 that is coupled in parallel with the battery 52. Similarly, the circuit 102 controls a switch 106 that is coupled in series with the battery 52 (and line 82) and a switch I 10 that is coupled in parallel with the battery 52. Thus, to connect the battery 52 to the initiator modules 56, the parallel switches 110 and 112 must be opened, and subsequently. the series switches 106 and 108 must be closed.

12 After initial power-up of the circuitry of the tool, the circuits 100 and 102 enter a safe state (the state of the fire control circuit 54 before the tool is lowered downhole) in which the circuits 100 and 102 ensure that the series switches 106 and 108 are open and the shunt switches I 10 and 112 are closed. The circuits 100 and 102 remain in the safe state (assuming no malfunction in the fire control circuit 54 occurs) until the circuits 100 and 102 open the parallel switches I 10 and 112 and close the series switches 106 and 108. If both circuits 100 and 102 do not enter the safe state after reset, fault detection logic 130 closes another switch I 12 (normally open) that is in parallel with the batter), 52 to blow the fuse 80 ( see Fig. 4).

The circuit 100 has the processor 120 (an eight bit microcontroller, for example) that interacts with the sensor(s) 53) to detect the stimuli transmitted downhole. Based on the detected stimuli, the processor 120 extracts the command(s) transmitted from the surface of the well and thus, eventually extracts the detonation command.

Referring also to Figs. 10, 11 and 12, to ensure that the processor 120 is not malfunctioning, the circuit 100 has a timer 122 that is used to establish a time interval window 140 (as indicated by an output signal of the timer 122 called ENI) of a predetermined duration (e.g., sixty-four seconds) in which the battery 52 is to be connected to the initiator modules 56 (i.e., switch 108 is closed and switch 112 is opened) and in which the perforating guns 59 are to be fired. When the processor 120 detects the detonation command, the processor 120 enables the timer 122 to measure a time interval T I of a predetermined duration (e.g., sixty- four seconds). The \vindo\,\' 140 begins (as indicated by the assertion of the ENI signal) when the time interval TI elapses.

While the timer 122 is measuring the time interval TI, the processor 120 is internally and independently measuring another time interval T2 of a predetermined duration (e.g., sixty-five seconds) that is slightly longer in duration (e.g., one second longer) than the time interval T1. At the end of the time interval T2, the processor 120 attempts to open the parallel switch 112. If the window 140 exists, switch logic 124 allows the processor 120 to open the parallel switch 112. Otherwise, the switch logic 124 keeps the parallel switch closed 112.

13 After the time interval T2 elapses, the processor 120 measures another successive time interval T3 of a predetermined duration sufficient to allow the parallel switch 112 to open (e.g., 10ps) before attempting to close the series switch 108. If the window 140 exists, the switch logic 124 allows the processor 120 to close the series switch 108. Otherwise, the switch logic 124 keeps the series switch 108 open.

After the time interval T3 elapses, the processor 120 measures another successive time interval T4 of a predetermined duration (e.g., thirty-one seconds) which is equivalent to the time left in the window 140. Just before (e.g., 10ps before) the time interval T4 elapses, the processor 120 opens the series switch 108 (if not already open). When the time interval T4 expires, the processor 120 closes the parallel 112 (if not already closed) which returns the circuit 100 to the safe state.

The circuit 102 has a processor 126, switch logic 128, and a timer 11-9 that behave similarly to the processor 1220, switch logic 124, and timer 122, respectively, to control the series switch 106 and the parallel switch 110. Instead of monitoring the output of the sensor 53 directly, the processor 126 receives an indication of the output of the sensor 53 from the processor 120 and independently verifies the signature of the pulses present in the hydrostatic fluid in the annulus 46 to extract commands sent from the surface of the well.

The processor 120 may include a non-volatile interrial memory (an EPROM memory, for example) or may be coupled to a non-volatile exterrial memory that stores a program 352 that causes the processor 120 to, when the processor 120 executes the program, perform the functions described above. In this manner, the program 352) may also cause the processor 120 to perform the algorithm 300 (described above) and use the control lines 351 to operate the valve 350.

To verify that both circuits 100 and 102 come up in the safe state after power up of the fire control circuit 54, the fault detection logic 130 monitors the outputs (CMDI[15:0] and CMD2[15:0]) of the processors 120 and 126 to ensure these outputs indicate the processors 120 and 126 are in the safe state (e.g., "10100101b," wherein the suffix "b" denotes a binary representation). The fault detection logic 130 also monitors the output of an oscillator H 5 which is used to clock the counters 122 and 129 and the processors 120 and 126. In this manner, if the fault detection logic 130 detects failure of 14 the oscillator 115, the fault detection logic 130 closes the parallel switch 112 which blows the fuse 80. As a result, if the oscillator 115 temporarily falls while the too] 50 is downhole and the fire control circuit 54 is not in the safe state, the battery 52 does remain connected to any of the initiator modules 56 should the oscillator 115 revive after the too] 50 is brought to the surface. The fault detection logic 130 also receives the outputs of several water sensors 131 selectively placed around the circuitry of the tool 50. In this manner, if water is detected in the presence of the circuitry of the tool 50, the fault detection logic 130 closes the parallel switch 112 and blows the fuse 80. The fault detection logic 1')0 also monitors the terminal voltage of the battery 52 (as indicated by a signal called V111T) and closes the switch 112 should the terminal voltage exceed predetermined limits.

The fire control circuit 54 has a transmitter 116 and a receiver 118 which the processor 120 uses to serially communicate over the line 82) with the initiation control circuits 61 of the initiator modules 56. The input of the receiver 118 and the output of the transmitter 116 are connected to the output side of a current limiter 114 that is serially coupled between switch 108 and line 82. When fire control circuit 54 has completed the communication protocol, fire control circuit 54 applies full battery 52 power to initiation control circuits 61 by closing a bypass switch 115 to fire the associated perforating gun 59.

Referring to Fig. 13, as an example of the structure of the switches, the switch 106 may have a driver circuit 183) that has output terminals that are coupled to the gate and source of an n-channel metal oxide fieldeffect (NMOS) transistor 184. The current path of the transistor 184 is coupled between the line 81 and the current path of switch 108- The input of the drive circuit is connected to the switch logic 128.

Alternatively, as another example, the switch 106 may include an NMOS transistor 300 that has its drain-source path coupled between the line 81 and the switch 108. The gate-source voltage across the transistor 300 may be established by a resistor 302 that has one terminal coupled to the gate and one terminal coupled to the source of the transistor 300. Another NMOS transistor 304 of the switch 106 may have its drainsource path coupled between the gate of the transistor 300 and ground. The gate of the transistor 304 may be coupled to the switch logic 128.

The other switches 108, 110 and 112 may be constructed in a similar manner to the switch 106. Each switch 106, 108, 110, 112 has two states: an open state (in which the switch does not conduct) and a closed state (in which the switch conducts). The connection (i.e., a serial connection or a parallel connection) of the switch 106, 108, 110, 112 governs which state of a particular switch permits energy to flow from the battery 52 to the initiator module 56.

Referring to Fig. 15, in some embodiments, each initiation control circuit 61 may have a processor 172 that controls a switch circuit 57 (including the switches 57a and 57b) as well as operations of a fly-back, switching converter 170 (used to boost the voltage of the battery 52) and communications with the fire control circuit 54. The communications of the initiation control circuit 61 are accomplished via a receiver 176 and a transmitter 178 which are coupled to the line 82 and the processor 172.

When power is applied to initiation control circuits 61, the default setting of switch 57a is open to disconnect the initiation control circuit 61 from the other initiator modules 56. and the switch 57b is closed to power the immediate initiation control circuits 61 when instructed to do so bv the fire control circuit 54. When the switch circuit 57 opens the switch 57a, the switch circuit 57 also closes the switch 57b which connects the battery 52 to the converter 170. Upon this occurrence, the processor 172 interacts with the converter 170 to boost the terminal voltage level of the battery 52 to a higher voltage level which is present at the output of the converter 170. A discharge circuit 174 (a gas discharge tube, for example) discharges an output capacitor 171 of the converter 170 when the output voltage of the converter 170 reaches a predetermined level (three thousand volts, for example). In this manner, the discharge circuit 174 transfers energy from the capacitor 171 to activate the EFI 58. Once activated, the EFI 58 initiates a shockwave in the detonator cord 5 1.

To minimize unpredictable behavior of the initiation control circuit 61, the initiation control circuit 61, in some embodiments, includes six low pass filters 10, 191, 192, 193, 194 and 195 that are selectively placed around the circuitry of the initiation control circuit 61 to reduce the level of any stray radio frequency (RF) signals. The initiation control circuit 61 also has an in-line fuse 182 coupled in series with the battery 16 52 and a Zener diode 180 shunted to ground to guard against such possibilities as the polarity or voltage level of the battery 52 being incorrect.

Referring to Fig. 16, the processor 172 may control the fly-back converter 170 by using two switches 214 and 216 to switch current through a primary winding 218a of a transfon-ner 218 of the converter 170. The switch 1.14 may be a simple redundant (backup safety switch) that is switched on and off by the processor 172.

The processor 172 closes the switch 216 (i.e., turns on current in the primary winding 218a) at a predetermined rate by a clocking latch 224b. A sensing resistor 228 is coupled to the input of a comparator 224a which provides a reset to a latch 224b when the current in the primary winding 218a exceeds a predetermined threshold level. Upon this occurrence, the latch 224b opens the switch 216 which turns off current in the primary winding 218a. Subsequently, after waiting a predetermined duration, the processor 172 closes the switch 216 and repeats the above-described control process.

When current in the primary winding _2 I 8a is disrupted (i.e., by the opening of the switch 216), the energy stored in the transformer 2 18 is transferred to a secondary circuit 222 (having the capacitor 171) that is coupled to a secondary winding 218b of the transformer 218. On each power cycle of the converter 170, additional energy (corresponding to a step up in the voltage level of the capacitor 17 1) is transferred to the capacitor 17 1. When the voltage level of the capacitor 171 is large enough to activate the discharge circuit 174, the EFI 58 is activated which sends a shockwave down the detonator cord 5 1.

The switch circuit 57 has a two NAND gate latch 202 which controls the switches 57a and 57b. On power up, switch 57a is closed and switch 57b is open by default. In some embodiments, the processor 172 can only change the state of latch 202 to open switch 57a and close 57b. Only a new power up cycle can reset the latch 202. Once the switch 57a is open, no power is available for processor 172 to control anything.

The initiation control circuit 61 also has an RC ring-vype oscillator 212 which provides a clock signal used by the circuitry of the initiation control circuit 61. A reset circuit 210 momentarily places the processor 172 in reset after power up of the initiation control circuit 61. The initiation control circuit 61 has a voltage regulator 200 to furnish direct current (DQ voltage for the logic of the initiation control circuit 61.

Refer-ring to Fig. 21, in some embodiments, the valve module 404 may be formed from three concentric housings 450, 452 and 454. In this manner, the housing 450 may be near the end (of the valve module 404) that is closest to the fire control circuit 54 and may be threadably coupled to the housing 452. The housing 452, in turn, may be threadably coupled to the housing 454 that is near the end (of the valve module) that is I farthest from the fire control circuit 54. A concentric coupler 48 1 4 may secure' the housing 454 to the tubing of the string 402, and the housing 450 may be attached (via another coupler, for example) to a module that houses the fire control circuit 54.

The housing 454 includes radial ports 461 that establish fluid communication with radial ports 460 of a fixed slotted sleeve 456 that is concentric with and resides inside the housing 454. A rotating slotted sleeve 458 is concentric with and located inside the fixed slotted sleeve 456, and a central passageway of the sleeve 458 establishes fluid communication with the central passageway of the string 402 via a central passageway 455 of the coupler 484. In an open position of the valve module 404, radial ports 468 of the sleeve 458 align with the radial ports 460 of the sleeve 456, an alignment that establishes fluid communication between the annulus and central passageway of the string 402. The sleeve 458 may be rotated ninety degrees to place the valve module 404 in a closed position, a position in which the non-slotted portions of the sleeve 456 block fluid communication through the radial ports 468 of the sleeve 458.

An electric motor 484 that is housed inside the housing 450 furnishes the torque for rotating the sleeve 458 and thus, for opening and closing the valve module 404. A shaft of the motor 484 may be coupled to one end of a drive shaft 474 of the valve module 404 via a flexible shaft coupling 482. The other end of the drive shaft 474, in turn, is coupled to the sleeve 458.

In some embodiments, the drive shaft 474 has a central passageway 463) that is in fluid communication with the central passageway of the sleeve 458. Due to this arrangement, a pressure sensor 478 may close off the central passageway 463 and thus, may be used to sense the pressure of the fluid inside the string 402. Wires 480 may extend from the pressure sensor 478, through the remaining portion of the central passage-.A,aN 46' and to the fire control circuit 54 that may, for example, use signals from the wires 480 to detect the pressure of the fluid.

18 Among the other features of the valve module 404, a retaining nut 486 that is concentric with the housing 454 may be threadably secured to the housing 454 to hold the sleeves 456 and 458 in place. Annular teflon bearings 470 may be used to reduce frictional forces between the sleeve 458 and the housing 454. The housing 452 may contain an annular rotating seal fixture 472 that radially surrounds a portion of the drive shaft 474. The housing 452 may also include a thrust bearing seal 476 that is located between the drive shaft 474 and the housing 452. Electronics of another module (not shown) may use the wires 482 to control the motor 484 and thus, the valve module 404. For example, the fire control circuit 54 may control a driver board (not shown) that furnishes high current buffers to drive the motor 484.

Other embodiments are within the scope of the following claims. For example, the initiation control circuit 61 may fire downhole devices other than the associated perforating gun 59, such as a single shot device (a packer, for example).

While the invention has been disclosed with respect to a limited number of embodiments, those skilled in the art, ha,.'ing the benefit of this disclosure, will appreciate numerous modifications and variations therefrom. It is intended that the appended claims cover all such modifications and variations as fall within the true spirit and scope of the invention.

19

Claims

I An apparatus for use in a subterranean well, comprising: a downhole energy source; a first switch having a first predetermined state to transfer energy from the energy source". a second switch having a second predetermined state to transfer the energy from the energy source; a detonator to receive the energy from the energy source when the first switch and second switches are concurrently in the first and second predetermined states, a first controller to independently detect a predetermined stimulus transmitted from the surface of the well and cause the first switch to enter the first predetermined state based on the detection by the first controller; and a second controller to independently detect the predetermined stimulus transmitted from the surface of the well and cause the second switch to enter the second predetermined state based on the detection by the second controller.
2. The apparatus of Claim 1, wherein the predetermined stimulus indicates a unique command not used for any other downhole purpose.
3. The apparatus of claim 1, wherein the first controller is further configured to cause the first switch to remain in the first predetermined state for a first predetermined duration of time after detection of the predetermined stimulus by the first controller.
4. The apparatus of claim 3, wherein the second controller is further configured to cause the second switch to remain in the second predetermined state for a second predetermined duration of time after detection of the predetermined stimulus by the second controller.
5. The apparatus of claim 4, wherein the first and second switches are configured to prevent any energy from being transferred from the energy source to the detonator if the first and second predetermined durations of time do not overlap,
6. The apparatus of claim 1, wherein the first controller is further configured to cause the first switch to have a third state if the first controller does not detect the predetermined stimulus, and wherein when in the third state, the first switch prevents energy from being transferred from the energy source to the detonator.
7. The apparatus of claim 6, wherein non-detection of the predetermined stimulus occurs when either a predetermined interval of time lapses from a detection of a previously transmitted predetermined stimulus or no predetermined stimuli have been received.
8. The apparatus of claim 1, wherein the first switch and the second switch are coupled in series between the detonator and the energy source.
9. The apparatus of claim 1, wherein the first predetermined state comprises a closed state.
10. The apparatus of claim 1, wherein the first predetermined state comprises an open state.
11. The apparatus of claim 1, further comprising:

an explosive charge; and a detonator cord for transmitting a shockwave to the explosive charge-, wherein the detonator initiates the shockwave after receiving energy from the energy source.

21
12. The apparatus of claim 1, wherein the first controller comprises a processor to detect the predetermined stimulus and to measure a first predetermined time interval from when the stimulus is detected-, a timer to measure a second predetermined time interval from when the stimulus is first detected; and logic connected to operate the first switch in response to the measurement of the first and second time intervals.
13. The apparatus of claim 12, wherein the logic is further configured to cause the first switch to enter the first predetermined state only if completion of the measurement of both the first and second time intervals occur within a predetermined window of time.
14. The apparatus of claim 12, wherein the second controller comprises: a second processor to detect the predetermined stimulus and to measure a third predetermined time interval from when the stimulus is detected-, a second timer to measure a fourth predetermined time interval from when the stimulus is first detected; and second logic connected to operate the second switch in response to the measurement of the third and fourth time intervals.
15. The apparatus of claim 1, wherein the well includes an annulus having a fluid, and wherein the predetermined stimulus comprises at least one pressure pulse in the fluid.
16. The apparatus of claim 1, wherein the energy source comprises a battery.

22
17. The apparatus of claim 1, further comprising a tubing, and wherein the predetermined stimulus comprises at least one pressure pulse generated in fluid inside the tubing.
18. The apparatus of claim 1, wherein the predetermined stimulus comprises movement of a line used to position the apparatus downhole.
19. The apparatus of claim 18, wherein the line comprises a wireline.
20. The apparatus of claim 18, wherein the line comprises a slickline.
21. The apparatus of claim 1, wherein the first controller is further configured to operate the first switch in a manner to prevent energy from being transferred from the energy source to the detonator should the second controller fail.
22. The apparatus of claim 1, wherein the second controller is further configured to operate the second switch in a manner to prevent energy from being transferred from the energy source to the detonator should the first controller fall,
23. A method for use in a subterranean well, comprising-, furnishing a predetermined stimulus downholelusing at least two controllers downhole to independently detect the predetermined stimulus; and coupling a downhole energy source to a detonator based on the detection of the stimulus by all of the at least two controllers.
24. The method of claim 23, further comprising detonating an explosive after the coupling, 23
25. The method of claim 23, wherein the act of detonating comprises Initiating a shock-wave on a detonator cord.
26. The method of claim 23, wherein the act of using comprises:

measuring a first predetermined time interval from when the stimulus is first detected; and independently measuring a second predetermined time interval from when the stimulus is first detected-, wherein the act of coupling occurs after completion of the measurement of the first and second time intervals,
27. The method of claim 26, wherein the act of coupling occurs only if the completion of the first and second time intervals occur within a predetermined window of time.
28. An apparatus for use In a subterranean well, the apparatus comprising a downhole energy source-, a first switch havifig a first predetermined state to transfer energy from the energy source-, a second switch having a second predetermined state to transfer the energy from the energy source-, detonating cords, perforating guns, each perforating gun associated with a different one of the detonating cords and being capable of being fired in response to a shock-wave initiated on the associated detonating cord detonators, each detonator associated with a different one of the perforating guns to cause the associated perforating gun to fire when the associated detonator initiates the shockwave on the associated detonating cord-, 24 a first controller to independently detect a predetermined stimulus transmitted from the surface of the well and cause the first switch to enter the first predetermined state based on the detection by the first controller-, a second controller to independently detect the predetermined stimulus transmitted from the surface of the well and cause the second switch to enter the second predetermined state based on the detection by the second controller; and a fire control circuit coupled to interact with the detonators to select one of the detonators to receive the energy from the first and second switches when the first and second switches are in the first and second predetermined states.