The present invention relates to a method for preventing a brownout of a subsea system comprising one or more subsea devices each comprising a subsea electronic module.
The state-of-the-art of subsea production systems include, for instance, subsea valve actuators (SVA) with an all-electric interface. These actuators require a master subsea electronic module (SEM) to provide power and communication relayed from the operator on the topside. The operator sends high-level commands, which are relayed through the master SEM to a slave SEM embedded in the actuator itself. The slave SEM proceeds to translate these high-level commands into a sequence of low-level operations. Depending on the type of actuator, these low-level operations may include for example: controlling electric motor drivers; switching directional control valves; switching electromechanical latches; measuring process variables (position, torque, etc. . . . ) via sensors; recharging internal battery packs; switching internal power supply of electric peripheral devices, etc.
Depending on the features of the actuator, these operations may also be executed autonomously, without a prompt from the operator.
In order to reduce the cost and complexity of the system, the actuators may be powered with an instrumentation electric supply, as defined by the SIIS standard. To reduce the infrastructure costs even further, multiple actuators are normally connected in a star topology in a similar fashion as shown in
However, due to a limitation in the power output available for the actuators, the operator may command—accidentally or unknowingly—the actuators to activate simultaneously, drawing more electric power from the power supply than it is available. This may then cause a brownout, dropping the supplied electric voltage to all actuators in the network. If this happens, the actuators may unexpectedly shutdown, causing an unwanted disruption in the production.
One way to prevent this is to use the SEM as a centralized observer, to monitor actively all actuators in the network and to relay the commands selectively according to the current power available in the network. This requires a highly customizable application on the SEM, which must be configured ad hoc, according to the topology and the types of the actuators in the network.
A less complex alternative can be partially shift the responsibility to the operator to act on-the-fly, while ensuring the actuators never overload the available power supply without any feedback from the actuator.
However, both solutions for preventing brownout do not provide a reliable system, which is at the same time compact and not too complex.
Therefore, scope of the present invention is to provide a method to prevent brownout, which overcomes the mentioned drawbacks.
The present invention is based on the idea of an embedded system that constantly monitors the voltage supply of the slave electronic modules.
According to an embodiment of the present invention, a method for controlling a subsea system so as to prevent brownout of the subsea system is provided. The subsea system comprises at least one slave subsea electronic module installed in a subsea device, wherein said subsea system (100) further comprises a master subsea electronic module, which is configured to provide power to the at least one slave subsea electronic module, wherein said subsea device is configured to execute a plurality of operations. The method comprising the following steps:
The present invention is described with reference to the enclosed figures wherein the same reference numbers refer to the same parts and/or to similar parts and/or to corresponding parts of the system. In the figures:
In the following, the present invention is described with reference to particular embodiments as shown in the enclosed figures. Nevertheless, the present invention is not limited to the particular embodiments described in the following detailed description and shown in the figures, but rather the embodiments described simply exemplify several aspects of the present invention, the scope of which is defined by the claims.
Further modifications and variations of the present invention will be clear for the person skilled in the art. The present description is thus to be considered as including all said modifications and/or variations of the present invention, the scope of which is defined by the claims.
According to an embodiment of the present invention, a method for controlling a slave subsea electronic module is provided. In the prosecution of the disclosure, the slave subsea electronic module is installed in a subsea actuator. However, it is clear for the skilled person that this is just an example and that the invention can be applied to many different types of subsea devices containing a slave subsea electronic module.
According to the embodiment described in
As shown in
Depending on the type of actuator, these low-level operations may include: controlling electric motor drivers; frequency inverters; switching directional control valves; switching electromechanical latches and relays; measuring process variables (position, torque, etc. . . . ) via electronic sensors; recharging internal battery packs and switching internal power supply of electric peripheral devices. Depending on the features of the actuator, these operations may also be executed autonomously, without a prompt from the operator.
The invention comprises an embedded system installed in each of the actuators (or any subsea device with a slave subsea electronic module) that constantly monitors the voltage supply (or alternative the current) of each of the device. The voltage supply measurement can be adequately conditioned, for example filtered in order to eliminate fluctuations or ripples, which are not caused by a brownout. The filter can be represented by a standard filter known from the state of the art or can be represented by a filter integrated in a software used in the actuator. As soon as the voltage drops below a certain threshold value (ripple threshold), the method considers that brownout is started. Therefore, the system then interrupts its present actions and initiates a sequence to power off or to reduce the power consumption of the electric components in the device. The aim is to prevent the brownout from shutting down the slave subsea electronic module and potentially the valve actuator or the subsea device as well.
The threshold value is a value for the voltage that is lower than the nominal but still sufficient to provide power to the device and its peripherals.
Alternative the same method can be applied by measuring the current drawn from the device and to judge if a threshold value (maximum current threshold) for the current has been reached: in that case, the system interrupts its present actions and initiates a sequence to power off or to reduce the power consumption of the electric components in the device.
The order of electric components that are de-energized is prioritized in a manner to have the minimum impact possible on the actual operational state of the device. An example of the voltage/current profile and the signal that trips this system is shown in
As shown in
In the first step 1 the voltage received at the interface of the actuator 20 is monitored by the slave subsea electronic module 22 and in step 2 it is controlled if the measured voltage (which has been preferably adequately conditioned before) is lower or higher with respect to the ripple threshold. If the voltage is higher 2a than the ripple threshold, the voltage is measured again.
In case the voltage is lower 2b that the predetermined value, at least one present action of the actuator has to be interrupted 3 in order to prevent brownout from occurring. For this scope, a list of low level operations is provided to each actuator with a predetermined priority.
In the example represented in
It is clear for the skilled person in the art that a different order of prioritization of the operations can be assigned to the actuator and that additional operations actions can be powered off or some of the listed actions can be omitted from the control.
Therefore, in the example shown in
If the voltage is still lower than the ripple threshold or if in step 4 it has been judged that the electric drive was inactive, the logic prosecute to step 5 where it is evaluated if the line relief valves are active. The steps are analogous to the ones described for the step 4: if the line relief valves are active, the line relief valves are powered off 51 and the logic returns to step 1.
If the voltage is still lower than the ripple threshold or if in step 5 it has been judged that the line relief valves were inactive, the logic prosecute to step 6 where it is evaluated if the condition monitoring is active. The steps are analogous to the ones described for the steps 4 and 5: if the condition monitoring is active, the condition monitoring is powered off 61 and the logic returns to step 1.
If the voltage is still lower than the ripple threshold or if in step 6 it has been judged that the condition monitoring was inactive, the logic prosecute to step 7 where it is evaluated if the safety valves are active. The steps are analogous to the ones described for the steps 4, 5 and 6: if the safety valves are active, the safety valves are powered off 71 and the logic goes to step 1, where it is checked again if the voltage is still lower than the ripple threshold.
If the voltage is still lower than the ripple threshold or if in step 7 it has been judged that the line safety valves were inactive, the logic prosecute to step 8, where it is detected by the actuator that all the systems of the actuator are off.
Optionally between any of steps 41, 51, 61, 71, a notification of brownout detection is delivered to an operator. Alternatively, the operator can be informed that a brownout has been effectively prevented if after any of the steps 41, 51, 61 or 71 it has been detected that the pressure is higher that the ripple threshold.
This system must execute these actions faster than the dynamic response of the power supply requires reaching the low voltage supply limit. This period will depend of the power supply characteristics and the electrical current being drawn. However, it depends also on the voltage monitoring system and the processing speed of the logic unit.
Physically, the invention is comprised of a programmable logic unit that controls the electric peripherals in the actuator and a power supply monitoring system able to monitor the instantaneous supply voltage and the instantaneous electrical current consumption. In addition, the invention includes a logic sequence that dictates the order of deactivation of the electric components in the actuator.
While the present invention has been described with reference to the embodiments described above, it is clear for the skilled person that it is possible to realize several modifications, variations and improvements of the present invention in the light of the teaching described above and within the ambit of the enclosed claims without departing from the spirit and the scope of protection of the invention.
In addition, those areas in which it is believed that those of ordinary skill in the art are familiar, have not been described herein in order not to unnecessarily obscure the invention described.
Furthermore, even if in the description a star topology has been described, it is clear for the skilled person in the art that this invention can be applied to all topologies with parallel connections like bus, star, mesh and so on.
Additionally, even if the invention has been described with reference to the particular example described in
Furthermore, even if the invention has been described with reference to
Accordingly, the invention is not to be limited by the specific illustrative embodiments, but only by the scope of the appended claims.
Number | Date | Country | Kind |
---|---|---|---|
21172005.7 | May 2021 | EP | regional |
Filing Document | Filing Date | Country | Kind |
---|---|---|---|
PCT/EP2022/060798 | 4/25/2022 | WO |