Oil field system failures are sometimes catastrophic and result in the complete destruction of the system. In addition, the personnel working on such an oil field system when such a failure occurs are sometimes killed or injured so that they are unavailable afterwards to help reconstruct the events that led to the failure. In addition, the intense scrutiny that sometimes follows such a failure may cause such personnel, either intentionally or unintentionally, to remember events differently than they actually occurred. Reconstruction such failures is important to avoid making the same mistakes in the use of future oil field systems.
For the purposes of this application, an oil field system is defined to be a drilling rig (on shore or off shore), a production rig, a workover rig (wireline, coiled tubing (wired or unwired)), or any other similar system. While many of the examples described in this application relate to offshore rigs, it will be understood that the techniques and apparatuses described herein could be used on any oil field system.
In one embodiment, an oil field system data recorder (or “black box” or “apparatus”) is a secure repository that records detailed activity in the oil field system in the form of data generated by sensors, cameras, microphones (including those recording discussions taking place during decision-making meetings), and data considered useful in evaluating the health status of the oil field system and associated systems. In particular, in one embodiment, the black box records sufficient information to reconstruct or reenact catastrophic failures, fires, blow outs, etc. that the oil field system might experience.
In one embodiment, illustrated in
In one embodiment, the black box 100 includes a primary power source 105, such as a standard power supply. In one embodiment, the primary power source 105 receives power from the oil field system 110 in the form of line voltage, such as 110 VAC 60 Hz power. In one embodiment, the primary power source 105 receives power from another source, such as a solar panel, a wind mill, a power source using power generated by the motion of waves, or a similar source.
In one embodiment, the black box 100 includes a battery backup system 115. In one embodiment, the battery backup system 115 is charged by the primary power source 105 using techniques necessary to prolong the life of any battery included in the battery backup system 115. In one embodiment, the battery-life-prolonging techniques are practiced by the battery backup system 115 in addition to, or instead of, the primary power source 105. In one embodiment, the battery backup system 115 includes circuitry to recognize a failure in the primary power source 105 and transition the load of the black box 100 to the battery backup system 115.
In one embodiment, the black box 100 includes a processor 120. The processor 120 can be a microprocessor, a microcontroller, a programmable logic array, or any other similar device that is capable of controlling the other components in the black box 100.
In one embodiment, the black box 100 includes a memory 125. In one embodiment, the memory includes random access memory (“RAM”), programmable read only memory (“PROM”), erasable programmable read only memory (“EPROM”), flash memory, volatile memory, nonvolatile memory, or any other type of memory. In one embodiment, the memory includes a digital recorder, a flash memory, a dynamic memory, and/or a mag memory (e.g., magnetic tape).
In one embodiment, the processor 120 communicates with the memory 125 and with other components in the black box 100 through a bus or busses 130 that allows the processor to selectively communicate with components in the black box 100.
In one embodiment, the black box 100 includes a global positioning system antenna, receiver, and decoder (“GPS”) 135 that receives signals from the Global Positioning System satellites and uses those signals to locate the black box on the earth's surface. In one embodiment, the processor 120 receives position reports from the GPS 135 via the bus 130 and records those reports, thereby maintaining a “track” of the location of the black box over a period of time.
In one embodiment, an input device 140 conditions input signals received from the oil field system for presentation to the processor 120. In one embodiment, the input device 140 has a connection to the processor 120 that is separate from the bus 130. In one embodiment (not shown), the input device 140 communicates with the processor 120 through the bus 130.
In one embodiment, the input device 140 accepts signals not limited to the following formats:
In one embodiment, the input device 140 converts the signal or signals, which can be received via a wire, fiber, wirelessly, via radio, via a telephone connection, or via a connection to a cellular network, into data that can be accepted by the processor 120 and provides the results to the processor either directly as shown in
In one embodiment, the input device 140 samples the signals from the oil field system 110 with the sample rate for each signal being set by the processor 120. In one embodiment, the processor 120 recognizes stages, including “failure stages” of the oil field system 110 based on the data provided by the input device 140. For example, in one embodiment, the processor recognizes four stages of operation, although additional stages of operation are envisioned:
In one embodiment, the processor controls the rate the input device 140 samples the signals from the oil field system depending, at least in part, on the stage of operation the oil field system 110 is currently in. For example, in normal operation, in one embodiment the processor 120 only records audio from the control room when a voice or voices can be detected on the audio. In the critical failure mode, in one embodiment the processor records the audio continuously. Similarly, in the normal mode of operation, in one embodiment the processor samples downhole pressure once every 10 seconds. In the critical failure mode of operation, in one embodiment the processor samples downhole pressure once every second.
In one embodiment, the black box 100 includes software that is stored on the memory 125 and executed by the processor 120. In one embodiment, the software includes a process that prevents the original format of the sampled form of one of the inputs that is stored in memory from being modified. In one embodiment, this process operates similarly to a configuration management tool, in that it maintains a record of the format of data as it is received and prevents the modification of the format of that data by anyone other than a person with the proper privileges. This process also maintains a record of the people that have made such modifications or have attempted such modifications.
In one embodiment, the software includes a voice recognition process that accepts an audio signal containing a voice signal and executes an algorithm to identify the speaker from a set of known speakers. In one embodiment, the memory contains a set of speaker voice recognition profiles created as personnel arrive at the oil field system 110. In one embodiment, a newly arriving person is asked to speak into a microphone when he or she first arrives at the oil field system and the voice recognition profile is created based on that interaction.
In one embodiment, one audio input to the input device 140 is from a microphone or microphones through which personnel can comment on the procedures being followed on the oil field system, other personnel, other companies, vendors, or any other topic the speaker feels is worthy of comment. The processor 120 stores a digitized version of these comments along with the identity of the speaker, which in one embodiment is determined by the voice recognition process, in the memory 125.
In one embodiment, an audio input to the input device 140 is from the public address system that personnel use in the oil field system 110 to make announcements regarding the status of operations on the oil field system 110 or to give directions to accomplish oil field system 110 tasks. The processor 120 stores a digitized version of these communications along with the identity of each speaker, which in one embodiment is determined by the voice recognition process, in the memory 125.
In one embodiment, microphones and cameras are distributed around the oil field system 110 work areas. Signals from these microphones and cameras are inputs to the input device 140. The processor 120 stores a digitized version of these signals, along with the identity of speakers where they can be determined by the voice recognition process, in the memory 125.
In one embodiment, the input device receives data from:
For example, in one embodiment used on a drilling rig, the processor 120 has access to and can execute the MAXACTIVITY™ rig floor activity monitoring software available from the assignee of this application, or other similar software. The MAXACTIVITY software tracks and times rig floor activities such as trips in and out of the rig's bore hole, circulating, drilling, and connection operations based on rig floor sensor information collected through the input device 140. In one embodiment, the MAXACTIVITY software can be run on real-time or historical data, can export data to a spreadsheet program, allows users to override or edit data, produces reports concerning rig operations, and can export data to, for example, the remote system 155 through the remote system interface 160.
In one embodiment, MAXACTIVITY collects the following sensor data:
In one embodiment, health monitoring systems of a drilling rig, such as systems monitoring well string vibration, weight on bit (“WOB”), rate of penetration (“ROP”), pressure, and the like, are given priority and are sampled and processed at higher priorities than other inputs to the input device 140.
In one embodiment, the processor 120 selects portions of the data it receives from the input device 140, processes it, and stores it in the memory 125. In one embodiment, the stored data provides a record of the data received. In one embodiment, the stored data is sufficient to reconstruct faults that occur on the oil field system 110.
In one embodiment, the data stored in the memory 125 is periodically overwritten on a first-in-first-out (“FIFO”). In one embodiment, a plan is being monitored as discussed below. In one embodiment, as each planned milestone is accomplished, the data associated with that milestone is decimated, leaving enough data that essential data can be gathered and interrogated to evaluate primary conditions, i.e., conditions that are sufficient to understand the state of the well.
In one embodiment, some or all of the data collected regarding critical operations, such as pressure tests, and the like, are encrypted.
In one embodiment, the processor provides data sufficient to reconstruct faults through an analysis interface 145 to a failure analysis system 150. In one embodiment, the failure analysis system 50 is able to select the data to receive by interacting with the processor 120 through the analysis interface 145. In one embodiment, the failure analysis system 150 is outside the black box 100.
In one embodiment, data collected through the input device 140 is forwarded to a remote system 155 through a remote system interface 160. In one embodiment, data is forwarded to the remote system 155 during normal operations, which allows the remote system to replicate the processing being performed by the processor 120.
In one embodiment, a dashboard interface 165 provides a real-time view of the data being collected to the oil field system 110. In one embodiment, the oil field system 110 includes a screen that illustrates the current status of the oil field system 110 according to the black box 100. In one embodiment, the real-time view of the data that is provided through dashboard interface 165 includes an identification of problems that the black box 100 perceives.
In one embodiment, the black box 100 is mechanically coupled to the oil field system in normal operations. In one embodiment, the black box 100 includes a mechanical release mechanism 170 that releases the black box 100 from the oil field system 110. In one embodiment, the purpose of the release caused by the mechanical release mechanism is to allow the black box 100 to move a distance away from the oil field system 110 in the event that the oil field system 110 is undergoing a catastrophic failure that might destroy the black box 100 if it is left in its attached position.
In one embodiment, the mechanical release mechanism 170 is a simple release that simply drops the black box 100 from the oil field system 110 into, for example, the sea. In one embodiment, the mechanical release mechanism 170 is a launching device that launches the black box 100 away from the oil field system using an explosive device, a rocket, or a large spring.
In one embodiment, the black box 100 continues to record data until the mechanical release mechanism 170 is activated or the black box 100 is otherwise released from the oil field system 110. In one embodiment, even after the black box 100 is released it maintains a connection to the oil field system 110 through a tether, such as a wire, fiber, or wireless connection. In one embodiment, the tether is on a spool that is attached to the black box 100 or to the oil field system 110 and pays out as the black box 100 moves away from the oil field system. In one embodiment, the black box 100 has a way to sever or otherwise release the tether if the black box 100 is no longer receiving data from the oil field system 110, the tether is fully extended, or some other similar event occurs.
In one embodiment, the processor 120 uses the data stored in the memory to detect such catastrophic events and, when they occur, actuates the mechanical release mechanism 170. In one embodiment, the mechanical release mechanism can be activated in one of the following ways:
In one embodiment, the black box 100 includes a beacon 175, such as a radio transmitter, that transmits a beacon signal that allows the black box 100 to be located by searchers, for example, after the mechanical release mechanism has been activated and it has been released from the oil field system 110. In one embodiment, the beacon signal includes a status message conveying information concerning the event that caused the black box 100 to be released. In one embodiment, the beacon 175 is automatically activated upon the occurrence of one of the activation events described above.
In one embodiment, the beacon 175 and memory 125 are part of a separate module 180 within the black box 100. In one embodiment, the battery backup system 115 is included in the module 180. In one embodiment, the beacon 175 has its own battery. In one embodiment, the beacon's battery is charged by the primary power source 105 or by the battery backup system 115. In one embodiment, module 180 is the only part of the black box 100 that is jettisoned from the oil field system when the mechanical release mechanism 170 is activated.
In one embodiment, upon detecting a condition that either will or might cause the black box to be released from the oil field system, the processor 120 initiates a power decay tree, in which the processor automatically, for example through the dashboard interface 165, turns off successively less important sensors. In one embodiment, for example, a set of high importance sensors (i.e., last to be turned off) includes public address system sensors, microphone sensors, BOP status sensors, riser sensors, and well position sensors. In one embodiment, for example, a set of medium importance sensors (i.e., turned off after the low importance sensors but before the high importance sensors) includes standpipe pressure sensors, sensors monitoring the flow of mud in and out of the well, engine sensors, and temperature sensors. In one embodiment, for example, a set of low importance sensors (i.e., the first set of sensors to be turned off), includes gamma ray resistivity sensors, survey sensors, and drilling parameter sensors. In one embodiment, the battery backup system 115 performs some or all of the power decay tree functionality.
In one embodiment, the location of the black box 100 on the oil field system 110 is chosen to enhance its survivability. For example, in one embodiment, the black box 100 is mounted on the oil field system's life rafts. In one embodiment, the black box 100 is located a sufficient distance away from the oil field system 110 that it is unlikely to be affected by any failures of the oil field system 110 while still being connected to the oil field system 110 either wirelessly or through a tether, as described above.
In one embodiment, illustrated in
In one embodiment, the plan includes milestones, labeled Milestone 1 through Milestone M, although only Milestone N−1, Milestone N, and Milestone N+1 are shown. The milestones are represented in
In one embodiment, milestones that have not yet been completed are represented on the “plan” side of
In one embodiment, uncompleted tasks are represented on both sides of
In one embodiment, data collected during each task is associated with each task. This is represented in
It will be understood that tasks can be divided into sub-tasks, for example, and into even finer levels of detail. It will also be understood that milestones can be grouped into super-milestones, for example and even greater levels of summary.
Further, in the example shown in
In the example shown in
Further, in one embodiment, the processor 120 compares some or all of the data collected during each task to data that was expected during that task. In one embodiment, the processor 120 compares the data collected during a task (e.g., Data N:1) to the data that was expected to be collected when the plan was created (e.g., Expected Data N:1). In one embodiment, the processor reports significant deviations of the collected data from the expected data to the oil field system 110 through the dashboard interface 165. In one embodiment, the processor reports such data deviations to the remote system 165 through the remote system interface 160. In one embodiment, the significance of the deviation necessary to report the deviation to the oil field system 110 and/or to the remote system 165 is included in the definition of the expected data. For example, the plan may specify that the rate of penetration (“ROP”) during Task N:3 should be 1 meter per minute and that deviations away from this number by more than one half meter per minute should be reported.
In one embodiment, the information shown in
In one embodiment of use, illustrated in
The text above describes one or more specific embodiments of a broader invention. The invention also is carried out in a variety of alternate embodiments and thus is not limited to those described here. The foregoing description of the preferred embodiment of the invention has been presented for the purposes of illustration and description. It is not intended to be exhaustive or to limit the invention to the precise form disclosed. Many modifications and variations are possible in light of the above teaching. It is intended that the scope of the invention be limited not by this detailed description, but rather by the claims appended hereto.
Filing Document | Filing Date | Country | Kind | 371c Date |
---|---|---|---|---|
PCT/US11/38725 | 6/1/2011 | WO | 00 | 11/26/2013 |