Voices: Lipták

Automatic Override control Could Have Prevented the BP Deepwater Horizon Oil Well Accident

Keeping a Pipe Straight That Was What Was Needed to Prevent the BP Deepwater Horizon Oil Well Accident

By Bela Liptak

In past articles, I've pointed out that safety will increase if: 1) we fully understand the process being controlled, and 2) we "protect" processes from operator errors by providing automatic override controls (AOC). I wrote several articles and also a book, explaining how Three Mile Island, Chernobyl and Fukushima could have been prevented if AOC controls were provided. I also wrote about air transportation safety, showing that AOC could have protected Asiana Airlines Flight 214 in San Francisco last year, and perhaps prevented Malaysia Airlines Flight 370's disappearance earlier this year, if AOC had prevented pilot errors.

In the cases of the nuclear accidents, we have seen that if we make it impossible for cooling to be lost, no meltdown can occur (see my earlier article describing the underwater nuclear plant of the future, "Ask the Experts, Feb. 2014,). Here, I will try to show you, not only that operator errors caused the BP Deepwater Horizon oil well accident, but also how AOC could have prevented it, because what was needed (and what the operators failed to do) was to keep a pipe straight.

Also Read "The Fukushima Nuclear Accident - Part 1"

How to Keep a Drill Pipe Straight

As we know, on April 20, 2010, while Deepwater Horizon was sealing the deepest oil well in history (10,600 m), an explosion occurred. Two days later, the rig sank, causing the largest oil spill in U.S. history, which took five months to seal. In previous articles, I've described how BP operator errors triggered this accident by attempting to seal the well without calculating the hydrostatic head required to exceed the internal pressure in the well, and by not using the concentrated cement slurry required to balance and exceed that internal pressure.

In previous articles, I also described how pressures, flows, compositions and equipment availability can be detected. And based on them, I've shown how AOC control can be implemented.

In this article, I'll focus on the critical safety requirement of keeping the drill pipe straight, and the pressure difference (ΔP) between its inside and outside pressures under safe limits, in order to keep the pipe from moving from the center of the blowout preventer (BOP) ram. In the case of the BP accident, the high ΔP caused an effective compression resulting in buckling that bent the drill pipe, and moved it outside the reach of the BOP's ram. When the operator tried to manually close the ram, it punctured the pipe because it was off-center, and that triggered the oil spill. (Figure 1 shows how the BOP ram should have operated and why it failed.)

Platform Should Be Stabilized Using Envelope Control

In general industry, we've been using feed-forward anticipatory, selective, interaction, envelope and herding controls for decades (see Chapter 8.5 in Vol. 2 of my Instrument Engineers' Handbook). In the control of offshore drilling, these strategies are new. That industry is just emerging from a manual-control culture.

For years, it was believed that as winds, waves and water currents cause platforms to move in six directions (north, south, east, west, up and down) as they sway, yaw and surge, they can be best held in position by passive mooring systems. So not only were AOC and envelope control not used, but even dynamic positioning (DP) is relatively new to the hydrocarbon industry (although Deepwater Horizon did have DP).

The hydrocarbon drilling process is shown in Figure 2. A riser pipe extends from the semi-submersible drilling platform at the ocean's surface to a flexible joint on the seabed. There it connects to the BOP and the drill pipe, which are fixed. The tension in the riser pipe is controlled by the tensioner piston operated by high-pressure hydraulic cylinders. The slip joint allows for vertical movement, while the flexible joint at the BOP allows for horizontal movement (bending) of the riser pipe.

To prevent bending the drilling pipe, not only does the pressure difference between the inside and outside of the pipe have to be kept under safe limits. In addition, the horizontal movement of the rig should be limited to keep the riser angle (A in Figure 2) less than about 3º, and the watch circle diameter (B in Figure 2) less than a corresponding value, which increases with depth. Keeping the rig within these safe limits is achieved by operating six or eight large thrusters that are distributed around the rig, forcing it to move as needed to stay within the envelope limits.

In addition to the dynamic positioning system (DPS), ballast controls (BC) are applied to keep the tilt of the platform less than about 1º. Ballast control should be achieved by throttling large water pumps (P in Figure 2), which move large quantities of water from one tank to another (WT in Figure 2). Each tank is about 300 m3, and is positioned on the perimeter of the platform to maintain its balance.

So what's wrong with this system? What is missing? What is needed to make sure that the the drill pipe does not buckle?

Also Read "Old Habits Die Hard, Even for Automation Professionals"

Manual controls. The safety of the operation should not be left to manual control. In the case of the BP accident, even the actuation of the BOP was under manual control.

Feedforward. As the forces of wind, waves and water currents change, the controls should anticipate their consequences and should act before they evolve.

Manipulated variables. All pumps, pistons and thrusters should be designed to have the required speed of response.

Interaction. The PC and DPS controls should be integrated into a single, dynamic control system. An envelope algorithm should receive all measurements and should generate all output signals to control the hydraulic tension control pistons, variable-speed pumps and thrusters.

Mathematical model. The dynamic model should be self-diagnosing because hydrodynamic conditions and drag coefficients do change and, therefore, need to be continually updated.

BOP actuation. The BOP closure should be automatically triggered by the AOC (and not allowed to be overruled by operators) when the drill pipe pressure difference (ΔP) limit or the maximum tilt limit (A and B in Figure 2) are violated.

Rig disengagement. If the presence of either methane or fire are detected on the platform, the AOC should disengage the rig and move it away from the well, regardless of whether operators or management approve or not.

Unfortunately, even the best offshore drilling safety controls have evolved from a manual safety culture. Until state-of-the-art  automatic control practices are understood and implemented by the hydrocarbon drilling industry, pipes will buckle, BOPs will fail, and oil spills will occur.

More from this voice


Pumping Station Optimization - Part 1

Liptak Describes the Pumping Process to Then Show How to Control and Optimize Pumping Stations


Process Control's Role in Nuclear Waste Handling

Liptak Talks about the Role of Process Control in Nuclear Safety and How It Can Plays in Reducing the Risks Associated with the Transportation and Storage of Nuclear Wastes


Chernobyl Did Not Need To Occur

Good Process Control Could Have Prevented this Historic Meltdown


What Caused the Three Mile Island Accident?

Liptak Describes the Sequence of Events and the Primitive Controls That Led to the Three Mile Island Accident


The Future of Nuclear Energy

If Global Carbon Emissions Were Cut by 15% by 2050 by the Increased Use of Nuclear Power, 1,070 Plants Would Need to Be Built at a Cost of $5 Trillion.


Nuclear Security, Part II—Fission Basics

The Overall Topic of the Nuclear Power Plant Operation and the Use of Process Control to Protect Against Nuclear Accidents


Nuclear Plant Security and Cyber Terrorism

How To Improve Nuclear Power Plant Security


Controlling the Post-Oil Energy Economy

The World’s First Solar-Hydrogen Demonstration Power Plant


Fuel Cell of the Future

Process Control Will Play a Key Role In the Transition From the Fossil/Nuclear Economy to the Solar-Hydrogen Economy of the Future


Green Energy Can Stop Recession

Storing Solar Energy for the Night


The Third Industrial Revolution

The Transition to a Solar/Hydrogen Economy Will Trigger an Economic Boom Unseen Since the Marshall Plan.


Distillation Control and Optimization – Part 7

Plant-Wide Optimization Involves Coordinating the Control of Distillation, Furnaces, Compressors, etc. to Maximize the Profitability of the Entire Operation


On the Road to Renewable Transportation

The OECD estimates that replacing 10% of the country’s motor fuels with bio-fuels would use one-third of all croplands.


The Global Energy Future – Part 5

Covering 10 million American homes with solar roofs would trigger the biggest economic expansion of the decade.


Distillation, Part 5: Multiple Products

In Part 5 of this series on distillation control and optimization, we find that adding a side-stream component to your process gives an additional degree of freedom, but makes it even more essential to not mismatch the variables.


The Energy Future—Process Control’s Role

Find out about the “zero energy home of the future” and the hydrogen economy. What are the potentials of process control in wind, ocean wave, and geothermal energy systems.


The global energy future – Part 3

Control's own Béla Lipták continues his series on the future of global energy, stating that in order to obtain maximum energy recovery, the various solar collectors described all need to track the sun.


Control of the solar-hydrogen plant

Columnist Béla Lipták describes equipment and control requirements of the solar-hydrogen demo power plant and says we now are in critical need of them because the stakes are even higher.


The power of the Sun: Part 1

In discussing global energy issues, CONTROL columnist Béla Lipták, PE, estimates that global warming damage will consume as much as 20% of the global GDP by 2020 even without energy wars.


How to select control valves, Part 2

When it comes to selecting and sizing control valves and positioners, this article not only helps you pick the right one for the right job, but also includes a valuable valve selection chart you can download!