Autonomous function sequences for blowout preventers (BOPS)

Abstract

An embodiment of a system includes an actuation assembly for a blowout preventer (BOP) stack. The actuation assembly includes a reservoir of actuation fluid at atmospheric pressure, a pump coupled to the reservoir to pressurize the actuation fluid, and a plurality of valves coupled between the pump and the BOP stack. Actuation of the valves is configured to communicate the actuation fluid to seal assemblies of the BOP stack. In addition, the system includes a controller coupled to the valves. The controller is configured to: receive an input indicative of an instruction to shut-in a wellbore and autonomously shut-in the wellbore in response to the input by actuating at least a subset of the valves according to a selected emergency function sequence of a plurality of emergency function sequences that are stored in a memory.

Description

SLB Ref No : IS24 1137-WO-PCTAUTONOMOUS FUNCTION SEQUENCES FOR BLOWOUT PREVENTERS (BOPS)CROSS-REFERENCE TO RELATED APPLICATIONS

[0001] This application claims priority to and the benefit of U.S. Provisional Patent Application Serial No. 63 / 686,752, filed August 24, 2024, and entitled “AUTOMATED FUNCTION SEQUENCES FOR SURFACE BOP CONTROL SYSTEMS,” the contents of which are incorporated herein by reference in their entirety.BACKGROUND

[0002] Subterranean wellbores are generally drilled into the ground or ocean bed to recover natural resources, such as oil, gas, and other materials, that are trapped in subterranean formations. Well construction operations, such as drilling operations, may be performed at a wellsite by a well construction system having various surface and subterranean well construction equipment that is operated in a coordinated manner. For example, a drive mechanism, such as a top drive located at a wellsite surface, can be utilized to rotate and advance a drill string into a subterranean formation to drill a wellbore.SUMMARY

[0003] Some embodiments disclosed herein are directed to a system including an actuation assembly for a blowout preventer (BOP) stack. The actuation assembly includes a reservoir that stores actuation fluid at atmospheric pressure, at least one pump coupled to the reservoir that is configured to pressurize the actuation fluid, and a plurality of valves fluidly coupled between the at least one pump and the BOP stack. Actuation of each of the plurality of valves is configured to communicate the actuation fluid to a corresponding seal assembly of the BOP stack to actuate the corresponding seal assembly. In addition, the system includes a controller communicatively coupled to the plurality of valves. The controller is configured to receive at least one input indicative of an instruction to shut-in a wellbore, and autonomously shut-in the wellbore in response to the at least one input by actuating at least a subset of the plurality of valves according to a selected emergency function sequence of a plurality of emergency function sequences that are stored in a memory.SLB Ref No : IS24 1137-WO-PCT

[0004] Some embodiments disclosed herein are directed to a method including receiving, at a controller, at least one input indicative of an instruction to shut-in a wellbore by use of a blowout preventer (BOP) stack. In addition, the method includes actuating, by use of the controller and in response to the at least one input, selected valves of a plurality of valves that are coupled between a reservoir and the BOP stack to actuate selected seal assemblies of the BOP stack according to a selected emergency function sequence of a plurality of emergency function sequences stored in a memory.

[0005] Some embodiments disclosed herein are directed to a system including an actuation assembly for a blowout preventer (BOP) stack. The actuation assembly includes a reservoir that stores actuation fluid at atmospheric pressure, at least one pump coupled to the reservoir that is configured to pressurize the actuation fluid, and a valve manifold fluidly coupled between the at least one pump and the BOP stack. In addition, the system includes a controller communicatively coupled to the valve manifold. The controller is configured to autonomously actuate the valve manifold according to an emergency function sequence in response to an input that is indicative of an instruction to shut in a wellbore. The emergency function sequence includes an actuation sequence for portions of the BOP stack that is configured to at least partially shut-in the wellbore.BRIEF DESCRIPTION OF THE DRAWINGS

[0006] For a detailed description of various exemplary embodiments, reference will now be made to the accompanying drawings in which:

[0007] FIG. l is a schematic diagram of a system for shutting in a wellbore according to one or more embodiments disclosed herein; and

[0008] FIGS. 2 and 3 are flow diagrams of methods for shutting in a wellbore according to one or more embodiments disclosed herein.DETAILED DESCRIPTION

[0009] A subterranean wellbore may be formed (e.g., drilled) from the surface to a desired depth within a subterranean formation. A number of emergency situations can develop while drilling a wellbore. For instance, the wellbore may experience a “kick,” or a sudden flow of formation fluids into the wellbore during drilling operations. ConsequencesSLB Ref No : IS24 1137-WO-PCT of an uncontrollable kick include environmental damage, or even a blowout. Thus, a wellbore may include a blowout preventer (BOP) stack that is configured to selectively close off the wellbore in the event of a kick or other emergency. A BOP stack may include a plurality of different devices or assemblies (e.g., pipe rams, blind rams, shear rams, etc.), and a well operator may selectively actuate selected ones of these different assemblies in order to safely shut-in the well and / or controllably vent excess pressure therefrom. During an emergency situation, well operators may experience significant stress and / or may be incapacitated or may be otherwise unable to accurately actuate the different assemblies of the BOP stack according to a desired or appropriate sequence.

[0010] Accordingly, embodiments disclosed herein are directed to systems and methods for autonomously actuating a BOP stack of a subterranean wellbore according to a selected emergency function sequence. In some embodiments, the emergency function sequence may comprise an actuation sequence, including a prescribed selection, order, timing, etc. for actuation of assemblies of a BOP stack that is configured to shut-in a well. In some embodiments, the emergency function sequence may be selected from a plurality of emergency function sequences. In some embodiments, the emergency function sequence may be pre-selected by a well operator (or other personnel), a controller, or some combination thereof. The emergency function sequence may be executed in response to an input that is indicative of an instruction to shut-in the wellbore, such as a command from a well operator, an autonomous instruction generated by a controller, a default instruction in the absence of an input or intervention by a well operator, etc. Thus, the systems and methods disclosed herein may be configured to provide at least a partially automated shut-in operation for a wellbore that may be configured to ensure timely and accurate actuation of a BOP stack, despite an incapacitation or absence of the well operator.

[0011] In general, embodiments disclosed herein relate to the field of well control and drilling safety systems. Specifically, embodiments disclosed herein relate to the automation of a surface (BOP) control systems. With respect to BOP control systems, the disclosures from U.S. Patent No. 11,708,738, entitled “Closing Unit System for a Blowout Preventer,” filed August 18, 2020, U.S. Patent Application Publication No. 2023 / 0205239, entitled “Pressure Sensing Blowout Preventer Control System,” filed February 28, 2023, and U.S.SLB Ref No : IS24 1137-WO-PCTApplication No. 18 / 505328, entitled “Well Equipment System Framework,” filed November 9, 2023 are incorporated by reference herein in their entirety.

[0012] Reference is now made to FIG. 1, which shows an example of a system 100 for shutting in a wellbore 10 according to one or more embodiments disclosed herein. The system 100 may include a BOP stack 150. The BOP stack 150 may include a plurality of seal assemblies 151 , 152, 153, 154, 155 that are coupled to one another to form the BOP stack 150. One or more of the seal assemblies 151, 152, 153, 154, 155 may include mechanisms (such as pipe rams, shear rams, blind rams, annulus seal, etc.) that are configured to close off or restrict one or more flow paths of the wellbore 10 when actuated.

[0013] The system 100 also includes an actuation assembly 110 that is coupled to the BOP stack 150 and configured to selectively actuate the seal assemblies 151, 152, 153, 154, 155 in order to at least partially shut-in the wellbore 10 during operations. The actuation assembly 110 may include a fluid reservoir 118 that stores fluid at atmospheric pressure, for example. In this way, the actuation assembly 110 for the BOP stack 150 may be operable on land and on surface for offshore applications, according to one or more embodiments. The fluid stored in the reservoir may comprise any suitable liquid, such as an oil or water, and may be generally referred to herein as “hydraulic fluid,” or “actuation fluid.”

[0014] The actuation assembly 110 may include at least one pump to pressurize the hydraulic fluid stored in the fluid reservoir 118 in order actuate the seal assemblies 151, 152, 153, 154, 155 of BOP stack 150 during operations. For instance, FIG. 1 shows a plurality of primary pumps 120 coupled to the reservoir 118. However, in some embodiments, the actuation assembly 110 may include a single primary pump 120. In addition, the actuation assembly 110 may also include a spare pump 122 that is coupled to the reservoir 118. During operations, the primary pump(s) 120 and / or the spare pump 122 may pressurize the hydraulic fluid stored in the fluid reservoir 118 and discharge the pressurized hydraulic fluid into a hydraulic circuit 135.

[0015] In addition, a recirculation pump 124 may be fluidly coupled to the fluid reservoir 118. The recirculation pump 124 may be configured to periodically or continuously recirculate the fluid in the fluid reservoir 118 in order to avoid settling and / or to flow the fluid through a filter, for example.SLB Ref No : IS24 1137-WO-PCT

[0016] As also shown in FIG. 1, the actuation assembly 110 may include a valve manifold 128 including a plurality of valves 130. The plurality of valves 130 of the valve manifold 128 may be fluidly coupled between the pumps 120, 122 and the BOP stack 150 via the hydraulic circuit 135. Each of the plurality of valves 130 may be actuatable between a first or open position, a second or closed position, and one or more (or a plurality of) positions between the open position and the closed position. When in the open position, each of the plurality of valves 130 is configured to allow fluid (e.g., hydraulic fluid from hydraulic circuit 135) to flow therethrough substantially without restriction. When in the closed position, each of the plurality of valves 130 is configured to substantially prevent fluid (e.g., hydraulic fluid from hydraulic circuit 135) from flowing therethrough. When the plurality of valves 130 are in the one or more positions between the open position and the closed position, the plurality of valves 130 may apply a variable level of constriction to fluid (e.g., hydraulic fluid from hydraulic circuit 135) flowing therethrough.

[0017] The valves 130 may each be actuated (e.g., between the closed position and open position) manually, such by personnel manipulating a lever, wheel, or other mechanisms. In some embodiments, the valves 130 may be actuated by another device or system, such as a controller (e.g., controller 1260 described in more detail herein).

[0018] Each valve 130 of the plurality of valves 130 may be actuated (such as from the closed position to the open position) to selectively communicate the pressurized fluid discharged from the pump(s) 120, 122 to a corresponding one of the seal assemblies 151, 152, 153, 154, 155 of the BOP stack 150. For example, a first of the valves 130, when actuated to the open position (or at least a partially open position), may allow pressurized hydraulic fluid from the hydraulic circuit 135 to communicate with the seal assembly 151 of the BOP stack 150. The fluid pressure may actuate the seal assembly 151 (e.g., so as to cause actuation of a pipe ram, shear ram, blind ram, etc. therein) so as to at least partially close one or more flow paths of the wellbore 10. Selectively actuating others of the plurality of valves 130 may cause corresponding actuations of others of the seal assemblies 152, 153, 154, 155 during operations. Thus, the plurality of valves 130 may be functional valves having regulated outputs to predefined functions of the BOP stack 150.SLB Ref No : IS24 1137-WO-PCT

[0019] As further shown in FIG. 1, a pump 126 may be coupled (such as hydraulically coupled) to the hydraulic circuit 135, between the pump(s) 120, 122 and the valve manifold 128. In some embodiments, the hydraulic fluid in the hydraulic circuit 135 may have a predetermined static pressure. The pump 126 may function to maintain the hydraulic circuit 135 at the predetermined static pressure during operations. In some embodiments, the pump 126 may comprise a pneumatic pump; however, other pump types, designs, configuration, etc. are contemplated.

[0020] In some embodiments, the predetermined static pressure of the hydraulic circuit 135 may be approximately 3,000 pounds per square inch (psi) as an example. However, the static pressure of the hydraulic circuit 135 may be at different pressure levels (both above and below 3,000 psi). A pressure gauge 136 may be connected to the hydraulic circuit 135 for monitoring pressure therein during operations. In some embodiments, the pump 126 may have automatic and manual settings whereby the pump 126 may be started either automatically or manually, respectively, to maintain the pressure in the hydraulic circuit 135 as previously described.

[0021] A plurality of sensors 140, 141, 142, 143 may be coupled to the system 100 that are configured to measure or detect one or more parameters during operations. For instance, the sensors 140, 141 may be coupled to and configured to detect one or more parameters associated with the hydraulic circuit 135, and the sensors 142, 143 may be coupled to and configured to detect one or more parameters associated with the wellbore 10 and / or BOP stack 150. The sensors 140, 141, 142, 143 may be configured to detect any suitable parameter, such as pressure, temperature, flow rate, or some combination thereof. As used herein, a description of a sensor (such as the sensors 140, 141, 142, 143) being configured to “detect” a particular parameter expressly includes the sensor directly detecting, measuring, etc. the parameter in question as well as the sensor detecting, measuring, etc. a value that is indicative of the parameter in question. For instance, a sensor (e g., of the sensors 140, 141, 142, 143) may detect a change in electrical resistivity, and this change in electrical resistivity can be related or converted to another parameter, such as pressure, temperature, flow rate, etc.SLB Ref No : IS24 1137-WO-PCT

[0022] In some embodiments, the sensors 140, 141 may be configured to detect pressures in the hydraulic circuit 135, downstream of the pumps 120, 122, 126 and upstream of the valve manifold 128. In some embodiments, the outputs from the sensors 140, 141 may be used (e.g., by controller 160 described in more detail herein, a switch, and / or other assembly) to control a start-stop operation of one or more of the pump 120, 122, 126. Thus, the sensors 140, 141 may be useful for maintaining the desired static pressure in the hydraulic circuit 135 during operations. For example, in some embodiments, the pump(s) 120, 122 may be started or stopped based at least in part on an output from the sensor 140, and the pump 126 may be started or stopped based on an output from the sensor 141.

[0023] In some embodiments, the sensors 143, 142 may be configured to detect a pressure in the wellbore 10 and / or BOP stack 150. Specifically, in some embodiments, the sensor 142 may be configured to detect a pressure in the BOP stack 150, and the sensor 143 may be configured to detect a pressure in the wellbore 10. The sensor 143 may detect a pressure in one or more flow paths, such as a production bore, annulus, etc. in the wellbore 10.

[0024] The actuation assembly 110 may also include a pressure storage reservoir 134, which may be a piston accumulator or a bladder accumulator for example. The pressure storage reservoir 134 may include a movable member (or piston) 138 that separates a charged gas section 134a filled with an inert gas (e.g., nitrogen) from a hydraulic-fluid section 134b filled with the hydraulic fluid. Thus, the hydraulic-fluid section 134b may be fluidly coupled to the hydraulic circuit 135, between the pump(s) 120, 122 and the pump 126. As hydraulic fluid is discharged from the pump(s) 120, 122, the pressure of this discharged hydraulic fluid moves the movable member 138 within the pressure storage reservoir 134 to decrease the volume of the gas section 134a. However, when the pressure drops in the hydraulic circuit 135, the compressed gas in the gas section 134a expands and moves the movable member 138 to thereby increase the volume in the gas section 134a and exert pressure on the hydraulic circuit 135 that may be used to operate the BOP stack 150. Alternatively, the pressure storage reservoir 134 may include an elastomer bladder filled with an inert gas disposed in a pressure vessel containing hydraulic fluid. When the pressure drops in the hydraulic circuit 135, the compressed gas in the bladder of the pressure storage reservoir 134 expands and pushes theSLB Ref No : IS24 1137-WO-PCT stored hydraulic fluid into the hydraulic circuit 135 so that the hydraulic fluid may be used to operate the BOP stack 150.

[0025] The actuation assembly 110 may also include components for regulating a hydraulic pressure of the valve manifold 128. For example, in some embodiments, the actuation assembly 110 may include a regulating device 144 that is fluidly coupled to the plurality of valves 130 of the valve manifold 128. The regulating device 144 may comprise any suitable pressure regulating device or assembly (e.g., a bypass regulator, a backpressure regulator, a relief valve, a variable displacement pump, a variable speed motor, etc.) that is configured to relieve excess pressure in the hydraulic circuit 135, such as when the pressure in the hydraulic circuit 135 rises above a threshold. In some embodiments, the pressure regulating device 144 may comprise a relief valve that is configured to relieve pressure in the hydraulic circuit 135 by selectively diverting fluid back to the fluid reservoir 118 during operations.

[0026] In some embodiments, the primary pump(s) 120 may operate at full force, as the pressure regulating device 144 manages the system pressures that are ultimately applied to the BOP stack 150. When the pressure of the actuation assembly 110 drops to at least the first pressure below the predetermined static pressure (such as to about 2,500 psi, for example), the primary pump(s) 120 may be started to increase the pressure in the hydraulic circuit 135. If the primary pump(s) 120 fails to start, the spare pump 122 may be started instead. The pumping action from the pump(s) 120 and / or the spare pump 122, discharges hydraulic fluid from the fluid reservoir 118 into the hydraulic circuit 135. As hydraulic fluid from the fluid reservoir 118 is pumped into the hydraulic circuit 135, the fluid section 134b of the pressure storage reservoir 134 may be filled as previously described. When the pressure in the hydraulic circuit 135 is restored to the predetermined static pressure (such as about 3,000 psi, for example), pump(s) 120, 122 may be deactivated (or stopped). In some embodiments, excess pressure in the hydraulic circuit 135 may be vented back to fluid reservoir 118 via the pressure regulating device 144 when the hydraulic fluid in the hydraulic circuit 135 exceeds the predetermined static pressure. Pumping action from the pump(s) 120, 122 may continue for a predetermined time after the hydraulic circuit 135 is restored to the predetermined static pressure. For example, pumping action from the pump(s) 120, 122 may continue for five seconds after the hydraulic circuit 135 is restored to the predetermined staticSLB Ref No : IS24 1137-WO-PCT pressure. However, this predetermined time of five seconds is non-limiting, and other times are contemplated and are within the scope of the present disclosure.

[0027] The actuation assembly 110 may also include a controller 160 that is configured to control the operation of one or more components of the actuation assembly 110 during operations. The controller 160 may comprise a computing device or collection of computing devices that are communicatively coupled to one another.

[0028] Generally speaking, the controller 160 may comprise a processor 162 and a memory 164. The processor 162 may comprise any suitable processing device, such as a microcontroller, central processing unit (CPU), graphics processing unit (GPU), timing controller (TCON), scaler unit. The processor 162 executes computer-readable instructions (e.g., computer-readable instructions 166) stored on memory 164, thereby causing the processor 162 to perform some or all of the actions attributed herein to the controller 160. In general, processor 162 fetches, decodes, and executes instructions (e.g., computer-readable instructions 166). In addition, processor 162 may also perform other actions, such as, making determinations, detecting conditions or values, etc., and communicating signals. If processor 162 assists another component in performing a function, then processor 162 may be said to cause the component to perform the function.

[0029] The memory 164 may comprise volatile storage (e.g., random access memory (RAM)), non-volatile storage (e.g., flash storage, read-only memory (ROM), etc.), or combinations of both volatile and non-volatile storage. Data read or written by the processor 162 when executing computer-readable instructions 166 can also be stored on memory 164. Memory 164 may comprise “non-transitory computer-readable medium,” where the term “non-transitory” does not encompass transitory propagating signals.

[0030] As used herein, “a processor,” “at least one processor,” or “one or more processors” generally refer to a single processor configured to perform one or multiple operations or multiple processors configured to collectively perform one or more operations. In the case of multiple processors, performance of the one or more operations could be divided amongst different processors, though one processor may perform multiple operations, and multiple processors could collectively perform a single operation. Similarly, “a memory,” “at least one memory,” or “one or more memories” generally refer to a singleSLB Ref No : IS24 1137-WO-PCT memory configured to store data and / or instructions or multiple memories configured to collectively store data and / or instructions.

[0031] The controller 160 may comprise a dedicated controller for controlling the actuation assembly 110. Alternatively, the controller 160 may be included as part of a general or master controller for the system 100. In some embodiments, the controller 160 may be embodied as a single unit or device. Alternatively, in some embodiments, the controller 160 may be embodied as a plurality of devices that are communicatively coupled to one another and potentially remotely spaced from one another.

[0032] The controller 160 may include or be coupled to a human machine interface (HMI) 168 that is configured to communicate outputs to users (such as well operators) and / or to receive inputs from users during operations. The HMI 168 may comprise any suitable device or collection of devices, such as a keyboard, display (including a touch-sensitive display), touch-sensitive pad, mouse, remote control, control panel, speaker, or some combination thereof.

[0033] In some embodiments, the controller 160 and / or the HMI 168 may be located remotely from the BOP stack 150. For instance, in some embodiments, the controller 160 and / or the HMI 168 may be at least partially located in a drilling cabin, in a tool pusher’s cabin, or on the drilling floor. In some embodiments, the controller 160 and / or the HMI 168 may be separated from the wellbore 10 and BOP stack 150 by a mile or more.

[0034] In some embodiments, starting and stopping of the pumps 120, 122, 124, 126 may be at least partially controlled by the controller 160. For instance, the controller 160 may start or stop one or more of the pumps 120, 122, 126 based at least in part on an output from the sensors 140, 141, pressure gauge 136, etc. Moreover, pressure and flow through the actuation assembly 110 may be controlled by the controller 160 via a predefined function. For example, if an annular function of the BOP stack 150 is fired (e g., via actuation of a corresponding one of the plurality of seal assemblies 151, 152, 153, 154, 155), the controller 160 may auto-regulate one or more of the pumps 120, 122 to output fluid at pressure of a desired pressure (e.g., such as 1,500 psi, for example), and to stop the flow of fluid when the pressure reaches the predetermined static level.SLB Ref No : IS24 1137-WO-PCT

[0035] The system 100 may be powered by any suitable power source. For instance, in some embodiments, the system 100 (including the controller 160, pumps 120, 122, 124, 126, sensors 140, 141, 142, 143, valves 130, etc.) may be powered by a battery system, rig power, a rig generator, an uninterruptable power supply (UPS), or some combination thereof. For instance, in some embodiments, the electrical power source for the system 100 (or a portion thereof) may include rig power as a primary energy source, at least one rig generator as a secondary energy source, and at least one battery system as the tertiary energy source. Alternatively, in some embodiments, the at least one battery system may be the primary energy source, and the rig power may be the secondary energy source of the system 100 (or a portion thereof). Designations of primary, secondary, and tertiary energy sources are not limiting, however, and may change according to the needs of the system 100 according to some embodiments. In some embodiments, the at least one battery system may be trickle charged by a rig providing the rig power, or some other suitable power source.

[0036] During operations with the system 100, the controller 160 may receive outputs from various sources, including the one or more sensors (e.g., the sensors 140, 141, 142, 143). Based on these received outputs, the controller 160 may be configured to detect an abnormal event. In some embodiments, the abnormal event may include a loss of power by the system 100 (or a portion thereof), a detected kick in the wellbore 10, a pressure surge in the actuation assembly 110 or the wellbore 10, or other abnormal well control event. In some embodiments, the controller 160 may detect the abnormal event based on an input from a user (such as a well operator) via an input, such as an input received by the HMI 168.

[0037] In addition, in some embodiments, the controller 160 may select and / or execute an emergency function sequence to address an abnormal event. For instance, the memory 164 (or another memory coupled to the controller 160) may have a plurality of emergency function sequences stored thereon. Each of the emergency function sequences may comprise a sequence of actuations for the valves 130 of the valve manifold 128 that is configured to close off one or more flow paths in the wellbore 10 via the BOP stack 150. The sequence of actuations may include a selected group of valves 130 for actuating a selected group of the sealing assemblies 151, 152, 153, 154, 155 of the BOP stack 150, and may include a prescribed order (and potentially timing) of actuation of the selected group of sealing assemblies 151, 152, 153, 154, 155 (via the corresponding valves 130). These valveSLB Ref No : IS24 1137-WO-PCT selections, actuation order, and timing may be selected in order to effectively and safely close of one or more flow paths from the wellbore 10 in response to a particular abnormal event. In some embodiments, one or more of the emergency function sequences may include actuation of other components or systems other than the BOP-stack. For instance, an emergency function sequence may include adjusting a mud-weight in the wellbore 10, adjusting a pressure or speed of a mud-pump, etc.

[0038] In some embodiments, the plurality of emergency function sequences may be selected, edited, uploaded, written, etc. on the memory 164 by a user (such as a well operator). For example, in some embodiments, a user may store emergency function sequences on the memory 164 and designate each of the emergency function sequences for use in response to a particular, corresponding abnormal event.

[0039] In some embodiments, the emergency function sequences stored on the memory 164 may be selected for execution by a user (such as a well operator) or the controller 160 during operations. For instance, in some embodiments, a user (such as the well operator) may select an emergency function sequence by use of the HMI 168 (or some other interface). Specifically, the user may make an input to the HMI 168 that then causes the controller 160 to execute the selected emergency function sequence by actuating the valves 130 according to the selected emergency function sequence.

[0040] In some embodiments, the controller 160 may autonomously select and execute an emergency function sequence. For instance, in some embodiments, the controller 160 may select and execute an emergency function sequence (e.g., from a plurality of emergency function sequences) in response to a particular output from one or more of the sensors 140, 141, 142, 143. In some embodiments, one or both of the sensors 142, 143 may detect a pressure spike or overpressure in the wellbore 10. Such overpressure in the wellbore 10 may be the result of a kick or some other abnormal event. In response to the detected overpressure, the controller 160 may autonomously select and execute an emergency function sequence to safely shut-in the wellbore 10.

[0041] In some embodiments, the controller 160 may select a particular emergency function sequence based on a rule or algorithm that was created, edited, etc. by a user. For instance, the controller 160 may select a particular emergency function sequence in responseSLB Ref No : IS24 1137-WO-PCT to a pressure detected by one or both of the sensors 142, 143 rising above a threshold. As another example, in some embodiments, the controller 160 may select an emergency function sequence based on a current phase of drilling or other operation for the system 100. Specifically, the controller 160 may select an emergency function sequence that does not include actuation of shear rams when such shearing is not possible, not feasible, or detrimental (e.g., such as when a wireline tool is inserted in the wellbore 10).

[0042] In some embodiments, an emergency function sequence may be executed (e.g., by automatic initiation by the controller 160, by command or input from a user on the HMI 168, etc.) to address an overpressure in the wellbore 10. For example, if a threshold is breached indicating a pressure surge, the controller 160 may execute (such as autonomously execute or in response to a command or instruction from a user) an emergency function sequence that includes first shearing a pipe extending from the wellbore 10 via one of the seal assemblies 151, 152, 153, 154, 155, then closing one or more other rams (e.g., blind rams, pipe rams, etc.) of one or more others of the seal assemblies 151, 152, 153, 154, 155, and then venting operations to safely isolate and control the wellbore 10. This is just an example of an emergency function sequence. Other emergency function sequences for mitigating an abnormal well control event, for example, are contemplated and are within the scope of the present disclosure.

[0043] For instance, in some embodiments, if an overpressure is detected in the wellbore 10, the emergency function sequence may include closing one or more flow paths from the wellbore 10 (such as an annular flow path) via actuation of one or more of the seal assemblies 151, 152, 153, 154, 155, and then potentially taking some other action such as increasing pumping rates, mud weight, etc. If after some period of time, the overpressure is still being detected, the controller 160 may then take further action, such as closing additional flow paths out of the wellbore 10 and / or shearing one or more tubulars extending into the wellbore 10 (e.g., via actuation of one or more of the seal assemblies 151, 152, 153, 154, 155).

[0044] In some embodiments, the controller 160 may detect an abnormal event based on an output from one or more sensors, such as one or more of the sensors 140, 141, 142, 143. In response, the controller 160 may generate a notification that is then communicated to the user via the HMI 168. In some embodiments, the notification may be visual (such as via aSLB Ref No : IS24 1137-WO-PCT graphic, text, etc. on a display), audible (such as via an audible alarm, message, etc.), tactile (such as via vibrations or other haptics), or some combination thereof. In some embodiments, the notification may provide the user an option to select an emergency function sequence (such as from a plurality of emergency function sequences as previously described), to execute an emergency function sequence (either an emergency function sequence that was selected by the user or that was selected by the controller 160), and / or to bypass (or override) the execution of the emergency function sequence. This option may be referred to as a “bypass option” or “override option.” In some embodiments, the notification may initiate or be associated with a timer such that when the timer expires the controller 160 may execute the selected emergency function sequence. Thus, in the event that a well operator is incapacitated, is not physically present, or is otherwise unable to receive or respond to the notification, the controller 160 may (upon expiration of the timer) may initiate execution of the emergency function sequence to prevent or at least minimize any potential damage or other harm that may result from the abnormal event.

[0045] In some embodiments, certain automatic safety operations may be integrated into the controller 160. For example, if the actuation assembly 110 (or some portion thereof) loses power (or loses power from a particular power source), a particular emergency function sequence (such as a Deadman auto shear safety sequence) may automatically be executed (e.g., by the controller 160) so as to actuate a predetermined set of valves 130 to close in the wellbore 10 via the BOP stack 150. As another example, in the case of a well control event, a well operator can signal a function (e.g., via the HMI 168) that will trigger the execution of an emergency function sequence. That is, when one or more thresholds are breached (e.g., as indicated by an output from one or more of the sensors 140, 141, 142, 143), the controller 160 may autonomously select and / or initiate an emergency function sequence to reduce the need for manual activation and expediting the response to dangerous and hazardous situations. As another example, in the case of a detected kick in the wellbore, the controller 160 may turn on one or more of the pumps 120, 122 and actuate the valves 130 of the valve manifold 128 according to a particular (such as a selected) emergency function sequence.

[0046] In some embodiments, the system 100 incorporates multiple layers of redundancy, ensuring continuous operation even in the event of power loss, communication failures, or sensor malfunctions. Backup systems ensure that critical functions are executedSLB Ref No : IS24 1137-WO-PCT under all operational conditions, according to one or more embodiments of the present disclosure. In some embodiments, the system 100 may be designed for rigorous simulation and testing in both virtual and real-world conditions, ensuring reliability and safety before deployment.

[0047] In some embodiments, the system 100 may offer several advantages over traditional manual control systems. For example, by at least partially automating critical emergency functions, the system 100 reduces the potential for human error, decreases response time, and ensures safer well control operations. Moreover, the integration of sensors and logic-based controls ensures consistent and reliable execution of emergency functions under all conditions. Further, the manual override and the HMI 168 features allow operators to adapt to changing conditions during drilling operations while maintaining control over the automated system. Finally, in some embodiments, the system 100 may be designed in compliance with existing industry safety regulations and standards, making it suitable for use in a variety of drilling environments.

[0048] Referring now to FIGS. 2 and 3, example methods 200, 300 for shutting-in a wellbore is shown according to some embodiments. Embodiments of the methods 200, 300 may be at least partially performed by use of embodiments of the system 100 (FIG. 1) previously described. Thus, in describing the features of methods 200, 300, continuing reference is made to FIG. 1. However, it should be appreciated that embodiments of methods 200, 300 may be performed by use of systems that are different from the system 100 in at least some respects.

[0049] In addition, embodiments of the methods 200, 300 may be at least partially performed by use of a controller (such as the controller 160 in FIG. 1). Thus, the methods 200, 300 may be representative of at least some of the computer-readable instructions 166 that are stored on memory 164 and executable by the processor 162 as previously described.

[0050] Referring specifically to FIG. 2, the method 200 includes receiving at least one input indicative of an instruction to shut-in a wellbore at block 202. The instructions may be generated by any suitable source, such as a user (e.g., a well operator), a controller (or other computing device), or some combination thereof. For instance, with respect to the system 100, the controller 160 may receive such an input in the form of a command from a wellSLB Ref No : IS24 1137-WO-PCT operator (such as a command that is initiated by an input by the well operator to the HMI 168). In some embodiments, the controller 160 may receive such an input in the form of an output from another controller, computing device, or other system or assembly (such as a pressure switch or one or more of the sensors 140, 141, 142, 143, as previously described). In some embodiments, the controller 160 may receive an output from one or more of the sensors 140, 141, 142, 143 and the output (which may indicate a pressure, temperature, or other parameter that is above a threshold or beyond a threshold range) may be indicative of an instruction to shut-in the wellbore 10.

[0051] Method 200 also includes autonomously selecting an emergency function sequence from a plurality of emergency function sequences based on the instruction at block 204. For instance, with respect to the system 100, the controller 160, upon receipt of the input as previously described forblock 202, may select an emergency function sequence from a plurality of emergency function sequences that are stored on the memory 164 (or another memory that is coupled to the controller 160). The selection by the controller 160 may be based on the input indicative of an instruction to shut-in the wellbore 10 (block 202). For instance, if the input received at block 202 is or is based on an output from one or more of the sensors 140, 141, 142, 143, then the controller 160 may select the emergency function sequence based on the output. In some specific examples, if one or more of the sensors 142, 143 detect a pressure in the wellbore 10 and / or BOP stack 150 that is above a threshold, the controller 160 may determine that an overpressure of the wellbore 10 or BOP stack 150 is occurring (as an “abnormal event”) and thus select a particular emergency function sequence that is configured to address this type of event. In some embodiments, when the input is (or is based on) a command received from another controller or a user (such as via the HMI 168), the command may specify a particular emergency function sequence to be performed. Thus, in these circumstances, the controller 160 may select the specified emergency function sequence based on the command.

[0052] Method 200 also includes autonomously executing the selected emergency function sequence in block 206. For instance, for the system 100, the controller 160 may execute a selected emergency function sequence by actuating selected ones of the valves 130 of the valve manifold 128 in order to selectively actuate the corresponding seal assemblies 151, 152, 153, 154, 155 in a particular order and timing according to the emergency functionSLB Ref No : IS24 1137-WO-PCT sequence. The controller 160 may also maintain a sufficient pressure in the hydraulic circuit 135 to actuate the selected seal assemblies 151, 152, 153, 154, 155 via the pump(s) 120, 122, 126, pressure storage reservoir 134, the regulating device 144, etc. as previously described. Once the selected emergency function sequence is executed, the wellbore 10 may be safely shut-in so that damage or other negative outcomes are avoided (or at least reduced).

[0053] Referring specifically to FIG. 3, the method 300 includes receiving at least one input indicative of an instruction to shut-in a wellbore at block 302. Block 302 may be substantially similar to block 202 of method 200 (FIG. 2), so that the description of block 202 may be utilized to describe at least some embodiments of block 302.

[0054] In addition, method 300 includes autonomously shutting in the wellbore in response to the at least one input by actuating at least a subset of a plurality of valves according to a selected emergency function sequence of a plurality of emergency function sequences at block 304. In some embodiments, block 304 may comprise shutting in a wellbore in response to a command (as an input indicative of an instruction from block 302) output from a user, a controller, or other device, system, etc. In some embodiments, block 304 may comprise shutting in a wellbore in response to an output from a sensor (or sensors) (as an input indicative of an instruction from block 302). With respect to the system 100 of FIG. 1, autonomously shutting in the wellbore according to block 304 may comprise actuating a subset of the valves 130 in a particular order and timing according to a selected emergency function sequence of a plurality of function sequences as previously described.

[0055] In some embodiments, methods 200, 300 may further comprising generating a notification that provides an option for a user to initiate an emergency function sequence. In some embodiments, the notification may be communicated to the user via a suitable interface, such as HMI 168 as previously described. In some embodiments, the notification may comprise a notification of a particular abnormal event. The abnormal event communicated via the notification may be detected (e.g., by the controller 160) based on an output from one or more sensors (e.g., such as one or more of the sensors 140, 141, 142, 143). As a specific example, in some embodiments one or both of the sensors 142, 143 may detect a pressure that is above a threshold (or outside of a designated range), and the controller 160, based on the outputs from the sensor(s) 142, 143 my detect an overpressure (or kick) in the wellboreSLB Ref No : IS24 1137-WO-PCT10. In response, the controller 160 may output a notification to the well operator via the HMI 168 that alerts the well operator to the detection of the abnormal event.

[0056] In some embodiments, the notification output to the well operator may include an indication of a selected emergency function sequence for addressing the detected abnormal event. In some embodiments, the controller 160 may select the particular emergency function sequence via a previous command, selection, etc. received by a user (such as part of a menu selection, programming, set-up by a user before the abnormal even occurs). In some embodiments, the controller 160 may autonomously select the emergency function sequence included in the notification based on the outputs from the sensors 142, 143 (e.g., the controller 160 may detect the overpressure and thus select an appropriate emergency function sequence based on the detected overpressure or severity thereof). In some embodiments, the notification may allow the well operator to select (e.g., via input to the HMI 168) an emergency function sequence in response to the detected abnormal event.

[0057] In some embodiments, the notification may provide the well operator the ability to choose between execution of an emergency function sequence (either one that is elected by the well operator or one that is selected by the controller 160, etc.), or overriding or bypassing an emergency function sequence in favor of some other action. For example, if an overpressure or kick is detected in the wellbore as previously described, the notification may allow the well operator to bypass or override an emergency function sequence for shutting in the wellbore 10 via the BOP stack 150 in favor of some other remedial action, such as increasing a pressure (e.g., a mud pressure) and / or a mud weight in the wellbore 10 to counteract the detected kick, venting pressure from the wellbore 10, or some combination thereof.

[0058] In some embodiments, the notification may include a suggestion for alternative remedial actions that the well operator may take other than the selected emergency function sequence for shutting in the wellbore 10. Specifically, the controller 160 may select these alternative remedial actions from a plurality of possible actions, or these alternative remedial actions may be preselected or predesignated by the well operator (or other user) before the abnormal event occurs (such as during a programming or set up period).SLB Ref No : IS24 1137-WO-PCT

[0059] In some embodiments, the notification may include (or be associated with) a timer. The timer may be set for any suitable length or period of time, such as 5 minutes, 3 minutes, 1 minute, 45 seconds, 30 seconds, etc. The timer may be displayed on (or otherwise communicated with) the notification (e.g., via the HMI 168). In some embodiments, expiration of the timer may initiate a command to execute an emergency function sequence, such as a selected emergency function sequence, a default emergency function sequence, etc. Thus, as previously described, if the well operator is unable to respond to the notification (such as due to absence, incapacitation, etc.), the controller 160 may automatically execute the emergency function sequence to avoid (or at least reduce) potential damage or other harm as a result of the abnormal event.

[0060] As explained above and reiterated below, the present disclosure includes, without limitation, the following example Examples.

[0061] Example 1 : A system comprising: an actuation assembly for a blowout preventer (BOP) stack, the actuation assembly comprising: a reservoir that stores actuation fluid at atmospheric pressure; at least one pump coupled to the reservoir that is configured to pressurize the actuation fluid; and a plurality of valves fluidly coupled between the at least one pump and the BOP stack, wherein actuation of each of the plurality of valves is configured to communicate the actuation fluid to a corresponding seal assembly of the BOP stack to actuate the corresponding seal assembly; and a controller communicatively coupled to the plurality of valves, wherein the controller is configured to: receive at least one input indicative of an instruction to shut-in a wellbore; and autonomously shut-in the wellbore in response to the at least one input by actuating at least a subset of the plurality of valves according to a selected emergency function sequence of a plurality of emergency function sequences that are stored in a memory.

[0062] Example 2: The system of any of the Examples, wherein the controller is configured to select the selected emergency function sequence in response to an input received from a well operator.

[0063] Example 3: The system of any of the Examples, wherein the controller is further configured to: select the selected emergency function sequence based on an output from oneSLB Ref No : IS24 1137-WO-PCT or more sensors that are configured to monitor one or more parameters of at least one of the actuation assembly and the wellbore.

[0064] Example 4: The system of any of the Examples, wherein the one or more sensors are configured to monitor a pressure in the wellbore.

[0065] Example 5: The system of any of the Examples, further comprising: a human machine interface (HMI) that is communicatively coupled to the controller, wherein the controller is further configured to: output a notification to a well operator via the HMI in response to an output from the one or more sensors; and receive a response from the well operator via the HMI to execute the selected emergency function sequence, such that the response is the at least one input.

[0066] Example 6: The system of any of the Examples, wherein the controller is further configured to provide an override option in the notification that, if selected by the well operator, would provide an input to the controller to prevent execution of the selected emergency function sequence.

[0067] Example 7: The system of any of the Examples, wherein the controller is configured to: autonomously shut-in the wellbore according to the selected emergency function sequence if no response to the notification is received after a period of time.

[0068] Example 8: The system of any of the Examples, wherein the controller is further configured to: detect an overpressure in the wellbore based at least in part on the output from the one or more sensors; and select the selected emergency function sequence based on the detected overpressure in the wellbore.

[0069] Example 9: The system of any of the Examples, wherein the at least one input comprises a command from a well operator.

[0070] Example 10: The system of any of the Examples, wherein the controller is further configured to autonomously select the selected emergency function sequence based on the at least one input.

[0071] Example 11 : A method comprising: (a) receiving, at a controller, at least one input indicative of an instruction to shut-in a wellbore by use of a blowout preventer (BOP) stack; and (b) actuating, by use of the controller and in response to the at least one input,SLB Ref No : IS24 1137-WO-PCT selected valves of a plurality of valves that are coupled between a reservoir and the BOP stack to actuate selected seal assemblies of the BOP stack according to a selected emergency function sequence of a plurality of emergency function sequences stored in a memory.

[0072] Example 12: The method of any of the Examples, further comprising: (c) selecting the selected emergency function sequence in response to an input received by a well operator.

[0073] Example 13: The method of any of the Examples, further comprising: (d) selecting the selected emergency function sequence based on a pressure in the wellbore.

[0074] Example 14: The method of any of the Examples, further comprising: (e) detecting an overpressure in the wellbore based on the pressure in the wellbore; and (f) selecting the selected emergency function sequence based on the detected overpressure in the wellbore.

[0075] Example 15: The method of any of the Examples, further comprising: (g) selecting the selected emergency function sequence based on an output from one or more sensors that are configured to monitor one or more parameters of the wellbore.

[0076] Example 16: The method of any of the Examples, further comprising: (h) outputting a notification to a well operator by use of a human machine interface (HMI) in response to an output from the one or more sensors; and (i) receiving a response from the well operator to execute the selected emergency function sequence.

[0077] Example 17: The method of any of the Examples, further comprising: (j) providing an override option in the notification that, if selected by the well operator, would provide an input to the controller to prevent execution of the selected emergency function sequence.

[0078] Example 18: The method of any of the Examples, further comprising: (k) performing (b) if no response to the notification is received after a period of time.

[0079] Example 19: A system comprising: an actuation assembly for a blowout preventer (BOP) stack, the actuation assembly comprising: a reservoir that stores actuation fluid at atmospheric pressure; at least one pump coupled to the reservoir that is configured to pressurize the actuation fluid; and a valve manifold fluidly coupled between the at least oneSLB Ref No : IS24 1137-WO-PCT pump and the BOP stack; and a controller communicatively coupled to the valve manifold, wherein the controller is configured to autonomously actuate the valve manifold according to an emergency function sequence in response to an input that is indicative of an instruction to shut in a wellbore, wherein the emergency function sequence includes an actuation sequence for portions of the BOP stack that is configured to at least partially shut-in the wellbore.

[0080] Example 20: The system of any of the Examples, wherein controller is further configured to: output a notification to a well operator in response to an output from one or more sensors that are configured to monitor one or more parameters of at least one of the actuation assembly and the wellbore; and receive a response from the well operator to execute the emergency function sequence, such that the response is the input.

[0081] Example 21 : The system of any of the Examples, wherein the controller is further configured to: autonomously shut-in the wellbore according to the emergency function sequence if no response to the notification is received after a period of time.

[0082] Example 22: The system of any of the Examples, wherein the controller is further configured to: provide an override option in the notification that, if selected by the well operator, would provide an input to the controller to prevent execution of the emergency function sequence.

[0083] Example 23 : The system of any of the Examples, wherein the controller is further configured to select the emergency function sequence from a plurality of emergency function sequences that are stored in a memory of or coupled to the controller.

[0084] Example 24: The system of any of the Examples, wherein the controller is further configured to select the emergency function sequence based on an output from one or more sensors that are configured to monitor one or more parameters of at least one of the actuation assembly and the wellbore.

[0085] Example 25 : The system of any of the Examples, wherein the one or more sensors are configured to measure a pressure in the wellbore.

[0086] Embodiments disclosed herein are directed to systems and methods for autonomously actuating a BOP stack of a subterranean wellbore according to a selectedSLB Ref No : IS24 1137-WO-PCT emergency function sequence. In some embodiments, the emergency function sequence may comprise an actuation selection, order, timing, etc. for assemblies of a BOP stack that is configured to shut-in a well. In some embodiments, the emergency function sequence may be selected from a plurality of emergency function sequences. In some embodiments, the emergency function sequence may be pre-selected by a well operator (or other personnel), a controller, or some combination thereof. The emergency function sequence may be executed in response to an input that is indicative of an instruction to shut-in the wellbore, such as a command from a well operator, an autonomous instruction generated by a controller, a default instruction in the absence of an input or intervention by a well operator, etc. Thus, the systems and methods disclosed herein may be configured to provide at least a partially automated shut-in operation for a wellbore that may be configured to ensure timely and accurate actuation of a BOP stack, despite an incapacitation or absence of the well operator.

[0087] The preceding discussion is directed to various embodiments. However, one of ordinary skill in the art will understand that the examples disclosed herein have broad application, and that the discussion of any embodiment is meant only to be exemplary of that embodiment, and not intended to suggest that the scope of the disclosure, including the claims, is limited to that embodiment.

[0088] The drawing figures are not necessarily to scale. Certain features and components herein may be shown exaggerated in scale or in somewhat schematic form and some details of conventional elements may not be shown in interest of clarity and conciseness.

[0089] In the preceding discussion and in the claims, the terms “including” and “comprising” are used in an open-ended fashion, and thus should be interpreted to mean “including, but not limited to . . . .” Also, the term “couple” or “couples” is intended to mean either an indirect or direct connection. Thus, if a first device couples to a second device, that connection may be through a direct connection of the two devices, or through an indirect connection that is established via other devices, components, nodes, and connections. In addition, as used herein, the terms “axial” and “axially” generally mean along or parallel to a given axis (e.g., central axis of a body or a port), while the terms “radial” and “radially” generally mean perpendicular to the given axis. For instance, an axial distance refers to a distance measured along or parallel to the axis, and a radial distance means a distanceSLB Ref No : IS24 1137-WO-PCT measured perpendicular to the axis. Further, when used herein (including in the claims), the words “about,” “generally,” “substantially,” “approximately,” and the like, when used to refer to a stated value, mean within a range of plus or minus 10% of the stated value.

[0090] While exemplary embodiments have been shown and described, modifications thereof can be made by one skilled in the art without departing from the scope or teachings herein. The embodiments described herein are exemplary only and are not limiting. Many variations and modifications of the systems, apparatus, and processes described herein are possible and are within the scope of the disclosure. Accordingly, the scope of protection is not limited to the embodiments described herein, but is only limited by the claims that follow, the scope of which shall include all equivalents of the subject matter of the claims. Unless expressly stated otherwise, the steps in a method claim may be performed in any order. The recitation of identifiers such as (a), (b), (c) or (1), (2), (3) before steps in a method claim are not intended to and do not specify a particular order to the steps, but rather are used to simplify subsequent reference to such steps.

Claims

SLB Ref No : IS24 1137-WO-PCTWHAT IS CLAIMED IS:

1. A system comprising: an actuation assembly for a blowout preventer (BOP) stack, the actuation assembly comprising: a reservoir that stores actuation fluid at atmospheric pressure; at least one pump coupled to the reservoir that is configured to pressurize the actuation fluid; and a plurality of valves fluidly coupled between the at least one pump and the BOP stack, wherein actuation of each of the plurality of valves is configured to communicate the actuation fluid to a corresponding seal assembly of the BOP stack to actuate the corresponding seal assembly; and a controller communicatively coupled to the plurality of valves, wherein the controller is configured to: receive at least one input indicative of an instruction to shut-in a wellbore; and autonomously shut-in the wellbore in response to the at least one input by actuating at least a subset of the plurality of valves according to a selected emergency function sequence of a plurality of emergency function sequences that are stored in a memory.

2. The system of claim 1, wherein the controller is configured to select the selected emergency function sequence in response to an input received from a well operator.

3. The system of claim 1, wherein the controller is further configured to select the selected emergency function sequence based on an output from one or more sensors that are configured to monitor one or more parameters of at least one of the actuation assembly and the wellbore, wherein the one or more sensors are configured to monitor a pressure in the wellbore, wherein the system further comprises a human machine interface (HMI) that is communicatively coupled to the controller, and wherein the controller is further configured to:SLB Ref No : IS24 1137-WO-PCT output a notification to a well operator via the HMI in response to an output from the one or more sensors; and receive a response from the well operator via the HMI to execute the selected emergency function sequence, such that the response is the at least one input.

4. The system of claim 3, wherein the controller is further configured to provide an override option in the notification that, if selected by the well operator, would provide an input to the controller to prevent execution of the selected emergency function sequence.

5. The system of claim 3, wherein the controller is configured to: autonomously shut-in the wellbore according to the selected emergency function sequence if no response to the notification is received after a period of time.

6. The system of claim 3, wherein the controller is further configured to: detect an overpressure in the wellbore based at least in part on the output from the one or more sensors; and select the selected emergency function sequence based on the detected overpressure in the wellbore.

7. The system of claim 1, wherein the at least one input comprises a command from a well operator.

8. The system of claim 1, wherein the controller is further configured to autonomously select the selected emergency function sequence based on the at least one input.

9. A method comprising:(a) receiving, at a controller, at least one input indicative of an instruction to shut-in a wellbore by use of a blowout preventer (BOP) stack; and(b) actuating, by use of the controller and in response to the at least one input, selected valves of a plurality of valves that are coupled between a reservoir and the BOP stack toSLB Ref No : IS24 1137-WO-PCT actuate selected seal assemblies of the BOP stack according to a selected emergency function sequence of a plurality of emergency function sequences stored in a memory.

10. The method of claim 9, further comprising:(c) selecting the selected emergency function sequence in response to an input received by a well operator.

11. The method of claim 9, further comprising:(d) selecting the selected emergency function sequence based on a pressure in the wellbore;(e) detecting an overpressure in the wellbore based on the pressure in the wellbore; and(f) selecting the selected emergency function sequence based on the detected overpressure in the wellbore.

12. The method of claim 9, further comprising:(g) selecting the selected emergency function sequence based on an output from one or more sensors that are configured to monitor one or more parameters of the wellbore;(h) outputting a notification to a well operator by use of a human machine interface (HMI) in response to an output from the one or more sensors; and(i) receiving a response from the well operator to execute the selected emergency function sequence.

13. The method of claim 12, further comprising:(j) providing an override option in the notification that, if selected by the well operator, would provide an input to the controller to prevent execution of the selected emergency function sequence; and(k) performing (b) if no response to the notification is received after a period of time.

14. A system comprising:SLB Ref No : IS24 1137-WO-PCT an actuation assembly for a blowout preventer (BOP) stack, the actuation assembly comprising: a reservoir that stores actuation fluid at atmospheric pressure; at least one pump coupled to the reservoir that is configured to pressurize the actuation fluid; and a valve manifold fluidly coupled between the at least one pump and the BOP stack; and a controller communicatively coupled to the valve manifold, wherein the controller is configured to autonomously actuate the valve manifold according to an emergency function sequence in response to an input that is indicative of an instruction to shut in a wellbore, wherein the emergency function sequence includes an actuation sequence for portions of the BOP stack that is configured to at least partially shut-in the wellbore.

15. The system of claim 14, wherein controller is further configured to: output a notification to a well operator in response to an output from one or more sensors that are configured to monitor one or more parameters of at least one of the actuation assembly and the wellbore; and receive a response from the well operator to execute the emergency function sequence, such that the response is the input.

16. The system of claim 15, wherein the controller is further configured to: autonomously shut-in the wellbore according to the emergency function sequence if no response to the notification is received after a period of time.

17. The system of claim 16, wherein the controller is further configured to: provide an override option in the notification that, if selected by the well operator, would provide an input to the controller to prevent execution of the emergency function sequence.SLB Ref No : IS24 1137-WO-PCT18. The system of claim 14, wherein the controller is further configured to select the emergency function sequence from a plurality of emergency function sequences that are stored in a memory of or coupled to the controller.

19. The system of claim 18, wherein the controller is further configured to select the emergency function sequence based on an output from one or more sensors that are configured to monitor one or more parameters of at least one of the actuation assembly and the wellbore.

20. The system of claim 19, wherein the one or more sensors are configured to measure a pressure in the wellbore.

Images