Burst Design in Casing

Subsea Well Systems - BOP Stack Design, Wellhead Equipment, and Umbilical Control Systems

A subsea well system replaces the surface wellhead and surface BOP stack with equipment located on the seabed, sometimes at water depths exceeding 3,000 m. This single design change - moving the wellhead from the surface to the mudline transforms every aspect of well control, equipment access, pressure testing, and emergency response. A surface BOP can be inspected by a roughneck with a wrench. A subsea BOP at 2,500 m water depth can only be accessed by an ROV, and any intervention requires 2-4 hours of ROV transit time before a technician (or robot) can touch the equipment. The design philosophy for subsea systems therefore inverts the maintenance approach: instead of designing for easy access and repair, subsea systems are designed for extreme reliability without access, with redundant control systems, redundant seal surfaces, and automated emergency response that functions without any human intervention from the surface vessel. This guide covers the engineering of these systems.

1. The Subsea Production System Architecture

1.1 System Components from Mudline to Surface

Component	Location	Primary Function	Critical Design Feature
Subsea wellhead system	Mudline - on or just below seabed	Structural foundation for casing strings and BOP. Houses casing hangers for all strings run after installation.	30" high-pressure wellhead housing rated to 10,000-15,000 psi. Running tool interface with drillship. No access possible after installation - must be designed for entire well life.
Subsea BOP stack	Landed on wellhead during drilling. Retrieved to surface for maintenance.	Primary well control barrier during drilling operations. Contains annular preventers, pipe rams, blind/shear rams.	Hydraulically actuated - all functions operable from surface or automatically. Rated for full wellbore shut-in pressure at water depth. Must shear any pipe in the wellbore as last resort.
Lower marine riser package (LMRP)	Sits on top of BOP stack. Connected to drilling riser.	Connects drilling riser to BOP stack. Contains flex joint (allows riser movement relative to BOP), annular preventer, and emergency disconnect package (EDP).	EDP must disconnect riser from BOP in emergency within 60 seconds. Blind/shear rams in BOP must close after LMRP disconnects to seal wellbore.
Drilling riser	From LMRP to drillship (entire water column)	Conduit for drill string and return mud. Structural connection between BOP and vessel. Kill and choke lines run external to riser.	Tensioned from vessel to maintain positive tension throughout water column - prevents buckling. Tension = buoyed weight of riser + safety margin.
Subsea Christmas tree (SCT)	Installed on wellhead after drilling complete	Controls production from subsea well. Contains master valves, swab valve, wing valve, chemical injection ports, and production outlet to flowline.	All valves hydraulically or electrically actuated from surface via umbilical. No manual access. ROV intervention port for backup operations.

2. Subsea BOP Stack Design

2.1 BOP Stack Configuration

The subsea BOP stack is a multi-element pressure containment system. Each element provides a different combination of sealing capability, operating speed, and drill string compatibility. The configuration must ensure that at least one element can seal the wellbore under any condition, including the presence of drill pipe, drill collars, or open hole:

Minimum subsea BOP configuration (per API RP 16Q):
From bottom (closest to wellhead) to top (closest to LMRP):

1. Lower pipe rams - seal around specific drill pipe OD. Cannot seal open hole.
2. Casing shear rams (optional) - can cut casing in emergency. Highest shear force requirement.
3. Blind/shear rams - cut drill pipe AND seal wellbore. Emergency last resort. Must be capable of shearing any pipe in the hole.
4. Variable bore rams (VBR) - seal around range of pipe ODs. More flexible than fixed-bore pipe rams.
5. Upper pipe rams - second fixed-bore pipe ram for redundancy.
6. Upper annular preventer (in LMRP) - seals around any pipe shape (round) or open hole.
7. Lower annular preventer (in LMRP) - redundant annular preventer.

Minimum functionality requirement:
The BOP must be able to close on and seal around drill pipe using pipe rams while simultaneously allowing circulation through the kill and choke lines. This is the primary operating mode for kick circulation.

2.2 Shear Ram Sizing - The Critical Design Calculation

The blind/shear rams must be capable of cutting any tubular in the wellbore in an emergency (drift-off, gas kick from HPHT formation, vessel collision). The required cutting force depends on the tubular size, grade, and wall thickness:

Shear force required to cut drill pipe (lbs):
F_shear = 0.45 x UTS x t x (OD - t)

Where:
UTS = ultimate tensile strength of pipe (psi) = Yp x 1.2 (approximate)
t = wall thickness (inches)
OD = pipe outside diameter (inches)

Example: 5" 19.5 lb/ft S-135 drill pipe (t = 0.362", OD = 5.0", Yp = 135,000 psi):
UTS = 135,000 x 1.2 = 162,000 psi
F_shear = 0.45 x 162,000 x 0.362 x (5.0 - 0.362)
= 0.45 x 162,000 x 0.362 x 4.638
= 0.45 x 162,000 x 1.679
= 0.45 x 272,000 = 122,400 lbs shear force required for 5" S-135 drill pipe

BOP hydraulic closing force = Operating pressure x Ram piston area
For a BOP rated at 5,000 psi closing pressure with 12" piston diameter:
F_closing = 5,000 x pi/4 x 12^2 = 5,000 x 113.1 = 565,500 lbs available
SF = 565,500 / 122,400 = 4.62 → Adequate shear capacity

The BOP must be verified to shear the heaviest, highest-grade tubular planned for the well. If 6-5/8" 35 lb/ft S-150 tool joints are present (harder to cut), the shear force calculation must be repeated and the operating pressure increased if necessary.

3. Subsea Control Systems - Getting Commands to the Seabed

3.1 Control System Types

Control System Type	Signal Transmission	Response Time	Maximum Water Depth
Direct hydraulic	Hydraulic pressure through umbilical hose to BOP actuator	30-90 seconds (fluid travel time)	<1,000 ft practical
Pilot hydraulic (accumulator-based)	Small pilot signal through umbilical opens subsea valve that releases local accumulator pressure to actuator	10-30 seconds	Up to 5,000 ft
Electro-hydraulic multiplexed (EH-MUX)	Electrical signal through umbilical to subsea electronics pod. Electronics opens solenoid valves that release local accumulator pressure.	2-10 seconds	10,000+ ft
All-electric (AE)	Electrical signal and power through umbilical. Electric motor actuators replace hydraulic actuators. No hydraulic fluid in subsea system.	3-15 seconds	20,000+ ft (developing technology)

3.2 Acoustic Backup Control - The Last Line of Communication

If the umbilical is severed or the vessel must emergency-disconnect, the BOP must still be operable. Acoustic control systems transmit commands to the BOP through the water column using sound waves - no physical connection required:

• Operation: Surface transducer transmits encoded acoustic signal. Subsea transducer mounted on BOP stack receives signal and decodes command. Subsea electronics pod opens appropriate hydraulic valve from local accumulators.
• Range: 3,000-5,000 m water depth with adequate acoustic signal strength.
• Response time: 30-120 seconds (signal transmission + valve actuation + hydraulic actuation).
• Limitation: Acoustic signals can be degraded by vessel noise, other acoustic equipment operating simultaneously, and thermocline gradients that refract the signal path. Acoustic backup is not a substitute for primary control - it is a final emergency option.

3.3 Deadman System - Autonomous Emergency BOP Closure

Deadman trigger conditions (automatic, no human command required):
The deadman system monitors the umbilical for loss of control signal. If the signal is lost for a preset time (typically 5-45 minutes), the system automatically closes the BOP.

Typical deadman sequence:
T+0: Loss of control signal detected
T+5-45 min: Deadman timer expires (if signal not restored)
T+timer: Blind/shear rams automatically close → seals wellbore regardless of what is in the hole
T+timer: LMRP/BOP disconnects from wellhead (in some configurations)

Post-Macondo requirement (BSEE 2016): All deepwater drilling operations in US Gulf of Mexico must have an autoshear/deadman system that will close the shear rams automatically if both the primary and secondary control pods lose communication simultaneously.

The Macondo blowout demonstrated that a functioning deadman system would have been able to close the shear rams and seal the wellbore after the crew evacuated, preventing or significantly limiting the surface spill. The explosion and fire had disabled the surface control station, but the BOP itself was undamaged and had hydraulic accumulator pressure available - it simply had no command to activate.

4. Umbilical Design - The Lifeline to Subsea Equipment

4.1 Umbilical Contents and Functions

The umbilical is a composite cable that bundles multiple functional elements in a single armored structure running from the production facility to the subsea tree or manifold. Each element serves a specific function:

Umbilical Element	Function	Typical Specification
Hydraulic hoses (high-pressure)	Supply hydraulic fluid to actuate tree valves, gas lift valves, and downhole safety valve	1/2" - 1" bore, 5,000-15,000 psi rated. Filled with low-viscosity hydraulic fluid (Castrol Transaqua or similar)
Electrical cables	Power to subsea electronics pods, sensors, and communications. Signal transmission for control commands and sensor data.	Multi-conductor armored. 3-phase power for pumps. Fiber optic for high-bandwidth data (pressure/temperature sensors, flow meters)
Chemical injection lines	Deliver scale inhibitor, corrosion inhibitor, methanol (hydrate prevention), and biocide to subsea tree injection points	1/4" - 3/8" bore tubing. High-pressure to overcome wellhead pressure (up to 15,000 psi). Often stainless steel or Inconel for chemical compatibility
Fiber optic cables	High-bandwidth communications and data transmission. Distributed temperature sensing (DTS) for pipeline flow monitoring.	Single-mode or multi-mode. Protected by stainless steel tube within umbilical. Bandwidth: 10 Gbps+

4.2 Hydrate Prevention - The Critical Umbilical Chemical System

Gas hydrates form when natural gas contacts water at low temperatures and high pressures - the conditions that exist throughout the subsea production system. Hydrate blockages in flowlines, trees, and umbilical chemical injection lines can shut down production for weeks and cost millions to remediate:

Hydrate formation conditions (methane hydrate):
Hydrate stable when: T < T_hydrate_formation(P)

Approximate methane hydrate formation temperature:
At 500 psi (34 bar): T_hydrate ≈ 40°F (4°C)
At 1,500 psi (103 bar): T_hydrate ≈ 58°F (14°C)
At 3,000 psi (207 bar): T_hydrate ≈ 68°F (20°C)

Deepwater seabed at 2,000 m: T_seabed ≈ 37°F (3°C), P ≈ 2,900 psi
T_hydrate at 2,900 psi ≈ 67°F (19°C)

The seabed temperature (3°C) is 16°C below the hydrate formation temperature (19°C) → HYDRATE FORMATION CERTAIN without inhibition

Methanol inhibition requirement:
Methanol lowers the hydrate formation temperature by approximately 1.0°C per 6% methanol concentration in the water phase.

Required subcooling override = 19°C - 3°C + 5°C safety margin = 21°C
Methanol concentration required = 21 x 6 = 126% → This is physically impossible (100% max)

At such high subcooling: methanol alone is insufficient → switch to thermodynamic hydrate inhibitor MEG (mono-ethylene glycol) which provides 1°C subcooling per 6% concentration but can be used at higher concentrations (up to 80% by weight) OR use kinetic hydrate inhibitors (KHI) that delay but don't thermodynamically prevent hydrate formation.

Conclusion

The shear ram calculation in this article - 122,400 lbs required to cut 5" S-135 drill pipe, versus 565,500 lbs available from a 5,000 psi actuator on a 12" piston, giving SF = 4.62 - establishes the engineering basis for BOP shear capability verification. This calculation must be repeated for the heaviest, highest-grade tubular planned for the well before the BOP is certified for use. The Macondo event demonstrated that the shear rams on the BOP in use were unable to cut the drill pipe at the position where it rested in the stack - a calculation that was not performed for that specific pipe configuration at that specific stack location.

The hydrate formation analysis illustrates why deepwater production system design cannot be treated as a conventional well with more complex logistics. The seabed temperature of 3°C versus the hydrate formation temperature of 19°C at deepwater flowline pressures creates a thermodynamic driving force for hydrate formation that is 16°C of subcooling - far beyond what methanol injection alone can address. The MEG injection system, the insulated flowlines, the shutdown and depressurization procedures, and the contingency hydrate remediation plans are all responses to this fundamental thermodynamic constraint that has no analog in shallow-water or onshore production engineering.

Want to access our subsea systems design guide with BOP shear force calculator, accumulator volume sizing, and hydrate formation temperature predictor, or discuss subsea well design for a specific water depth? Join our Telegram group for offshore engineering discussions, or visit our YouTube channel for step-by-step tutorials on subsea well systems and deepwater production engineering.