Otc 32374 Ms
Otc 32374 Ms
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Harnessing Leak Detection System in Offshore Pipeline Operation
Tedy Susanto, Muhammad Dedy Nurmansyah, and James Thomas Ladd, Schneider Electric
This paper was prepared for presentation at the Offshore Technology Conference held in Houston, TX, USA, 1 – 4 May, 2023.
This paper was selected for presentation by an OTC program committee following review of information contained in an abstract submitted by the author(s). Contents of
the paper have not been reviewed by the Offshore Technology Conference and are subject to correction by the author(s). The material does not necessarily reflect any
position of the Offshore Technology Conference, its officers, or members. Electronic reproduction, distribution, or storage of any part of this paper without the written
consent of the Offshore Technology Conference is prohibited. Permission to reproduce in print is restricted to an abstract of not more than 300 words; illustrations may
not be copied. The abstract must contain conspicuous acknowledgment of OTC copyright.
Abstract
Delivery of crude oil from Single Point Mooring (SPM) through subsea pipeline to Onshore Receiving
Facility (ORF) play critical role for refinery processing and operation. The pipeline laid in seabed,
connecting oil tanker to storage facility on onshore side. Leak Detection System (LDS) is required to monitor
any oil leakage from the pipeline. If leak happens and no LDS in place, mitigation action will be late, cause
much oil or gas will be released to the environment, dangerous for ocean habitat, harmful for human and
asset safety i.e. explosion and fire, then it can impact on company reputation that own or operate the pipeline.
Tankers transport crude oil via subsea pipeline to oil refinery storage tank including activities such as
loading, unloading, and flushing line. Pipeline LDS project scope of works comprise hardware, software,
and service. The integration amongst these parts will determine project completion success criteria.
Supervisory Control and Data Acquistion (SCADA) system located in Central Control Room (CCR) is used
to monitoring all pipeline operation over long distance. The connected data start from smart field devices,
collected by Remote Telemetry Unit (RTU), transmit by telecommunication media, and finally reach the
CCR. All operation setting can be adjustable according to different kind of oil product LDS software is an
advanced high fidelity software application for the pipeline industry which meets the American Petroleum
Institute Recommended Practice (API RP) 1130 Computational Pipeline Monitoring (CPM) system.
When the SCADA and LDS system were installed, the project will continue into commissioning and
critical tuning phase where actual values and Standard Operation Procedure (SOP) is established or revised.
SPM's power availability from solar panel and telecommunication bandwidth should be monitoring all the
time. Parallel with that, there is the possible threshold setting should be estimated as per API 1149 that
impact on leak detection performance from several factors i.e. accuracy of pressure, flow, and temperature
transmitter, slack line condition, and properties of products. The crude oil coming with different API from
different oil producer. The system will continuously calculate imbalances using data gathered from field
devices. Dynamic threshold adjustment to mitigate transient alarm and avoid false alarms, which these
are temporary changes and are removed after time averaging period end. By have all these information
via SCADA and Closed Circuit Television (CCTV) system, it will reduce boat trip to the SPM, which
means reduce CO2 emission and operating cost. LDS system will monitor the pipeline leakage and provide
good mitigation plan by located the leak with Global Positioning System (GPS), delivering crude oil using
offshore pipeline will be safer to human safety and environment.
2 OTC-32374-MS
Introduction
Delivery of crude oil with some kind of API degree from SPM or Catenary Anchor Leg Mooring (CALM)
through subsea pipeline play critical role for oil refinery processing and operation. The pipeline laid in
seabed, connecting oil tanker to storage facility on onshore side.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Field devices are installed on inlet and outlet pipeline, to capture the field data and transmit to the SCADA
system then interface with LDS is required to monitor any oil leakage from the pipeline. If leak happens
and there is no LDS in place, the oil or gas will be released to the environment, dangerous for ocean habitat,
human safety i.e. explosion and fire, then it can impact on company reputation that own or operate the
pipeline. It will cause big losses of production and energy if was not detected and mitigated immediately
and securely.
Scope of Work
All information start from field devices located in offshore SPM Buoy and onshore will be connected to the
RTU, transmitted via telecom system using Global System for Mobile Communications (GSM), processed
by SCADA server and LDS Server and displayed on operator's Human Machine Interface (HMI) in Control
Room.
Pipeline LDS project scope of works comprise hardware, software, and service. The integration amongst
these parts will determine project completion success criteria.
System Architecture
LDS project consists of the following servers :
• Two Online Redundant LDS Servers at Oil Movement (OM) Control Room
OM support the process of discharge crude oil from tanker or load the product from Refinery
Unit back to the tanker.
• One SCADA Operator workstations at OM Control Room
Two LDS production servers will perform the role of redundant online LDS servers. The LDS and
SCADA server will contain LDS software to run the LDS. It will also contain SCADA Server for HMI
Development and to run the SCADA Open Platform Communications (OPC) data server. SCADA data will
be provided to the LDS from the SCADA OPC Server. The LDS will communicate to the SCADA system
via OPC communications protocol to obtain the required flows, temperatures, pressures, device statuses,
with corresponding quality flags (fresh flag), and time stamps. The LDS servers will synchronize their time
clocks with the SCADA servers automatically using the Windows Time Server. One Light Emitting Diode
(LED) Monitor can be used to monitor both LDS and SCADA machines using a Keyboard Video Mouse
OTC-32374-MS 3
(KVM0 Switch, these materials are installed in the RTU & Server Cabinet in OM Control Room, Buzzer
Alarm is also installed on RTU & Server Cabinet to alert the operator when a Leak Detection Alarm occurs.
The SCADA Operator Work Station (OWS) will function as the operator console with SCADA Client
installed. A LED Monitor that will be used by Operators to monitor and operate the LDS in OM Control
Room. SCADA and LDS graphics will both be displayed on the SCADA workstation.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Two RTU are installed in the RTU Cabinet to measure the 4-20mA Analog Input (AI) from Flow,
Pressure, and Temperature Transmitter and two other RTU are installed on SPM Offshore to measure the
4-20mA AI from Flow, Pressure, and Temperature Transmitter.
Following is the System Architecture showing the layout of the hardware as it will be installed on-site.
Pipeline Infrastructure
On the below diagram, it clearly shows the process flow start from crude oil tanker load or off-load the
material via subsea pipeline to the Onshore Receiving Facility (ORF).
4 OTC-32374-MS
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Figure 3—Crude Oil via Subsea Pipeline Process Flow Diagram
The figure below show the Piping and Instrumentation Diagram (P&ID) marked up to represent the
pipeline and required equipment for LDS.
1. The 35 m water depth is more than sufficient to accommodate a fully loaded VLCC maximum 250,000
Dead Weight Tonnage (DWT) which minimum depth requirement of 28.5 m.
2. The 6 km manuevering radius available between the SPM centre and the shoreline exceeds the 1200
m minimum radius(measured from the SPM centre) requirement for maximum 250,000 DWT tanker.
3. The 1.8 km radius requirement if the tanker had to head into prevailing seas by locating itself between
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
the shoreline and the SPM is also met.
Here are step by step operation :
1. A tanker approaches the SPM terminal at slow speed. Vessel messenger line will connect mooring
hawsers.
2. The vessel's winches and haul the tanker to proper distance and engines are shut down. Tanker slowly
weather-vanes around the buoy in response to influence of wave, current, and wind.
3. The floating hose strings connects to the tanker's manifold.
4. Fluid cargoes can be on- or off-loaded now.
5. After transfer process has been completed, the operator simply disconnects the hoses and casts off
the mooring hawsers.
The design criteria of building SPM Buoy depend on some factors such as maximum wave height, wind
speed, and current speed. These parameters impact to survival conditions which correspond for 100 years
period of data taken and operational conditions which tanker can stay securely moored or there is no tanker
moored during maximum condition.
Telemetry SCADA
Telemetry or remote SCADA is a control system that uses computer, network communication, and Graphical
User Interface (GUI) for process supervisory management, for long distance and remote location such as
SPM. It has some components such as field device, RTU, telecommunication, and SCADA system.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Figure 6—Telemetry SCADA Map
Field device
Field device like pressure, flow, and temperature sensor are required to get all information at inlet and outlet
of the pipeline. For some cases flow transmitter would be Ultra Sonic Meter (USM) beside flange type.
Some flow elements that include elbows, valves, pumps, reducers, diffusers, etc. distort the flow profile. The
most important thing that chosen measuring point is at sufficient distance from any disturbance's sources.
Recommended straight run of inlet and outlet pipe lengths depend on flow device's manufacturer, at least
10D for upstream and 5D for downstream from the flow measurement point, where D is pipeline's diameter.
RTU
All information from these field instruments are going to be wired to RTU. The field instrument's parameter
and setting are configurable in RTU. The RTU has support IEC-61131-3 program language capabilities and
embedded I/O channel, which can be expanded. It supports most world class certification such as UL, CSA,
CE, RCM, ATEX, Class 1 Div 2 and operate from −40 to +70°C. With field-proven reliability, RTU provide
ease-of-use, enhanced serviceability, and lower cost of operations.
OTC-32374-MS 7
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Figure 8—RTU, Solar System & CCTV Camera
Solar System
The 3 main components are photovoltaic modules, solar controller, and battery.
Communication
The typical communication infrastructure for offshore pipeline is using GSM or radio. It connects between
RTU and SCADA server. CCTV camera also use this communication link to share live video or picture
surrounding SPM environment and loading/unloading activity from/to tanker. The solar system information
status is monitored by operator in Control Room.
SCADA
SCADA system located in Oil Movement Control Room is used to monitoring all pipeline operation over
long distance. Operator able to configure and manage the oil transportation via pipeline (include offshore
and onshore). All operation setting can be adjustable according to different kind of oil product and displayed
on HMI screen. SCADA software focus on connectivity, IoT, industry specific features and easy to use. It
designs to transform field data into relevant business information by optimizing remote assets along with
the pipeline infrastructure.
CCTV
CCTV used for monitoring the tanker operation and SPM Buoy situation. Because CCTV is an addition and
the priority of this LDS project is for RTU, the CCTV image quality will be lowered to the minimum setting
to get the smallest bandwidth so that traffic is small to minimize disruption to RTU data transmission.
The CCTV's software opened by the Internet Explorer browser for type the Camera or Network Video
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Recorder (NVR) IP Address is used to open camera monitoring on SPM. The NVR is compatible with
numerous third-party devices, which make it the perfect solution for surveillance systems that work
independently of Video Management System (VMS). It features an open architecture that supports for multi-
user access and is compatible with Open Network Video Interface Forum (ONVIF) 2.4 protocol.
NVR will receive image data from CCTV through OpenVPN network that has been integrated with image
quality parameters adjusted to the data packet size.
Pipeline Modelling
The Pipeline Model is a full transient model and is based on the LDS software toolset which is designed to
be an extremely flexible pipeline-modeling tool, allowing it to handle the wide variety of pipeline systems in
the pipeline industry. It has components for calculating the dynamics for Heavy-Oil blend, synthetic crude
Oil and other refined products as necessary.
The system is a two phase (Gas and Liquid) multi-component (CH4, C2H8, N2, air, crude oil, products,
water, Drug Reducing Agents (DRA), odorant etc.) non-thermal equilibrium model. It is however designed
to allow the engineer to select any combination of these options to reduce computer execution time. For
example, a dry natural gas pipeline could be configured as only CH4 and only gas phase. This would result
in very efficient code using minimum computer power. Alternatively, a system could be configured for
liquid and gas phase with multi-components in each phase to give the most accurate simulation of complex
systems.
The end user is able to add and configure additional components. Saturation properties, viscosities,
adiabatic and isothermal bulk modulus, heat capacities, reference enthalpies, densities are fully configurable
as functions of temperature and/or pressure.
The system has separate dynamic Mass, Momentum, and Energy Balances for each phase. This removes
any requirement that the two phases be in equilibrium. It is also possible to have any combination of liquid/
gas concurrent or counter-current flow pattern. No steady state assumptions are used.
All of the necessary physical properties are calculated by the system. This includes pressures, gas and
liquid flows, enthalpies, (gas, liquid, and wall temperatures), heat transfer rates (gas-wall, liquid-wall,
OTC-32374-MS 9
gas-liquid, wall-ambient), gas and liquid phase concentrations, boiling and condensation rates, viscosities,
densities, etc.
The dynamic thermal model includes the capacity of the fluid (gas and liquid), pipe, and surrounding
environment, above and below ground effects. It also includes heat from pump work, frictional heating, and
compressive work. The user can also define any additional heat sources.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
General Assumptions
In the design of the pipeline model, some assumptions are made that have no impact on the LDS sensitivity
and performance. These are:
• No pump bearing, cooling and lubrication oil systems models will be included.
• The custody transfer/metering model will cover the pipeline from supplier's injection point through
the flow control system to the pump station. The flow meter prover will be simulated as a constant
flow resistance.
• The storage tank model (if any) will be based on the telemetered volumes and incoming/outgoing
flow balance.
• Tanks will not be used in the leak detection or batch tracker models. LDS batch and flow
information will be available at the pump station batch meter. It is assumed that all new batch cuts
will be done at the pump station meter, not at the custody transfer meter.
• No manual vents, drains and other valves will be simulated unless they are specified as remote
functions.
• No valves for launcher and receiver pressure relief, ventilation, or filling will be simulated.
System Initialization
It refers to the first server system start-up from a recorded or generated initial condition. All other normal
state change transitions or backtrack synchronization enabled processes don't require the initialization step.
During system initialization (re-start or initial start-up) the system uses a previously snapped condition as
a starting point. If the previous condition was snapped recently, no major auto-tuning should be expected.
Minimal auto-tuning will take place after minor updates of the models on the online system, assuming
recently snapped backtrack conditions exist.
If no previously saved backtrack is available, the default condition, as defined by initial values for all
variables in the LDS software database, will be used. If the system starts from a default condition, it must
go through a set of initialization steps before it will be fully functional. The steps are set by the initialization
module and each of them is responsible for a specific task. The whole process normally takes around 3-4
minutes.
Starting without a previously snapped backtrack requires the model to converge with the current pipeline
conditions. The shorter averaging periods are required to initialize with current model data. Any changes
in equipment statuses will be received as soon as the system reconnects to the SCADA. Any changes in
analogs and rates within the downtime will not be used.
The shortest averaging period of the LDS will be available almost immediately after completion of the
initialization process. All other averaging periods are also active, but require more history to function at
the lowest thresholds.
incoming and outgoing communications to use Distributed Data Services over Internet Protocol (DDSIP)
Protocol. The LDS software's DDSIP OPC application will be used as a converter to convert from OPC DA
to DDSIP for incoming communications and from DDSIP to OPC DA for outgoing communications.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Figure 11—SCADA and LDS Redundancy Mechanism
The SCADA data server must be installed and configured on each server that will be used as a data
source for LDS software. The data server on the SCADA system will run continuously. The data server
will also periodically communicate with the SCADA system to determine the state of the SCADA system.
The SCADA data server that will provide data will be the data server on the primary (hot and operational)
SCADA computer. The SCADA data server that is in standby will continue to monitor the state of the
SCADA system. Upon a change in state of the SCADA system (i.e. a fail-over), the previously active
SCADA data server will disconnect its client connections. One of the previously standby data servers will
become active and will allow client connections. The LDS client applications will reconnect to the active
SCADA data server. The applications will then re-register all data points and synchronize to the active data
server.
Note that if a point in the gather file does not exist in the SCADA database database, then the LDS
software model will write a message into a run log and continue normal operation for all the points that
do exist in the database database.
If the LDS client cannot connect to the SCADA data server or loses its existing connection, it will attempt
to reconnect to this server based on the scan cycles defined in the configured in simpoint gather files. At
each scan cycle, the client will make three (3) connection attempts at a configurable timeout interval. This
process will continue until one of the following conditions is met:
When communication is re-established, the DDSIP process (client side) will clear the loss of
communication alarm. Since the communication to the SCADA system is bad at this time, the ability to
write this status back to the data server does not exist.
The LDS to SCADA clients resides on the LDS servers. A SCADA data server also resides on the LDS
servers and provides data to client applications (i.e. LDS, SCADA Client). The LDS application will provide
the SCADA data server a list of data points that the LDS application requires. The format of the requested
data points will be compatible with the existing SCADA system data architecture. The SCADA data server
provides the necessary linkage between the LDS client and the SCADA database.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
The LDS client application will register data points for which the client wants to retrieve values on a
periodic basis. The SCADA data server will determine which points’ values have changed and will respond
back to the client with a message containing only those point values that have changed. The LDS client
applications will schedule data retrieval at various rates by grouping together the data points according to
the required update rate. The data retrieval intervals can be adjusted during the project commissioning phase
if necessary.
The point categories are broad in that they do not address specific SCADA data points, but rather
categorize the type of point that is expected. The SCADA database table and column entries outlined are
from the specific table definitions.
The following sections define broad categories of telemetry information that the LDS Online Model is
expecting to retrieve from the SCADA system. The LDS requires the majority of the telemetry information.
It is assumed that all categories of data are available.
Field device or transmitter types include pressure, temperature, flow, and density. All transmitter values
are analog values and can be found in the SCADA HMI.
The pipeline simulation needs to be aware of the state of all modeled valves. The open/close status of
valves, respectively, will be available in the SCADA HMI.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
pipeline data to perform its calculations. The LDS displays will show system status "normal" and good
transmitter confidence levels. Impact to the LDS models will be dependent on the latency with which the
communications to the SCADA server is restored.
• Environmental Protection Agency (EPA) approved solution for sensitive areas (Los Angeles,
Hawaii, Thessalonica, Black Sea, Chesapeake Bay, Gulf of Mexico)
The current state of the pipeline is obtained by the SCADA system from the field devices. This
information includes pressures, temperatures, flows, valves status and/or positions; pump status and/or
speeds, etc.
OTC-32374-MS 13
LDS Segments
For each network, overall leak detection sections will be defined. The connection of these overall leak
detection sections will be based on the configuration of the pipeline. As the configuration of the pipeline
changes, the leak detection system will recognize this and adjust accordingly. During flowing conditions,
each section will be bounded by flow transmitters. During non-flowing conditions, each section will be
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
bounded by the exit of one station and the inlet of the next station. If a non-flowing section does not include
pressure transmitters at the bounding station, then the section will be disabled, and thus there will be no leak
detection for that section. In the event that inline flow meters become unavailable, adjacent overall sections
can combine into one overall section. An inline flow meter could be inactive due to the following reasons:
• communication failure
If a section is inactive due to an inactive flow meter, if possible it will be included (combined) in
the upstream section. The upstream section thresholds will be adjusted automatically to reflect increased
section length (linepack). If a section is isolated from the upstream section and downstream section, it will
automatically transition to a shut-in leak detection section with significantly reduced thresholds (no flow
meter accuracy uncertainty).
XXX_ALARM (description
XXX_leakf_desc Leak section alarm message
field)
For each overall leak detection section, the following is the naming convention for the analog points that
will be sent to the SCADA system. ‘XXX’ represents the overall leak detection section name, irrespective
of the number of characters. ‘#’ represents the averaging period, and ranges from 1 to 4.
XXX_vdiff# XXX_leakf_vdif(#) Leak section linepack change for each averaging period
XXX_fdiff# XXX_leakf_fdif(#) Leak section flow difference for each averaging period
XXX_thrsh# XXX_leakf_thrsh(#) Leak section alarm threshold for each averaging period
XXX_thwrn# XXX_leakf_thwrn(#) Leak section warning threshold for each averaging period
14 OTC-32374-MS
XXX_thbse# XXX_leakf_thbse(#) Leak section base threshold for each averaging period
XXX_vmod# XXX_leakf_vmod(#) Leak section volume uncertainty modification for each averaging period
XXX_shmod# XXX_leakf_shmod(#) Leak section shut-in modification for each averaging period
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
XXX_loca XXX_leak_loca(1) Leak section leak location
Thresholds Detection
Estimating Thresholds (API 1149). Before the leak detection model is configured and connected to the
pipeline, the thresholds that are theoretically achievable can be calculated using the API 1149 publication.
API 1149 details the variables affecting leak detection performance and is the best standards document for
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
initial estimation of theoretical thresholds. The thresholds calculated using API 1149 are used as starting
values, and the actual thresholds are established during model tuning.
In practice, the final thresholds are generally different than those predicted by API 1149. This is a result
of several factors. First, the fidelity of the transmitters may be better (or worse) than the fidelity stated
by the manufacturer. In addition, because the leak detection model uses a real time model to calculate the
detailed temperature profile, it is much less sensitive to the inaccuracies of the temperature measurement
compared to API 1149.
Steady State Thresholds. The thresholds specified for leak detection are functions of the number, type,
and accuracy of the transmitters.
• The primary factors affecting the steady state leak detection thresholds are:
• Slack line
The parameters with the largest effect on short term thresholds are:
• Volume in pipeline
The parameters with the largest effect on long term thresholds are:
Dynamic Threshold Adjustment. During transient conditions, alarm thresholds will be temporarily
increased and later restored for the affected pipeline section to avoid false alarms. These are temporary
changes only and are removed based on the time averaging period. The algorithm that determines the
thresholds is configured such that the threshold response is controllable by the user in order that the user
will determine the appropriate threshold response to pipeline events, such as:
16 OTC-32374-MS
• Pump start/stop
• Setpoint change
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
This determination is made such that an acceptable balance is achieved between minimizing false alarms
and maintaining the most robust leak detection possible. Figure 5 illustrates how thresholds increase in the
presence of transients and then decay back to their original level.
Dynamic Base Thresholds
A pipeline network, in many cases, is not static by nature. Dynamic overall leak sections have been defined
to allow greater sensitivity when the system is operated as multiple pipelines with multiple injections and
deliveries. This dynamic nature has a direct effect on the Leak Section current total volume (with direct
correlation to the proximity of pressure transmitters). Therefore, when sections of pipeline are added/
removed to/from an overall leak section, the base threshold is adjusted instantaneously.
No delay is applied for base threshold calculations. Similarly, for a leak detection section where the
flowing condition remains the same, but a pressure transmitter in a block valve location has failed, the base
threshold will be recalculated as soon as the failure is detected by the LDS, created as an increase in the
base threshold value due to increase in the volume uncertainty.
Dynamic Warning or Alarm Thresholds
Certain transient conditions can cause a temporary increase in warning thresholds. Such conditions are
categorized as either generic events or custom events. Generic events are default conditions defined by
LDS Software and are available for all projects. Custom events are conditions defined specifically for the
pipeline. For both categories of transient conditions, a trigger occurring in the model is defined, and this
will cause the temporary increase in the warning thresholds. Note that the change in the alarm threshold is
not directly controlled by the percentage specified. The alarm threshold will remain equal to the product of
the warning threshold and the alarm-to-warning ratio constant. The warning thresholds will hold that value
for a defined time, then decay back to their original levels.
For custom events, the time that the threshold remains at the elevated level ("hold time") can be specified
for each averaging period. Similarly, the time it takes for the threshold to decay back to the base threshold
level ("decay time") can also be specified for each averaging period. Note that these times are specified in
seconds and can be specified separately for each averaging period. If a value is only specified for the first
averaging period, then the remaining values will be calculated by the model proportional to the averaging
period.
The user has the ability to control whether each of the specified transient effects is enabled or disabled.
If a condition is disabled, then the condition occurring will have no effect on the thresholds. This applies
to both generic and custom events.
Project leak detection thresholds will be adjusted and tuned during the online tuning period. The transient
conditions applicable in the generic events category are as follows:
• Section Disabled: This condition is met when a section becomes disabled within an overall leak
section.
The transient conditions in the custom events category are defined specifically for each pipeline as
described below.
• Pump startup/shutdown: This condition is met when a pump changes state. This custom event will
only be valid if pumps are modeled.
OTC-32374-MS 17
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Figure 13—Sample Thresholds Trends
If more than one transient event happens within a "short" period of time, the threshold increase is
determined by taking the sum of increases associated with the individual events. The maximum hold and
decay time amongst the individual events will be applied. The default value for the "short" period of time is
10 seconds. If one transient event has occurred then a second event occurs after this "short" period of time,
the threshold increase of each is compared and the greater one is used. Similarly, the hold and decay times
for the two events are compared and the longer time of each used.
Leak Alarm Logic.
Alarm Delay
The alarms will be delayed for a specified period to prevent short-term transients from causing false alarms.
When a leak flow is detected above the threshold, the time is recorded. If the leak flow is still above the
thresholds after the delay time has passed, an alarm will be issued. The delay time is specific for each time-
averaging period.
For example, the pipeline delays per averaging period will be:
• 5 min - 20 sec
• 15 min - 20 sec
• 60 min - 30 sec
Alarm Clearing
There are two alarm thresholds: one for issuing an alarm and one for clearing the alarm. The calculation of
the clearing alarm threshold does not include any of the effects that can be caused as a result of having a leak,
nor does the clearing threshold include any of the transient and slack line effects. The leak alarm clearing
threshold is set equal to 90% of the alarm threshold by default. This can be configured by the customer.
Severity of Leak
The internal leak alarm has four (4) states:
• 1 - Alarm cleared but not acknowledged (Leak rate < Clearing threshold) and (alarm not
acknowledged). To change alarm status from "cleared" to "normal", alarm should be cleared
from LDS software dislay. There is no link between alarm acknowledgment in SCADA and leak
detection system.
• 2 - Leak volume present > Setting threshold (warning)
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
• 3 - Leak volume present > Setting threshold * % (alarm)
Where "%" is configurable by leak detection overall section, "Setting threshold" includes a configurable
component, and the titles "warning and alarm" are configurable. The initial value is set to 80%.
State 1 is used by the leak detection system to hold the last value of the leak location, estimated flow,
and volume. If a new leak alarm is generated, the alarm state will move back to 2 or 3 (from state 1 or 0).
The application is configured to detect leaks of progressive severity based on leak rate. Currently, there
are two severity levels configured "Warning" and "Alarm". Graphical enunciation of these severity levels
is color-coded with "Warning" depicted by using yellow and "Alarm" by using red.
There are also dead-bands between states to prevent flipping when the leak rate is oscillating around a set-
point. The clearing threshold level is calculated based on steady state thresholds multiplied by a configurable
constant (0.9 as a default value).
There is a way to manually disable the leak alarm through an engineering tool. An authorized person can
disable the alarms at any time, but the alarms cannot be disabled by the Controller.
Leak Location Calculation
The leak location is calculated using the steady-state pressure drop equation. It is assumed that the rate of
pressure drop is different upstream and downstream of the leak.
Data Quality
The quality of data is very important and start from reliable field devices, along the way to the server which
data will be further processed.
Temperature transmitters are required for all receipts and deliveries. Station product temperatures will
be used for tuning if measurements are accurate.
Ground temperature sensors are used to calculate surrounding soil temperature along the pipeline. In
the absence of ground temperature sensors, estimates for monthly ambient temperature will be configured.
Ambient temperature can be configured for each month and for multiple locations.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
All equipment states are used to correctly predict normal operational conditions and transients for stations
and swing location, and to transition the leak detection system from flowing to shut-in mode.
• Physical value inconsistency with surrounding data (available if there are redundant transmitters
at a location)
• Loss of data input from SCADA after a specified time
The alarms can be viewed on the SCADA Data Instrument HMI display.
2. It is possible to disable any field device in the model only. This can be done if work is being performed
on a field device, but it is not disabled in the SCADA system and is giving bad information. Also if
the field device is known to be incorrect it can be disabled until the field device can be fixed. This
action is performed from displays embedded in the graphics package.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Figure 15—LDS Display
Online Tuning
The LDS is self-tuneable and does the majority of tuning automatically. The goal of tuning is to reduce
the error between the tracking model and the real SCADA values. The adjustments to different parameters
are continuous for all effects but is applied at different rates. These values will be stored in the Backtrack
Records that stores a snapshot of the model's memory.
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
Pump Curve Tuning
If pumps are configured, the model automatically adjusts pump curves for running pumps at each pump
station. Station suction and discharge pressures errors between the real SCADA values and the tracking
model are reduced in this type of tuning. This is necessary to account for some deviation between the pump
curves as specified from the manufacturer and the real pump behavior. It is a short-term adjustment.
Communication Failure
The system reaction to a communication failure is determined by the scope of the failure. For example, if
SCADA loses connection to a block valve site, no significant changes are expected. The system will still be
available and fully operational, and the overall leak detection thresholds will be automatically adjusted to
reflect a change in volume uncertainty. The leak detection time can be increased, and leak location accuracy
reduced if a leak occurs close to that station. No specific values of performance reduction can be given
here, they are unique for each pipeline section. When connection is restored, the leak detection system
automatically adjusts the thresholds back to the original values.
Any communication failure related to a receipt or a delivery site are to be considered a major event for
the leak detection system. The leak detection section will be eventually disabled if any section flow meter
data are not fresh. By default, it takes 600 seconds (configurable) to disable a leak section if flow meter data
are not fresh. When communications are restored the system will return to operation and will use the good
data that is available. The model doesn't "catch-up" on lost data.
including communications between the various associated applications. A test document is prepared and
approved by customer prior to the factory test. Customer plays a critical role in this testing phase, verifying
the systems readiness for site installation.
During the FAT the leak detection system is tested for a wide variety of normal and abnormal conditions
including:
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
• Flowing steady state condition
Each scenario will be tested for several leak sizes – from minimum detectable to full rupture in different
locations.
As with the FAT, Site Testing follows a formal procedure approved by customer. The Site Acceptance
Test focuses on verifying the communication between the SCADA system and the on-line leak detection
system. The performance of the system is also the primary focus of this stage. Preliminary LDS tuning is
completed prior to Site Acceptance Testing with additional tuning following the formal testing.
Following this formalized testing procedure, it is recommended to perform several actual leak tests
(product withdrawal) at the discretion of the customer. Typically, leak tests are performed to verify that the
project requirements for performance have been met. Customer also evaluates the ability of the system to
locate the leak along the pipeline.
In the event when no actual leak tests are planned or possible, the leak detection can be tested by changing
a flow meter factor for any active flow meter. It will not represent a real leak test, but it will show the leak
detection's capability to detect a flow meter inaccuracy or flow imbalance.
Conclusions
Business values that highlighted by the customer from this project are :
1. Easy to do operation and maintenance with SCADA and LDS software which can monitor/control
for RTU & pipeline status, CCTV SPM monitoring, Hyper Text Markup Language (HTML) Leak
visualization, geographical map, GSM signal strength, battery voltage information. This will allow
operator/engineer to remotely monitor the SPM without need to go by boat, hence it will reduce CO2
OTC-32374-MS 23
emission and fuel consumption. It can reduce 0,1 tCO2e / year in operational trips (based on 320 km
travel reduction per month and 0,25 kg CO2e / km).
2. Capability of doing preset for all required parameters on LDS software prior loading or unloading
activities from tanker to OM ORF, depend on crude oil API.
3. Anticipate oil spills in waterways caused by subsea pipeline leakage and environmental pollution
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
issue. For example estimation : the unloading process of Arabian Light Crude with flow rate 5,000
m3/h with pressure 10 kg/cm2g from tanker 165,000 DWT.
Acknowledgements
The author would like to extend sincerest gratitude to the Schneider Electric project commissioning and
management team for support to publish this paper.
Nomenclature
SPM Single Point Mooring
ORF Onshore Receiving Facility
LDS Leak Detection System
SCADA Supervisory Control and Data Acquisition
CCR Central Control Room
RTU Remote Telemetry Unit
API RP American Petroleum Institute Recommended Practice
CPM Computational Pipeline Monitoring
SOP Standard Operation Procedure
CCTV Closed Circuit Television
GPS Global Positioning System
CALM Catenary Anchor Leg Mooring
GSM Global System for Mobile Communications
HMI Human Machine Interface
OM Oil Movement
OPC Open Platform Communications
LED Light Emitting Diode
KVM Keyboard Video Mouse
OWS Operator Work Station
AI Analog Input
ORF Onshore Receiving Facility
P&ID Piping and Instrumentation Diagram
VLCC Very Large Crude Carrier
DWT Dead Weight Tonnage
GUI Graphical User Interface
IOT Internet of Things
NVR Network Video Recording
VMS Video Management System
ONVIF Open Network Video Interface Forum
DRA Drug Reducing Agents
OPC DA Open Platform Communications Data Access
DDSIP Distributed Data Services over Internet Protocol
SDI Simulation Data Interchange
EPA Environtmental Protection Agency
24 OTC-32374-MS
Reference
Downloaded from http://onepetro.org/OTCONF/proceedings-pdf/23OTC/3-23OTC/D031S042R008/3103002/otc-32374-ms.pdf/1 by Society of Petroleum Engineers, Lavanya Subramanian on 07 June 2023
1. API. 2002. Computational Pipeline Monitoring for Liquid Pipelines. Washington.: API
Publishing Services.
2. Dr. Jim C.P. Liou, P.E. 1993. Pipeline Variable Uncertainties and Their Effects on Leak
Detectability. Washington.: API Publishing Services.
3. API. 2007. Recommended Practice for Pipeline SCADA Displays. Washington.: API Publishing
Services.
4. API. 2008. Pipeline Control Room Management. Washington.: API Publishing Services.
5. Stuart A. Boyer. 2004. SCADA Supervisory Control and Data Acquisition, third edition. United
States of America: ISA.
6. Gordon Clarke, Deon Reynders, Edwin Wright. 2004. Practical Modern SCADA Protocols:
DNP3, 60870.5 and Related Systems. Burlington, MA: Elsevier.
7. Theresa M., Christopher J., Stephanie J., et al 2009. Compendium of Greenhouse Gas Emissions
Estimation Methodologies for the Oil and Natural Gas Industry. Washington.: API.