How the Blow-Out Preventer Closes: Internal Components, Actuator Systems, and API 16A Ratings

A blow-out preventer (BOP) is a high-pressure valve assembly installed on the wellhead at the base of the derrick to seal, control, or completely shut in a wellbore if formation fluids begin to flow uncontrollably — the last mechanical barrier between a developing kick and a surface blowout. The BOP is classified in two broad mechanical families: the annular preventer, which uses a hydraulically compressed rubber packing element to close around any size of pipe or seal a bare wellbore bore, and the ram-type preventer, which uses two opposing steel-and-rubber ram blocks that close horizontally across the wellbore to grip pipe (pipe rams), seal an open hole (blind or blind-shear rams), or sever drill pipe while sealing simultaneously (blind-shear rams). API Standard 16A (Drill-Through Equipment) governs BOP design, testing, and performance requirements, defining pressure rating classes from 2,000 to 20,000 psi working pressure, temperature classes from K (minus 75°C to 180°C) to U (minus 75°C to 121°C, for offshore cold-water service), and material classes from A (general fresh water service) through HH (highest severity sour gas service, requiring NACE MR0175 compliance across all metal and elastomer components). A WCSB Montney or Duvernay horizontal well rated to SICP (shut-in casing pressure) of 50-80 MPa requires a 10,000 psi WP (69 MPa) or 15,000 psi WP (103 MPa) BOP stack. H2S content above 10 mol% in the expected produced gas mandates material class EE or HH for all BOP body components, ram blocks, packer elements, and hydraulic seals, per AER Directive 036 and NACE MR0175/ISO 15156. A standard WCSB surface BOP stack on a Montney horizontal well weighs 12-30 tonnes assembled and is hydraulically actuated from a dedicated accumulator system containing sufficient pre-charged nitrogen and hydraulic oil to close all BOP functions once without recharging from the rig pump — the accumulator sizing requirement per API 16D ensures BOP operability even if the rig's hydraulic power unit fails during a kick event.

Key Takeaways

  • Annular preventer packing element design: The annular BOP's packing element is a rubber-bonded steel insert that closes radially inward when a hydraulic piston applies upward force on the element's outer surface. Spherical (Hydril-type) designs use a segmented steel reinforcement within the rubber, while bag-type designs use a continuous rubber bladder. The element must seal around any pipe OD from 60 mm to the full bore diameter, or on an empty wellbore (open-hole closure). API 16A requires the annular to seal to 70% of rated working pressure with any pipe size in use, and to close within 30 seconds of hydraulic actuation. AER Directive 036 mandates a function test every 7 days of drilling operations.
  • Pipe ram sizing and quick-change bonnets: Unlike the annular, pipe rams must match the specific OD of pipe in use — a 3-1/2 inch pipe ram cannot seal around 5 inch drill pipe. On each trip that changes pipe OD (from drill pipe to drill collars, or from drilling to running casing), the rig must either swap to a different ram size or rely on the annular. Modern BOP bodies use a quick-change bonnet design: the entire ram assembly (bonnet, hydraulic cylinder, and ram block) slides out laterally from the BOP body on rails, allowing ram rubber replacement on the rig floor in 2-4 hours rather than requiring the BOP to be shipped to a shop for disassembly.
  • Blind-shear ram shear force and wellbore sealing: A blind-shear ram (BSR) combines two functions: severing the drill pipe with opposing shear blades, then sealing the empty wellbore with the ram packer faces after the pipe section falls into the hole below. API 16A requires BSR shear force to be rated for the maximum combined OD and yield strength of all pipe sizes that may be in the hole during BOP operations. For a WCSB Montney well running 5 inch 19.5 lb/ft S-135 drill pipe (yield strength 135,000 psi), the BSR shear force requirement is approximately 1.2-1.8 MN — typically provided by a 300-500 mm bore hydraulic closing cylinder at 3,000-5,000 psi closing pressure.
  • Material class HH for WCSB sour gas wells: HH is the most demanding API 16A material class, required when H2S partial pressure exceeds 0.05 MPa and CO2 is also present. All BOP body steel must meet NACE MR0175 hardness limits (maximum Rockwell C 22 for carbon steel), weld heat-affected zones must be post-weld heat treated to reduce hardness, elastomeric seal materials must be HNBR (hydrogenated nitrile rubber) rather than standard NBR because H2S causes standard NBR to swell and degrade. A WCSB HH-class BOP rated to 10,000 psi WP costs approximately CAD 180,000-280,000 for the BOP body alone, versus CAD 60,000-90,000 for the equivalent general-service AA-class unit.
  • Accumulator system and 30-second closure requirement: Per API 16D, the BOP hydraulic accumulator must supply enough fluid volume to close all preventers, open the kill line valve, and leave 200 psi (1.4 MPa) residual pressure — all in one operation cycle without any pump recharging. For a two-ram plus annular stack, this typically requires 120-200 litres of usable accumulator volume at 3,000 psi pre-charge. The 30-second BOP closure requirement is the design baseline for all accumulator sizing calculations: if closing time exceeds 30 seconds during a function test, the accumulator volume, pre-charge pressure, or hydraulic line diameter (flow restriction) must be corrected before drilling resumes.

Annular BOP Pressure Test: Montney Horizontal Well at Groundbirch

Before drilling below the surface casing shoe at 695 m on a Montney horizontal well at Groundbirch (expected Montney SICP 65 MPa at 3,400 m TVD), the BOP stack is pressure-tested per AER Directive 036. The stack consists of: Cameron 10,000 psi WP annular preventer (top), Cameron 10,000 psi WP double ram body (blind-shear ram, lower; 5-inch pipe ram, upper), HH material class throughout for 6.2 mol% H2S service. Test sequence: close pipe rams on 5-inch test plug, apply 1,500 psi low-pressure test (hold 10 minutes, no more than 10% pressure loss), then apply 10,000 psi high-pressure test (hold 30 minutes). Annular: close on 5-inch test mandrel, apply 6,000 psi (70% WP test as per API 16A). Blind-shear ram: close on open bore, apply 10,000 psi. All four barriers hold to 10,000 psi with zero loss. Test logged in BOP record book, signed by company man and driller. AER Directive 036 requires re-testing every 21 days of drilling operations or after any well control event requiring BOP closure under kick conditions.

Ram Rubber Replacement After a Kick Closure

After a 4.2 m3 gas kick on a Duvernay well at Kaybob closes the pipe ram under 38 MPa differential pressure and holds for 14 hours during kill operations, the pipe ram rubber must be inspected and likely replaced before drilling resumes. The company man calls for a bonnet pull: rig crew opens the BOP bonnet bolts, slides the pipe ram assembly out on the quick-change rails, and visual inspection confirms the ram packer rubber shows a 12 mm extrusion groove on the low-pressure face (the face that was on the low-pressure — wellbore side — during well kill). The extruded rubber reduces the packer's effective sealing cross-section below API 16A minimum. New ram rubbers are installed (CAD 1,800 for HNBR HH-class packer set) and the ram is re-assembled, torqued to 120 N-m on the bonnet studs, and re-tested to 10,000 psi before drilling resumes. Total rig time for ram rubber replacement and re-test: 5 hours. Compared to a BOP failure during the next kick event, the 5-hour rig time (CAD 18,000 at CAD 3,600/hour) is unambiguously justified by the well control risk avoided.

Fast Facts

The first practical ram-type BOP was invented by James S. Abercrombie and Harry Cameron in 1922, shortly after the Goose Creek oilfield blowouts near Houston, Texas demonstrated that uncontrolled well flow was both deadly and economically catastrophic. Cameron's original patent described a pair of hydraulically actuated steel blocks closing horizontally across the wellbore — the same fundamental mechanism used in every ram BOP manufactured today. Cameron Tool Corporation grew directly from this invention and remained one of the world's two dominant BOP manufacturers (alongside Hydril, later acquired by GE and then Baker Hughes) for the following century. The annular preventer was patented by Granville Perkins in 1946, adding the ability to close on any pipe size or an open bore — a capability the original ram design lacked entirely.

The individual ram elements inside the BOP body are described in detail under blind ram, which covers the mechanical distinction between a blind ram (wellbore seal only) and a blind-shear ram (seal plus pipe-cutting capability), and the API 16A shear force certification requirements that determine whether a specific BSR can sever the drill pipe OD in use on a given well. When the BOP fails to hold pressure or fails to close, the result is the sequence described under blow-out — the BOP's failure to close or seal is the penultimate step in the barrier-failure chain that leads to an uncontrolled surface event. Pressure is circulated out of the wellbore after BOP closure through the system described under bleed-off, with the choke manifold throttling wellbore pressure while the driller circulates heavier kill-weight mud to restore hydrostatic overbalance.