Storm Choke
A storm choke (also called a subsurface safety valve, SSSV, or storm valve in some historical usage) is a downhole valve installed in the production tubing string below the wellhead and the mudline (in offshore wells) or below the surface (in onshore wells) that automatically closes and shuts in the well when the production flow rate or pressure differential across the valve exceeds a preset threshold, preventing uncontrolled flow from the wellbore to the surface in the event of wellhead damage, flowline rupture, fire, or other surface emergency that destroys the ability of the surface wellhead and choke to control the well; the storm choke derives its name from its historical use in offshore wells as a protective device against the well control problems caused by hurricanes and severe storms that could physically destroy or damage surface wellhead structures, separation equipment, and production facilities — without a downhole closure device, a wellhead destroyed by storm surge or vessel collision would result in an uncontrolled blowout directly to the marine environment; the storm choke is the downhole component of the well's surface-controlled subsurface safety valve (SCSSV) or subsurface-controlled subsurface safety valve (SSCSV) system, with SCSSVs operated by a control line from the surface (allowing the operator to close the valve remotely at any time) and SSCSVs relying entirely on downhole flow conditions to automatically trigger closure without requiring any surface signal or intervention.
Key Takeaways
- The surface-controlled subsurface safety valve (SCSSV) is the dominant type of downhole safety valve in modern offshore and high-risk onshore wells, operated by hydraulic pressure transmitted from the surface through a 1/4-inch control line run alongside the production tubing string: the SCSSV is held open by hydraulic pressure applied through the control line (fail-safe closed design — loss of hydraulic pressure causes the valve to close), allowing the surface operator to close the valve at any time by releasing the control line pressure from the surface control panel; the hydraulic pressure required to hold the valve open (typically 1,000 to 3,000 psi above the wellbore pressure at the valve setting depth) is maintained by a hydraulic control system at the surface that monitors the control line pressure and alerts the operator to any pressure leak in the control line that would indicate a compromised safety system; regulatory requirements for SCSSV installation depth (below the mudline by at least 100 feet in the United States, 50 meters in UK regulations) ensure that the valve is protected from physical damage by the storm forces, vessel anchors, or trawl gear that could destroy the wellhead, with the valve in a protected position below the seabed where it can close and maintain well integrity even if the entire surface structure above the seabed is lost; the valve body houses a flapper valve (a spring-loaded disk that closes by rotating 90 degrees to seat against the valve bore) or a ball valve (a ball that rotates 90 degrees to block flow), with the flapper design more common because it allows wireline tool passage through the open valve and can be inspected by wireline with the valve open.
- The subsurface-controlled subsurface safety valve (SSCSV, also called the ambient-pressure-controlled or differential-pressure-controlled valve) operates entirely from downhole conditions without requiring a surface control line, using either a velocity-sensitive mechanism (that closes when flow velocity exceeds a threshold indicating well control loss) or a differential-pressure mechanism (that closes when the pressure drop across the valve exceeds the preset threshold): the velocity-controlled SSCSV uses a poppet or dart that is held open by the force of flowing fluid against a spring, and closes when the flow rate exceeds the spring force at the preset velocity threshold; the differential-pressure SSCSV uses a diaphragm or dome charge that senses the pressure differential between the reservoir-side and the surface-side of the valve, closing when the differential exceeds the preset threshold indicating loss of surface backpressure; the SSCSV's advantage is that it requires no control line (simplifying the completion and eliminating the risk of control line failure), but its disadvantage is that it cannot be selectively opened or closed from the surface at the operator's discretion — it will open when formation pressure exceeds the preset threshold and close when flow conditions exceed the trip threshold, making it unsuitable for wells that require operator discretion over valve position during production operations; SSCSVs are typically used in situations where control line installation is impractical (coiled tubing completions, through-tubing recompletions) or where simplicity is preferred over the operational flexibility of a surface-controlled valve.
- Safety valve testing and maintenance is mandated by regulatory agencies (API RP 14B, BSEE regulations for US offshore, and equivalent international standards) on a regular schedule to verify that the valve will close reliably when required, because a storm choke that fails to close in an emergency provides no protection and creates a false sense of security: the standard test for a SCSSV involves closing the valve hydraulically from the surface, reducing the wellbore pressure above the closed valve (by flowing the well through a test separator or venting to a low-pressure system), and verifying that the valve holds pressure by monitoring the control line pressure for the specified test period (typically 5-15 minutes) without significant pressure drop; the valve passes the test if it holds the required pressure differential without leakage; a failed test (pressure drop indicating valve seat leakage, or inability of the hydraulic system to close the valve) requires workover to retrieve and replace the valve before the well can return to production; the valve's closure time (the time from release of control line pressure to full valve closure) is also tested and must meet regulatory minimums; wells with a history of valve failures may require more frequent testing intervals or replacement with a newer valve design; the maintenance program for subsurface safety valves is one of the most rigorously documented aspects of offshore well integrity management, because the regulatory, financial, and environmental consequences of a valve failure during a surface emergency are severe.
- Storm choke selection criteria include setting depth, production tubing ID, well conditions (pressure, temperature, H2S and CO2 content, sand production), and the production flow rate profile: the setting depth is determined by regulatory requirements (minimum depth below mudline) and the need to position the valve below any zone of wellbore instability or potential mechanical damage from surface activities; the valve OD must pass through the production tubing hanger and the wellhead, and the valve bore ID must accommodate wireline tools that need to pass below the valve for downhole inspection and intervention; in wells producing H2S-containing fluids, all elastomer components of the valve (seals, flapper ring) must be compatible with H2S at the expected concentration and temperature, requiring NACE MR0175/ISO 15156-compliant material selection; in wells producing sand, the valve must incorporate features to prevent sand from packing around the flapper and preventing it from closing fully (sand screens on the valve inlet, hardened seat materials resistant to erosion); the required closure rate (the speed with which the valve must close in response to loss of control line pressure) depends on the well's producing rate and the potential environmental damage from the uncontrolled flow that would occur between the loss of surface control and valve closure; high-rate wells in environmentally sensitive areas (near coral reefs, in ecologically significant marine areas) may require valves with faster closure times than the regulatory minimum to limit the volume of fluid released before closure.
- Storm choke installation in a tubing-retrievable configuration (TRSSSV) or wireline-retrievable configuration (WRSSSV) determines the intervention method required to service or replace the valve during the well's producing life: the tubing-retrievable valve is made up as an integral part of the production tubing string and set at the designed depth during the completion; replacement of a tubing-retrievable valve requires pulling the entire tubing string above the valve setting depth, which is a major workover operation that takes several days and costs hundreds of thousands to millions of dollars depending on the well configuration; the wireline-retrievable valve is set in a polished bore receptacle (mandrel) that is made up permanently in the tubing string, and the valve itself is a retrievable insert that can be pulled and replaced by wireline operations in hours without requiring a tubing workover; the cost premium for a wireline-retrievable completion (the cost of the permanent mandrel plus the wireline-retrievable valve insert, which is more expensive than a tubing-retrievable valve alone) is typically justified by the expected frequency of valve replacement over the well's life — in high-rate wells with sand production or sour fluids that accelerate valve wear, the ability to replace the valve by wireline without a full workover saves multiple workover costs over the well's producing life and reduces the downtime associated with valve maintenance operations.
Fast Facts
The development of subsurface safety valves as a required safety device for offshore wells was driven by a series of high-profile blowouts and platform accidents in the 1960s and 1970s, most notably the 1969 Union Oil Platform A blowout off Santa Barbara, California, and the subsequent regulatory response that established offshore well control requirements in the United States. The API published the first edition of Recommended Practice 14B (Recommended Practice for Design, Installation and Operation of Subsurface Safety Valve Systems) in 1973, establishing the design and testing standards for storm chokes and surface-controlled valves that formed the basis of subsequent US and international regulations. The Piper Alpha platform disaster in the North Sea in 1988, which killed 167 workers and was caused by a series of failures in production equipment safety systems, further strengthened regulatory requirements for well safety valve testing and documentation in the UK and internationally.
What Is a Storm Choke?
A storm choke is a downhole valve in the production tubing that automatically closes and shuts in the well if the surface loses control. It sits below the seabed in an offshore well, protected from whatever is happening above — storm damage to the platform, fire on the deck, a vessel collision that wipes out the wellhead. When the hydraulic control line pressure drops (because the surface control system has failed or been destroyed), the spring-loaded valve snaps closed and the well is shut in. No uncontrolled flow, no blowout, no marine oil spill from a destroyed wellhead. The valve can also be deliberately closed from the surface at any time for planned maintenance, emergency response, or regulatory compliance. In the hierarchy of well control — primary (mud weight), secondary (BOP), tertiary (downhole safety valve) — the storm choke is the last line of defense when everything above the seabed is gone. It earns its name from the hurricane season in the Gulf of Mexico, where offshore wells must be capable of surviving a major storm with the platform evacuated and no human present to operate the surface valves. The storm choke is what makes that survivable for the environment.