From Reactive Trips to Proactive Control in Water Injection Pumps

The Root Cause of Recurring Nuisance Trips

Water injection pumps are essential for maintaining oil reservoir pressure and meeting daily injection volume targets. Despite their critical role, these pumps often experience frequent nuisance trips because of inadequate process control design. In many installations, the system relies on hard shutdowns triggered by abnormal process conditions, with no intermediate control layer to manage those conditions before they escalate. When a pump has only two states, running or tripped, every process disturbance becomes a potential shutdown event.

This article details the analysis of trip causes and a structured process control design proposal for a specific water injection pump installation. The subject pump is a 500 HP unit delivering 450 GPM against a differential pressure of 1,029 PSI. The existing system's design gaps have led to five distinct trip conditions. The proposed corrections address each condition through targeted process control enhancements, creating a robust architecture capable of managing the full range of process conditions encountered in service.

The existing installation comprises a horizontal multistage centrifugal pump driven by a 500 HP electric motor. The pump takes suction from a pressurized water supply well and discharges to a network of water injection wells. In addition, two branch lines (one on suction and one on the discharge headers), fitted with an on-off motor-operated valve, serve a secondary process destination under a normally no-flow arrangement. The pump protection scheme includes high-flow trips triggered by flow transmitter high-high alarms, high discharge pressure trips activated when discharge pressure exceeds a fixed threshold, low suction pressure trips activated when suction pressure drops below a cavitation threshold, low-flow trips activated when flow falls below pump minimum continuous stable flow, and high suction temperature trips activated when fluid temperature exceeds safe limits. The system currently relies on manual interventions for recycle and lacks any automatic flow regulation. This configuration prevents automation, as every significant process change is a potential trip cause.

A detailed review of the system's operating characteristics has identified five distinct trip conditions.

High-Flow Trip: A Sudden Loss of System Resistance

The first and most frequent is the high-flow trip triggered by the flow transmitter high-high alarm. When the on-off motor-operated valve on the discharge branch opens to supply the secondary destination, it introduces a sudden reduction in system resistance. The pump, lacking a discharge flow control valve, moves rapidly toward the right of its performance curve. Flow increases significantly until the flow transmitter registers a high-high alarm, triggering the trip to prevent potential mechanical damage. This mode also occurs gradually when injection well acceptance capacity increases. The root cause is the absence of a discharge flow control valve to limit flow when system resistance decreases.

Why the Firewater Tank Valve Triggers Low Suction Pressure Trips

The second trip condition is a low suction pressure trip triggered when the suction branch valve supplying the firewater tank opens. The branch valve opens whenever the tank level reaches ~93% and closes when the level reaches ~95%. As tank water is used or evaporates during normal operation, the valve opens periodically, tripping the pump on low suction pressure.

The Spurious High Discharge Pressure Trip, Explained

The third trip condition is the spurious high discharge pressure trip. When the discharge branch valve is opened, the operator remotely closes some of the water injection wells to divert flow to the discharge branch without exceeding the pump's high-high flow setpoint. However, when flow to the secondary branch is slightly reduced, for example as the on-off motor-operated valve begins to close, the pump moves left on its curve, and discharge pressure rises, leading to a trip on high discharge pressure. In addition, the existing high discharge pressure trip setpoint is configured too conservatively relative to normal operating pressure variations. A routine, modest reduction in system flow causes discharge pressure to reach the trip threshold, shutting the pump down unnecessarily. This is a protection calibration issue rather than a mechanical problem.

How Low Discharge Flow Leads to a Nuisance Trip

The fourth trip condition is the low discharge flow trip. When injection demand decreases because of water injection well shut-ins or the closing of the on-off motor-operated valve, the pump flow rate falls. With no automatic recycle capability, flow continues to decline until it crosses the minimum continuous stable flow threshold and the low-flow trip activates. The root cause is the absence of an automated mechanism to maintain a minimum hydraulic load when injection demand drops. The original setup has a pump bypass line with an orifice and a manual valve that is normally closed. This valve is manually used during system startup.

High Suction Temperature Trips During Recycle Operation

The fifth trip condition is the high suction temperature trip. When injection is temporarily unavailable or during pump startup, operators open the manual recycle valve to keep the pump running. Under sustained full-recycle operation, all mechanical energy input is absorbed by the recirculating fluid with no cool supply water passing through. Discharge temperature rises progressively until the high-temperature trip activates. The root cause is the lack of thermal management integrated with the recycle control.

Correcting the Design: A Five-Part Process Control Strategy

To resolve these trip causes, five corrections are proposed. First, the on-off motor-operated valve on the normally no-flow discharge branch is replaced with a level-flow control valve, and a flow transmitter is added to show the flow rate. The original valve imposes a step-change on system resistance, causing flow surges. The proposed valve opens gradually, making the change in system resistance progressive.

Second, a modulating flow control valve is added to the pump discharge header. Under normal conditions, this valve sits fully open, imposing no restriction on the system. In a high-head injection system, this is critical for energy efficiency. The valve closes only when discharge flow rises above a defined threshold, typically 115% of rated flow, limiting the pump's operating point and preventing the high-flow trip. The valve is specified with a faster actuator response time than the discharge branch level control valve. When the branch valve opens and reduces system resistance, the discharge flow control valve must respond and close before the resulting flow increase triggers the high-high alarm.

Third, the high discharge pressure trip setpoint is revised upward to align with the pump's actual operating pressure at reduced flow conditions. A centrifugal pump's discharge pressure rises as flow decreases. The current setpoint does not account for this normal pressure rise, resulting in trips on routine reductions in system flow. The new setpoint is established from the pump's performance curve, set above the shut-off head with an appropriate margin, and below any genuine mechanical pressure limit. This correction removes a spurious trip cause without compromising safety.

Fourth, the manual pump bypass valve is replaced with an automatic recycle flow control valve. The recycle control valve opens when discharge flow falls toward the minimum continuous stable flow threshold, diverting sufficient flow to maintain the pump above its minimum stable operating point. It is specified with a fail-open actuator to ensure minimum flow protection on loss of power or signal. To address the high temperature trip, suction temperature is monitored continuously. As temperature rises during recycle operation, the recycle valve modulates toward a lower recirculated fraction, drawing a greater proportion of cool supply water from the well to dilute the warm recirculating fluid. This thermal management prevents the sustained thermal buildup that causes the high-temperature trip.

The proposed design establishes three sequential response layers for each process condition: a control action, an operator alarm, and a protective trip. The trip is the final line of defense. For low flow, the automatic recycle valve opens to maintain the total pump flow above the minimum continuous stable flow.

Adding a Bypass Line to Resolve the Low Suction Pressure Trip

For the low suction pressure trip caused by opening the level control valve (LCV) on the suction branch, the proposed modification is to add a small 1-inch bypass line across the LCV. The bypass line has an orifice and a solenoid valve. This solenoid valve is set to open at a level higher than the LCV setpoint, and the orifice is sized to provide much lower flow than the LCV, preventing a high suction pressure drop. Only during high firewater consumption will the small bypass line be unable to maintain the firewater tank level. In that case, the LCV opens to direct most of the water supply well flow to the firewater tank instead of the water injection pump. This will trip the water injection pump during high firewater demand. That trade-off is acceptable because it occurs only in an emergency, rather than during the routine tank-filling operation that caused frequent trips in the original design.

The immediate driver for these corrections is the need to automate the system. Automation requires that the pump respond safely to process changes without tripping. The existing design prevents automation because every significant process change is a potential trip cause. The proposed corrections create the control architecture that makes automation feasible.

Why the Discharge Flow Control Valve Isn't a Conventional Throttle Valve

A key distinction in this design is the role of the discharge flow control valve, which is not a conventional throttle valve. Rather than restricting flow under normal conditions, it acts only when flow exceeds the defined envelope, closing to prevent the high-flow trip. This approach preserves energy efficiency while providing necessary protection. The revision of the high discharge pressure trip setpoint is one of the simplest yet most impactful corrections. It requires no new hardware, only an engineering review of the pump performance curve and pressure limits. It eliminates spurious trips caused by the natural characteristics of centrifugal pumps.

The Design Gaps This Control Architecture Solves

The trips affecting the 500 HP, 450 GPM water injection pump trace to five design gaps: no discharge flow control, no automatic recycle, an incorrectly calibrated discharge pressure trip setpoint, an on-off valve on the secondary branch that imposes step-change hydraulic disturbances, and an on-off valve on the suction branch that causes uncontrolled suction pressure drops during firewater tank filling. The proposed design addresses all five. Replacing the secondary branch valve with a modulating valve eliminates step-change flow surges. Adding a discharge flow control valve, normally fully open and closing only to limit high flow, prevents high-high alarm trips and manages flow surges. Revising the high discharge pressure trip setpoint removes a spurious trip cause. Adding an automatic recycle valve with integrated thermal management maintains minimum pump flow and prevents high-temperature trips. Adding a small bypass line with an orifice and solenoid valve across the LCV maintains suction pressure during firewater tank filling and prevents low suction pressure trips. Together, these measures create the process control architecture the existing system lacks, enabling full automation, eliminating nuisance trips, and ensuring reliable operation in water injection service.