Small Cog Unanticipated fail modes leading to cascading failures can occur but I would suggest that historically the record shows most of them were exacerbated by inappropriate crew actions. It will be interesting to see the official report on this incident. Like I said above when the only thing on the PFD and MFD is the makers name, a good outcome is going to depend on the basic flying skills of the crew, something this crew obviously had but sadly is no longer a given on modern flight decks |
Originally Posted by belfrybat
(Post 10343169)
According to the commander, interviewed on TV, power came back after the engines were shut down. Presumably from the APU, on the footage the cabin lights were visible.
|
That fault report (thanks JumpJumpJump) is interesting reading.
Question: How do the time stamps relate to the actual flight? Quite a few faults are logged around 20-Dec : 02:55 (Zulu, I assume) and then a few more at 20-Dec : 03:46. This appears to be a few minutes after landing. But since this incident seems to have gone on for around 3 hours, the earlier logged times don't appear to correspond with the onset of the problems. |
Lots of discussion about the AC busses, looks like an ELMS failure to me. Electrical Load Management System going haywire.
I'm pretty sure the ACE's (Flight Control System) are powered by 28v DC from PMG's (Permanent Magnet Generators on each of the engines) which is independent of all the AC power distribution systems. The fly by wire system would likely have been unaffected by the loss of AC power on the three busses. It is interesting to hear that the RAT did not reconnect AC power to the busses. Were both bus tie circuit breakers tripped? or was the ELMS load shedding everything? How is it the transfer bus remained unpowered with the Rat deployed??? Hat's off to the crew, very impressive presence of mind and aviation skills. |
If like the 787 then ACEs on independent PMG, but PFC on normal electrical network. Hence loss of autopilot and other degradations.
|
Any more news on this incident?
|
Megan touched on the question of ETOPS (23rd Dec); I'm guessing this was not an ETOPS flight; correct?
But even if not, was the aircraft maintained and equipped as an ETOPS aircraft? I wonder how things would have gone if an unconnected (or indeed connected) engine failure had been added to the crew's problems, shortly after the electrical failures at 0254 and 0255? |
All 777's are ETOPS qualified - its not like the old days where you had some 757's that were ETOPS and some that were not and they had different components on them.
|
Two decades years of certifying 777 electrical systems and I have never seen anything like this before.
Having read the limited public informational available (particularly the AHM report), and just thinking aloud, I can't help thinking... The 777 has only a single Back Up Converter controlling both Back Up Generators and both Transfer Busses. ..and wondering... Would this incident still have happened if each Back Up Generator had it's own, completely independent, Converter? I am not speculating on the cause - I just don't have access to the detailed information to answer this question. |
Originally Posted by max motor
(Post 10349152)
Would this incident still have happened if each Back Up Generator had it's own, completely independent, Converter?
I am not speculating on the cause - I just don't have access to the detailed information to answer this question. |
Originally Posted by max motor
(Post 10349152)
Would this incident still have happened if each Back Up Generator had it's own, completely independent, Converter?
It all comes down to certification costs. While redesigning the backup system to provide additional channel separation would seem to be a more sound solution, there is a strong motive to 'fix it in software'. So I'm betting on a patch to ELMS. |
Originally Posted by EEngr
(Post 10349814)
It all comes down to certification costs. While redesigning the backup system to provide additional channel separation would seem to be a more sound solution, there is a strong motive to 'fix it in software'. So I'm betting on a patch to ELMS.
If the design is faulty it needs to be fixed, "putting a patch on it" but leaving the root cause to rear its ugly head some time in the future, isn't an option. Luckily this time no lives were lost, that might not be the case if it happened again. |
Please remind me how the B787 battery issue was "solved". Was the root cause addressed or a "safe(?)" box put over the battery?:)
|
Well, the battery was completely redesigned. The battery charging system was completely redesigned. Then, because the damage to the event batteries was so severe they were unable to conclusively determine root cause, as a failsafe they put the battery inside a steel box that would contain any possible battery failure.
Appears to have worked - prior to the redesign there were two failures on 50 aircraft in a few months. Seven years later, with about 600 aircraft in service, there has been a grand total of one battery failure - which due to the battery redesign was contained to a single cell. So yes, they fixed the 787 battery problem by putting a box over the battery :ugh: Constantly repeating the myth that all Boeing did was put the battery in a box doesn't make the myth true. |
Fixing ELMS logic to clear faults more selectively (i.e. not dumping all the sources) is a legitimate fix. One may not be able to identify all possible future fault conditions. Even by redesigning the backup converter. The redesign of which might create a whole new batch of unforeseen failure modes. So handling them properly would be a good approach.
|
Its providing more (possibly better, possibly worse) complexity, but not addressing the SPOF, therefore not a legitimate "fix", but merely an enhancement that hasn't removed what can still turn out to be an un-recoverable failure.
|
Originally Posted by Dee Vee
(Post 10351127)
but not addressing the SPOF,
|
Just wondering. Considering how far down this aircraft was on the usable generator availability, would the old computer trick of rebooting be applicable to this situation? I would not want to just try this in the wild without Boeing testing out and coming up with new procedures, but if in mid Ocean and unable to control fuel transfer, then I might reconsider. Caution-Not type rated, but I have had occasion to fly jets without electrical power. They generally do not need electrical power to stay airborne- for a while! |
Usually, that is discouraged in such situations. Closing a breaker into what might be a fault could result in even more serious damage. Cycling a circuit breaker can be OK to 'shake loose' a brain-dead processor. In that case, if you opened the breaker, you can close it (deferring to the published operating procedures, of course). But if it tripped on its own, I'd be hesitant to re-kindle a fire someplace.
|
I was thinking something more like turning off all generator switches, and then bringing them back on line incrementally. |
All times are GMT. The time now is 16:25. |
Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.