Go Back  PPRuNe Forums > Flight Deck Forums > Tech Log
Reload this Page >

AF 447 Search to resume (part2)

Wikiposts
Search
Tech Log The very best in practical technical discussion on the web

AF 447 Search to resume (part2)

Thread Tools
 
Search this Thread
 
Old 20th May 2011, 15:58
  #1941 (permalink)  
bearfoil
Guest
 
Posts: n/a
JD-EE

Good morning. Thanks for the straightforward description of IT. I get it.
Your passage also describes the challenge facing fbw/pilot cooperation.

You underscore the challenge, for the goal is far from met.

"But nothing will break if you sit there looking blank while you ponder the situation, check a few dials, and then proceed."

I'll fly with gums, no offense.
 
Old 20th May 2011, 16:07
  #1942 (permalink)  
 
Join Date: May 2011
Location: USA
Age: 84
Posts: 4
Likes: 0
Received 0 Likes on 0 Posts
MM43 - Special Request

The graphic that you posted on May 8th, 2010 is a favorite of mine. I love graphical information and that was outstanding, I don't know what program you used to format that but it is a thing of beauty. Would you mind undating that with current information. Would you mind sharing the program that you used to create it. Thanks.
mojodaso is offline  
Old 20th May 2011, 16:08
  #1943 (permalink)  
 
Join Date: Jul 2009
Location: Planet Earth
Posts: 91
Likes: 0
Received 0 Likes on 0 Posts
Think FIRST, then react.
As someone pointed out earlier. Don't hurry but lose no time. This is what training is supposed to inculcate in you. If you look at the Hudson ditching you can't find a boundary between thinking and acting. IMO this is more true of flying (especially in challenging situations) than other human endeavors. If you stop to think, its game over.

Last edited by CogSim; 20th May 2011 at 16:43.
CogSim is offline  
Old 20th May 2011, 16:48
  #1944 (permalink)  
 
Join Date: Jun 2009
Location: I am where I am and that's all where I am.
Posts: 660
Likes: 0
Received 0 Likes on 0 Posts
bearfoil, I'd meant to type in "But if nothing will break if you sit there looking blank while you ponder the situation, check a few dials, and then proceed." Does the addition of the if make more sense?
JD-EE is offline  
Old 20th May 2011, 16:51
  #1945 (permalink)  
bearfoil
Guest
 
Posts: n/a
Of course, no harm no foul....

It does sound a bit like "What's it doing now??"......
 
Old 20th May 2011, 17:00
  #1946 (permalink)  
 
Join Date: Aug 2009
Location: Texas
Age: 64
Posts: 7,201
Received 401 Likes on 248 Posts
JD-EE

When flying, you are typically looking at a variety of things that inlcudes looking at dials and instruments. It is not an either-or choice, it is "you must do both" and you don't get to choose not to.

The "look at it" is a subset of the required activity, true multitasking, particularly when flying in a condition other than straight and level flight.

Things breaking or behaving in unexptected ways just adds more multi to the tasking. (Apropos dealing with upset, and thus 447, task saturation is a critical point to understand in both training scenario design, and in task prioritization when things go wrong. I'll leave to psychologists and others the deeper details on why the human brain funcitons like that).

The analogy you used probably wasn't well chosen. (EDIT: OK, you updated it, I blundered on anyway ... )

It reminds me of what I used to tell ship driving colleagues about fuel when I flew helicopters from their ships.

"If your ship runs out of fuel, you will still float."

"If my helicopter runs out of fuel, it will first fall to the sea, and then not only not float, but turn upside down and begin to sink."

Their problem was in two dimensions, mine in three.

Maybe your non-moving, non-flying machine analogy is missing a dimension for appliciability. (Oh, dear, back to dimensional analysis and Engineering 101, are we? )
Lonewolf_50 is offline  
Old 20th May 2011, 17:05
  #1947 (permalink)  
 
Join Date: Jan 2008
Location: Atlanta, GA, USA
Posts: 349
Likes: 0
Received 0 Likes on 0 Posts
deSitter, there is a second issue that has me bemused. It's about the GIMME button. If it is supposed to give you an airplane to fly, and it is basically fly by wire, would you care to define what kind of aircraft it should mimic?
I would think that the important design point would not be with the computer system as such, rather, relatively high wing-loading in the airplane itself, so that there is built-in stability, particularly in respect to up/down drafts and turbulence.
deSitter is offline  
Old 20th May 2011, 17:24
  #1948 (permalink)  
 
Join Date: Feb 2010
Location: France
Age: 75
Posts: 11
Likes: 0
Received 0 Likes on 0 Posts
Vol Rio-Paris : les circonstances de l'accident connues en fin de semaine prochaine - LeMonde.fr

The black boxes of the flight Rio-Paris fished out, the investigators of the Office of investigations and analyses (BEA) try “to make them speak” so that the causes of the accident are known which costed the life of two hundred and twenty-eight people. The BEA announced, Friday, May 20, that the circumstances of the crash landing would be known in nearest end of the week.
rotor12 is offline  
Old 20th May 2011, 17:25
  #1949 (permalink)  
 
Join Date: Jan 2001
Location: France
Posts: 168
Likes: 0
Received 0 Likes on 0 Posts
BEA to release informations at the end of next week

A French TV announced that the BEA shall release at the end of next week some informations about the AF447 crash. These informations should be about the "circumstances" and not "causes" according to what said this journalist (BFM TV)
I think that the BEA is now under strong pressure from the political (and economical) power to move forward. I would not like to be the technicians in charge of the analysis. It is never a good thing to work under pressure, in many duties especially theirs.


EDIT (according to rotor12 post and his link to "Le Monde" article)


(...)

Par ailleurs, selon l'association de proches des victimes Entraide et solidarité AF 447, les enquêteurs du BEA travaillent sous pression dans la perspective du Salon du Bourget, grand-messe de l'industrie aéronautique. "On voit apparaître le Salon du Bourget à l'horizon fin juin et l'on sent un BEA complètement pressurisé pour sortir des informations, qui ne sont pas validées, qui sont contradictoires entre elles", regrette Robert Soulas, vice-président de l'association.


Moreover, according to the association of relatives of victims "Entraides et solidarité AF447", BEA investigators are working under pressure in view of the Salon du Bourget, high mass of the aviation industry. "We see the Paris Air Show at the horizon in late June and one feels a completely pressurized BEA to release out information that are not validated, which are mutually contradictory, regrets Robert Soulas, vice president of the association.
.../...

Last edited by Squawk_ident; 20th May 2011 at 17:47.
Squawk_ident is offline  
Old 20th May 2011, 17:27
  #1950 (permalink)  
bearfoil
Guest
 
Posts: n/a
It is not simplistic, and I am not persuaded that people are not intentionally missing the point. Whatever the "Kind of airplane reverts to the pilots" it is obviously and necessarily one that (needs be) familiar, honest, and responsive. No "take out the book, run memory", and NO 'disregard/don't disregard' critical prompts. Maybe no a/p reselect or not, maybe so; no horizon. These are requirements that are unaddressed, to date. Review this thread and take note of the old guys who still question this format ??

There is a disconnect that perpetuates the discussion, now it may be arcane, picky, or other, but the end user is not well served by ego and pride. Allegiance to "one" format or the other is legend, going way back. If there are concrete reasons that give this argument life, (there are), then something is endemically wrong somewhere.
 
Old 20th May 2011, 17:43
  #1951 (permalink)  
 
Join Date: Jul 2002
Location: UK
Posts: 3,093
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by CONF iture
It would have greatly complicated the all issue and probably bring more confusion to an already very confusing situation.
AT THE TIME the procedure was to simultaneously pitch down and apply full thrust. In other words it would have unnecessarily destabilized a situation that was under control.

Those Air Caraibes crews did so well under such confusing environment
Well, I can't argue that the pilots did a good job of diagnosing the situation and determining the spurious warnings from the real ones. However, the dangers of such things happening due to a failed pitot/static system have become much more well-known and better understood since the loss of the Aeroperu and Birgenair 757s for the same reasons (and with similar symptoms - stick-shaker and overspeed warnings simultaneously). I'd imagine it takes something of a mental leap for pilots who are conditioned to implicitly trust their instruments to determine which of the instruments cannot be trusted.

The very nature of that kind of failure is hugely dependent upon the failure mode of the sensor concerned, and it is not a matter of being able to prescribe a set of actions that will definitively tell you that there's a failure in the pitot/static system. As such, I think the BEA are right to be cautious. If they had made such a prescription and an incident occurred where the stall had turned out to be real, then they would be in the firing line.

Originally Posted by JD-EE
IT professionals are much like that...
You make some very good points, though I think it's worth making clear at this juncture that the kind of computer/IT issue that you and I encounter daily is a world apart from those encountered in the kind of real-time systems developed for aviation.

That said, some of the better ideas to come out of those disciplines, particularly unit and regression testing, have been making inroads into mainstream software development practice over the last decade.

For non-IT people, the concept is to test each software function across the range of expected inputs, unexpected inputs and edge cases to make sure that the output matches the specification. You then do the same with multiple functions arranged in the manner they will be put together in the final system until you have a comprehensive set of tests that cover the whole application. These tests are then run throughout the software development and maintenance cycle, and if a single one of those tests fails, then you know you have a deviation from spec.

The main advantage of this is that you can prove on paper that the software matches the specification, and the secondary advantage is that if a change in one component causes unexpected behaviour in another, it will be caught in the test harness.

In the case of the A320's software, they went one step further and had two teams working in isolation providing separate implementations - if there was even the slightest match between the two, one team would be told to rewrite the functions from scratch. You then have a "quorum" of machines that can run the data through both implementations and any logical errors can be discounted.
DozyWannabe is offline  
Old 20th May 2011, 17:48
  #1952 (permalink)  
 
Join Date: Jun 2009
Location: Bedford, UK
Age: 70
Posts: 1,319
Received 24 Likes on 13 Posts
Post #36 (Svarin)

Regarding this message :

2:14:20 FLR/FR0906010213 22833406AFS 1,,,,,,,FMGEC1(1CA1),INTERMITTENT

BEA reported :

Quote:
In any event, the effects of such a message could only be the disengagement of automatic systems, whose associated cockpit effect messages had already been transmitted at 2 h 10
To this should be added, from the same report, that a cockpit effect will only appear once in a given CFR/PFR. What we deal with is a CFR (Current Flight Report). I take it then that a A/P OFF message will not be repeated, since it was sent around 0210.

It is unfortunate that BEA would only give this item of information in that particular, obscure way. They essentially repeat themselves. However, reading between their lines would mean that A/P went OFF again without an ACARS message being transmitted (already done). So A/P had to be turned ON after 0210.


The implication being that erroneous but consistent data had persuaded the crew to re-engage A/P on false data that passed the acceptance criteria for engagement, only for it to disengage again (for unknown reasons) having done who-knows-what.

Was this interpretation discounted ?
Mr Optimistic is offline  
Old 20th May 2011, 17:49
  #1953 (permalink)  
 
Join Date: Jan 2008
Location: Blighty (Nth. Downs)
Age: 77
Posts: 2,107
Received 4 Likes on 4 Posts
Decisions

JD-EE, CogSim and bearfoil,

None of you is wrong, and none of you is completely right. Horses for courses?

Complete loss of thrust at a low height is one thing; anomalous indications in the cockpit at FL350 would be another prior to any upset.

If and while there's time: DODAR, and repeat as often as required. If not, some prior consideration of classic, easily-diagnosed, once-in-a-hundred-careers failures may greatly simplify the thought process on the day. But, if at all possible, you still need to keep your co-pilot in the loop: and there's also a possibility he/she may have to correct your mental model. The latter process didn't happen in the Trident between Heathrow and the Staines reservoir, for reasons blind pew can explain better than I.

In deference to bearfoil's latest post: one hopes equally that the aircraft will keep the flight crew "in the loop".
Chris Scott is offline  
Old 20th May 2011, 17:52
  #1954 (permalink)  
 
Join Date: Aug 2009
Location: Germany
Age: 67
Posts: 1,777
Likes: 0
Received 0 Likes on 0 Posts
Cool

Hi,

Flashback ..
A second reading of this release of BEA calls several criticisms:
What right does the BEA moves he can judge the morality of newspaper articles?
And in doing so .. take the role of a censor
This release of BEA is not better or worse than the newspaper article to which it refers.
The release of the BEA does not match the mission entrusted by the French government.
BEA's response would have been a denial or approval of the contents of the press articles
It appears nowhere in this release

BEA communication
According to an article in Le Figaro on the evening of Monday, May 16, 2011, the "first elements extracted from the black boxes would put Airbus out of the accident on the A330, Flight 447, which killed 216 passengers and 12 crew members on 1 June 2009.
Tribute to sensationalism by publishing unconfirmed information while exploiting the data flight recorder has just begun is an affront to the respect of passengers and crew members died and causes trouble among the families of victims who have already undergone many announcement effects. The BEA said that, as part of its mission as the authority for safety investigation, only he can communicate on the progress of the investigation. Thus, any information about the investigation from another source is null and void if it has not been confirmed by the BEA.
The collection of all data contained in records voice and flight parameters gives us today is virtually certain that all light will be shed on this incident.
Investigators will now have to analyze and validate various information. This is a long and painstaking and the BEA has already announced he will not issue an interim report before the summer.
At this stage of investigation, no conclusion can be drawn.
jcjeant is offline  
Old 20th May 2011, 18:00
  #1955 (permalink)  
 
Join Date: Sep 2009
Location: Around the World
Age: 74
Posts: 87
Likes: 0
Received 0 Likes on 0 Posts
Wait and see

Last news:
First findings on Rio-Paris crash next week
NeoFit is offline  
Old 20th May 2011, 18:14
  #1956 (permalink)  
 
Join Date: Jun 2009
Location: VA, USA
Age: 58
Posts: 578
Received 0 Likes on 0 Posts
It's about the GIMME button. If it is supposed to give you an airplane to fly, and it is basically fly by wire, would you care to define what kind of aircraft it should mimic? It could drop you into a direct law that gave the controls the touchy feel of a P-38 configured for stunts or it could mimic a fully loaded C-130 or something in-between.
This aspect of the "conversation" has had me thinking also... since, in everything except Mechanical Backup (a realm of last resort if there ever was one), the fact of the matter remains that some interpretation of the crews input the sidestick is translated into a control surface movement - the idea of "Direct" really is a misnomer.

From the prior link describing the A330 control laws:

In pitch direct law, elevator deflection is proportional to stick deflection and, in all configurations, max elevator deflection is a function of CG
Am I reading this right - "max elevator deflection is a function of CG", meaning there are still electronically applied limits to what the pilot can demand (in this case, of the elevators)? Sounds like a "law" to me?

Also, my understanding of the side-stick is that the Airbus stick is quite a different design to that of the F-16. The F-16 stick only moves a very small physical deflection and is more of a force sensor (I worked F-16 simulators about 17 years ago!), while the 'bus stick is a position sensor. That in itself though is merely interesting.

As gums has very clearly explained in several posts, FBW control laws are all about constraining the aircraft within an envelope, with the intent of keeping the aircraft from getting into an attitude that is known to be "bad news", however highly agile military fighter jets (and *creative* military pilots) were clearly able to find blank spots outside of the controllable envelope envisaged (the deep stall example for the F-16). It wasn't clear to me whether the control laws were then modified on the Viper to prevent the aircraft getting into this condition...

However the point of the preceding paragraph is to ask a simple question:

Is the Airbus inherently a safer aircraft (not comparing to anything here) because of the FBW system and associated control laws?

Is is hard to ask that without invoking a comparison, but I am not inviting a A vs B discussion here, or wanting to see one evolve. The point is we have limiting systems in cars for example - traction control, limited slip diffs, rev limiters, ABS brake systems. Presumably these are in place because for the greatest majority of time safety is improved because of them - but I guarantee there are a very few cases where evidence indicates the such a system made some accident worse.

My position is that life is inherently dangerous and we are constantly tossing the dice, aside from sitting in the middle of a large field for your entire existence, there is a level of risk that may lead to harm when we do anything, and in particular any human construct can and at some point will fail in some way and possibly cause harm to someone (buildings fall down, dams fail, cars crash, airplanes stop flying). What Airbus has tried to do is prevent most of the obvious bad things from being allowed, through control laws, but as with any control system, once you exceed the design limits, well, bad things may occur.

It's clear that Airbus has done a pretty good job - there are thousands flying. Obviously this is not to say things cannot be improved. Of course improvements are possible.

But, sadly I suspect (yes, this is WHOLLY opinion) this case will result in findings that indicate some sequence of poor human decisions leading to the aircraft being in a very bad place at entirely the wrong time (I see the phrase "holes in Swiss cheese lining up..." applying). Whether it is then appropriate to blame the computers for not saving the day seems unfair. Somewhat akin to driving my car at 100MPH toward a cliff-edge and then blaming the ABS brakes for not stopping the car in time - I'm sure the system would do the best it could until the wheels leave the ground, at which point I become the passenger... Time will tell.
GarageYears is offline  
Old 20th May 2011, 18:51
  #1957 (permalink)  
 
Join Date: Aug 2009
Location: Germany
Age: 67
Posts: 1,777
Likes: 0
Received 0 Likes on 0 Posts
Hi,

Another source:
Google Vertaling

Original source:
Les circonstances du crash de l'AF447 dévoilées dans une semaine - Le Point

Note:
Circumstances but not the causes

Methink all Pprune reader know already the circumstances
jcjeant is offline  
Old 20th May 2011, 19:17
  #1958 (permalink)  
 
Join Date: Jul 2002
Location: UK
Posts: 3,093
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Chris Scott
In deference to bearfoil's latest post: one hopes equally that the aircraft will keep the flight crew "in the loop".
Originally Posted by bearfoil
It is not simplistic, and I am not persuaded that people are not intentionally missing the point. Whatever the "Kind of airplane reverts to the pilots" it is obviously and necessarily one that (needs be) familiar, honest, and responsive ... Review this thread and take note of the old guys who still question this format ??
But the kind of situation you're describing does not simply apply to aircraft of the same or of a later generation than the A330. Two incidents that spring to mind are the Roselawn ATR-72 crash, and the China Airlines 747 incident over San Francisco. In both cases, the automation tried to manage the flight to the best of it's ability until it reached the limits of it's control regimen and handed control back to an unsuspecting crew. In the case of the latter, there was enough altitude to perform a recovery, but sadly in the case of the former there was not.

Allegiance to "one" format or the other is legend, going way back. If there are concrete reasons that give this argument life, (there are), then something is endemically wrong somewhere.
Every technological advance, both inside and outside of aviation, has had it's detractors - it's just human nature to be suspicious of change. That doesn't make either side of such "religious" discussions correct.

Originally Posted by GarageYears
This aspect of the "conversation" has had me thinking also... since, in everything except Mechanical Backup (a realm of last resort if there ever was one)
I believe the only Western transport category jets to retain such a thing are the 737 and the DC-9 derivatives.

the fact of the matter remains that some interpretation of the crews input the sidestick is translated into a control surface movement - the idea of "Direct" really is a misnomer.

...

Am I reading this right - "max elevator deflection is a function of CG", meaning there are still electronically applied limits to what the pilot can demand (in this case, of the elevators)? Sounds like a "law" to me?
Having finally got my hands on a copy of Davies' "Handling The Big Jets", something leapt out at me when I was reading it - and that is the fact that beyond a certain size, transport category jets are simply too large to have effective manual reversion. Having aircraft "feel" transmitted to the pilots via artificial means is something that has been provided since at least the days of the Comet 1.

What you are describing doesn't sound like a "limiting" control law (in fact in Direct Law there are no limitations as such), but an implementation of precisely this kind of "artificial feel", albeit implemented in software as opposed to hydraulic or mechanical devices.

Davies points out that without these artificial feel units, then it would be possible to very easily fall into an upset and overstress the airframe by virtue of the full authority that powered flight surfaces provide.

Is the Airbus inherently a safer aircraft (not comparing to anything here) because of the FBW system and associated control laws?
In many respects, yes. However that does not make the pilot immune to maintaining situational awareness to the best of their ability.


Whether it is then appropriate to blame the computers for not saving the day seems unfair.
Well, the computers are getting their information from the same sensors as those driving the pilot's instrument display. At this stage a computer is no use as it is outside the parameters within which it was designed to operate - both Airbus and Boeing are well aware of this, and it is for this reason (among others) that there are still two warm bodies in the flight deck of even the most automated airliners, and will continue to be for the foreseeable future.
DozyWannabe is offline  
Old 20th May 2011, 19:19
  #1959 (permalink)  
 
Join Date: Dec 2005
Location: At home
Posts: 244
Likes: 0
Received 0 Likes on 0 Posts
Lonewolf 50
... to better understand recovery or lost capability ... if you had a power loss / or interruption .. then, not only do you need to reset location and direction, you have to establish wings level, nose pitch X, (zero, I assume) to re-establish correct attitude sensing from which the gyro can reference.

That is similar to "recaging" a gyroscopic Attitude Indicator if it has "tumbled" in flight, though from your description, a bit more complex
Regarding in-flight realignment. I'm no expert, but I'd venture to say that on a theoretical level:

As long as you can fly in a reasonably straight line, and can build a GPS trajectory of that line, you can then realign the solid state gyro by applying corrections to whatever the gyro displayed during the straight line.
Additional data needed is airspeed and the airplane's lift polar curve data , which gives the angle of attack for any given airspeed (which affects the indicated pitch angle).
In the roll plane, calibration can be aided by the fact that according to aerodynamics, any bank will induce a turn (assuming no sideslip). The actual turn rate can be calculated from the GPS track. In fact there is a definite relationship between airspeed, turn rate and bank angle, so theoretically it should be possible to calibrate the roll axis even if the plane performs a constant rate turn.

I have no idea of the A330's capabilities in this regard, but e.g. the Garmin 1000 integrated instrument system for GA is capable of in-flight realignment.

Last edited by snowfalcon2; 20th May 2011 at 19:31.
snowfalcon2 is offline  
Old 20th May 2011, 19:28
  #1960 (permalink)  
 
Join Date: Dec 2010
Location: Middle America
Age: 84
Posts: 1,167
Likes: 0
Received 0 Likes on 0 Posts
jcjeant,

I respectfully disagree with your second reading and criticisms of the BEA and their response to this news article. They made somethings crystal clear:

1. They and they alone have the responsibility to release information concerning the AF447 investigation.

2. The BEA reserves the right to confirm information published from an external source as being accurate and true.

3. The BEA investigation has not reached the stage of determining cause of the accident.

and,

4. Articles, such as this one, does the families of those who perished no good and could cause harm as it is not information either released or concurred by the BEA.

So, by not concurring or denying as you say, the article and its content is null and void, that is to say, not authoritative as no conclusions have yet been reached.

The BEA is doing exactly what the French Government has chartered it to do, investigate the accident, establish factual information, take the factual information derived and establish factual cause/causes, probable cause/causes, and those causes that cannot be determined from all the developed data. Once in a while they get sidetracked by being required to remind the public as to the source of accurate information, that source is the BEA.
Turbine D is offline  


Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.