tmcdonough19's picture

When there is any doubt about any weirdness I prefer to revert to the traditional partial panel mode of flying: disconnect all the automation (pull CBs if you have to), verify trim, spoilers, flaps and undercarriage, manually set the power and use the standby attitude indicator for pitch and roll. Then use CRM to sort out the situation. It's basic airmanship that all the whizbang automation is causing us to collectively lose with each passing generation.

Captain Ray's picture

Unfortunately, this is not the first commercial plane to crash under stall conditions with mutiple crew positions. Two Boeing 757s lost airspeed indications and indicated confusing information to the crew. One with the static ports taped and one with a bug in one of the pitot tubes. One B-727 in the USA crashed as its pitot tube iced up due to lack of pitot heat as the crew did not perform the checklist correctly. Once indications start that are not normal or indicate multiple failures the crews were easily overwhelmed with all the information presented. What is there to indicate correctly? I would dare say that in my entire 36 year career flying military and commercial jets I encountered a similar situation in a T-38 as the pitot tube iced up in the clouds. In this plane it was rather easy to analyze as we practice approach to stalls continuously as part of student training. But all other functions were working! I cannot remember practicing, talking, covering accidents, etc. in commercial jet training that covered pitot failure and the ensuing number of electronic inputs/indications to follow. Add the weather and you have a terrible combination of factors and a decision as to which one to believe would be extremely difficult. The pitot on this plane and others similar had been judged defective because they had suffered multiple problems in months prior to the accident. Why were they not replaced before with some sense of urgency is part of aviation's slow history to respond to systemic or equipment issues. Had this happened in clear weather, as it had done in prior airframes, this crew could have recovered as others in this model plane had done before. Codehead mentions the Buffalo, NY crash that was a stall accident. It is my impression that in this crash the crew had a total disconnect as to the situation at hand and were not flying the plane as the airspeed was allowed to decay without response. Once the plane stalled the response was the wrong one. The conclusion is that the captain did not know what was going on and this indicates just plain lack of being with the plane.

David C's picture

To confuse one pilot may be regarded as a misfortune. To confuse three looks like carelessness.

FDrexler's picture

As a former Naval Aviator and qualified in carrier landings, it has always amazed me that no airliners that I am aware of, even show the current AOA to the pilot. That was our primary A/S indication to ensure we always came aboard at the slowest A/S and proper attitude, regardlwess of wt. If the pilots had only known their correct AOA, they would know exactly what action to take, even if every other flt instrument was out.

Codehead's picture

Correct me if I'm wrong, but in the Continental-Buffalo accident, the pilot(s) needed to take manual control of the aircraft when they saw the heavy ice build-up (much the same as we are cautioned not to use cruise control on slick roads, so that we can get the "feel" of the road). I propose that by ignoring the ice build-up, and proceeding in "status-quo" mode, that by the time they realized they were in trouble, it was already too late for them to recover, because they were too close to the ground at that point.

bob321c's picture

From what have I read above, the A330 auto-trimed to full up trim and then the autopilot disconnected and went into direct law. In direct law the auto-trim is disabled, and was then stuck at full up trim causing the jet to fall.

The A330 also has no angle of attack display, unless all 3 ADR's are turned off so airspeed is replaced with AOA and altitude is displayed in degraded GPS altitude. No pilot I know would turn off all the ADR's in the middle of the ocean at night. There needs to be an emergency switch to display this information when there is a loss of airspeed information.

AerospInsider's picture

There have been deep discussions on this website and other boards about the situational awareness of the 3 pilots of AF447.  Among some of the more elucidating posts from the Pprune board has been from the author --theShadow--, who adds depth and critical analysis to understanding the situational awareness surrounding the accident:
 
"The stall warning sounded twice in a row. The recorded parameters show a sharp fall from about 275 kt to 60 kt in the speed displayed on the left primary flight display (PFD), then a few moments later in the speed displayed on the integrated standby instrument system (ISIS)."

--theShadow-- writes:
This is what I'd expected and earlier predicted (earlier) as being the "onset" (an eventual total pitot clog - see {earlier}).  The DFDR (data flight digital recorder) was of course recording exactly what the pilots were seeing but meanwhile the aircraft's autothrust had actually been increasing power to maintain that programmed speed (and as a result of the gradual ice-crystal pitot blockage, actually exceeding that programmed speed by a considerable margin, whilst headed towards Mach Critical).

But what triggered the autopilot disconnect? Was it a Mach Crit encounter or was it that the autopilot couldn't hold the increasing elevator force gradient of a system-driven mis-set THS (hoz stabilizer)? Or was it the sudden total clog of the pitots (see hail formation "exponential" analogy {earlier}).

"At 2 h 10 min 51s, the stall warning was triggered again. The thrust levers were positioned in the TO/GA detent and the PF maintained nose-up inputs. The recorded angle of attack, of around 6 degrees at the triggering of the stall warning, continued to increase. The trimmable horizontal stabilizer (THS) passed from 3 to 13 degrees nose-up in about 1 minute and remained in the latter position until the end of the flight." 

Continuing:
Over time, as they cruised in the ice crystals of Cirrus clouds (a known "pitot heat capacity" anomaly for that mark of pitot tube), the gradually clogging pitot system resulted in the autothrust incrementally applying power to stop the "apparent" speed decay.  Similarly, the auto-trim maintained the nose-up trim for that programmed speed - and the autopilot offset the elevator (via "fwd stick") to hold height - as the aircraft was actually flying faster than shown.  When it reached its design pitch-holding limit (i.e. the max nose-down force gradient it could hold), the autopilot gave up, and the handling pilot now had an instant unalerted surprise handful of an aircraft in Direct Law with nearly full nose-up trim and near to full power.  So did the DFDR faithfully record this or did the BEA (France's Bureau of Enquiry and Analysis for Civil Aviation Safety) just construe (and misrepresent) it as the pilot's aft sidestick input?  [i.e. in the absence of any better/more logical explanation?]

When it comes to high speed protection, should this crew have received wrong airspeed info indicating a high speed situation, you have protection where, once Mmo + few knots (max mach operating number) has been exceeded, you will get an auto pitch-up to try and maintain Mmo + few kts, so should this happen at slow actual airspeed, it will not be too hard to see why the pilot may have continued to pull back and continue increasing the aircft's pitch angle. But my theory was that they were actually at an initially higher speed than indicated.  Here (most importantly) we have to consider that after their involuntary zoom climb (due to trim), the static pressure changes (upon the pitot) would thereafter have had a considerable additive (and further confusing) effect upon the blocked pitot systems and the displayed airspeed/mach. i.e. ( "The speed displayed on the left side increased sharply to 215 kt (Mach 0.68). The airplane was then at an altitude of about 37,500 ft and the recorded angle of attack was around 4 degrees.")

"the angle of attack exceeded 40 degrees" later saith the report. You have to close your eyes to this, because it's not anything those AF447 pilots would have known (i.e. no AoA display for them).

"By the time it reached the apex of the ensuing pitch-up and subsequent "bunt" (around 38,000ft), the aircraft was ACTUALLY entering into a deep stall with a forward speed of around 60kts and a high angle of attack...ultimately resulting in the 10,000ft +/minute Rate of descent at high AoA.  But they'd initially responded correctly to the stall warning with TOGA power? - however that response was soon to change. Why? In Direct law, which they should now have been in, holding the stick back will maintain that stall. But why would the pilot do that back-stick thing? Perhaps they were attempting to attain level flight - and unaware that they were in Direct Law? But was there another reason and why did they then idle the TOGA (take off/go around) thrust?  Who knows for sure? 

But here's a clue.  In the subsequent descent with static pressure increasing and the pitots still blocked (?), even though the airplane was actually stalled (complete with stick-shaker) the indicated airspeed would be increasing alarmingly - courtesy of increasing static pressure (on the pitot).  That's my guess - and it's anyways a physical fact.  Been there and done that trick with frozen trapped water in the static lines (i.e. the opposite effect of trapped dynamic pitot pressure).  There's also a report on the Irish Accident Board's site about a 747 on a test flight with uncapped static lines due to maintenance errors.  It's an elucidating gaelic tale that shows just how confusing the pitot-static scenario can be.  See below for how much a 1000feet of altitude change is worth in terms of additional "displayed knots".  Ask any instrument technician.  That's what I did.  He'll demo it for you on his test-bench.

As somebody said: "All this will probably come down to crew composition, very high workload, in adverse weather conditions, having to manually hand-fly an aircraft which suddenly found itself in alternate law at high altitude due to spurious information being fed to not only the flight display computers, but also the flight control protection and guidance computers, simultaneously." 

"Suddenly"?  Don't underestimate the power of surprise.  Spurious info?  Maybe, but when it's what you are taught to believe (your instruments), that's what you react and respond to.  You see a high and increasing airspeed and you apply backstick to attempt to control it - and you idle the throttles..... but instead you are (unbeknownst to you) embedding yourself in a deep-stall condition.

Will the stall warning cease once embedded in a deep-stall at 40 degs AoA?.  That's my guess. That they were non-plussed by developments is obvious from the limited dialogue.  Even the captain was struck dumb by what he saw.  No solution was obvious in the time available - as the airspeed was seen to be much more than just "adequate" (i.e. even high - and even higher as the static pressure increased inexorably upon descent).  (i.e. So how could they be stalled? Unthinkable - so it wasn't even considered.  It was perhaps a meteorological phenomena?). They just ran fresh out of ideas.  Freeze-framed twilight zone?  Been there and done that too.

Someone also said (and theShadow said earlier in his 20 May post - and last year): "You are not only dealing with conflicting airspeed info, you are also presented with multiple spurious ECAM warnings and cautions which it is sometimes hard to ignore, also depending on the alternate law protection loss which itself can be further divided in two categories, or even direct law which would mean direct side-stick to flight control input without any load protection - leading to control overload."  Isn't automation wonderful?

A pitot-static system's pneumatic airspeed data (the usable output product) relies wholly upon very accurate dynamic pressure and static (i.e. ambient atmospheric) pressure inputs - and the latter changes rapidly during a descent at 10,000fpm. No digitized sourcing of that info, it's all air pressure analogue.  Falsify either one (via blockage or leak) and zoom or descend and the story will be ever more confusing.  Birgenair and Air Peru 757's found that to be the case.  For example, with a snap-frozen static pressure (at FZLVL) the airspeed indication will wind back from 250 knots to zero over as little as 3400 feet of climb at 250kts IAS.  I think that the BEA is still trying to wrap their minds around that obscure fact here (Gallic and not Gaelic closed minds).  They are also (possibly) assuming that the zoom was a result of pilot input and not an aerodynamic pitch-up..... i.e. as a result of (possibly) hitting Mach Crit with an A/P disconnect and a very nose-down trimmed horizontal stabilizer (@3 degs nose-up but increasing to 13 degs nose-up due to pilot's aft sidestick inputs after top of zoom climb).  But do I actually think they hit Mach Crit?  No, more likely it was the excessive elevator force gradient that kicked out the autopilot and kick-started the fatal zoom sequence...

Someone also said: "Direct law is there to give the pilot more direct control of the aircraft but it still has some protection to offer - BUT at the same time the protection on offer is only as good and accurate as the information provided to the computers involved. Much more info is needed before one can create a valid picture of what went wrong when it comes to the decisions the pilots made in the last few minutes of the flight." However the change in static pressure resulting from the zoom into ever more rarified air and the instinctive attempt to maintain level flight and use backstick to reduce the ever higher displayed airspeed indicated during the ensuing descent (subsequent to the zoom climb) are --key factors-- dictating an inevitable entry into the unrecognized deep-stall condition. Additive to this was the dearth of info that they had to work with and little prior exposure to degraded flight control laws. And all this in night and in cloud.....

Confirmatory (for me anyway):
Did the pilot zoom climb the aircft or was it caused by the automated mis-trimming in pitch? Perhaps this next statement in the report is a clue: "The airplane’s pitch attitude increased progressively beyond 10 degrees and the plane started to climb. The PF made nose-down control inputs and alternately left and right roll inputs."

Perhaps the left and right roll inputs were his insufficient attempts to get the nose to drop (airline pilots rarely use more than 30 degs angle of bank due to the pax sensitivities - and in an Airbus? Perish both the thought and possibility....). When you've got a stuck elevator, or an aircraft pitching up of its own volition due to a runaway elevator pitch-trim, that's the way to go (i.e. roll the beast onto its wingtip to get the nose to drop - and drop flap). Pity they didn't think of that during the Jan 2003 Beech 1900 stuck elevator take-off accident at Charlotte NC. (52 degs nose-up at 1200feet agl).

So having read all the above, please feel free to shoot it all down.  But ultimately, whether it's right or it's wrong, you have to ask yourself: "Is the training to combat automation anomalies and its inherent malfunction complexities adequate?"  As someone else said: "In alternate law - is the amount of warning signals inhibited to the bare minimum necessary to keep the tube flying?  (i.e. you don't need a warning that the lights in the aft toilets aren't working - while busy with a stalling conundrum...?") 

Note how quickly the situation described above can become completely and incomprehensibly unglued. The debate yet to come is going to be ponderous and inherently evasive.  The AF447 crew were caught out by a little known pneumatics phenomenon and reacting understandably to what they saw.  They died clueless as to their actual predicament but I cannot bring myself to blame them.  As they said: "We have no valid indications".  They were right.  Man can easily be defeated by automation.  It's a burgeoning and futuristic problem.  I can't shame them for being cheated of life by a system that's too conscious of cost and inconsiderate of consequence.  The engineers and designers?  Well they live in Never Never Land. If only the twain should meet....
________________________
Edited to add an afterthought:
a. I've heard two different qualified opinions as to whether the acft would have ended up in Alternate Law or ultimately transitioned to Direct Law???

b. "Just 20s after the captain returned to the cockpit, said the BEA, the thrust levers were set to the 'idle' position, with the engines delivering 55% of N1." i.e. Did the captain, upon entering the flight-deck, see the high (but fraudulent) IAS on descent and order the throttles to idle, understandably assuming a LOC (loss of control) existed and everything/anything BUT a stalled condition.  You tend to take in and believe what you SEE on a first scan..... when the matter is urgent.

PRWD's picture

Maybe the auto trim ran the THS Stablizer to the nose up position after the side stick input was initially made, and on reaching 38000 ft the system went to direct law. This would lock in the stab position unless the manual trim wheel was used. The need to do this may not have been evident. If the stab had been run to a mid position the elevator would have been effective, and a recovery made. The indications of airpseed would of course have been very confusing. The questions to be answered are.
1. Did reversion to direct law happen, and if so was this in effect during the stalled descent?
2. What indication would they have had (if any) of the stab being nearly fully nose up?
3. What could they use to see the very excessive incidence.

It seems as if the stab could have been repositoned that a recovery might have been possible. There is no doubt that the mixed automation from normal to alternate to direct is a factor, and the timing and trigger for these changes would be very distracting. Is there a master indication of which mode is available?

wilburville's picture

From my experience in transport category jets, the stick shaker is triggered by the Angle of Attack Vanes on the sides of the fuselage, modified by the configuration of slats and flaps. Airspeed inputs or displays have nothing to do with it. To the Navy pilot, the stick shaker therefore is an Angle of Attack indicator reporting nearing a critical stall e.g within 5 knots of a stall. Stick shaker is unambiguous report of an approaching stall.

Years ago in the 757 simulator we were climbing on autopilot when both the noisy overspeed warning clucker (with airspeed indicator at the barber pole and increasing) and the noisy stick shaker were going off simultaneously! Very distracting and troublesome because what my eyes first noticed was the airspeed running past the barber pole, Vmo. The urgent desire was to pull the nose up and pull power off BUT the stick shaker, being unambiguous, warned of not an overspeed but a stall. Systems knowledge to the rescue and a check of the attitude indicator, better yet, the standby instruments (attitude indicator, airspeed and altimeter just like your Cessna 150) would show, the pitch is up.

This was the classic we were all expected to understand for our instrument rating written: Blocked pitot tube with the diaphragm acting like an altimeter aneroid. Experiencing it (in the simulator) is eye opening.

Wikipedia...
"Flight 6231 was flying on a ferry flight from John F. Kennedy International Airport to Buffalo when it crashed in the vicinity of Stony Point. As the plane was cleared to climb, the airspeed and rate of climb increased, until the plane stalled and descended out of control into a wooded area. The cause of the crash was due to loss of control because "the flight crew failed to realize and correct the aircraft's high-angle-of-attack, low-speed stall and descending spiral".

chalete's picture

Can anyone explain to me if the FDR of this particular flight recorded the A/C's every parameter corrrectly such as speeds (hor and vert), engine output, altimeter, pitch and bank, etc. We know now that these parameters as displayed on the pilot and copilot screens did not match and this started the confusion among the crew members. Now if the FDR got everything right, and this is a big assumption, why is it that nobody thought that it would be a good idea that the same correct parameters be fed t an independant "emergency" display in the cockpit which would have enabled them to straighten the plane. In the same vein I have read in other blogs that a not too expensive GPS could have saved them as it would have provided all the info they needed to pull the plane out of the stall (deep or whatever).

LtJohnnyBravo's picture

For Codehead. The Buffalo accident had nothing to do with ice, the aircraft did stall but not for the reasons you believe. See the NTSB investigators talking about the factors that caused this crash on Air Crash Investigators, http://www.youtube.com/watch?v=sLMPFJQTmZs

sinedo's picture

First, I have never flown an AirBus. The name is a "turn-off" and is the best indicator that the pilots are secondary (bus drivers) as far as the Manufacturer is concerned.
The stabilizers were found after the crash. The horizontal slab was found at max. deflection.

Lack of a control wheel between the pilots' legs prevented them from seeing the stabilizer trimming in what we would consider a "runaway stabilizer" Boeing emergency. The sidestick control wouldn't have told them anything or changed it by the time it reached full deflection. It is just a series of rheostats sending electrical signals and apparently could not have controlled the stabilizer once the A/P Mode changed, from the explanations above.

That the pilots could not tell the stabilizer had run to max deflection is a major and deadly design flaw, because a runaway stabilizer is an extreme emergency. In Boeings, the wheel comes back at you and you see the trim wheel spinning. A control wheel force against the stabilizer direction stops it, and the procedures call for the manual trim handle to be used to gain control.

We should all resent the "pilot error" blame that always immediately follows, after they are dead.
Regards,

chalete's picture

Further to my blog dated June 4th, I received a very detailed explanation from a friend of mine who is a Qatar Airways B777 captain flying all over the Middle East and Europe as to how the various control panel systems work, where the sensors are, etc.etc.. It is a lengthy and very complicated thing that only airline and jet pilots in general can follow. Insofar the thesis doing the rounds in various blogs that a simple and not too expensive GPS unit in the cockpit would have allowed the pilots of AF 447 to recover and save the aircraft and the 226 souls on board, my captain friend thinks so since they are not dependent on Pitot tubes or ground stations.

bbbs53's picture

It really is a shame when modern technology fails us. Why is there no GPS anything in an Air Bus? It would have given them at least half a chance. It seems that the Bus has been doing this since one "landed" on take off in Paris. Personally now that you can choose your plane, the Bus is not chosen if at all possible. It is hard to say if the situation would have been any easier in another plane, but it seems that Boeing's stay in the air better. Give me American over a consortium any time!