Asiana crash thought: Positive exchange of flight controls between autopilot and human crew
Based on preliminary reports, the Asiana 214 crash may end up being partially attributed to confusion regarding to what extent the autopilot was managing the airplane and what the human crew still had responsibility for (notably in the management of the thrust levers).
As flight instructors one thing that we stress, starting with the very first lesson, is a positive exchange of flight controls. This is particularly important in helicopters due to their lack of stability. There shouldn’t be any confusion about who is responsible for the aircraft attitude.
Here’s how it works with humans:
- instructor or pilot1: you have the controls
- student or pilot2: I have the controls (puts hands on yoke, stick, or cyclic)
- instructor or pilot1: you have the controls (after seeing student’s hands on controls, removes his or her hands)
When sharing responsibility, here’s an example exchange:
- instructor or pilot1: you have the pedals and collective
- student or pilot2: I have the pedals and collective
- instructor or pilot1: you have the pedals and collective; I have the cyclic
When an autopilot trips off due to a failure of some kind or simply due to disconnection via a switch there is typically a fairly loud alarm that the pilot(s) would have a hard time missing. But when changing modes there is nothing like the positive control exchange described above. The autopilot may switch from flying a heading, for example, to tracking a course over the ground and the only indication is some text changing at the top of the “primary flight display” (PFD). A pilot whose attention is focused on some other task may very likely miss the change.
The popular conception of the autopilot is that it does everything or it does nothing. Push the autopilot button and the airplane will land itself at the destination. Disconnect the autopilot and you’re hand-flying like a 1920s barnstormer. In fact the autopilot has a dozen or more modes, even on a simple four-seat airplane. The autopilot could be set, for example, in any of the following ways:
- hold altitude, letting speed and heading vary (the autopilot will adjust pitch (airspeed) to hold altitude, regardless of throttle setting, and the result may be slowing down all the way to an aerodynamic stall)
- descend at 500 feet-per-minute, letting speed be determined by the pilot’s throttle setting, until the airplane hits the ground (or the autopilot is given new instructions)
- climb at 200 knots until the airplane reaches 31,000′ (climb rate will be determined by the throttle/thrust setting)
- track a multi-leg course over the ground that has been programmed into the GPS, getting the aircraft almost all the way to the destination
- track a radial off a VOR (radio beacon on the ground) until the pilot changes the VOR frequency in the navigation radio
- keep the wings level and don’t worry if the heading drifts
- keep the pitch constant and don’t worry if the altitude drifts
- track the localizer (left-right) beam of the ILS but hold present altitude; do not descend to follow the glide slope
- track both localizer and glide slope of an ILS down to the ground (or until disconnection), letting the airspeed be determined by the pilot adjusting the throttle
- track both localizer and glide slope of an ILS but adjust the thrust levers (“autothrottle”) to hold a set-by-the-pilot airspeed
Managing the autopilot is actually more complex than hand-flying the airplane (there are only three mid-air controls (elevator, aileron, and throttle) and each control can be moved in just two directions, giving a total of six possible choices for control inputs at any time).
The little lights and indications that distinguish one autopilot mode from another are subtle. Of course, as pilots it is our job to pay attention to subtle lights and indications, but in practice humans have demonstrated inconsistency at this task. Is it prudent to assume that somehow human pilots are going to get better at something that they’ve never done well in the past?
Considered as a human applicant for an FAA certificate, the autopilot would fail every checkride due to a failure to participate in a positive exchange of flight controls. Here’s the relevant passage from the FAA Practical Test Standards for a Private certificate (the very first step on the path to the left seat of a B777):
During flight training, there must always be a clear understanding between students and flight instructors of who has control of the aircraft. Prior to flight, a briefing should be conducted that includes the procedure for the exchange of flight controls. A positive three-step process in the exchange of flight controls between pilots is a proven procedure and one that is strongly recommended.
When the instructor wishes the student to take control of the aircraft, he or she will say, “You have the flight controls.” The student acknowledges immediately by saying, “I have the flight controls.” The flight instructor again says, “You have the flight controls.” When control is returned to the instructor, follow the same procedure. A visual check is recommended to verify that the exchange has occurred. There should never be any doubt as to who is flying the aircraft.
[A similar passage is contained within the Airline Transport Pilot PTS, but it says “between the pilots” instead of “between students and flight instructors”.]
Potentially a significant improvement in safety could be obtained for $100,000 in engineering cost (and another $100 million in FAA regulatory paperwork, if going to be installed in a transport jet!). The autopilot would feed voice announcements into the pilots’ audio panel and these announcements would occur after every change of mode and also upon big changes in aircraft speed, attitude, heading, or vertical speed. Here are some examples:
- Upon leveling off at a preset altitude: “I have leveled off at sixteen thousand feet. I am tracking a GPS course. You have the throttle.”
- Upon switching legs: “I have switched legs to fly to the Carmel VOR. I have the throttles and am holding present altitude and airspeed.”
- Upon intercepting a glide slope: “We have intercepted the glide slope. I am descending to follow it and track the localizer as well. You have the throttles and airspeed.”
- After a big thrust lever chop: “We are in flight level change mode, planning to level off at FL240 [about 24,000′ above sea level]. I am holding 300 knots. Vertical speed has increased to 4000 feet per minute. You have the throttles.”
Thoughts from fellow pilots and human factors folks?
[Separately, it is worth noting that the autopilot is over 100 years old. See Wikipedia for Lawrence Sperry’s early success with this technology.]
Full post, including comments