Pilots in the loop?

16/09/2011 — 4 Comments

Airbuses side stick improves crew comfort and control, but is there a hidden cost?

This post is part of the Airbus aircraft family and system safety thread.

The Airbus FBW side stick flight control has vastly improved the comfort of aircrew flying the Airbus fleet, much as the original Airbus designers predicted (Corps 1988). But the implementation also expresses the Airbus approach to flight control laws and that companies implicit assumption about the way in which humans interact with automation and each other. Here the record is more problematic.

Before we start lets discuss and dispose of one particular trope, that the Airbus side stick controller interface was an inevitable (and integral) part of Airbuses FBW implementation. In practice only the use of a passive (no feedback) controller is truly a result of Airbuses initial decision to implement flight control protection laws within the flight software. With protection laws performed by the computer no feedback of force/displacement to the pilot was required to prevent him or her over stressing the aircraft and as a result a passive stick could be implemented (1). However one could also just as easily implement a passive interface in the form of a traditional yoke control. The use of a side stick is primarily a design decision made in the words of Airbus itself, to improve the human factors of the cockpit via increased space, comfort (2) and display visibility (3), it was not made as an part of the FBW design.

Of course passenger aircraft are not flown by single pilots so the side-stick design also needed to address how pilots would transfer control between them, and the necessity to coordinate such control. An initial ‘selected priority’ concept using a single central changeover switch was investigated by Airbus but rejected over concerns about it becoming a single point of failure, the potential for crew conflict and whether the switch would be easily located and used in an emergency. Airbus opted for pure electronic coupling with a control displacement of above a certain threshold (75%) initiating a transfer of control. However after one minor flight test incident (Corps 1988) the designers realised that in an emergency situation control could quickly and inadvertently be taken back by the Pilot Not Flying (PNF). In response a controller located priority override button with a visual indicator of who has control was developed and this priority override was eventually to become the A320 launch implementation.

However in operation, incidents occurred in which the PNF initiated control inputs without transferring control. Investigation by Airbus categorised these inputs as spurious (unintentional), comfort (minor and intentional corrections) or instinctive (large inputs usually in response to a perceived threat). Of these, naturally, the instinctive inputs are the greatest risk.

“[In response to a TCAS advisory] …The Captain initiated an immediate descent. The Captain did not make a verbal announcement that he was taking command of the left side stick control.”

US NTSB Factual Report FTW96LA269 1996.

From this field experience it seems that while a priority override works under ‘normal’ circumstances, an error trap appears to have been built into the system that emerges as a crew coordination error in high threat situations e.g where pilots are exposed to high stress, workload and time compression factors. We should note that a similar general coordination errors has also arisen in the past with aircrew forgetting to disconnect autopilots in high threat events.

To address this potentially hazardous situation the side-stick priority display was augmented by Airbus to trigger an aural ‘Dual Input’ warning and illuminate the side stick priority warning light if control inputs of greater than 2 degrees were made by the PNF. But, unfortunately, although this provides greater annunciation of ‘whose got the ball’, in the circumstances that would triggering instinctive responses the value of such alerts is degraded due to attentional tunnelling that operators experience in such situations. So in the real world it appears that this additional coordination mechanism is less than effective (ATSB 2007).

The investigation was unable to determine whether the copilot was aware of the pilot in command’s dual sidestick inputs, even though they resulted in aural ‘DUAL INPUT’ synthetic voice messages…The copilot’s focus on correcting the aircraft’s attitude and trajectory, together with the numerous FWS synthetic voice messages, may have resulted in the copilot not comprehending the significance of the aural ‘DUAL INPUT’ warnings…”

ATSB Occurrence Report, 2007

If we return for a moment to consider traditional yoke controls, in an emergency any instinctual grab by the PNF is something that is clearly visible and this visibility will inherently resolve the control contention, usually by the PF yelling at the PNF. In contrast the Airbus coordination mechanism is a series of aural alerts and visual priority symbology, which while technically achieving the same effect is much more complex and, it appears, more likely to break down during high stress events. As we continue to see this coordination errors in flight crew to this day (4) this appears to be a robust recurrent procedural violation (5).

The logical question then is whether there are alternative side-stick designs that might do better (6)? As it happens it appears that there is at least one, in a contemporary evaluation of side stick controllers Summers et al (1987) found that under simulated ‘surprise’ hand overs pilots Cooper Harper rating of various schemes were (in descending order):

  1. Coupled sides sticks with algebraically summed inputs (1.4),
  2. Uncoupled side sticks with algebraically summed inputs and disconnect switch (the final A320 implementation) (1.8),
  3. Uncoupled with algebraically summed inputs and priority logic (original A320 implementation) (3.3), and
  4. Uncoupled side sticks with with algebraically summed inputs (3.4).

From the results above we can see that, while acceptable, the disconnect switch is not the best solution from a pilots perspective (7). Summers noted that pilots preferred a coupled system because it gave force feedback and ‘a sense of urgency’ (Summers 1987). Another study of the effect of physical location on the acquisition of flying skills also found that trainees had considerably more difficulty in learning simulated flying skills with the side stick positioned controller than with a centrally located one (Bo-Kuen 2002).

Conclusions

The decision to use passive controllers unfortunately appears to have introduced a cognitive engineering design error in the form of the absence of  tactile feedback to the pilots. This in turn transferred the behavioural cue from the tactile (hands on stick) sensory channel to the visual, with the subsequent design implementation translating the analog kinaesthetic cue to a visual and symbolic form, which in turn requires higher levels of cognitive processing. This visual cue then competes for attentional resources in the visual channel and requires additional ‘mental bandwidth’ (e.g. symbology requires abstract processing) to handle. The net result an ineffective coordination mechanism prone to failure under high stress conditions. The additional audible cues added by Airbus appear to be subject to attentional shadowing effects and are similarly ineffective under high stress situations.

In summary the problem is not where the controller is located per se but how effective is the total human machine interface in coordinating crew behaviour. Under circumstances of high crew workload and stress it appears that Airbus has built a persistent error trap into their aircraft’s human machine interface.

This post is part of the Airbus aircraft family and system safety thread.

References

Airbus, A319/A320/A321 Flightdeck and systems briefing for pilots, Airbus Industries, STL 945.7136/97, 1998.

ATSB, Aviation Occurence Report 200505311, Crosswind Landing Event Melbourne Airport, Vic. – 26 October 2005 HS-TNA, Airbus A340-642, 2007.

Bo-Kuen,  Cho., Impact of subject related factors and position of flight control stick on acquisition of simulated flying skills using a flight simulator, Doctoral dissertation, Louisiana State University and Agricultural and Mechanical College, 2002.

Corps, S.G., Airbus A320 side stick and fly by wire an update, Society of Automotive Engineers (SAE) Paper 861801, 1988.

NTSB, US NTSB Factual Report FTW96LA269 1996.

Summers, L.G., Shannon, J.H., White, T.R., Shiner, R.J., Fly By Wire Sidestick Controller Evaluation, Aersopace Technology Conference and Exposition, Long Beach, California, 1987.

Notes

1. This does assume that the only reason a pilot would need combined force/displacement feedback from the controls is to prevent inputing an unsafe command.

2. Thereby allowing pilots to cross their legs and use a table tray, the positive effect of increased comfort upon crew efficiency and fatigue management should not be underestimated.

3. Note that all the usually claimed benefits of increased precision and reliability through elimination of mechanical gearing, clutches and so on also accrue from the decision to use a passive controller, which lends itself to an electronic implementation. Again side or central location is irrelevant.

4. See for example the unannounced transfer of control between pilots during the AF 447 accident, so

5. Violation is used in the sense of James Reasons taxonomy of human error. Violations are the deliberate disregard for rules and procedures. A routine violation is one that occurs regularly (such as ‘comfort’ dual inputs) and is generally tolerated while an exceptional one is one that is both unexpected for that operator and not (or should not be) tolerated by management (such as ‘instinctive’ dual inputs).

6. The original Airbus evaluation compared a side-stick FBW implementation with a yoke and traditional flight controls system (Airbus 1998). So it seems that Airbus initial design evaluation was constrained to an pre-selected FBW candidate solution.

7. As Summer’s study was conducted using a simulator one should also note that the full effects of performance shaping factors such as workload, fatigue and stress could not be fully evaluated. In a real world flight environment these ratings may well change. An important caveat to keep in mind when statements are made as to the ‘pilot friendliness’ of a particular interface.

4 responses to Pilots in the loop?

  1. 

    Great article! I’m really interested in the problem of the emergence of certain behaviours (like those that occurred with the stall alarm turning on/off on AF 447 or TAM 3054 with spoilers not deploying and the auto brakes not acting because the thrust of one lever was not idle) in systems designed by man, systems that we don’t usually call complex, but that they end up behaving as complex systems for their users.

    • 
      Matthew Squair 22/09/2011 at 8:12 am

      Thanks, if so then the theory of Highly Optimised Tolerance or HOT may also be of interest to you, I’ve posted elsewhere in my blog on it :-)

  2. 

    recently i transitioned on a-320 as captain and belive me i had very dangerous incident in simulator to the point that i would never give takeoff to any co pilot on a320 ever instructer gave me an engine fire 10 kts before v1 i called STOP and applied rejected take off but my copilot in his confusion because he was pilot flying at the time rotataed aircraft resulting in crash i have flown b777 as co pilot for 7 years before that but now i think this stupid side stik concept is just gimmik created by engineers for their own amusement

Trackbacks and Pingbacks:

  1. Was the introduction of the A320 flight control system controversial? | CL-UAT - December 30, 2014

    […] Pilots in the loop? […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s