Hacker News new | ask | show | jobs
by avianlyric 541 days ago
It’s a fundamental difference between how Airbus and Boeing approach flight controls. Airbus take the view that pilots should never be able to command an action the aircraft thinks is dangerous. Where as Boeing believe that pilots have ultimate authority to command the aircraft to do anything, regardless of if aircraft thinks it’s dangerous (obviously the aircraft provides warning etc, but they can ultimately be overridden and ignored).

In a little more detail, Airbus systems take pilot inputs, interprets what the pilot wants to achieve, then commands control surfaces to produce that outcome. Applying limits etc to ensure that flight limits aren’t exceeded. The end result is that pilot inputs are somewhat loosely correlated to control surface outputs, compared to traditional fully mechanical system.

Boeing on the other hand tries to as tightly a possible map pilot inputs to control surface outputs, mimicking a pure mechanical system (despite being fly-by-wire, like Airbus). But provides force feedback to the pilot via input controls to indicate, but not completely prevent, that the pilot is approaching or about to exceed flight control limits.

https://en.m.wikipedia.org/wiki/Flight_control_modes

1 comments

> Boeing on the other hand tries to as tightly a possible map pilot inputs to control surface outputs, mimicking a pure mechanical system (despite being fly-by-wire, like Airbus). But provides force feedback to the pilot via input controls to indicate, but not completely prevent, that the pilot is approaching or about to exceed flight control limits.

Regardless of whether that was ever true, it was no longer so once we had Boeing using an aggressive MCAS to get the 737 MAXes certified.

This alleged dichotomy between manufacturers was addressed in a comment to an Aviation Stack Exchange question [1]: "Airbus philosophy is not that if computers cannot save the aircraft, pilots cannot either. That is nonsense, and internet fodder. Control laws can be changed/downgraded even w/out pulling circuit breakers, though procedure is indeed complicated and involves pushing two buttons. Airbus recommends using appropriate amount of automation and taking control when things don’t go as expected" [Radu094] (unfortunately, the subsequent discussion is no longer available, at least on this site.)

There was a concern that pilots had not been made aware, through their training, that the system might constrain their actions in this situation, leading to the NTSB issuing this recommenation:

Require Airbus operators to expand the angle-of-attack-protection envelope limitations ground-school training to inform pilots about alpha-protection mode features while in normal law that can affect the pitch response of the airplane. [2]

[1] https://aviation.stackexchange.com/questions/52147/why-cant-...

[2] https://www.ntsb.gov/investigations/AccidentReports/Reports/... Page 124

> Regardless of whether that was ever true, it was no longer so once we had Boeing using an aggressive MCAS to get the 737 MAXes certified.

Not quite true. The MCAS system operated by adjusting the trim of the horizontal stabilisers, but the adjustment was reflected by the cockpit controls (the trim wheels would spin). Pilots could reset the trim by adjusting the trim wheels, but the MCAS system would then adjust them back again. But there’s still a tight coupling between the input control and the control surfaces. It’s just that MCAS behaved like an unhelpful third pilot making uncommanded trim adjustments.

Yes even in an Airbus a pilot can change the control law in effect, and choose control laws that disable automations, and even choose a control law where inputs are directly mapped to control surfaces. But under normal conditions Airbus planes introduce a lot of various forms of automation between the pilot and plane, which interpret pilot intent from inputs, and then meet that intent by making many adjustments to multiple control surfaces, even though many of adjustments weren’t directly commanded. Unlike Boeing, where under normal conditions input controls behave as close as possible to traditional mechanical controls.

Ultimately it’s all much-of-muchness. Modern aircraft are so complex that flying them smoothly and efficiently is beyond the capabilities of a human. There’s just too many things to be monitored and adjusted. But there important distinction between being able to flight a plane safely vs efficiently, obviously all modern jet liners are designed to be possible to fly safely with zero automations, and direct pilot control of the aircraft. But simple safe flights aren’t enough anymore, we also demand smooth and highly efficient flights, which is where the automation becomes a necessity.

Another way of looking at this question of automation vs direct control, is to look at modern fighter planes. They’re deliberately designed to be aerodynamically unstable, and are effectively unflyable by direct control. That instability makes them unbelievably manoeuvrable, useful in a dog fight, but also requires that all pilot inputs have to be interpreted by a computer, which then does its best to produce the desired output by manipulating whatever control surfaces are needed, regardless of if the input would traditionally result those surfaces being manipulated in a mechanical system.

I take your point about the trim wheels moving, though that is not a case of force feedback. More generally, it might be argued that Boeing's original intent with MCAS was indeed to provide force feedback to the pilot via input controls to indicate, but not completely prevent, that the pilot is approaching or about to exceed flight control limits, but it did so by diverging from mapping pilot inputs to control surface outputs - so it hits both sides of your dichotomy.

Furthermore, Boeing diverged further from mapping pilot inputs to control surface outputs once initial flight testing showed that the original version of MCAS was insufficiently effective to satisfy its purpose. In a fateful decision, Boeing chose to increase the power of MCAS to the point where it effectively became a stick-pusher at either high AofA or in the event of a single AofA sensor fault, while contriving to hide this from the FAA, pilots, and those who train pilots. This took any consideration of differences in design philosophy in a whole new (and much darker) direction.

Most of the rest of what you say is broadly in agreement with what Radu094 wrote.

> This took any consideration of differences in design philosophy in a whole new (and much darker) direction.

Personally I consider the whole MCAS debacle a symptom of Boeings failure as an engineering organisation, and the prioritisation of commercial concerns above engineering concerns, rather than a change in philosophy. I still have the view that Boeing philosophy still deliberately leans towards putting the pilot in as close a link with physical plane as possible.

Ultimately I don’t really have a view on which approach is “better”, but I do think Airbus and Boeing have very different philosophies regarding aircraft controls. Even if Boeing has become incapable of expressing its engineering philosophies competently. I think it’s still useful to compare and contrast the two approaches, and there’s still things to be learned from how each approach succeeds and fails in different scenarios.

> I think it’s still useful to compare and contrast the two approaches, and there’s still things to be learned from how each approach succeeds and fails in different scenarios.

That's a sound approach, though one should be wary of selectively dismissing evidence on the grounds that it does not fit with either one's own or commonly-held preconceived notions.