Book Description

The increasing complexity and automation of flight control systems pose a challenge to federal policy regarding aircraft certification and pilot training. Despite significant commercial aviation safety improvements over the past two decades, flight control automation and aircraft complexity have been cited as contributing factors in a number of major airline accidents, including two high-profile crashes overseas involving the recently introduced Boeing 737 Max variant in 2018 and 2019. These crashes have directed attention to Federal Aviation Administration (FAA) oversight of aircraft type certification and pilot training practices for transport category aircraft, particularly as they pertain to complex automated flight control systems. As aircraft systems have evolved over the past three decades to incorporate new technologies, Congress has mandated FAA to streamline certification processes, with the primary motivation being to facilitate the development of new safety-enhancing technologies. Modern commercial aircraft rely on "fly-by-wire" flight control technologies, under which pilots' flight control inputs are sent to computers rather than through direct mechanical linkages to flight control systems. The fly-by-wire software contains flight control laws and logic that, in addition to optimizing performance efficiency, protect the aircraft from commanded actions that could put the airplane in an unsafe state. Automated flight control systems have largely been viewed as having a positive effect on safety, and accident rates have improved considerably over the past two decades. However, the increasing complexity of automated flight systems has sometimes caused confusion and uncertainty, contributing to improper pilot actions during critical phases of flight and in some cases leading pilots to unintentionally place an aircraft in an unsafe condition. Besides designing these systems in a manner that minimizes pilot errors and the consequences of those errors, aircraft designers and operators face challenges regarding maintaining piloting skills for flight crews to be able to take over and manually fly the aircraft safely if critical systems fail. They also face challenges regarding documentation and pilot training effectiveness in building accurate mental models of how these complex systems operate. The primary goals of ongoing efforts to address these challenges are to enhance pilot situation awareness when using automation and reduce the likelihood of mode errors and confusion, while at the same time not overburdening pilots with intricate systems knowledge beyond what is necessary. In the ongoing investigations of two Boeing 737 Max crashes, Lion Air flight 610 and Ethiopian Airlines flight 302, concerns have been raised about the design of an automated feature called the Maneuvering Characteristics Augmentation System (MCAS) and its reliance on a single angle-of-attack sensor even though the aircraft is equipped with two such sensors. These concerns led to the worldwide grounding of all Boeing 737 Max aircraft until the MCAS safety concerns can be resolved, significantly impacting both U.S. and foreign airlines that operate the aircraft. These recent aviation accidents have prompted reviews of the manner in which modern transport category aircraft are certified by FAA and its foreign counterparts, and in particular, the roles of regulators and manufacturers in the certification process. The challenges of certifying increasingly complex aircraft are largely being met by delegating more of FAA's certification functions to aircraft designers and manufacturers. This raises potential conflicts between safety and quality assurance on the one hand and competitive pressures to market and deliver aircraft on the other. Under Organization Designation Authorization (ODA), FAA can designate companies to carry out delegated certification functions on its behalf.