Page Links: First Previous 1 2 3 4 5 6 7 8 Next Last Index Page
Lead Balloon
2025-06-17T05:22:00 permalink Post: 11903979 |
I'm honestly mystified by the obsession with TCMA. The FADECs control almost every aspect of the engines, so there must be numerous ways they could cause a failure or uncommanded shutdown. So, even if we assume that the engines failed due to faults in the FADECs, why assume that TCMA would be involved? Surely it's more logical to simply posit that some unspecified bug in the FADEC software caused the failure. That bug
could
be related to TCMA, but it could just as easily involve any one of the dozens of other subroutines that likely exist.
Various posters seem to assume that all it takes is an incorrect air/ground signal, and the engines would shut down. But in fact it would also require the FADECs to read the thrust levers as being at or near idle... AND the engines failing to respond to closure of the fuel metering valve. I've read the entirety of both threads, and I haven't seen anyone even attempt to explain how a malfunction within the airframe could cause both of those things to occur on both engines (or even one engine!). My recollection may be inaccurate, but wasn't there something in the software for 787 generator control units that would cause generator shut down if the aircraft was 'powered up' for a continuous 248 days? Same software, so all 4 generators would shut down. Is my recollection inaccurate? What we do know, for sure, is that the TCMAs have the same 'authority' and effect as the fuel cut-off switches. The difference is that the crew control the latter. 4 users liked this post. |
C2H5OH
2025-06-17T06:25:00 permalink Post: 11903999 |
On the 767 and 747-400, when you shutdown an engine and the IDG goes offline, there is a momentary 'glitch' in the electrical power system as it reconfigures for the available power source - this is why you see the flight deck displays flicker and return, and the cabin lights momentarily flicker. As a result, most of the avionics boxes 'reset' - this is quick, but it's not instantaneous. This shows up in the FDR data - sometimes as 'no valid data' for a few seconds, or as garbage readings of zero or 'full scale'. Now, looking at the FDR data, it's easy to simply disregard the data, so normally no big deal.
\x85 If there is a fuel cut at high power, the engine spools down incredibly rapidly - a second or two from max power to sub-idle. Assuming the fuel cut wasn't commanded by the flight deck fuel switches, the electrical system won't know it's coming, so it can't reconfigure until after the engine generators drop offline - and you're going to get that power glitch. Nearly every avionics box on the aircraft will reset due to this electrical glitch, and the FDR isn't going to get useful data for a few seconds (and then, only from the stuff that's on the battery bus). This is not only happening to the FDR but to any reciever on the data busses. And likely not only when the engine spools down and power supply switches but also when power busses come offline and bus bar breakers activate or in any severe fault in the electrical system involving large currents, possibly arching shorts. Hence my comments on SISO and input filtering and verification in the closed thread. |
TURIN
2025-06-17T06:28:00 permalink Post: 11904002 |
There is at least one thing common to the TCMA on each engine: The TCMA software.
My recollection may be inaccurate, but wasn't there something in the software for 787 generator control units that would cause generator shut down if the aircraft was 'powered up' for a continuous 248 days? Same software, so all 4 generators would shut down. Is my recollection inaccurate? What we do know, for sure, is that the TCMAs have the same 'authority' and effect as the fuel cut-off switches. The difference is that the crew control the latter. |
DaveReidUK
2025-06-17T07:09:00 permalink Post: 11904017 |
One comment here, and maybe I am mis-understanding your comment, but the landing gear
only
operates via the center hydraulics. It does not matter whether the Left/Right engine driven hydraulic systems are operative or not. The RAT will only pressurize the primary flight control portion of the center hydraulics.
Or could it be that it's capable of delivering enough power (via either route) to move the tilt actuator but not a humungous retraction jack? 1 user liked this post. |
Aerospace101
2025-06-17T09:28:00 permalink Post: 11904137 |
Are you saying that the RAT cannot power retraction of the gear, neither via its own hydraulic pump nor via its generator providing power to the centre system pumps?
Or could it be that it's capable of delivering enough power (via either route) to move the tilt actuator but not a humungous retraction jack? The RAT provides electrical power only to critical flight instrumentation (mostly Captains), navigation and communication. The same critical equipment that the Battery will provide. If all electrics was lost, the main Battery would provides standby power until RAT is fully deployed. The RAT electrical power would not be able to power C hydraulic electric pumps. 8 users liked this post. |
EDML
2025-06-17T11:26:00 permalink Post: 11904222 |
EDML: "No. The throttle position sensors (dual per engine) are part of the FADEC. The throttle position data is not transmitted through the ARINC busses of the aircraft".
To clarify, you are saying that the throttle position sensors are wired directly to the FADEC, and nothng else ?. 1 user liked this post. |
Icarus2001
2025-06-17T12:43:00 permalink Post: 11904270 |
The RAT provides hydraulic power only to the flight control portion of the C hydraulics
|
Aerospace101
2025-06-17T13:06:00 permalink Post: 11904288 |
The RAT provides hydraulic power only to the flight control portion of the C hydraulics. Wing and tail flight controls only. Non return valves prevent power to other C hydraulic powered systems like the gear.
The RAT provides electrical power only to critical flight instrumentation (mostly Captains), navigation and communication. The same critical equipment that the Battery will provide. If all electrics was lost, the main Battery would provides standby power until RAT is fully deployed. The RAT electrical power would not be able to power C hydraulic electric pumps. 3 users liked this post. |
DaveReidUK
2025-06-17T13:32:00 permalink Post: 11904305 |
2 users liked this post. |
galaxy flyer
2025-06-17T14:54:00 permalink Post: 11904372 |
Simply that the RAT is an electrical generator, that is all. What the electricity it generates powers is a downstreamm issue. The absolute rubbish being spouted on here is unreadable\x85viz\x85
Why? To achieve what? The people who write this have no clue about two crew jet operations. It is so sad. No crew would pull a shut off immediately after rotation. It makes no sense. Just stop with all this rubbish. I am going to have a lie down. ![]() |
IFMU
2025-06-17T14:56:00 permalink Post: 11904373 |
8 users liked this post. |
Someone Somewhere
2025-06-18T13:08:00 permalink Post: 11905228 |
I (and I think everyone else here) have been assuming that the FADEC does in fact have a dedicated permanent-magnet alternator, as is the case on the Airbuses (confirmed by FCOM) and surely the 737.
I have been told elsewhere that this is not the case. A read of the draft FCOM available online for the 777 & 787 makes no mention of a FADEC generator, but then neither does the 737 manuals. Is this simply a case of "Boeing thinks you don't need to know"? It has been proposed that the primary source of power for the FADECs is actually the flight control PMGs, mounted on the engine gearbox, but that this power goes to the avionics bay, has failover switching gear, and comes back to the EEC. Can anyone shed concrete light on this (e.g. a source that clearly states there is both an EEC alternator and a flight control PMG on the accessory gearbox)? Alternator and generator seem to be used interchangeably in this context. I don't think you'll find an actual wire list for it (or it won't be useful) as apparently most/all of the data is via an ARINC bus. I attempted to PM this but your inbox is full. [SLF with an electrical background and some exposure to ground-side critical facilities power] Last edited by Someone Somewhere; 18th Jun 2025 at 13:32 . 1 user liked this post. |
212man
2025-06-18T13:22:00 permalink Post: 11905242 |
I (and I think everyone else here) have been assuming that the FADEC does in fact have a dedicated permanent-magnet alternator, as is the case on the Airbuses (confirmed by FCOM) and surely the 737.
I have been told elsewhere that this is not the case. A read of the draft FCOM available online for the 777 & 787 makes no mention of a FADEC generator, but then neither does the 737 manuals. Is this simply a case of "Boeing thinks you don't need to know"? It has been proposed that the primary source of power for the FADECs is actually the flight control PMGs, mounted on the engine gearbox, but that this power goes to the avionics bay, has failover switching gear, and comes back to the EEC. Can anyone shed concrete light on this (e.g. a source that clearly states there is both an EEC alternator and a flight control PMG on the accessory gearbox)? Alternator and generator seem to be used interchangeably in this context. It's not quite that, but there is a list of received channels for a GEnx 787 in the FDR report into one of the original battery fires . I don't think you'll find an actual wire list for it (or it won't be useful) as apparently most/all of the data is via an ARINC bus. I attempted to PM this but your inbox is full. [SLF with an electrical background and some exposure to ground-side critical facilities power]
(h) Aircraft Supplied Electrical Power.
(1) The Engine Control System must be designed so that the loss or interruption of electrical power supplied from the aircraft to the Engine Control System will not - (i) Result in a Hazardous Engine Effect, (ii) Cause the unacceptable transmission of erroneous data. The effect of the loss or interruption of aircraft supplied electrical power must be taken into account in complying with CS-E 50(c)(1). |
EDML
2025-06-18T13:23:00 permalink Post: 11905243 |
- Each engine has a PMG for the FADECs - Only for engine start the FADECs are powered by the aircraft - Once the engines are running, this connection is opened - It is verified, that the FADECs are then no longer connected to the aircraft electrical system. A failure to open the connection triggers a "No dispatch" message - In case the PMG fails, the FADECs are once again powered by the aircraft electrical system 5 users liked this post. |
PBL
2025-06-18T14:29:00 permalink Post: 11905294 |
"Emergency power system"
"Emergency power system"
is the most awkward designation for the ram air turbine I've ever heard....
Last edited by Saab Dastard; 18th Jun 2025 at 15:54 . Reason: quoting deleted post |
EDLB
2025-06-18T14:48:00 permalink Post: 11905303 |
FADEC Power supply: The Safran FADEC used on the GEnx-1B here is most likely a Generation 3 FADEC. The same Generation as used for CFM56-5 and -7 in A320 etc. So with high probability the same overall topology with independent 3 Phase alternator supply for the FADEC is used because similar certification standards are required and nobody develops a FADEC from scratch if he has a proven and qualified one.
Detail form Airbus here: https://studylib.net/doc/27601211/51...british-cfm-56 Safran FADEC Gen 3 uses: https://www.safran-group.com/product...engine-control - CFM56-5B de CFM International - CFM56-7B de CFM International - CF6-80C2L1F de General Electric - CF6-80C2K1F de General Electric - GE90-115B de General Electric - GEnx-1B de General Electric - GEnx-2B de General Electric - GP7200 d’Engine Alliance - TP400-D6 d’Europrop International. So if there is a latent failure in the design or software of this FADEC generation which can lead to a dual EFATO most of the current airliners worldwide have to be grounded. 3 users liked this post. |
OPENDOOR
2025-06-18T14:50:00 permalink Post: 11905306 |
It could equally refer to the APU which some have suggested either started or was in the process of starting.
|
OldnGrounded
2025-06-18T15:28:00 permalink Post: 11905332 |
The emergency system is known as a ram air turbine. It is a small propeller that drops from the bottom of the 787 Dreamliner\x92s fuselage to serve as a backup generator.
https://www.wsj.com/business/airline...QPg1BBGQ%3D%3D |
adfad
2025-06-18T18:18:00 permalink Post: 11905444 |
To my mind, this points to a potential software issue. 787s have already suffered from 2 separate software issues in which the passage of time causes a major and possibly catastrophic failure - the need to reboot systems before 51 days and 248 days have elapsed, due to poorly-written software. Given that history, the probability of there being a third, previously-unidentified but broadly similar in nature software issue seems surprisingly high. They aren't independent variables.
Such a passage-of-time software issue wouldn't show up in most (or possibly any) testing scenarios. It is the sort of issue that robust QA and static code analysis are designed to catch. But in at least two separate systems on the 787 it has not been caught prior to software shipping. Meanwhile, every new technical post demonstrates the myriad ways in which non-software potential causes are mitigated by redundant design. The odds of two (or more) redundant mechanical systems failing in precisely the same way at precisely the same moment are very, very small. The odds of identical software on two (or more) redundant systems reaching a passage-of-time bug at precisely the same moment are, by contrast, very much higher. True redundancy would require different software on each redundant sub-system. Integer overflow is a specific type of issue common to many systems, but like you said - it is something that should be found with robust QA and analysis. The ability to shut down all generators at once from a single source seems like a risky design decision to me and I agree with your point about different software on 2 or more redundant sub systems. My theory is that this was an accepted risk because the engine-driven fuel pumps would be more than enough in most phases of flight to keep the engines running, and you would still have 2 engines for redundancy. The APU would also restore AC power in lets say 30 seconds and you would then have electric fuel pumps as well. I think there are several factors that could explain how loss of all AC power during takeoff could lead to a crash:
Last edited by adfad; 18th Jun 2025 at 18:36 . 1 user liked this post. |
Util BUS
2025-06-18T19:10:00 permalink Post: 11905482 |
Perhaps two things might have exacerbated any electrical problems:
1) Electrical Grounding Boeing whistleblower, Sam Salehpour claims that Boeing used improper techniques to ground electrical systems on the 787, which could lead to arcing, overheating, and potential fire hazards. 2) B787-9 RAT Certification During B787-9 flight testing, The generator control unit in the RAT experienced a failure during flight testing. This failure led to a delay in the 787-9's certification, as the FAA needed to ensure the reliability and safety of the RAT system. Based on my previous speculation regarding a BTB short, I wonder how aircraft engines might react in a situation where initially a transient power fault is followed by only battery power being available? As I understand it, there are no longer cable connections to the engines, given no valid inputs from the.thrust levers, what thrust mode would the FADEC's revert to? |
Page Links: First Previous 1 2 3 4 5 6 7 8 Next Last Index Page