Master Syllabus Breakdown
This module covers the 7 critical subtopics of Automatic Flight Control Systems (AFCS) required for the UPSC Air Safety Officer examination. Every concept card below is structured exhaustively with formal technical definitions, rigorous physical and control-theoretic derivations, dimensional analyses, engineering reference data tables, aircraft system integration, DGCA CAR compliance, UPSC trap warnings, and step-by-step worked numerical problems.
Autopilot & Flight Director Systems
1. Formal Technical Definition
An Autopilot (AP) is an automatic flight control system that commands aircraft control surfaces and throttle actuators to maintain specified flight path parameters (attitude, heading, altitude, Mach number) without continuous human input. A Flight Director (FD) is a computing and display system that calculates required attitude commands to achieve target flight paths and presents steering commands via command bars on the Primary Flight Display (PFD) or Attitude Director Indicator (ADI), allowing manual or coupled autopilot tracking.
2. Basic Physical Concept & Control Mechanics
At the continuum fluid level, aircraft dynamics are governed by Navier-Stokes equations and rigid-body 6-DOF equations of motion. Disturbances (gusts, atmospheric turbulence, mass redistribution) alter aerodynamic forces ($\Delta L, \Delta D$) and moments ($\Delta M, \Delta N, \Delta L_{roll}$), causing deviations from the trimmed state. The Autopilot acts as a closed-loop feedback control system utilizing sensor measurements (gyros, accelerometers, air data computers, inertial reference systems) to compute error signals $e(t) = \text{Target} - \text{Actual}$. The Flight Director processes the exact same inner/outer loop control laws but routes the computed control error $u_{fd}(t)$ to visual cueing symbology rather than electro-mechanical servo actuators.
3. Mathematical Derivation & Control Laws
Consider a pitch-hold autopilot loop regulating pitch angle $\theta$ to a commanded target $\theta_c$. The error is $e_\theta = \theta_c - \theta$. Using a Proportional-Integral-Derivative (PID) control law augmented with inner-loop rate damping ($q = \dot{\theta}$):
$$\delta_e(s) = K_p \left( \theta_c(s) - \theta(s) \right) + K_i \int \left( \theta_c - \theta \right) dt - K_d q(s)$$
Where:
• $\delta_e(s)$ = Elevator deflection command (rad)
• $K_p, K_i, K_d$ = Proportional, integral, and derivative gain coefficients
• $\theta_c(s), \theta(s)$ = Commanded and actual pitch angles (rad)
• $q(s)$ = Pitch rate ($\dot{\theta}$) from IRS gyroscopes (rad/s)
4. Dimensions & Units
| Parameter | Fundamental Dimension | SI Unit | CGS Unit |
|---|---|---|---|
| Pitch Angle ($\theta$) | Dimensionless ($[M^0 L^0 T^0]$) | Radians ($\text{rad}$ or $\text{deg}$) | Radians |
| Pitch Rate ($q$) | $[T^{-1}]$ | $\text{rad/s}$ | $\text{rad/s}$ |
| Elevator Deflection ($\delta_e$) | Dimensionless | $\text{rad}$ | $\text{rad}$ |
| Proportional Gain ($K_p$) | Dimensionless | $\text{deg elevator / deg error}$ | - |
5. Engineering Reference Data Table
| Parameter / Operating Condition | Typical Commercial Transport (e.g., A320 / B737) | High-Performance Military Fighter |
|---|---|---|
| Autopilot Servo Actuator Torque | 15 - 35 $\text{Nm}$ | 50 - 120 $\text{Nm}$ |
| Flight Director Update Rate | 50 Hz (20 ms frame) | 100 Hz (10 ms frame) |
| Maximum Elevator Rate Limit | $15^\circ / \text{sec}$ to $25^\circ / \text{sec}$ | $60^\circ / \text{sec}$ to $100^\circ / \text{sec}$ |
| Attitude Sensor Accuracy (IRS) | $\le 0.05^\circ / \text{hr}$ drift rate | Laser Ring Gyro ($\le 0.01^\circ / \text{hr}$) |
6. Aircraft Application & DGCA Connection
In modern Fly-By-Wire (FBW) transports, the Autopilot and Flight Director execute commands through Flight Control Computers (FCCs). DGCA CAR Section 2, Series I, Part III and FAA AC 25-7C mandate rigorous certification for autopilot hard-over and soft-over failure modes. An uncommanded hard-over failure in pitch must be detected and mitigated within milliseconds by monitor channels, preventing structural overstress ($n_z$ limits) or stall. Air Safety Officers investigate autopilot anomalies by downloading Quick Access Recorder (QAR) data to inspect control surface servo currents versus FCC command logs.
7. UPSC Traps & Common Exam Pitfalls
⚠️ UPSC ASO Trap Alert:
Exam setters often confuse the role of the Flight Director with the Autopilot actuator. Remember: The Flight Director computes steering guidance and displays it on the PFD; it does NOT directly move control surfaces. The Autopilot engages electro-mechanical or electro-hydraulic servos to physically drive control surfaces based on those computed laws.
8. Step-by-Step Worked Numerical
Problem: An autopilot pitch-hold loop has a proportional gain $K_p = 2.5 \, \text{deg elevator / deg pitch error}$, a derivative gain $K_d = 1.2 \, \text{deg / (rad/s)}$, and integral gain $K_i = 0$. If an atmospheric gust induces an instantaneous pitch error $e_\theta = +2.5^\circ$ and a nose-down pitch rate $q = -0.1 \, \text{rad/s}$, calculate the total elevator deflection command $\delta_e$.
Given: $K_p = 2.5$, $e_\theta = 2.5^\circ$, $K_d = 1.2$, $q = -0.1 \, \text{rad/s}$
Formula: $\delta_e = K_p \cdot e_\theta - K_d \cdot q$
Calculation:
$\delta_e = (2.5 \times 2.5) - (1.2 \times (-0.1))$
$\delta_e = 6.25 - (-0.12) = 6.37^\circ$ (Nose-down elevator to counter nose-up pitch error).
Operational Takeaway:
The positive derivative term $(-K_d \cdot q)$ acts as electronic damping, adding anticipatory control action when the aircraft rotates rapidly, preventing overshoot.
Stability Augmentation Systems (SAS)
1. Formal Technical Definition
A Stability Augmentation System (SAS) is an automatic control system designed to improve the inherent dynamic stability characteristics of an aircraft (such as damping short-period oscillations, Dutch roll, or phugoid modes) without changing the aircraft's steady-state trim condition or requiring pilot displacement of flight controls.
2. Basic Physical Concept & Control Mechanics
Certain aircraft designs (e.g., swept-wing jets, high-speed military fighters, or relaxed static stability configurations) possess poor natural damping in specific oscillation modes. For instance, Dutch roll is a coupled oscillation in roll and yaw with lightly damped complex poles in the characteristic equation. The SAS senses angular rates via high-frequency rate gyros and applies instantaneous corrective deflections to control surfaces via series actuators (which move the control surface without moving the cockpit flight deck controls) to artificially increase the damping ratio $\zeta$ of the dynamic mode.
3. Mathematical Derivation & Control Laws
Consider the short-period pitch dynamics governed by the characteristic equation:
$$s^2 + 2\zeta_n \omega_n s + \omega_n^2 = 0$$
When pitch rate feedback $q = K_{sas} \cdot s\theta$ is introduced, the closed-loop characteristic equation becomes:
$$s^2 + \left( 2\zeta_n \omega_n + K_{sas} M_q \right) s + \omega_n^2 = 0$$
Where:
• $\zeta_n$ = Natural damping ratio
• $\omega_n$ = Natural frequency (rad/s)
• $K_{sas}$ = SAS gain
• $M_q$ = Pitch damping derivative ($\partial M / \partial q$)
4. Dimensions & Units
| Parameter | Fundamental Dimension | SI Unit |
|---|---|---|
| Damping Ratio ($\zeta$) | Dimensionless | 1 (Pure ratio) |
| Natural Frequency ($\omega_n$) | $[T^{-1}]$ | $\text{rad/s}$ |
| Pitch Damping Derivative ($M_q$) | $[L^2 T^{-1}]$ or $\text{rad/s}$ | $(\text{rad/s}^2) / (\text{rad/s})$ |
5. Engineering Reference Data Table
| Aircraft Type | Unaugmented Dutch Roll Damping ($\zeta_d$) | Augmented Damping Target |
|---|---|---|
| Large Swept-Wing Transport (B747/A350) | 0.02 - 0.05 (Lightly damped) | $\ge 0.20$ (MIL-F-8785C Level 1) |
| Fighter Jet (Supersonic Delta Wing) | Negative (Unstable) | $\ge 0.50$ |
| Commuter Turboprop (ATR 72) | 0.08 - 0.12 | $\ge 0.25$ |
6. Aircraft Application & DGCA Connection
SAS is vital for aircraft with relaxed stability or high sweep angles to prevent pilot-induced oscillations (PIO) and passenger motion sickness caused by un-damped Dutch roll. DGCA CAR Section 2, Airworthiness mandates that if a SAS is essential for safe flight (i.e., flight without SAS results in catastrophic divergence or uncontrollable roll/yaw coupling), the system must be duplex or triplex redundant. Air Safety Officers review MEL (Minimum Equipment List) restrictions for dispatch with inoperative SAS channels.
7. UPSC Traps & Common Exam Pitfalls
⚠️ UPSC ASO Trap Alert:
Do not confuse SAS with Autopilot. SAS operates in the inner loop using series actuators that do not move the control column/pedals, ensuring the pilot's control feel is unaffected while artificial damping is injected. Autopilot uses parallel actuators that physically move the controls.
8. Step-by-Step Worked Numerical
Problem: An aircraft dutch roll mode has an unaugmented damping ratio $\zeta_n = 0.05$ and natural frequency $\omega_n = 2.0 \, \text{rad/s}$. An active SAS introduces damping augmentation equivalent to increasing the coefficient of $s$ in the characteristic equation by $\Delta c = 0.3 \, \text{s}^{-1}$. Calculate the new damping ratio $\zeta_{new}$.
Given: $\zeta_n = 0.05$, $\omega_n = 2.0$, Characteristic eqn coefficient $2\zeta_n \omega_n = 2(0.05)(2.0) = 0.2$
Formula: $2\zeta_{new}\omega_n = 2\zeta_n\omega_n + \Delta c \implies \zeta_{new} = \frac{0.2 + 0.3}{2(2.0)}$
Calculation:
$\zeta_{new} = \frac{0.5}{4.0} = 0.125$
Operational Takeaway:
The SAS successfully more than doubles the damping ratio, moving the aircraft from a marginally damped response to acceptable handling qualities.
Auto-Throttle / Auto-Thrust Systems
1. Formal Technical Definition
An Auto-Throttle (A/T) or Auto-Thrust (A/THR) system is an automatic flight control subsystem that regulates engine thrust settings by positioning throttle lever actuators or directly commanding Full Authority Digital Engine Control (FADEC) channels to maintain targeted flight parameters such as Mach number, calibrated airspeed (CAS), thrust rating (EPR/N1), or flight path angle during takeoff, climb, cruise, approach, and landing.
2. Basic Physical Concept & Control Mechanics
Aircraft energy management is governed by the total energy balance equation: Potential Energy ($mgh$) + Kinetic Energy ($\frac{1}{2}mv^2$) = Work done by Thrust ($T$) minus Work done by Drag ($D$). When airspeed deviates from the target due to windshear or altitude changes, the A/T system modulates thrust $T$ to restore energy balance. In modern glass-cockpit aircraft, the A/T communicates via ARINC 429 or AFDX digital buses with the FADEC/EEC (Electronic Engine Control), driving brushless DC servomotors connected to the throttle quadrant and providing tactile feedback (backdrive) to the pilot.
3. Mathematical Derivation & Control Laws
Consider an airspeed hold auto-throttle loop where speed error $e_V = V_c - V$ drives engine command $N_{1,cmd}$:
$$N_{1,cmd}(s) = \left( K_{p,v} + \frac{K_{i,v}}{s} \right) \left( V_c(s) - V(s) \right) + K_{accel} \dot{V}(s)$$
Where:
• $V_c, V$ = Commanded and actual true/calibrated airspeed ($\text{knots}$ or $\text{m/s}$)
• $K_{p,v}, K_{i,v}$ = PI gain parameters for airspeed tracking
• $K_{accel}$ = Acceleration feedforward gain ($\dot{V} = \text{inertial acceleration}$)
4. Dimensions & Units
| Parameter | Fundamental Dimension | SI Unit |
|---|---|---|
| Airspeed ($V$) | $[L T^{-1}]$ | $\text{m/s}$ (Knots in aviation) |
| Thrust Setting ($N_1 / EPR$) | Dimensionless ($\%$ or ratio) | $\%$ RPM or Engine Pressure Ratio |
| Acceleration ($\dot{V}$) | $[L T^{-2}]$ | $\text{m/s}^2$ |
5. Engineering Reference Data Table
| Parameter / Operating Mode | Typical Commercial Threshold |
|---|---|
| Airspeed Tracking Precision | $\pm 1.5$ knots in smooth air |
| Throttle Servo Slew Rate | $15^\circ / \text{sec}$ to $30^\circ / \text{sec}$ lever travel |
| Maximum Thrust Response Time (Idle to TOGA) | 2.0 to 5.0 seconds (Turbofan spool-up) |
6. Aircraft Application & DGCA Connection
Auto-throttles are critical during low-visibility approach and landing, managing speed close to stall margins ($V_{REF} + 5$). DGCA CAR Section 2, Series X governs flight recorder requirements, mandating auto-throttle engagement status and throttle lever angle (TLA) recording. Numerous approach accidents (e.g., Asiana Airlines Flight 214 at San Francisco) involved misunderstood auto-throttle mode disengagements (e.g., entering "HOLD" mode where thrust is fixed regardless of airspeed).
7. UPSC Traps & Common Exam Pitfalls
⚠️ UPSC ASO Trap Alert:
Beware of questions regarding A/T mode behavior. In "HOLD" mode on Boeing aircraft, the auto-throttle servomotors are physically decoupled from the levers, meaning manual throttle positioning is required if airspeed decays, even though the A/T armed light remains illuminated.
8. Step-by-Step Worked Numerical
Problem: An auto-throttle system utilizes proportional speed error feedback $K_{p,v} = 1.2 \, \% N_1 / \text{knot}$ and acceleration feedforward $K_{accel} = 3.0 \, \% N_1 / (\text{m/s}^2)$. The aircraft experiences a headwind gust causing a speed error $e_V = -4.0 \, \text{knots}$ (underspeed) and an inertial deceleration $\dot{V} = -0.5 \, \text{m/s}^2$. Calculate the commanded change in $N_1$.
Given: $K_{p,v} = 1.2$, $e_V = -4.0$, $K_{accel} = 3.0$, $\dot{V} = -0.5$
Formula: $\Delta N_{1,cmd} = (K_{p,v} \cdot e_V) + (K_{accel} \cdot \dot{V})$
Calculation:
$\Delta N_{1,cmd} = (1.2 \times (-4.0)) + (3.0 \times (-0.5))$
$\Delta N_{1,cmd} = -4.8 - 1.5 = -6.3 \, \% N_1$
Operational Takeaway:
Wait! An underspeed ($e_V < 0$) combined with deceleration requires *increasing* thrust ($+N_1$). Let's check signs: $e_V = V_c - V$. If $V < V_c$, $e_V$ is positive. Let's recalculate: $e_V = +4.0$ knots. Then $\Delta N_{1,cmd} = +(1.2 \times 4.0) - (3.0 \times (-0.5)) = +4.8 + 1.5 = +6.3 \, \% N_1$ (Thrust increases correctly to accelerate aircraft).
Flight Control Computer (FCC) & Redundancy Architecture
1. Formal Technical Definition
A Flight Control Computer (FCC) is the central digital processing unit (or network of redundant processors) that ingests air data, inertial measurements, pilot mode selections, and sensor feedback to execute flight control laws, stability augmentation algorithms, and autopilot commands, outputting synchronized actuator drive signals across multi-channel fault-tolerant architectures.
2. Basic Physical Concept & System Architecture
In fly-by-wire aircraft, mechanical linkages are replaced by electronic signaling. Because a single computer failure could lead to catastrophic loss of control, FCCs employ multi-channel redundancy architectures such as Dual-Duplex (two independent computers, each with monitoring and command channels) or Triple Modular Redundancy (TMR with mid-value signal selection voting). Hardware dissimilarity (using different CPU architectures or compiler toolchains) is often implemented to prevent common-mode software bugs.
3. Mathematical Derivation & Voting Logic
For a triple redundant sensor or FCC output vector $x_1, x_2, x_3$, the mid-value select (MVS) voting algorithm is expressed mathematically as:
$$x_{voted} = \text{median}(x_1, x_2, x_3) = x_1 + x_2 + x_3 - \min(x_1, x_2, x_3) - \max(x_1, x_2, x_3)$$
If any channel $x_i$ deviates from the median by more than a threshold $\epsilon_{max}$, that channel is flagged as failed and isolated from the active control loop.
4. Dimensions & Units
| Parameter | Fundamental Dimension | SI Unit |
|---|---|---|
| Computing Cycle Time | $[T]$ | Milliseconds ($\text{ms}$) |
| Bus Data Rate | $[DATA / T]$ | Mbps (Megabits per second via ARINC 429 / AFDX) |
| Failure Probability (Catastrophic) | Dimensionless | $< 10^{-9}$ per flight hour (DO-257 / DO-178C DAL A) |
5. Engineering Reference Data Table
| Aircraft Model | FCC Redundancy Architecture | Software DAL (DO-178C) |
|---|---|---|
| Airbus A320 | Dual Primary Flight Computers (PFCC) + Dual SEC | Level A (Catastrophic) |
| Boeing 777 / 787 | Triple Modular Redundancy (3 FCCs) | Level A |
| ATR 72-600 | Dual Digital Flight Control Computers | Level A |
6. Aircraft Application & DGCA Connection
FCCs enforce flight envelope protections (high angle of attack protection, bank angle limits, overspeed protection). DGCA CAR Section 2, Airworthiness and international standards (AC 25.1309) require Design Assurance Level (DAL) A for software executing flight-critical control laws where failure is catastrophic. Air Safety Officers investigating FCC anomalies analyze non-volatile memory (NVM) fault logs retrieved during maintenance download sessions.
7. UPSC Traps & Common Exam Pitfalls
⚠️ UPSC ASO Trap Alert:
A common misconception is that a dual redundant system can isolate a faulty sensor or computer channel by voting. A dual system can only *detect* a disagreement; it cannot isolate which channel is correct without a third channel or analytical redundancy. Triplex or quadruplex systems are required for true fault-isolation and fail-operational capability.
8. Step-by-Step Worked Numerical
Problem: A triplex FCC voting system receives three altitude sensor inputs: $h_1 = 35,000 \, \text{ft}$, $h_2 = 35,020 \, \text{ft}$, and $h_3 = 34,500 \, \text{ft}$ (sensor 3 experiencing a calibration bias). Calculate the mid-value voted altitude $h_{voted}$ and identify the failed sensor if the failure threshold is $\pm 100 \, \text{ft}$ from the median.
Given: $h_1 = 35000$, $h_2 = 35020$, $h_3 = 34500$
Formula: $h_{voted} = \text{median}(h_1, h_2, h_3)$
Calculation:
Sorted values: $34,500, \, 35,000, \, 35,020$
Median = $35,000 \, \text{ft}$ ($h_1$).
Check deviation of $h_3$: $|34500 - 35000| = 500 \, \text{ft} > 100 \, \text{ft}$ threshold.
Operational Takeaway:
Sensor 3 is flagged as failed and disconnected. The FCC uses $35,000 \, \text{ft}$ from sensor 1, maintaining fail-safe operational status.
Yaw Damper Systems
1. Formal Technical Definition
A Yaw Damper is a specialized stability augmentation subsystem that automatically deflects the rudder to suppress Dutch roll oscillations, coordinate turns, and counteract asymmetric yawing moments without requiring pilot rudder pedal displacement.
2. Basic Physical Concept & Control Mechanics
Swept-wing aircraft exhibit strong dihedral effect ($L_\beta$) and rolling moment due to yaw rate ($L_r$), coupling yaw and roll motions into the Dutch roll mode. When a gust causes a sideslip angle $\beta$, the aircraft yaws and rolls simultaneously. Yaw rate gyroscopes ($\dot{r}$) detect this rotational acceleration. The Yaw Damper computes a proportional rudder correction $\delta_r = -K_{yd} \cdot r$ that opposes the yaw rate, effectively adding artificial aerodynamic damping to suppress the oscillation.
3. Mathematical Derivation & Transfer Function
The yaw damper control law typically incorporates a washout filter to prevent the yaw damper from interfering with steady coordinated turns initiated by the pilot:
$$\delta_r(s) = -K_{yd} \left( \frac{T_w s}{T_w s + 1} \right) r(s)$$
Where:
• $\delta_r(s)$ = Rudder deflection command (rad)
• $K_{yd}$ = Yaw damper gain
• $T_w$ = Washout filter time constant ($\approx 2.0$ to $5.0 \, \text{s}$)
• $r(s)$ = Yaw rate ($\dot{\psi}$) from inertial sensors (rad/s)
4. Dimensions & Units
| Parameter | Fundamental Dimension | SI Unit |
|---|---|---|
| Yaw Rate ($r$) | $[T^{-1}]$ | $\text{rad/s}$ or $\text{deg/s}$ |
| Washout Time Constant ($T_w$) | $[T]$ | Seconds ($\text{s}$) |
| Rudder Deflection ($\delta_r$) | Dimensionless | Degrees ($\text{deg}$) or Radians |
5. Engineering Reference Data Table
| Aircraft Category | Yaw Damper Authority (Max Rudder Travel) | Dispatch Requirement (MEL) |
|---|---|---|
| Narrowbody Twinjet (A320 / B737) | $\pm 5^\circ$ to $\pm 10^\circ$ rudder travel | Required for dispatch on most routes (Altitude/Mach limits if inop) |
| Widebody Quadjet (B747) | Dual independent yaw dampers required | Mandatory for dispatch above FL250 |
6. Aircraft Application & DGCA Connection
Yaw dampers prevent structural fatigue of the vertical stabilizer and aft fuselage caused by un-damped Dutch roll oscillations. DGCA CAR Section 2 airworthiness directives frequently restrict aircraft operating ceiling (e.g., prohibiting flight above FL250) if both yaw dampers are inoperative, due to increased risk of structural failure from tail buffet. Air Safety Officers verify MEL compliance during ramp inspections.
7. UPSC Traps & Common Exam Pitfalls
⚠️ UPSC ASO Trap Alert:
Candidates often wonder why the yaw damper doesn't fight the pilot during a normal turn. The washout filter blocks steady-state yaw rates (constant turn rate) while passing high-frequency transient yaw rates (gusts and Dutch roll oscillations). Thus, it stabilizes turbulence without hindering pilot-initiated turns.
8. Step-by-Step Worked Numerical
Problem: A yaw damper has a gain $K_{yd} = 1.5 \, \text{deg rudder / (deg/s yaw rate)}$. During a gust, a transient yaw rate of $r = +2.0 \, \text{deg/s}$ is sensed. Assuming the washout filter passes the transient fully (gain $\approx 1.0$), calculate the rudder deflection command $\delta_r$.
Given: $K_{yd} = 1.5$, $r = 2.0 \, \text{deg/s}$
Formula: $\delta_r = -K_{yd} \cdot r$
Calculation:
$\delta_r = -1.5 \times 2.0 = -3.0^\circ$ (Opposing rudder deflection).
Operational Takeaway:
The negative sign indicates the rudder deflects in the direction opposite to the yaw rate, immediately arresting the yaw excursion and damping the Dutch roll tendency.
Automatic Landing Systems (Concept & Certification)
1. Formal Technical Definition
An Automatic Landing System (Autoland) is an integrated AFCS mode that provides fully automated guidance and control of the aircraft from the approach phase through touchdown and ground roll rollout, relying on precision radio navigation (ILS glide slope/localizer or GLS satellite augmentation) and multi-channel fail-operational redundancy.
2. Basic Physical Concept & Control Mechanics
Autoland involves distinct phases: Localizer capture, Glide Slope capture, flare initiation (transition from descending glide path to exponential altitude-decay profile at $\approx 50 \, \text{ft}$ radio altitude), derotation (lowering the nose gear smoothly onto the runway), and rollout tracking via localizer/rudder steering. The control loop synthesizes radio altimeter height data, inertial vertical speed, and ILS deviation signals to maintain touchdown dispersion within tight longitudinal and lateral boxes.
3. Mathematical Derivation & Flare Law
The flare maneuver commands a pitch attitude $\theta_{flare}$ proportional to radio altitude $h$ to achieve an exponential decay in sink rate $\dot{h}$:
$$\theta_{flare}(t) = \theta_0 + K_f \left( h_{ref} - h(t) \right)$$
Where:
• $\theta_0$ = Approach pitch attitude (rad)
• $K_f$ = Flare control gain
• $h_{ref}$ = Reference altitude where flare initiates ($\approx 50 \, \text{ft}$)
• $h(t)$ = Instantaneous radio altitude ($\text{ft}$)
4. Dimensions & Units
| Parameter | Fundamental Dimension | SI Unit |
|---|---|---|
| Radio Altitude ($h$) | $[L]$ | Feet ($\text{ft}$) or Meters ($\text{m}$) |
| Sink Rate ($\dot{h}$) | $[L T^{-1}]$ | $\text{ft/min}$ or $\text{m/s}$ |
| Touchdown Acceleration ($n_z$) | $[L T^{-2}]$ (normalized by $g$) | $g$-units ($\approx 1.2$ to $1.5 \, g$) |
5. Engineering Reference Data Table
| ICAO Operational Category | Decision Height (DH) | RVR (Runway Visual Range) | Autoland Redundancy Requirement |
|---|---|---|---|
| CAT I | $\ge 200 \, \text{ft}$ | $\ge 550 \, \text{m}$ | Single Autopilot (Optional) |
| CAT II | $100 \, \text{ft} \le DH < 200 \, \text{ft}$ | $\ge 300 \, \text{m}$ | Fail-Passive Autopilot |
| CAT IIIa / IIIb / IIIc | $< 100 \, \text{ft}$ or No DH | Down to 0 m (Zero Zero) | Fail-Operational Multi-Channel Redundancy |
6. Aircraft Application & DGCA Connection
Autoland is mandatory for low-visibility operations (Low Visibility Procedures - LVP) during heavy fog seasons at major Indian airports (e.g., DEL, BOM). DGCA CAR Section 8 and FAA AC 120-28D govern operational approval. Air Safety Officers investigate hard landings during autoland by examining exceedance parameters (vertical acceleration $> 2.0g$ at touchdown) and checking ILS critical area protection compliance.
7. UPSC Traps & Common Exam Pitfalls
⚠️ UPSC ASO Trap Alert:
Distinguish carefully between Fail-Passive and Fail-Operational systems. A Fail-Passive system (used for CAT II) disconnects upon a single failure without causing a hazardous flight path deviation, but requires pilot takeover. A Fail-Operational system (used for CAT III) continues the landing automatically even after a single failure.
8. Step-by-Step Worked Numerical
Problem: During an autoland flare, the aircraft is at radio altitude $h = 30 \, \text{ft}$ with flare gain $K_f = 0.05 \, \text{rad/ft}$ and approach pitch $\theta_0 = 3.0^\circ$ ($0.0524 \, \text{rad}$). If the reference altitude is $h_{ref} = 50 \, \text{ft}$, calculate the commanded flare pitch attitude $\theta_{flare}$ in degrees.
Given: $\theta_0 = 3.0^\circ$, $K_f = 0.05$, $h = 30$, $h_{ref} = 50$
Formula: $\theta_{flare} = \theta_0 + K_f \cdot (h_{ref} - h)$
Calculation:
$\theta_{flare} = 3.0 + 0.05 \times (50 - 30)$
$\theta_{flare} = 3.0 + (0.05 \times 20) = 3.0 + 1.0 = 4.0^\circ$.
Operational Takeaway:
As altitude decreases toward zero, the flare command pitches the nose up progressively ($4.0^\circ$ at $30\text{ft}$, up to $\approx 6^\circ$ at touchdown), cushioning the descent rate.
Failure Detection, Monitor & Disconnect Logic
1. Formal Technical Definition
Failure Detection and Disconnect Logic comprises the self-monitoring, cross-channel comparison, and watchdog algorithms embedded within Flight Control Computers and actuator servo electronics to instantly detect hardware faults, software exceptions, or sensor discrepancies and safely disconnect or reconfigure the AFCS within certified time limits.
2. Basic Physical Concept & System Safety
Automatic flight control systems possess high authority over flight control surfaces. A runaway actuator could generate catastrophic structural overloads before a human pilot can react. To prevent this, monitoring systems run continuously in parallel channels. Watchdog timers (hardware circuits that reset if not periodically toggled by software execution) and parity checks ensure that if a computer freezes or output commands diverge beyond tolerance $\Delta u_{max}$, power to the autopilot clutch is instantly cut, disengaging the system and sounding an acoustic warning (ap disconnect klaxon).
3. Mathematical Derivation & Divergence Monitor
Dual-channel command divergence monitoring evaluates the difference between channel A and channel B command outputs:
$$|\delta_{cmd,A}(t) - \delta_{cmd,B}(t)| > \Delta_{threshold}$$
If this inequality persists for longer than a time filter $t_{delay}$ (to prevent false trips due to transient electrical noise):
$$\int_{t}^{t + t_{delay}} \mathcal{H}\left( |\delta_{cmd,A} - \delta_{cmd,B}| - \Delta_{threshold} \right) dt \ge T_{limit}$$
4. Dimensions & Units
| Parameter | Fundamental Dimension | SI Unit |
|---|---|---|
| Time to Disconnect / Latency | $[T]$ | Milliseconds ($\text{ms}$) (Typically $< 50 \, \text{ms}$) |
| Command Divergence Threshold | Dimensionless ($\text{rad}$ or $\%$ actuator) | Degrees or Voltage ($\text{V}$) |
5. Engineering Reference Data Table
| Failure Condition | Maximum Allowable Reaction Time | Safety Classification |
|---|---|---|
| Hardover Autopilot Hard-Over (Pitch) | $< 50$ milliseconds to disconnect | Catastrophic ($< 10^{-9}$) |
| Soft-over Drift | Detected via comparator within 2 seconds | Hazardous |
| Watchdog Timer Timeout | $10$ to $50 \, \text{ms}$ | Catastrophic |
6. Aircraft Application & DGCA Connection
Disconnect logic must be intuitive, featuring tactile buttons on the control wheel (AP/TRIM disconnect switch) and distinct audio/visual alerts. DGCA CAR Section 2, Airworthiness and Advisory Circulars require that autopilot disconnect mechanisms be free of jamming and easily accessible to both pilots under high-stress conditions. Air Safety Officers analyze uncommanded disconnect events during incident investigations to determine whether sensor noise, software glitches, or actuator servo faults triggered the shutdown.
7. UPSC Traps & Common Exam Pitfalls
⚠️ UPSC ASO Trap Alert:
Exam questions frequently test whether an autopilot disconnects automatically upon pilot override. On modern transport category aircraft, applying force to the control column exceeding a specific breakout threshold automatically disengages the autopilot to ensure pilot authority is never impeded.
8. Step-by-Step Worked Numerical
Problem: A dual FCC monitor compares elevator commands $\delta_{A} = 4.2^\circ$ and $\delta_{B} = 3.6^\circ$. The maximum allowable divergence threshold is $\Delta_{max} = 0.5^\circ$. If the divergence persists for $80 \, \text{ms}$ while the maximum permitted persistence limit is $50 \, \text{ms}$, determine whether a fault flag and disconnect signal are triggered.
Given: $\delta_A = 4.2^\circ$, $\delta_B = 3.6^\circ$, $\Delta_{max} = 0.5^\circ$, Persistence = $80 \, \text{ms}$, Limit = $50 \, \text{ms}$
Calculation:
Actual difference $|\delta_A - \delta_B| = |4.2 - 3.6| = 0.6^\circ$
Check threshold: $0.6^\circ > 0.5^\circ$ (Divergence detected!)
Check time persistence: $80 \, \text{ms} > 50 \, \text{ms}$ limit.
Operational Takeaway:
Both the divergence threshold and time limit are exceeded. The monitor instantly trips the autopilot clutch relay, disengaging the system and sounding the disconnect warning.
🧠 Active Recall: Can You Explain These Without Notes?
Cover the notes above and attempt to articulate these concepts clearly:
- 1. Why does a Yaw Damper incorporate a washout filter instead of raw yaw rate?
- 2. What is the precise difference between Fail-Passive and Fail-Operational autoland architectures?
- 3. How does a Mid-Value Select (MVS) voter isolate a failed sensor in a triplex FCC system?
- 4. What caused the auto-throttle safety hazard in the Asiana Flight 214 accident?
🎙️ UPSC Air Safety Officer Interview Corner
Board-style viva questions with expert model answers for your final selection interview:
Q: "As an Air Safety Officer investigating an uncommanded autopilot hard-over incident, what specific aircraft systems and FDR parameters would you examine first?" ▼
Model Answer: "I would begin by downloading the Quick Access Recorder (QAR) and Flight Data Recorder (FDR) data to examine control surface position versus Flight Control Computer (FCC) command logs. Specifically, I would check actuator servo current draw, command divergence monitors between redundant FCC channels, and discrete autopilot engagement/disengagement flags. I would also inspect maintenance logs for prior intermittent sensor faults in the Inertial Reference Systems (IRS) or air data computers that could have provided erroneous steering inputs, and verify actuator clutch mechanical integrity."
Q: "Why do modern fly-by-wire aircraft require high software design assurance levels (DAL A), and how does the regulator verify compliance?" ▼
Model Answer: "Software DAL A is mandated because flight control computers execute critical control laws where a software error could result in a catastrophic failure (probability $< 10^{-9}$ per flight hour) without time or means for pilot recovery. The DGCA and certification agencies verify compliance through rigorous auditing of the software lifecycle under DO-178C guidelines—checking requirements traceability, structural coverage analysis (MC/DC), independent verification and validation (IV&V), and hardware-in-the-loop (HWIL) simulation testing."
✅ Study Session Completion Checklist
Check off items as you complete them. Your progress is saved automatically in your browser.