Saab SF-340A, VH-KEQ

Safety Action

The ATSB recently released reports of the investigations into two occurrences that involved flight by high-capacity air transport aircraft into severe convective weather. For further information readers are directed to ATSB occurrence investigations 200100213 and 200105157 and associated safety recommendations. One of the safety enhancement aspects addressed by these recommendations included initial and recurrent training in the use and interpretation of airborne weather radar.

Significant Factors

CONCLUSION

  1. Due to the limitations of the airborne weather radar and possibly the radar antenna setting, the flight crew misinterpreted the depicted weather radar returns.
  2. The flight crew did not appear to understand the limitations of the airborne weather radar.
  3. The aircraft was inadvertently flown into an area of severe convective weather activity.

Analysis

The weather encountered by the crew was as forecast. Action taken by preceding aircraft confirmed the crew's expectation that they would have to divert to the left of track when en route. After leaving controlled airspace, the crew had to rely, for operational decision-making, on their interpretation of information derived from the airborne weather radar. That information supported their decision to divert and attempt to track around the southern end of the thunderstorm line.

When the aircraft was overhead Batemans Bay, the crew interpreted the weather radar returns as indicating that they could safely track direct to Canberra from that position. However, a severe thunderstorm was located on that track, as depicted by the 1823 Bureau of Meteorology radar image. The crew incorrectly interpreted the radar display of green and yellow returns as being acceptable. However, the heavy precipitation and hail produced by the storm cell was likely to have resulted in significant attenuation of the radar beam. Attenuation would have reduced the ability of the weather radar to accurately depict the precipitation intensity.

Further, the radar antenna setting of 3 to 4 degrees up, as reported by the crew, would have resulted in the radar beam scanning above the level at which the aircraft was flying, and into an area that was above the freezing level. It is likely that above that level the hail was dry. As such, it would have provided a low reflectivity target for the weather radar, and may have contributed to the inability of the radar to provide the crew with an accurate picture of the precipitation intensity.

The degree to which radar attenuation and reduced reflectivity, either individually or in combination, influenced the circumstances of the occurrence could not be determined. However, with inadequate radar derived information, the crew did not recognise the significance of the convective weather, and the aircraft entered the storm cell.

The warning generated by the GPWS computer was correct for the parameters within which it was operating. The excessive rate of descent derived by the radar altimeter and GPWS was the result of reflected returns from heavy rainfall and hail. When the crew received the GPWS warning their response was immediate and positive despite the aircraft being at an altitude well above the surrounding terrain.

Summary

On 26 March 2002, VH-KEQ, a Saab 340A aircraft, was being operated on a regular public transport flight from Sydney to Canberra. During the pre-flight planning, the crew identified a line of thunderstorms and associated weather moving through the weather forecast area (ARFOR) 21, in which the flight was to be conducted. Consequently, they anticipated that to avoid the adverse weather, they would probably have to divert to the left of the flight-planned track.

At the time, the weather in ARFOR 21 was under the influence of a low-pressure system that was situated over eastern New South Wales (NSW), with troughs aligned to the north and south. An upper-level disturbance was also present over central NSW. Because of this complex weather system, showers and thunderstorms were forecast over the eastern part of NSW during the afternoon and evening. A significant meteorological forecast (SIGMET) for thunderstorms was also current for ARFOR 21 at the time of the flight.

The forecast wind at 10,000 ft and 14,000 ft was 330 degrees true at 40 kts. The freezing level was forecast to be 11,500 ft to 12,000 ft.

The flight departed normally and, at 1750 ESuT, on first contact with Melbourne Centre, at approximately 50 nm to the southwest of Sydney, the air traffic controller advised the crew that there was significant weather on track between Marulan and Canberra. The controller told the crew that preceding aircraft diverted to the left of track to avoid this weather. The crew indicated that they also would divert left of track. The controller cleared the crew to divert to the left of track and once clear of the weather, to track direct to Canberra.

The crew of another aircraft that had diverted to the left of track reported to the controller that they had experienced moderate turbulence at flight level (FL) 140. The controller passed this information to the crew of KEQ, which at the time was climbing to FL120. At 1800, the controller advised the crew of KEQ that they would soon be leaving controlled airspace. Soon after, the crew reported that they would continue on their present heading as the weather radar indicated that conditions were unsuitable for tracking direct to Canberra. This heading resulted in the aircraft continuing to diverge from the flight-planned track. At 1805, they advised that they were descending from FL120 to 9,000 ft. The pilot in command later reported that this was to remain clear of the freezing level.

The pilot in command reported during a post occurrence interview that when the aircraft became clear of cloud they were over the coastline. Recorded radar information indicated that the aircraft was over the Batemans Bay area on the NSW south coast. After conducting a right orbit to confirm their position and to assess the weather, the crew decided to track direct to Canberra.

The pilot in command also reported that the crew was using the airborne weather radar in maximum gain mode, with the antenna tilt set at approximately 3 to 4 degrees up, and with the range at either the 25 or 50 NM setting. He reported that the radar displayed mostly green returns with an occasional yellow return. He also stated that there were no red returns on the radar. The crew interpreted information provided by the weather radar as being suitable to track direct to Canberra.

After setting course for Canberra, the conditions suddenly became dark, associated with an increase in the turbulence level and rain intensity. Shortly after, the ground proximity warning system (GPWS) sounded a `TERRAIN' warning. The crew applied maximum power and began to climb the aircraft, and at 1817, broadcast on the area frequency that they were climbing due to a GPWS warning. The pilot in command reported that during this event the outer pane of the front left windscreen shattered.

The crew continued the climb to FL110 and shortly after levelling the aircraft it became clear of cloud. They then climbed to FL120 and tracked direct to Canberra for an uneventful landing. Post flight inspection of the aircraft revealed that in addition to the shattered windscreen, the strobe lights had been damaged and several vortex generators were missing.

The pilot in command subsequently reported that he thought hail had been falling at the time the GPWS warning activated. Analysis of the recorded transmissions from the aircraft revealed background noise consistent with hail impacting the airframe.

The Bureau of Meteorology (BoM) `Letterbox weather radar' was situated about 27 NM south-south-west of Sydney, and about 90 NM to the north-east of Batemans Bay. The 1803 image from that weather radar was derived at a scan angle of 0.5 degrees. The returns from that area would, therefore, have been from an altitude of about 5,000 ft. Those returns revealed that a thunderstorm cell with reflected rainfall rates of over 100 mm per hour was located about 14 NM to the north-west of Batemans Bay. The 1823 image showed that the thunderstorm was almost overhead Batemans Bay, and on the direct track to Canberra.

BoM subsequently reported that the thunderstorm caused damaging winds and a tornado about 5 NM east of Braidwood, and that the storm was likely to have been a `supercell' thunderstorm.

Weather Radar

The aircraft was equipped with a WXR 200 colour weather radar. The radar antenna transmitted microwave energy in the form of pulses, which, if reflected off precipitation ahead of the aircraft, would be returned to the antenna. The radar beam was a narrow cone with a beam width of 8 degrees. The amount of energy reflected back to the antenna depended on the intensity of the precipitation, and was converted into a colour code for presentation to the crew on their flight instruments. There were four colour codes that were directly related to precipitation intensity, ranging from black (no precipitation), green (minimum detectable moisture), yellow (medium moisture level), to red (strong to extreme moisture level).

The Saab 340A operations manual described the operation of the airborne weather radar system. This information included the expected radar displays equating to reflected precipitation returns, and descriptions of how to avoid areas of severe weather based on weather radar displays. Information was provided on the reflectivity of various types of precipitation, with wet hail being the most reflective, and dry hail and dry snow being the least reflective.

The manual contained information in the use of the weather radar variable gain control. By reducing the gain, red areas of precipitation targets would eventually be displayed as yellow, and yellow areas as green. The red area that was the last to change to the next lowest level (yellow) would be the strongest part of the precipitation target.

The manual also contained information on weather radar antenna tilt setting, and the importance of precision tilt management for detection, analysing, and avoiding hazardous convective weather. The manual recommended that the antenna be set to the one degree down position whenever tilt and range were not being used for weather analysis. That setting provided pilots with a fast and certain means to ensure that the radar was functioning, and ensured the detection of weather returns ahead of the aircraft.

The manual also contained information that heavy rainfall could reduce the ability of the weather radar to provide a complete picture of the weather ahead. That phenomenon is termed `radar attenuation'. If a radar beam is fully attenuated, the display will indicate a radar shadow that appears to be the end of the precipitation area, but which actually extends further than is apparent from the display. Attenuation may reduce reflected precipitation readings by as much as 20dBz, which the weather radar interprets as an area of decreased rainfall. The effect of this is a downward colour shift that the colour returns displayed to the crew indicate a lower level of precipitation intensity than is actually occurring. What would normally be displayed as a red return (indicating strong to extreme rainfall rates, with the possibility of associated hail) is displayed as a yellow return.

Ground Proximity Warning System (GPWS)

The aircraft was equipped with a GPWS that provided 5 modes of protection. One of those modes provided protection against excessive closure rate to terrain. The GPWS processed radio height, flap and gear position logic, vertical speed and indicated airspeed to determine if a dangerous situation was developing with respect to the aircraft's height above the ground. The mode had two warning envelopes. Penetration of the first envelope resulted in a `TERRAIN' aural warning with the corresponding warning lights. If the second envelope was penetrated, the aural warning changed to a `WHOOP WHOOP - PULL UP' that was repeated until the aircraft gained 300 ft radio altitude.

Analysis of recorded flight data indicated that at the time the crew received the GPWS warning, the aircraft was at an altitude of 9,248 ft above mean sea level and flying at an indicated airspeed of 231 knots. The radar altimeter was indicating 2,154 ft and the derived rate of descent from the radar altimeter was 17,760 ft per minute. These parameters were within the warning envelope for the GPWS computer and resulted in a `TERRAIN' warning being provided to the crew.

Occurrence summary

Investigation number 200201228
Occurrence date 26/03/2002
Location 83 km ESE Canberra, (VOR)
State New South Wales
Report release date 19/12/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Weather - Other
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer Saab Aircraft Co.
Model 340
Registration VH-KEQ
Serial number 340A-011
Sector Turboprop
Operation type Air Transport Low Capacity
Departure point Sydney, NSW
Destination Canberra, ACT
Damage Minor

Total power loss, Boeing 747-436, G-BNLD, 159 km north-west of Parkes, New South Wales, on 1 March 2002

Safety Action

Local safety action

Fan blade failure

The failure of the RB211-524 first-stage low-pressure compressor blade was the first to have originated from a pre-existing incomplete bond defect in the lower aerofoil section. Previous failures of a similar nature had occurred from areas of disbonding in the lower root-block section. In response to the disbond failures, the engine manufacturer had introduced the requirement to periodically inspect the root-block using conventional ultrasonic techniques (Service Bulletin SB72-9660).

In response to its revision of the acceptable bond-line defect size limit, the engine manufacturer issued Alert Service Bulletin RB.211-72-AE001 on 12 March 2002, instructing the removal from service of 109 low-pressure compressor blades that were considered to be at risk of cracking from incompletely bonded areas. The service bulletin was afforded 'Recommended' status and instructed removal of all nominated blades by 15 April 2002. In May 2002, a revision of the service bulletin was issued to include 77 additional compressor blades in the removal program. These components were identified as being at risk during a more extensive review of inspection records. In December 2002, advice was received from the engine manufacturer to indicate that all of the affected blades nominated by the original service bulletin and its revision had been traced and confirmed as removed from service.

RB.211-535 turbofan engines as fitted to Boeing 757 and Tupolev TU204 aircraft contain low-pressure compressor blades of a design similar to the RB.211-524 blades. Because of this similarity, the engine manufacturer considered that the RB.211-535 blades might also be at risk of a similar failure. To address this risk, the manufacturer issued Alert Service Bulletin RB.211-72-AE006, instructing the priority removal of 54 blades by 31 August 2002 or 30 October 2002, dependent upon the blades' service life. A further 58 blades were nominated for removal by no later than 28 February 2003. The UK Civil Aviation Authority approved service bulletin RB.211-72-AE001 on 12 March 2002 and service bulletin RB.211-72-AE006 on 24 April 2002.

Cabin communications

In recognition of the communication difficulties experienced by members of the cabin crew immediately following the engine failure event, the aircraft operator has implemented the following changes to the cabin operations.

a) In cases of an aircraft operating with known interphone unserviceability, a suitable emergency communication plan is now discussed and agreed upon during the pre-departure cabin and flight crew briefing.

b) Both normal and abnormal cabin communication scenarios are now included in the Safety and Emergency Procedures (SEP) training provided to flight and cabin crew.

c) An article discussing aspects of communication under emergency conditions has been published in the operator's cabin crew newsletter.

Technical Analysis Report

Technical Analysis Report: Examination of a Failed Rolls-Royce RB211-524 Turbofan Engine Boeing Commercial Aircraft Group, 747-436, G-BNLD

FACTUAL INFORMATION

History of the flight

On the evening of March 1, 2002, Boeing 747-436 aircraft G-BNLD sustained the failure of the number 3 (right inboard) engine during a scheduled regular passenger transport flight from Sydney to Bangkok. The flight crew experienced vibrations and received an ENG 3 REVERSER engine indicating and crew alerting system (EICAS) message. The crew shut down the number 3 engine and completed checklist items before returning the aircraft to Sydney.

An initial engineering examination found that a fan blade from the number 3 engine had failed, and that debris had punctured the engine cowl, the right wing leading and trailing edge flaps and the fuselage, damaging a structural member above the wing root area. The inspection found fractured fasteners and other components beneath the fan cowls and damage to the structure associated with the thrust reverser assembly. Debris from the number 3 engine was also found embedded within the intake cowl of the adjacent number 4 engine.

Factual Information

History of the flight

At 1729 on 1 March 2002, the Boeing 747-436 aircraft departed Sydney, Australia on a regular passenger transport service to Bangkok, Thailand. Approximately one hour into the flight, while the aircraft was in cruise at flight level 330 (FL330), the crew experienced the sudden onset of heavy airframe vibration and received an ENG 3 REVERSER annunciation from the engine indicating and crew alerting system (EICAS). The crew initially reduced the number-3 engine power and carried out the 'Engine Reverser Unlocked' actions from the aircraft quick-reference handbook (QRH). The crew stated that the engine appeared to be functioning normally at that time. After further EICAS status and advisory messages however, the crew elected to carry out other QRH checklists, concluding with the shutdown of the number-3 engine. The captain made a PAN call to air traffic control and subsequently an advisory announcement to the passengers. To reduce airframe vibration after the engine was shut down, the first-officer, who was the handling pilot, descended the aircraft to FL180 and reduced airspeed. A third crew member who was resting at the time of the event went back into the cabin to examine the engines and found extensive damage to the number-3 engine nacelle and strut fairings. After that information was reported to the flight crew, a further QRH checklist Fire Engine, Severe Damage or Separation was actioned, although at no time was there any reported indication or sign of fire. A decision to return to Sydney was made and fuel was jettisoned to establish a landing weight within limits. In consideration of the damage to the engine and to minimise the risk should the engine or components separate, an over-water approach to runway 34L was requested. The aircraft landed safely at 1947.

Injuries to persons

InjuriesCrewPassengersOthersTotal
Fatal    
Serious    
Minor    
None18272Nil290

Damage to the aircraft

The damage sustained by the aircraft was mainly limited to the number 3 engine and nacelle assembly. However, areas of isolated damage produced by the impact of debris escaping from the engine were found within the number 3 engine pylon, the right wing, flap, horizontal stabiliser and control surfaces and the right side of the fuselage.

Damage to the airframe

During the course of the on-site investigation, the operator carried out an inspection of the aircraft in accordance with the Boeing 747-400 maintenance manual, section 05-51-06 (Dragged engine nacelle / Engine seizure / Engine and strut damage condition - Maintenance practices - Conditional inspection). Australian Transport Safety Bureau Technical Analysis report number 20/02 section 1.6 summarised the results of that inspection. The most substantial airframe damage was identified as single punctures in the right wing centre leading edge flap section and the right side of the fuselage, between the cabin window and the upper wing surface. The actual point of debris impact was coincident with a bulkhead structure beneath the thinner fuselage skin. That combination of engine and airframe damage constituted an accident under Annex 13 to the Convention on International Civil Aviation.

Damage to the engines & nacelles

The ATSB carried out a general inspection of the failed engine before it was removed from the aircraft. The engine had sustained extensive damage to the low-pressure compressor, accessory equipment, thrust reverser assembly and the fan cowlings. A single fan blade had fractured from a location immediately above the dovetail rotor connection, releasing the full aerofoil length from the hub. Impact marks showed the blade to have struck the fan case at the one o'clock position (looking rearward), however the case was not compromised and the primary blade failure was contained within the engine. Subsequently however, the remaining fan blades had fragmented over the outer fifty percent of their length, with the liberated debris causing extensive tearing and multiple punctures of the intake cowl forward of the fan case. Two major fragment exit trajectories were identified during the inspection - those were aligned with the damaged areas on the fuselage and leading edge flap panel. The uppermost fragment exit trajectory passed through the forward strut region. Examination of that area revealed the separation of an engine to pylon connector that carried circuits for the monitoring of thrust-reverser position, turbine gas temperature and turbine speed and vibration.

Extensive mechanical damage associated with rotor imbalance loads was found amongst the engine accessory equipment and the thrust-reverser structure, which had separated from the front flange section at the riveted joint. That separation allowed the structure to move rearwards by up to thirty millimetres and transferred the retention loads for the thrust reverser unit and integrated nozzle assembly to the fan case hoop plate assembly. The engine manufacturer's stress modelling of the retention loads through that secondary load path showed that a significant reserve remained in the critical load path joint features, when considering the worst-case scenario of a three hour return extended twin-engine operations (ETOPS) flight [1].

Inspection of the adjacent (number-4) engine showed scratches, embedded fragments and other evidence of the ingestion of debris liberated from the number-3 engine. A boroscopic survey of the engine core intermediate and high-pressure compressor stages found blade distress that was typical of foreign-object damage.

Personnel information

The aircraft carried an operational flight crew of three and a cabin crew of fifteen. Additionally, a B757 pilot was a passenger. After the engine failure event, that pilot was requested to assist the flight crew in the management of the aircraft and the return to Sydney. Interviews following the event found that the crew were properly licensed and medically fit to conduct the flight.

[1] RB211-524 engines are also fitted to Boeing 767 twin-engine aircraft subject to ETOPS requirements.

Aircraft information

ManufacturerBoeing Commercial Aircraft Group
Model747-436
Serial number23911
RegistrationG-BNLD
Year of manufacture1989
Certificate of airworthiness (no.)033678/003 Issued 6 September 1999
Certificate of registration (no.)G-BNLD/R1 Issued 5 September 1989

Engine information

The Rolls-Royce RB211-524G engine (serial number 13340) had been installed on G-BNLD in November 1999 and had operated for 9,915 hours and through 1,299 cycles while fitted to that aircraft. The engine was originally manufactured in 1994 and had accrued a total life of 30,075 hours and 4,011 cycles at the time of the failure.

Fan blade information

The failed first-stage low-pressure compressor (fan) blade (part number UL29573, serial number GB77535) was manufactured in 1991. Since that time, the component had accumulated a service life of 32,000 hours and 9,444 cycles, with the last 8,915 hours and 1,299 cycles within engine 13340. The manufacturer's specified maximum service life for the blade type was 15,000 cycles.

Fan blade history and inspection

The manufacturer's service bulletin SB72-9660 specified three different periodic non-destructive tests aimed at detecting service-induced cracking, or damage in various critical parts of the RB211-524 blades. The manufacturer's records indicated that the failed fan blade had been overhauled on three separate occasions. The last overhaul was carried out in October 1999 and included the repair and polishing of the aerofoil surface and the replacement of the blade root dry film lubricant. Non-destructive inspections following the overhaul included a transient acoustic propagation (TAP) test, ultrasonic inspection of the root block and ultrasonic C-scan inspection of the blade aerofoil. Following the satisfactory completion of these tests, the blade was installed into engine serial number 13340 and the engine was fitted to G-BNLD. Of the non-destructive tests specified within SB72-9660, only the TAP test was applicable to on-wing inspections and was required at 200 cycle intervals. The TAP test was designed to detect the loss of vacuum within the internal cavity of the blade; indicating the presence of through-section cracking or other damage. Records from the engine manufacturer indicated compliance with the service bulletin, with the last TAP test carried out on 18 February 2002; ten days prior to the failure. Specific records documenting the results of that test were not available.

Cabin events

The cabin services director (CSD) reported the flight to have been normal until approximately one hour after takeoff. At the time of the engine failure the CSD was at the under-stair station talking with the First Officer on the flight deck via the cabin interphone system. The CSD reported hearing two loud thuds, followed by strong, continuing airframe vibration. Immediately looking out of a right side cabin door window, the CSD saw multiple holes in the number-3 engine cowling and pylon, through which he was able to see the ground below. He reported the weather as very clear and bright daylight. Returning to his station, the CSD attempted unsuccessfully on two occasions to contact the flight deck using the pilot alert interphone function, noting that some passengers were showing concern and wanting information. Instructing the cabin crew to stow the service equipment and secure the cabin, the CSD was about to attempt contacting the flight deck again when he was met by the third pilot who appraised the CSD of the situation. Further information was subsequently provided to the crew and passengers by the captain in a public address (PA) announcement.

A report from the rear cabin purser described the engine failure as a loud noise followed by juddering. Due to unserviceability with the cabin interphone system, the purser was unable to communicate with the CSD. The captain's PA announcement provided the first information to the rear cabin purser regarding the engine failure.

Cabin communication

Information gathered from the crew interviews and the aircraft technical log revealed that areas of the cabin interphone system were unserviceable at the commencement of the flight. To address this, the CSD had briefed the crew before flight for an alternative emergency communication procedure, requiring that pursers report to his station if an alert signal was given. Once he had assessed the event and the extent of aircraft damage, the third pilot assumed the cabin communications role and made several walk-around visits to the cabin to provide information and reassurance to the crew and passengers.

Flight deck security

In a response to a conference on enhanced aircraft security, the aircraft manufacturer had begun the implementation of a two-phase program to address perceived security deficiencies on board its aircraft. As part of its phase-one response, the aircraft operator had installed mechanical internal locks to the flight deck doors and implemented a policy regarding their use. The mechanical locks supplemented the pre-existing electric door locks and were only able to be operated by a flight crew member standing at the door. The electric door locks were capable of being operated by the flight crew in their normal, seated position. The operator's policy required the locking of the modified flight deck door before engine start and unlocking after engine shut down. The stated objective of the policy was to minimise the amount of time the flight deck door was unlocked and achieved this by providing specific procedures for crew interaction. These procedures relied extensively on the use of the interphone and alerting systems. While the minimum equipment list (MEL) documentation for the aircraft at the time of the event permitted operations with partial interphone unserviceability, it specified that the flight deck to cabin connection must be operational in order for the flight deck manual door lock to be used.

Shortly after the engine failure, the flight crew decided to abandon the locked door policy. That decision was taken to facilitate the use of the third crew member as a cabin to flight deck go-between role and to alleviate some of the problems associated with the interphone unserviceability.

Flight recorders

The aircraft was fitted with a Sundstrand Data Control Universal Flight Data Recorder (UFDR). Following the occurrence, the UFDR was removed from the aircraft and a copy of the recorded data was made by the ATSB. The aircraft was also fitted with a Quick Access Recorder (QAR) unit. The data from this device was downloaded by Qantas Airways Limited and the information applicable to the accident was forwarded to the ATSB[2]. The recovered data from both UFDR and QAR was used to prepare a summary of events and actions during the flight. A print out of the aircraft EICAS log obtained from the aircraft flight deck was used to supplement the recorder data.

The first indication of an anomalous engine condition was recorded at 07:24:15 UTC, with an interruption in the low-pressure spool (N1) speed data from the number-3 engine. One second later, the engine fuel flow and the exhaust gas temperature (EGT) for that engine began to decrease, accompanied by an 'in-transit' annunciation from the thrust reverser system. Another three seconds later (07:24:19), the data showed a reduction in throttle angle and a marked increase in the broadband vibration levels for the number-3 engine. The EICAS captured two 'auto' events at 07:24:22 and 07:24:26; both events showing a loss of N1 and N2 speed, loss of vibration data, a drop in EGT and a loss of fuel flow and oil pressure. The system also flagged multiple number-3 engine faults including the advisory messages ENG 3 FUEL V/V and the reported ENG 3 REVERSER. At 07:24:32, the number-3 engine generator circuit breaker opened and was accompanied several seconds later by a loss of voltage on the number-3 integrated drive generator bus. A loss of data for the engine thrust reverser position, exhaust gas temperature and compressor outlet temperature also occurred at this time. Eight seconds later, data was lost for the engine pressure ratio (EPR) and throttle position.

A comparison of the broadband and individual turbine spool vibration levels produced by the number 3 engine during the time leading up to the failure showed no indications of trends that might have suggested a developing problem.

Tests and research

The ATSB examined the root section of the released fan blade (s/n GB77535), assisted by authorised representatives from the engine manufacturer.

Failure of the blade occurred as a direct result of fatigue cracking propagating transversely through the lower aerofoil section. The origin of cracking was from the upper edge of a pre-existing internal defect at the bonding line between the two titanium alloy plates used to manufacture the blade. Fracture surface features indicated crack growth over multiple flight cycles, continuing to a point where the remaining section failed in ductile tensile overload, releasing the blade aerofoil from the hub. Analysis of the number and nature of the arrest marks extending from the point where the cracking first broke the external surface suggested that around forty flight cycles might have elapsed before final blade failure.

[2] Quick-access recorders are fitted to aircraft as a maintenance tool for the operator and as such, the ATSB does not routinely download data from these units.

The original manufacturing bond-line defect was roughly circular in form and measured approximately twelve millimetres in the chord-wise dimension. Planar growth of the defect by debonding had occurred to a chord width of around twenty-two millimetres. Examination of the blade manufacturing records showed that the original defect had been detected and quantified by radiographic inspection during blade fabrication. Due to the inherent difficulty in achieving flawless bonding within the blade root block area, criteria for the fitness-for-purpose assessment of blades with bonding discontinuities had been developed. The failed blade had been 'concessionally accepted' for service using these criteria.

Following the blade failure, the manufacturer carried out computational stress modelling of a range of incomplete bond defects and determined that the defect in blade GB77535 was located in one of the two most critical locations for generating high stresses and subsequent fatigue cracking. It was also determined that a defect six millimetres in diameter was the largest area of incomplete bond tolerable under the existing declared blade lives.

ATSB Technical Analysis section number 200200646 (20/02) details the examination of the failed blade and the associated engine damage.

Significant Factors

  1. During the 1991 manufacture of the first-stage low-pressure compressor blade serial number GB77535, a small area of incomplete bonding remained within the interface between the two titanium alloy plates used to fabricate the blade component.
  2. The presence of the incompletely bonded region was detected during preliminary non-destructive inspection, however the blade was accepted for service under the manufacturer's 'concessional assessment' program.
  3. The maximum acceptable bond-line defect size limits as specified by the concessional assessment program were too large to ensure that fatigue cracks could not initiate and propagate to failure within the prescribed life limit of the blade components.
  4. None of the manufacturer's prescribed periodic in-service inspections carried out on the blade during its life had detected the incomplete bond defect. None of these inspections were specifically designed for the detection of defects within the lower aerofoil section where the defect was located.
  5. Fatigue cracking initiated and propagated from the upper edge of the bond-line defect in response to service loading conditions.
  6. Fracture and release of the fan aerofoil section from the rotor occurred after growth of the cracking to critical size.
  7. The number-3 engine failed from damage sustained during the blade failure event.
  8. The aircraft sustained minor airframe and number-4 engine damage resulting from impacts with blade debris liberated from the number-3 engine nacelle and cowling.

Summary

Approximately one hour after departing Sydney on a regular passenger transport flight to Bangkok, Thailand, the Boeing 747-436 aircraft, registration G-BNLD, sustained the failure of the right inboard (number 3) engine, necessitating a return to Sydney airport where an uneventful one-engine inoperative landing was made.

Failure of the number-3 engine resulted from the fracture and liberation of a single first-stage low-pressure compressor (fan) blade. The blade failed through the lower aerofoil section, immediately adjacent to the dovetail connection with the rotor disk. While the initial blade impact was fully contained by the fan casing, many fragments of the fractured blade and the damaged adjacent blades punctured the intake cowling or escaped forward of the nacelle, producing damage to the wing, control surfaces, fuselage and the number-4 engine. Imbalance forces generated by the blade loss produced extensive damage to the engine accessory components and disrupted the primary load-bearing path between the engine fan case and the thrust reverser assembly.

ATSB laboratory examination of the retained root section of the failed blade established that fatigue cracking had initiated and propagated from a pre-existing defect at the blade centreline. The defect was characterised as a 'lack of bond' feature at the interface between the two sandwiched titanium alloy panels used to form the blade. Fatigue cracking had initiated from the upper edge of the defect and propagated under operationally induced bending and centrifugal loads.

The lack of bond defect had formed during manufacture of the blade in 1991. While it was detected during manufacturing inspections, the defect was assessed as non-critical and the blade was accepted for service under the engine manufacturers 'concessional acceptance' system. The blade subsequently accrued a service life of 9,444 cycles and 32,000 hours before failing; this representing 63% of the 15,000-cycle design prescribed blade life.

In response to the blade failure identified in the investigation, which was the first of its type, the engine manufacturer has revised the acceptable bond-line defect size limit and issued a series of alert service bulletins, requiring the removal from service of 186 RB.211-524 blades and 112 similar RB.211-535 blades. These were 'concessionally accepted' components that, on review of the manufacturing documentation, had been assessed as being at risk of failure from a similar mechanism. In December 2002, the engine manufacturer advised that all blades identified by the service bulletins had been traced and confirmed as removed from service.

Occurrence summary

Investigation number 200200646
Occurrence date 01/03/2002
Location 159 km NW Parkes, (VOR)
State New South Wales
Report release date 24/09/2003
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Occurrence class Accident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration G-BNLD
Serial number 23911
Sector Jet
Operation type Air Transport High Capacity
Departure point Sydney, NSW
Destination Bangkok, Thailand
Damage Substantial

Aerospatiale AS.350B2, VH-WFX

Analysis

No evidence was found to suggest that the helicopter was not serviceable prior to the occurrence. No mechanical issues could be established as contributing to the occurrence. The reason for the anomaly that led to the vertical vibration reported by the pilot could not be established. The excessive loading indicated by the starflex rotor arm fractures would not be expected to be encountered under normal service conditions but could occur during a ground resonance event. The damage to the helicopter components was consistent with damage previously documented as a result of a ground resonance event.

Summary

The AS350B2 Squirrel helicopter was being operated on a private flight with the pilot and two passengers on board. The pilot reported that shortly after lifting the helicopter into an approximately 1.2 metre hover, he noted that the main rotor system had a pronounced vertical, once per revolution, vibration. The pilot then elected to terminate the hover and land the helicopter. He further reported that when the skid landing gear touched the ground, the helicopter began to oscillate violently. The pilot then activated the emergency fuel cut-off. Subsequently, the engine and main rotor revolutions per minute (RPM) began decreasing. The pilot and passengers reported that the oscillations of the helicopter became more violent and pronounced as the main rotor RPM decreased. Once the main rotor ceased rotation, the occupants exited the helicopter. One passenger received minor injuries.

The helicopter sustained substantial damage to the main rotor assembly, the right landing gear skid, the forward cargo mirror mount bracket, the left and right structure keel beams, and the right rear passenger seat support. The principle damage to the main rotor assembly consisted of the fracture and separation of the yellow and blue starflex rotor arm outboard segments.

An examination of the helicopter main rotor head and blades did not reveal any anomalies, other than the separated starflex rotor arm outboard segments, that could have resulted in the vertical vibration reported by the pilot. A witness near the helicopter during its hover flight did not report any foreign objects or birds in the area of the main rotor disc during the flight.

The damage to the main rotor starflex rotor assembly was consistent with the damage documented in a technical report compiled by the Australian Defence Science and Technology Organisation relating to a previous military AS350 helicopter occurrence. That report indicated that the starflex rotor arms failed due to severe upward bending due to excessive loading. That investigation determined that the circumstances of the accident were consistent with a ground resonance event.

Occurrence summary

Investigation number 200200651
Occurrence date 01/03/2002
Location Williamtown, Aero.
State New South Wales
Report release date 08/08/2003
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Occurrence class Accident
Highest injury level Minor

Aircraft details

Manufacturer Aerospatiale Industries
Model AS350
Registration VH-WFX
Sector Helicopter
Operation type Private
Departure point Williamtown, NSW
Destination Brandy Hill, NSW
Damage Substantial

Cessna 500, VH-HVM

Summary

During planned stop-work meeting by air traffic controllers, Airservices Australia (Airservices) enacted a contingency plan for the Melbourne Flight Information Region (FIR). That plan amended Class A and C controlled airspace (CTA) to temporary restricted airspace (TRA) and limited the number of aircraft able to fly in the TRA. The plan required pilots of aircraft not approved to fly in the TRA to leave controlled airspace by 1015 CSuT. A Cessna Aircraft Company Citation (Citation) was seen on radar to be operating in the TRA after that time and in potential conflict with a Boeing Company 737 (737). The Adelaide Approach East controller issued traffic information and clearances to enter controlled airspace to the pilots of both aircraft that ensured their separation.

There were no separation standards applicable to aircraft in the TRA. Recorded radar data indicated that the vertical and lateral spacing between the aircraft exceeded the vertical separation standard of 1,000 ft (for aircraft below flight level (FL) 290) and the radar separation standard of 5 NM that would normally apply to aircraft in CTA.

Civil Air, the Australian Air Traffic Control Association notified Airservices of the proposed stop work meeting on 8 March 2002. On 12 March 2002, Airservices issued a notice to airmen (NOTAM) C22/02 regarding the controllers' standdown period between 1030 to 1430 on 13 March 2003. That NOTAM advised that a temporary restricted area and limited route structure would be activated and that specific details would be notified by a subsequent NOTAM. Later that afternoon, Melbourne FIR NOTAM C708/02 was issued advising that pilots of aircraft not in receipt of an approval to operate in the TRA were to be clear of CTA by 1015.

During the morning of 13 March 2002, sometime between 0830 and 0900, the Citation pilot telephoned Airservices requesting approval to fly in the TRA. That request was denied and the pilot subsequently planned to leave CTA, by descending en route, at 1015 in accordance with the NOTAM. The 737 pilot was approved to fly in the TRA.

Prior to the activation of the TRA, the two aircraft were under the control of the Melbourne Centre Canty sector controller. At about 0930, that controller received a temporary local instruction and other documents that detailed how the Canty airspace would be transitioned from CTA to TRA. An FIR Manager was available to assist controllers in the Barossa Group, of which Canty was one sector. At 1020, the Citation pilot requested a clearance to descend to FL200, a level outside the TRA. The Canty sector controller approved the descent but then advised the pilot that he could remain in the TRA. The pilot acknowledged that radio transmission and advised the controller that he would remain in the TRA. The controller was not aware of what aircraft were approved to operate in the TRA.

The plan called for controllers to record details of aircraft that remained in the TRA for subsequent checking by a manager. The intention was to confirm that only aircraft approved to fly in the TRA were actually in the area. At 1025, the controller broadcast that control services were terminated and those pilots should operate in accordance with the TRA NOTAM and closed the Canty sector control position. The controller recorded that both the Citation and the 737 were in the TRA. As Melbourne Centre staff were checking the approval status of the aircraft remaining in the TRA, they were notified by Adelaide Approach controllers that the Citation was in the area without approval.

The contingency plan was developed in 1997 to provide a structured response to, and recovery from, a failure of air traffic services. The plan was reviewed in 1998 - 1999 in preparation for the information technology problems expected during the 2000 new year, and updated in 2001. The plan was broad based and there was limited detail on how it may actually be implemented. When Airservices was notified of the controllers' standdown, it was perceived that a limited segregation service, using the plan, could be offered to assist the aviation industry. The plan was modified in conjunction with the two primary airline operators and the resultant contingency plan complemented their individual company plans.

More detailed local plans, to address the transition to/from the contingency plan, were developed during the period before the notified standdown. Those local plans were not developed in accordance with Airservices safety management processes.

A review of the plan and associated procedures was conducted following the standdown and considerable changes were made before a second similar standdown, involving Sydney and Brisbane controllers, a week later. A further review was conducted after the second standdown and, as a result of both reviews, 139 items were identified for action. A safety assessment of the contingency plan was subsequently conducted in April 2002 resulting in further changes to the plan. Those changes also included limiting the future declaration of a TRA to Class A and C airspace over Australian territory.

Occurrence summary

Investigation number 200201025
Occurrence date 13/03/2002
Location 130 km ENE Adelaide, (VOR)
Report release date 15/01/2004
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Airspace related - Other
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer Cessna Aircraft Company
Model 500
Registration VH-HVM
Serial number 5000349
Sector Jet
Operation type Private
Departure point Bankstown, NSW
Destination Adelaide, SA
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 737
Registration VH-TJP
Serial number 24441
Sector Jet
Operation type Air Transport High Capacity
Departure point Brisbane, QLD
Destination Adelaide, SA
Damage Nil

Boeing 737-800, VH-VOA

Safety Action

Local Safety Action

As a result of this occurrence, the operator advised that the standard operating procedures detailed in the 737 Flight Crew Training Manual were amended to include:

"Altitude Restriction

Whenever there is a low-level altitude restriction after take-off, the autopilot will be engaged as soon as practical".

Analysis

The separation standard would not have been infringed if the crew of the B737 had complied with the 5,000 ft altitude requirement. At the time of the infringement, the B737 was being manually flown by the pilot in command who was distracted from his primary task of controlling the aircraft's flight path. The distraction occurred as he monitored the weather radar and assessed the meteorological conditions that the aircraft was encountering during the climb. The engagement of an autopilot would have reduced the pilot in command's workload and enabled him to monitor the weather situation while the auto-flight system levelled the aircraft at the assigned altitude. Crew coordination did not provide a defence against human error in this occurrence, as the co-pilot did not monitor the aircraft's flight path as it approached the assigned altitude.

Summary

The Boeing B737-800 (B737) was cleared to Melbourne via the Sydney RWY 34R MARUB THREE standard instrument departure (SID) to 5,000 ft. The Boeing B767-338ER (B767) was inbound to Sydney from Auckland, NZ, and had been cleared to descend to 6,000 ft with a vector to a right downwind leg for RWY 34R. As the aircraft approached each other 12 NM east of Sydney, an infringement of the radar separation standard occurred.

The pilot in command of the B737 was the handling pilot for the sector and was manually flying the aircraft while tracking via the SID. He had recently completed retraining on the aircraft after having not flown the type for 10 years.

After take-off, the B737 entered cloud and encountered turbulence as it climbed through 3,500 ft. The pilot in command was monitoring the aircraft's weather radar and stated that he became distracted while assessing the meteorological conditions. Although the co-pilot gave the 1,000 ft to assigned altitude call at 4,000 ft, he was also observing the weather situation and did not monitor the flight instruments as the aircraft approached the assigned altitude. The B737 continued to climb above 5,000 ft and reached 5,700 ft before the pilot in command descended the aircraft back to the assigned level. During the descent the aircraft's traffic alert and collision avoidance system issued a Traffic Alert.

The departure controller issued a turn instruction to the crew of the B737 for avoidance action and an evasive turn instruction to the crew of the B767, in addition to providing traffic information on the B737. Recorded radar data indicated that lateral separation between the aircraft reduced to 2.8 NM with a vertical separation of 900 ft. The required radar separation standard was 3 NM laterally or 1,000 ft vertically.

Occurrence summary

Investigation number 200200463
Occurrence date 20/02/2002
Location 22 km E Sydney, Aero.
State New South Wales
Report release date 21/10/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 737
Registration VH-VOA
Sector Jet
Operation type Air Transport High Capacity
Departure point Sydney, NSW
Destination Melbourne, VIC
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 767
Registration VH-OGP
Serial number 28153
Sector Jet
Operation type Air Transport High Capacity
Departure point Auckland, New Zealand
Destination Sydney, NSW
Damage Nil

Cessna 172P, VH-KTV and TL Ultralight, Jandakot, Western Australia, on 22 February 2002

Safety Action

Following the withdrawal of the CAGRO service at Jandakot, Airservices Australia reviewed the safety case that had been prepared prior to reducing the hours of tower operation. This review accounted for the reported traffic levels at times when the CAGRO service was operating and resulted in a reassessment of risk. The review resulted in an increase of air traffic control staffing levels at Jandakot and a corresponding increase to the evening hours of weeknight tower operations. This change became effective in May 2002.

Factual Information

Synopsis

A Cessna 172P (C172) aircraft, VH-KTV and a foreign registered TL Ultralight Sting aircraft, OK-GUU39, converged and collided at low altitude in the vicinity of the threshold of runway 24 right (24R) at Jandakot, WA. The occupants of both aircraft were uninjured. The TL Ultralight Sting (GUU39) was substantially damaged and the C172 sustained only minor damage.

The owner-pilot of GUU39 had imported the aircraft from Czechoslovakia and it was one of two aircraft (GUU38 and GUU39) that had recently been assembled at Jandakot. Both aircraft were being operated in accordance with special flight authorisations issued by the Australian Civil Aviation Safety Authority (CASA). The two aircraft had completed several flights in company during the days prior to the accident and were returning from Bunbury at the time of the collision. The owner-pilot was the sole occupant of GUU39.

The pilot of the C172 had hired the aircraft from a training organisation for the purpose of conducting a local flight to the training area with one passenger. The pilot was seated in the control seat on the left side of the cockpit. The C172 had joined the circuit from the training area at the time of the collision.

Jandakot tower was active until a short time before the collision and both aircraft conducted their arrival to the airport under General Aviation Aerodrome Procedures (GAAP). The GAAP control zone (CTR) was deactivated at the scheduled time of 1800 Western Standard Time (WST) and the aircraft were being operated under Mandatory Broadcast Zone (MBZ) procedures for the final stages of their flights. At the time of the collision a certified air-ground radio operator (CAGRO) was providing operational information to pilots. Although the CAGRO used the facilities of the control tower to provide this service, he was not providing an air traffic control service.

Sequence of events

Recorded information from primary radar returns, voice transmissions and information obtained during investigation interviews were used to compile the following sequence of events. Neither aircraft's transponder was transmitting encoded Mode C altitude information. Additional data was obtained from a global positioning system (GPS) receiver installed in GUU39. This GPS tracking data corresponded closely with the recorded primary radar information.

At about 1750, the pilot of GUU38 reported to the aerodrome controller (ADC) that GUU38 and GUU39 were at Shipyard, approximately 6 NM south-west of Jandakot at 1,500 ft and in receipt of terminal information Kilo, inbound. At about 1753, the pilot of GUU38 reported to the ADC that GUU38 and 39 were overhead Adventure World, approximately 3 NM west of Jandakot. The ADC instructed the crews to join left crosswind for runway 24R. This was to establish single-runway operations at the airport prior to the deactivation of the GAAP CTR at 1800 and accordingly, have aircraft in the zone complying with MBZ procedures when the airspace became non-controlled. A short time later the pilot of the C172 reported to the ADC that he was at Six South, approximately 6 NM south-southeast of Jandakot at 1,500 ft with Kilo, inbound to the circuit area.

As GUU38 and GUU39 approached the airport, the ADC provided instructions to the pilot of GUU38 to assist with entry to the nominated circuit and instructions for sequencing with an aircraft operating on a left circuit pattern for runway 24R. At about 1755, the pilot of the C172 reported at Forrestdale Lake (a tracking point, approximately 3 NM south of Jandakot) and the controller instructed the pilot to join the circuit upwind at 1,500 ft for runway 24R.

After sequencing GUU38 and providing the pilot with additional instructions to assist with his entry to the circuit, the ADC instructed the pilot to descend to 1,000 ft due to opposite direction traffic. At about 1757, the pilot of GUU39 reported downwind and the controller advised him that he was number three in the landing sequence and confirmed that he was following GUU38 ahead. The controller also instructed the pilot of GUU39 to descend to 1,000 ft due to an aircraft overflying at 1,500 ft.

As the C172 approached the airport, the ADC amended the circuit entry instructions and instructed the pilot to make a left turn and join left downwind and to follow the aircraft mid-downwind. The controller then clarified the instruction and confirmed that the pilot was required to join the circuit on left downwind for runway 24R. Recorded radar data confirmed that the pilot made a left turn and joined the circuit as instructed.

At about 1758, the ADC issued a landing clearance to the pilot of GUU38. Recorded radar data indicates that the aircraft was about to turn onto final approach at the time this clearance was issued.

At about 1759, the pilot of the C172 reported downwind for a full-stop landing for runway 24R. The ADC advised him that the aircraft he was following was mid-base. The pilot replied with the aircraft's callsign and did not indicate to the ADC that he could not see the aircraft ahead. The recorded radar data confirmed the position of GUU39 on mid-base at this time, with GUU38 established on mid-final. The pilot of the C172 recalled seeing an aircraft that he assessed was turning onto final and identified it as the aircraft that he was assigned to follow. He recalled last seeing this aircraft about the time he made his base turn and noted that this aircraft was now on short final approach.

The last primary radar return from GUU38 was received at 1759:41, when the aircraft was approximately 150 m from the threshold of 24R and at a radar derived ground speed of about 45 kts. Twelve seconds later, the ADC commenced an all-stations broadcast, advising that the tower was closing and that MBZ procedures applied. During this transmission the ADC described the traffic disposition as `the aircraft on final GUU39, KTV is a Cessna just turning base, NMS is an Eagle on downwind and SRR to join upwind'. The controller also stated that the CAGRO was in attendance. Recorded radar data confirmed the position of GUU39 on long final approach (approximately 1.4 NM from the runway threshold and having just completed the turn from base), and the C172 on late downwind and about to turn base. During a post-accident interview the pilot of the C172 could not recall the specific aspects of this closing broadcast.

The pilot of the Eagle broadcast his position on downwind a short time after the tower closed and advised his intention to conduct a touch and go. The CAGRO responded to this broadcast and indicated that there was one aircraft ahead, although there were actually two aircraft ahead of the Eagle when this transmission was made. The pilot of the C172 could not recall the specific aspects of this transmission during a post-accident interview and could not recall such a transmission altering his perception of the traffic ahead of him in the landing sequence.

At about 1800:39, the CAGRO made a broadcast on the MBZ frequency (that was the same as the aerodrome control frequency) advising that the CAGRO service was operating, that he had copied all reported traffic and requested details from taxying aircraft. The pilot of an aircraft taxying for departure provided the CAGRO details of his intentions and the pilot of GUU38 reported that he had landed and was taxying for the southern hangars. The pilot of GUU38 subsequently recalled that he was well clear of the runway when he made that transmission, probably in the vicinity of the run-up bay on taxiway B5, about 250 m from the runway turn-off.

At about 1801:16, approximately 30 seconds before the collision, the pilot of GUU39 broadcast his position as, `All stations Jandakot, GUU39 late finals runway 24, full stop'. (The terms late final and short final are interchangeable.) This broadcast was additional to the mandatory radio calls required when operating in an MBZ. The CAGRO acknowledged this transmission and read back the aircraft callsign. The recorded radar data indicated that GUU39 was approximately 550 m from the threshold of runway 24R at this time and the track log from the aircraft's GPS indicated that the aircraft was approximately 100 ft above the elevation of the runway threshold. The pilot of the C172 recalled hearing the transmission and something about `late final', but found the call hard to understand due to static breaking through on his radio. He realised that he was also on late final approach and looked to see if there was another aircraft ahead. As he could not see another aircraft ahead he considered that it was safe to continue his approach to land. The pilot of the C172 did not broadcast his position on short final and such a broadcast was not mandatory. Radar data indicates that at this stage of the approach, GUU39 was 200 m ahead of and about 20 degrees to the right of the C172, relative to that aircraft's track. Both aircraft faded from radar coverage a short time later.

The pilot of GUU39 reported that he had just started the landing flare and estimated that he was about 10 - 15 ft above the runway, when the nose of his aircraft pitched violently upwards. The canopy above his head shattered and the aircraft's nose pitched down before striking the runway and skidding to a stop. It was not until he vacated the aircraft that he realised that he had been involved in a collision with another aircraft.

The pilot of the C172 recalled that the approach to land was normal and he had checked that the runway was clear. He was just about to commence his flare for landing when he heard a loud bang. He realised that he had collided with another aircraft and the two aircraft slid a short distance together along the runway before coming to a halt. He had not seen the other aircraft prior to the collision.

The collision occurred at about 1801:47 and corresponded with a significant reduction in groundspeed recorded on the GPS track log from GUU39. The propeller of the C172 had struck the rear fuselage of GUU39 several times and had probably also shattered the cockpit canopy. There was no post impact fire.

Separation between aircraft during base and final approach

The recorded radar data indicated that as the pilot of the C172 turned base there was a lateral displacement of about 1 NM (1,850 m) between the two aircraft, with GUU39 established on long final approach in a relative position of about a 12 o'clock. Information recorded in the GPS track log from GUU39 indicated that at this time, it was at an altitude of about 650 ft, approximately 2,150 m from the threshold of runway 24R.

As the C172 turned onto final approach, the lateral displacement between the two aircraft was about 800 m. At the time the pilot of GUU39 broadcast his position on late final, the lateral displacement between the two aircraft had further reduced to about 200 m. The recorded radar data indicated that the two aircraft continued to converge, with the ground track of the C172 appearing to converge with GUU39 from the rear left quadrant.

The average groundspeed (radar derived, to the nearest 5 kts) of the C172 on the base leg of the circuit was calculated to be about 85 kts, 80 kts during early final and 60 kts on short final. The average groundspeed (radar derived, to the nearest 5 kts) of GUU39 on the base leg of the circuit was calculated to be about 75 kts. It was 50 kts during early final and 40 kts on short final.

Performance of aircraft on base and final approach

The pilot of GUU39 reported that the airspeed of his aircraft was about 90 kts as he turned base and that the speed was progressively reduced during the base leg. The final approach was flown at an airspeed of 60 kts with the aircraft configured with full flap.

The pilot of the C172 reported that the base leg of the circuit was flown at an airspeed of 70 kts and 65 kts on the final approach.

Meteorological and environmental information

The Jandakot Automatic Weather Station recorded a south-westerly surface wind of about 10 kts in the period leading up to the collision and visibility conditions were reported as being good. Last light at Jandakot was 1925 WST. At the time of the collision the sun was approximately 10 degrees above the western horizon and about 30 degrees to the right of the extended centreline for runway 24R.

Aircraft on final approach to runway 24R overflew a sand quarry and other areas of light-coloured terrain.

Colour scheme GUU39

The aircraft was predominantly white, with colour decals and stripes on the fuselage. The wingspan was about 8.5 m.

GUU39 pilot information

The pilot of GUU39 held a valid licence issued by the Czech Republic Light Aircraft Association. He also held an unrestricted cross-country certificate issued by the Australian Ultralight Federation and a restricted private pilot licence issued by CASA. He was entitled to operate the foreign registered GUU39 on the basis of his licence issued by the Czech Republic Light Aircraft Association.

C172 pilot information

The pilot of the C172 held a student pilot licence and had passed the general flying progress test. This permitted the student pilot to carry passengers during certain local flights. All flights conducted by a student pilot required the authorisation of a flying instructor. He held a CASA-issued Class 2 medical certificate, indicating that correction for distance vision was required. At the time of the accident, the pilot was wearing prescription contact lenses, together with polarised sunglasses.

Polarised sunglasses

Polarised sunglasses contain lenses that polarise the incoming light waves to the eye and reduce reflected glare from flat surfaces. Aviation literature identifies several limitations associated with the use of polarised lenses in aviation, including the potential for polaroid sunglasses to `mask the sparkle of light that reflects off shiny surfaces, such as another aircraft's wings or windscreen' (V. B. Nakagawara, R. W. Montgomery, K. J. Wood, Aviation Accidents and Incidents Associated With the Use of Ophthalmic Devices by Civilian Pilots, Civil Aviation Medicine Institute, Federal Aviation Authority DOT/FAA/AM-01/14 July 2001). The CASA Designated Aviation Medical Examiner's Handbook also states `Polarising sunglasses should not be used when flying. The polarising filter interacts with the cockpit transparency to produce a distorted and degraded visual field that poses a threat to air safety'.

Certified Air-Ground Radio Operator

The CAGRO operated each night, Monday to Friday, between 1800 and 2100 and provided pilots with basic operational information that may be relevant for aircraft operating at the airport. Although part of this service was to provide traffic information to pilots of aircraft operating inside the MBZ, it was not the responsibility of the CAGRO to continually monitor the relative position of aircraft or to use techniques to ensure that adequate separation was maintained between aircraft. The service did not provide any function associated with the provision of an air traffic control service and pilots remained responsible for all operations within the MBZ.

The CAGRO used the control tower facilities to provide the service. The operator on duty for the night of the accident had previously been employed as an air traffic controller by Airservices Australia (Airservices) and had extensive experience in control tower operations. He held a CASA-issued Air/Ground Radio Operator Certificate.

The CAGRO had commenced duty concurrently with deactivation of the GAAP CTR. He did not observe the two aircraft converging on final. A large concrete support pillar could restrict the view of the airspace associated with the approach to runway 24R and may have obstructed the CAGRO's view of the two converging aircraft on short final approach.

Tower operating hours

Since May 1997 Airservices had reviewed staffing levels and tower operating hours at Jandakot. Similar reviews were also performed at other GAAP airports. The Jandakot reviews had resulted in the reduction of both tower operating hours and staffing levels.

In an attempt to make tower operations more cost effective, staffing levels were further reduced during December 1998 and resulted in a reduction of controller numbers from ten to seven. This reduction in staff numbers was facilitated by a reduction in tower operating hours and various procedural changes to the conduct of flight operations at Jandakot. Prior to implementing this change, Airservices conducted a review of airport traffic levels and prepared a safety case to assess the impact of the proposed changes. This safety case was submitted to CASA and no objection was raised to the proposal to reduce staffing levels and to reduce tower operating hours.

Following the reduction in tower operating hours there was a perception among local operators that operations had become less safe. These assessments were based on their perception that the traffic density sometimes reached levels that were unsuitable for MBZ operations and also that a significant number of aircraft were failing to comply with the published MBZ procedures.

In response to concerns from the local operators and to address an issue of some pilots failing to transmit the required information on the MBZ frequency, the airport operator trialled and then implemented a permanent CAGRO service during evening week days. Data collected during the operation of this service indicated that traffic density occasionally exceeded the upper limits used to define the risk for the purpose of the safety case prepared by Airservices to assess the acceptable levels of safety during MBZ operations.

Events post-collision

Following the collision the airport operator reviewed the ongoing provision of the CAGRO function and decided to discontinue the service.

Traffic complexity at time of collision

In the period leading up to the collision there was one aircraft conducting circuit operations. The two Ultralight Sting aircraft had joined the traffic pattern for a landing and were followed by the C172, also for a landing. At the time of the collision there were three aircraft in the circuit and another inbound aircraft joining the traffic pattern upwind. Several aircraft were taxying for departure. Of the three aircraft operating in the circuit, all were on the final leg when the collision occurred.

Significant Factors

  1. The pilot of the C172 incorrectly identified the aircraft that he was instructed to follow and did not realise that there was another aircraft in the landing sequence ahead.
  2. The pilot of the C172 did not sight GUU39 during his base and final approach. This task was made more difficult by a number of factors including the lack of contrast between GUU39 and the background terrain, the relative position between the two aircraft during the final stages of the approach and possibly the effects of sun glare. This was compounded by the pilot's perception that the aircraft ahead had already landed.
  3. GUU39 and the C172 converged during final approach due to the relative difference in aircraft approach speeds.
  4. The pilot of the C172 did not realise that the `late finals' broadcast was made by the pilot of GUU39, also on short final approach.

Analysis

The circumstances of the collision were consistent with the C172 converging on GUU39 from behind, principally as a consequence of the relative speed difference between the two aircraft during the final approach to land. Adequate lateral displacement of about 1 NM existed between the two aircraft when the C172 turned onto the base leg. Although the displacement between the two aircraft had further reduced to about 800 m at the time the C172 turned onto final approach, it was adequate for that stage of the approach.

The pilot of the C172 had not seen GUU39 prior to the collision and was unaware that another aircraft was ahead in the landing sequence. Prior to the closure of the tower, the ADC had correctly described the circuit traffic when issuing sequencing details to the pilot of the C172 and instructing him to follow the aircraft on mid-base. Although it was possible that the pilot of the C172 had sighted GUU38 and identified it as the traffic to follow, that aircraft was on mid-final approach and not mid-base as described by the controller.

The closing broadcast made by the ADC deactivated the control zone at the published time. The depiction of the location of aircraft provided by the controller appeared to be accurate and correctly described the relative positions of aircraft in the circuit. Although the investigation could not positively determine the position of GUU38 at the time the closing broadcast was made, based on its ground speed and last-recorded radar position, it was probable that the aircraft had reached the runway threshold at the time of the closing broadcast. The relative position and lateral displacement between GUU39 and the C172 at the time of the closing broadcast did not indicate at this stage that there was a conflict between the two aircraft.

It was probable that the pilot of the C172 had misidentified the traffic he was instructed to follow by the ADC during the initial sequencing to land. He recalled that he last sighted this aircraft as it was on short final approach to runway 24R. Because this aircraft was well ahead of him in the traffic pattern it would have been unlikely for him to consider this aircraft as traffic for his arrival. He was unaware of the second aircraft and its position relative to his aircraft. Had the pilot of the C172 correctly identified the aircraft he was instructed to follow, it would have been more likely that he would have assessed this as a possible conflict for his approach and landing and may have more closely monitored its position relative to his aircraft.

Although the CAGRO incorrectly reported the number of aircraft ahead in the landing sequence when responding to the downwind broadcast made by the pilot of the Eagle, the pilot of the C172 could not recall specific aspects of this transmission. It was not possible for the investigation to determine if this transmission had influenced his understanding of his position in the landing sequence.

It was not a requirement for the pilot of either aircraft to broadcast their position on final approach. The pilot of the C172 did hear the broadcast from the pilot of GUU39 while on short final approach, but found the transmission hard to understand and did not recognise that this transmission was from the pilot of another aircraft, also on short final approach. The pilot of the C172 did not broadcast his position on short final approach and accordingly, the pilot of GUU39 ahead would have been unaware of the proximity of the C172. Although the pilot of the C172 did look to see if there was another aircraft ahead, he did not see the aircraft. The task of successfully detecting the other aircraft at that stage of the approach was made more difficult by the relative position between the two aircraft and his expectation that the aircraft ahead had already landed.

The investigation was unable to determine what role the use of polarised sunglasses may have played in the inability of the pilot of the C172 to see the aircraft ahead and while they were laterally displaced during final approach. The polarised lenses could have eliminated some of the reflected glare from the upper surfaces of GUU39's wings and reduced the probability of seeing the aircraft ahead.

As the lateral displacement reduced between the two aircraft, GUU39 could have become progressively harder to see due to the combination of the pilot's seating position in the left control seat of the C172 and the relative position of GUU39 on the right side of the C172's nose.

The lack of contrast between the light colour of GUU39 and the light coloured sandy terrain over which it flew also probably increased the difficulty for the pilot of the C172 to see the aircraft ahead.

The position of the sun on the western horizon may also have reduced the ability of the pilot of the C172 to see the aircraft ahead.

After the pilot of the C172 turned his aircraft onto the base leg of the circuit, a number of factors existed that could have increased the difficulty for him to successfully detect another aircraft that was ahead of him in the traffic pattern, but which had not previously been sighted. Therefore, the investigation concluded that the best opportunity for the pilot of the C172 to see and identify this aircraft was on the downwind leg, when the ADC provided the sequencing instructions. The successful completion of this task was probably prejudiced when the pilot of the C172 inadvertently sighted GUU38 on final approach.

The investigation did not consider that the density of traffic or complexity of operations within the Jandakot MBZ at the time of the accident were factors in the collision.

Summary

A Cessna 172P (C172) aircraft, VH-KTV and a foreign registered TL Ultralight Sting aircraft, OK-GUU39, converged and collided at low altitude in the vicinity of the threshold of runway 24 right (24R) at Jandakot, WA. The occupants of both aircraft were uninjured. The TL Ultralight Sting (GUU39) was substantially damaged and the C172 sustained only minor damage.

The owner-pilot of GUU39 had imported the aircraft from Czechoslovakia and it was one of two aircraft (GUU38 and GUU39) that had recently been assembled at Jandakot. Both aircraft were being operated in accordance with special flight authorisations issued by the Australian Civil Aviation Safety Authority (CASA). The two aircraft had completed several flights in company during the days prior to the accident and were returning from Bunbury at the time of the collision. The owner-pilot was the sole occupant of GUU39.

The pilot of the C172 had hired the aircraft from a training organisation for the purpose of conducting a local flight to the training area with one passenger. The pilot was seated in the control seat on the left side of the cockpit. The C172 had joined the circuit from the training area at the time of the collision.

Jandakot tower was active until a short time before the collision and both aircraft conducted their arrival to the airport under General Aviation Aerodrome Procedures (GAAP). The GAAP control zone (CTR) was deactivated at the scheduled time of 1800 Western Standard Time (WST) and the aircraft were being operated under Mandatory Broadcast Zone (MBZ) procedures for the final stages of their flights. At the time of the collision a certified air-ground radio operator (CAGRO) was providing operational information to pilots. Although the CAGRO used the facilities of the control tower to provide this service, he was not providing an air traffic control service.

Occurrence summary

Investigation number 200200548
Occurrence date 22/02/2002
Location Jandakot, Aero.
State Western Australia
Report release date 15/10/2003
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Airborne collision
Occurrence class Accident
Highest injury level None

Aircraft details

Manufacturer Cessna Aircraft Company
Model 172
Registration VH-KTV
Serial number 17275504
Sector Piston
Operation type Private
Departure point Jandakot, WA
Destination Jandakot, WA
Damage Substantial

Aircraft details

Manufacturer TL Ultralight
Model TL-2000
Registration OK-GUU39
Sector Piston
Operation type Sports Aviation
Departure point Bunbury, WA
Destination Jandakot, WA
Damage Substantial

de Havilland DH-82A, VH-AJG

Safety Action

As a result of this occurrence, the Australian Transport Safety Bureau issues the following safety recommendation:

RECOMMENDATION 20030027

The Australian Transport Safety Bureau recommends that the Civil Aviation Safety Authority review the inspection procedures with regard to the continuing airworthiness of wooden wings and propellers that were manufactured with the use of Casein adhesive.

Analysis

The investigation could not determine the reason for the pilot losing control of the aircraft. There was no physical evidence indicating that the right wheel destroying two taxiway lights during take-off damaged any major structural element or in any way contributed to the accident. Also, no evidence was found to support the reported observations of the left or the right wings folding up or a part of the aircraft separating in flight. The evidence suggested that the portion of the right-wing rear spar interplane strut that was found approximately 73 metres from the accident site, was thrown to its location as a result of impact forces when the right wings struck the tree.

The aircraft was observed cruising in level flight when it apparently departed controlled flight. It was not observed changing altitude or commencing a turn and would have been experiencing approximately 1g loads only, well below the minimum design load of 5g.

The timber examination reports noted failures of the laminated members, on wings of the original manufacture. This was probably due to the Casein glue having been attacked by micro-organisms after the wood and the glue moisture content rose above 18%. The attack by micro-organisms was least evident in areas close to the edges of the glued joints. Circulating air quickly dries these areas causing any attack by micro-organisms to cease while it can continue on the inner areas of the joint that remain moist. This, and the fact that the glued joints were further secured by nails, bolts and screws would most likely prevent detection of any glued joint that had been attacked by micro-organisms. It is also considered likely that the presence of `Irish linen' and the thick coat of paint on the propeller would disguise any underlying delamination.

The wreckage and the exposed wood were soaked wet while on site. The possibility of attack by micro-organisms commencing at that time was not considered likely, because once the wreckage was removed from the site it was stored in dry environment. That prevented elevated moisture content and attack by micro-organisms.

CONCLUSIONS

The pilot was appropriately qualified and endorsed on the aircraft.

No evidence was found indicating that the aircraft striking and destroying two taxiway lights during take-off contributed to the accident.

It could not be determined if any part of the aircraft structure or the propeller failed prior to the aircraft departing from the level flight.

The wood that the wings were constructed from was of a high quality and there was no evidence to indicate that a failure of wood was a factor in the accident.

A number of laminated members on three wings of the original manufacture and the propeller failed at the glue line rather than in the wood, probably as a result of Casein glue having been attacked by micro-organisms.

Current inspection procedures would not allow detection of delaminated Casein glued joints.

Summary

The pilot hired the de Havilland DH82A Tiger Moth aircraft, registered VH-AJG, to undertake a local pleasure flight with a friend. The aircraft took off from a grassed area parallel to the Royal Australian Air Force (RAAF) base Williamtown's main runway between the eastern end of the runway and taxiway `A'. During the take-off, the aircraft was observed to veer right and strike and destroy two taxiway lights with the right wheel. The pilot continued the take-off and the aircraft departed the Williamtown circuit area at 1428 Eastern Summer Time.

Based on witness reports and radio transmissions by the pilot, the aircraft initially conducted a sightseeing flight over the coastal suburbs of Newcastle City. About 20 minutes after takeoff, the pilot broadcast that he was transiting north through the Williamtown Mandatory Broadcast Zone west of the coast. The aircraft subsequently joined the Williamtown circuit from the north at 1519. The actual flight profile and manoeuvres conducted during the flight are not known. Shortly after joining the circuit, the aircraft was observed to depart level flight and impact the ground approximately 2 km southwest of the Williamtown airport. Both occupants were fatally injured and there was no evidence of fire in flight or after the impact.

A helicopter with an instructor and student on board was in the circuit area, about 1.5 km behind the Tiger Moth. The helicopter was about 800 ft above ground level and maintaining approximately 60 kts. The helicopter crew estimated that the Tiger Moth was flying at the same speed and altitude. The helicopter's pilots reported observing the left wings fold up, the aircraft rotate and fall almost vertically in a steep nose-down attitude rotating only a couple of times before impacting the ground.

A witness on the ground reported observing the aircraft's right wings fold back, followed by the aircraft spinning or spiralling to the ground. Another witness reported seeing the right wings folding up, making the wings into an `L' shape and about a metre long silver pole flying up from the cockpit area. The aircraft then started turning to the right. None of the witnesses reported observing the aircraft changing altitude or commencing a turn prior to the loss of control.

Personnel information

The pilot held a valid Australian Special Pilot Licence and had accumulated 360.6 hours total of which 4.1 hours were on the Tiger Moth. The pilot's tail-wheel experience totalled 7.9 hours. He was endorsed on the type and flew earlier that day with an instructor. The accident flight was his first unsupervised flight on the type.

The Australian Special Pilot Licence authorises a pilot with a current overseas private or higher class of licence to undertake private flights in Australia. The pilot held a United Kingdom private licence. He held an Australian Class 2 (private) medical certificate valid until October 2005, issued by the Civil Aviation Safety Authority (CASA) on the basis of his United Kingdom medical. There was no evidence of any physiological condition affecting the pilot that may have contributed to the occurrence.

Operation and weather

The aircraft was operated by the RAAF Williamtown Flying Club located on the base and the accident flight was the aircraft's third flight of the day. The weather was reported to be fine with a light north-easterly breeze.

The aircraft and its history

The Tiger Moth was a fabric covered biplane aircraft with two open cockpits in tandem arrangement. The pilot sat in the rear cockpit. The truss type fuselage was made from steel tubes while the wings and tail surfaces were constructed from wood. The two-spar, single-bay wings were reinforced by a system of drag struts, drag and anti-drag wires. Each spar was made from a single piece of wood with a reinforcing doubler glued at the interplane strut attachment. The spars were fitted with metal fittings used to attach the wings to the fuselage and cabane centre section upper struts. The flying, landing and cabane wires, tie rods and interplane struts gave the wings the required rigidity.

The aircraft was stressed to withstand maximum loads of approximately 7.5g (acceleration due to earth gravity). Information from the manufacturer indicated that even with the reinforcing doubler delaminated and ineffective, the aircraft was designed to withstand manoeuvre loads of about 5g.

The aircraft was manufactured in 1942 and used by the RAAF until August 1947, when it was decommissioned and received civilian registration. The aircraft was substantially damaged during an accident in 1967. It was then dismantled and stored until 1988 when it was rebuilt and had since accumulated approximately 48.35 flying hours. The fuselage truss structure was repaired and an overhauled engine was installed. The aircraft was fitted with four wings and propeller of original manufacture. The previous history of the wings and the propeller could not be determined.

In November 2001, the left lower wing was damaged when the landing gear collapsed on landing in Newcastle after a ferry flight from Bankstown. A new wing was manufactured and fitted in December 2001. On 13 January 2002, the left lower wing contacted the ground while the aircraft taxied after a flight.

The aircraft was used to perform only limited aerobatic manoeuvrers such as barrel rolls, loops and stalls. A few steep turns and dives were performed during the flights on the morning of 16 February 2002.

The aircraft was maintained in accordance with the applicable and current maintenance requirements. The maintenance release was valid until 9 March 2002. Examination of maintenance documents indicated that all required maintenance had been carried out. The aircraft had no known maintenance deficiencies and was considered capable of normal operation prior to the accident.

Accident site and wreckage examination

The impact site was an area of dense undergrowth, tall grass and 10 to 12 m high trees. The ground was soft and waterlogged. The wreckage was contained within a small area at the foot of a tall tree, its distribution indicated that the aircraft impacted in a steep nose-down attitude while rotating to the left. The aircraft and its four wings were extensively damaged. The wing spars were splintered and broken at numerous locations. The right wings struck a tree during impact and their damage was significantly more severe than the damage sustained by the left wings.

With the exception of both propeller blades and parts of the right wing rear spar interplane struts, all aircraft components and extremities were accounted for at the accident site. The propeller boss that remained attached to the engine shaft was the only part of the propeller recovered. Propeller contact marks on the tree indicated that the propeller was rotating at the time of impact. A part of the missing interplane strut was found some six months after the accident approximately 73 m from the accident site.

Examination of the engine, systems and flight controls did not reveal any pre-impact defect that would have prevented them from normal operation. The left front and rear flying wires and the left cabane wire were severed in overload. There was no fuel remaining in the ruptured fuel tanks, but fuel was evident at the accident site.

Sections of the wing spars were examined by a timber specialist who concluded that the wood was of high quality and in good condition. It was free of decay and there was no evidence to indicate that a failure of the wood was a factor in the accident. Some blue colouring of wood was present in one laminate of the propeller boss, but there was no evidence to link this discolouration with failure of the propeller. The specialist reported that many of the wood failures, on the three wings of the original manufacture, were brash rather than splintering, indicating some embrittling associated with the age of the wood.

Adhesive failure

The specialist also reported that some laminated members on the three wings of the original manufacture and the propeller failed at the glue line rather than in the wood. The failure was due to the glue line being devoid of the adhering adhesive. The adhesive was identified as Casein. The specialist reported that the observed failure was typical of that of Casein that was exposed to attack by micro-organisms and that the attack was evident all over the glued area of the joint except on small areas close to the edges of the glued components. No delamination was observed on the new wing fitted in December 2001. This wing was manufactured using modern synthetic resin adhesive.

Casein is a milk-based glue that was particularly popular around the 1940s, when the three wings and the propeller were most likely manufactured. Since it contains protein, it could be subject to attack by micro-organisms and weakened if the moisture content of the wood and the adhesive is allowed to increase above a certain level. The Casein glued joints, however, do not degrade instantaneously when wet. The amount of degradation is proportional to the time the joint is allowed to remain moist.

The specialist advised that the attacks by micro-organisms occurs when the wood and adhesive moisture content is approximately 18% or greater. A moisture content of 18% could be achieved if the wood was exposed to a relative humidity of 85% or greater. While such humidity is experienced in tropical Australia, the average moisture content of the wood and the adhesive is not likely to reach this level due to lower values during various times of the day. The evidence, however, indicated that the glued joints were probably subjected to a number of periods when the moisture content was high, allowing micro-organisms to attack the adhesive. Such periods were further evidenced by the presence of corrosion around the nails, bolts and screws securing the joints.

However, the specialist concluded that there is little or no evidence indicating that any single glue failure may have resulted in a catastrophic failure of a major structural element of the aircraft or the propeller.

Propeller

The numbers stamped on the propeller boss were consistent with the propeller having been manufactured in the 1940s. The wooden propeller consisted of a number of laminates. After the propeller was manufactured, the centre part of each blade was wrapped with a layer of `Irish linen'. The entire propeller was then coated with a relatively thick coat of dark coloured cellulose-based paint.

Occurrence summary

Investigation number 200200377
Occurrence date 16/02/2002
Location 2 km SW Williamtown, Aero.
State New South Wales
Report release date 27/02/2003
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of control
Occurrence class Accident
Highest injury level Fatal

Aircraft details

Manufacturer de Havilland Aircraft
Model DH-82
Registration VH-AJG
Serial number 382
Sector Piston
Operation type Private
Departure point Williamtown, NSW
Destination Williamtown, NSW
Damage Destroyed

Boeing 747-438, VH-OJL

Summary

A Boeing 747-438 (north-east bound B747) was travelling on air route B200 within the Tahiti flight information region (FIR) at flight level (FL) 330 and was assigned FL350 by Tahiti air traffic control. When the aircraft was at FL339, the crew reported that they observed a traffic alert and collision avoidance system (TCAS) indication of another aircraft. That aircraft was a Boeing 747-400 (south-west bound B747) that was travelling in the opposite direction at FL340 also on air route B200, approximately 40NM ahead. The crew of the north-east bound B747 immediately descended to FL330. However, there was an infringement of separation standards.

The air traffic controller had planned to assign FL350 to the crew of the north-east bound B747 to maintain a separation standard with a third B747 travelling on B200 at FL330 in the opposite direction. However, FL350 was not available to the north-east bound B747 crew until the controller in Tahiti could established a separation standard with the south-west bound B747 travelling in the opposite direction at FL340.

The controller had prepared a pre-formatted controller-pilot data link communication (CPDLC) message for transmission to the crew of the north-east bound B747. CPDLC is a `means of communications between a controller and pilot using data link for [Air Traffic Control] communication' (ICAO Doc 4444 ATM/501 1-5). The message was a clearance that instructed the crew to `climb to and maintain FL350'. The controller prepared the message in advance. That was reported to be a common practice and assisted with workload management. The controller intended to send the message to the crew of the north-east bound B747 once they had passed the south-west bound B747 and a separation standard had been established. However, he unintentionally sent the message before the two aircraft had passed. On receipt of the clearance to climb, the north-east bound B747 commenced climb to FL350.

The controller immediately realised the error. He reported that he had made seven unsuccessful attempts to contact the crew of the north-east bound B747 using `selcal'. Selcal is a coded tone sent to a specific aircraft that indicated to the crew that an ATC unit was attempting to contact them via HF radio. The crew of the north-east bound B747 reported that they did not receive an indication that the controller was attempting to contact them via selcal and did not reply. The controller eventually sent another CPDLC message to the crew instructing them to 'maintain FL330 due traffic'. The crew of the north-east bound B747 acknowledged receipt of that CPDLC message. They reported however, that they had already commenced descent to FL330 when they initially observed the south-west bound B747 on the TCAS.

Air traffic controllers used automatic dependent surveillance (ADS) to verify the position of appropriately equipped aircraft operating within the Tahiti FIR in accordance with the South Pacific Operations Manual (SPOM). The SPOM detailed the procedures and requirements applicable in South Pacific FIR's for ADS approved aircraft and applied within the Tahiti FIR. ADS provides data, including position and altitude information, from navigation equipment on-board an aircraft to air traffic control via a data link. The information is updated at specified time intervals known as the periodic reporting rate. The periodic reporting rate for ADS reporting in the Tahiti FIR was 30 minutes.

Despite the unintentional clearance issue, the controller did not realise that there had been an infringement of separation standards. He had received an ADS report from the north-east bound B747 that confirmed the aircraft was level at FL330, before he sent the clearance to climb, and he received a report from that crew, subsequent to the occurrence, confirming that they were level at FL330. There were no ADS reports from the north-east bound B747 to Tahiti ATC when the aircraft was changing levels. The controller was not aware that the north-east bound B747 had left FL330 and, therefore, was not aware there had been an infringement of separation standards.

Preparation of the CPDLC message in advance may assist controllers with workload management. However, controllers need to exercise care and ensure that pending messages are not unintentionally sent.

The aircraft operator could not determine why the crew of the north-east bound B747 did not receive an indication that the controller was attempting to contact them using selcal. The selcal equipment on board the aircraft was operational before and after the occurrence, although Tahiti air traffic control had reported degraded HF communication on the night of the occurrence.

Occurrence summary

Investigation number 200200190
Occurrence date 08/02/2002
Location PUMIS, (IFR)
State International
Report release date 22/10/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration VH-OJL
Serial number 25151
Sector Jet
Operation type Air Transport High Capacity
Departure point Auckland, New Zealand
Destination Los Angeles, United States
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration ZK-NBW
Sector Jet
Operation type Air Transport High Capacity
Departure point Los Angeles, United States
Destination Auckland, New Zealand
Damage Nil

Boeing 747-4H6, VH-OED

Significant Factors

The controller issued an incorrect climb instruction.

Analysis

The negative response `UNABLE' from the controller to the crew's request for a higher level, in accordance with the SPOM, would have reduced the possibility of error in the pre-formatted CPDLC message selected by the controller for transmission to the crew of OEB.

The use of HF radio and CPDLC combined with a high controller workload and similar radiotelephony callsigns of the two aircraft involved in the communications exchanges possibly contributed to the confusion to which the controller referred and may have resulted in the transmission of the incorrect CPDLC message.

When an individual controller combines a number of positions, diverse scenarios and increasing workloads can quickly distract controllers. Controllers and supervisors need to be vigilant so that ATC positions can be separated to facilitate effective workload management.

The monitoring of TCAS and high situational awareness by all the crews involved proved to be an effective defence for the aviation system.

Summary

A Boeing 747-48HE registered VH-OEB (OEB) was en-route from Los Angeles, USA to Auckland, New Zealand was maintaining flight level (FL) 330 as assigned by Tahiti air traffic control (ATC). A Boeing 747-4H6 registered VH-OED (OED) was en route from Auckland to Los Angeles and was also maintaining FL330. The crew of OEB reported that they observed, on their traffic alert and collision avoidance system (TCAS), another aircraft that was on a reciprocal track at the same level (OED). The crew of OEB turned their aircraft right 15 degrees and descended to FL325. The crew of OED later reported that they observed, on their TCAS, another aircraft that was on a reciprocal track at the same level (OEB), and climbed their aircraft to FL333. A third aircraft, a Boeing 747, was en-route from Los Angeles to Auckland at FL340. The crew of OED also observed an indication of that aircraft on their TCAS.

The vertical separation standard was 1,000 ft. The vertical distance between OED and OEB reduced to 800 ft, and to 700 ft between OED and the third aircraft. There was an infringement of separation standards.

The crews of OEB and OED were communicating with Tahiti ATC via both Controller-Pilot Data Link Communications (CPDLC) and high frequency (HF) radio. CPDLC was a 'means of communications between a controller and pilot using data link for [Air Traffic Control] communication' (ICAO Doc 4444 ATM/501 14.1.1). Messages were compiled and initiated either by the crew of the aircraft or by ATC and were, in this case, pre-formatted. The use of pre-formatted messages was 'intended to reduce the possibility of misinterpretation and ambiguity' (ICAO Doc 4444 ATM/501 14.3.4).

The crew of OEB had requested climb from FL320 to FL340 but that request was denied. About ten minutes later the crew of OED requested climb from FL330 to FL350. Tahiti ATC asked the crew of OED, via CPDLC, when they could reach FL350 and then denied the request for climb. The French Bureau d'Enquetes et d' Analyses pour la Securite de l'Aviation Civile (BEA) produced a report on the occurrence. The BEA reported that the crew of OED then contacted Tahiti ATC via HF radio and advised that they could reach FL350 by time 1140 universal coordinated time. The controller responded via HF radio and instructed the crew of OED to maintain FL330. The crew of OEB then requested, via CPDLC, climb to FL330. The CPDLC response provided to the crew of OEB was 'climb to and maintain FL330 due to traffic' even though FL330 was not available. The message was selected by the controller from the menu of pre-formatted messages available in the system.

The South Pacific Operations Manual (SPOM Part 5.5) stated that 'when a clearance request is denied, the controller shall use the element "UNABLE" in the uplink message'. The SPOM detailed the procedures and requirements applicable in the South Pacific flight information regions (FIRs) for CPDLC equipped aircraft and applied within the Tahiti FIR. The SPOM (Part 5.1) also stated that `generally, when a CPDLC aircraft is operating within a CPDLC FIR, CPDLC will be the primary means of communication'.

Subsequent to the occurrence OEB returned to FL320 and OED returned to FL330. The crews then reported to Tahiti ATC at those respective levels. The controller had not intended to assign FL330 to the crew of OEB and did not realise that they had been assigned FL330, or that they had climbed to FL330 and subsequently returned to FL320. When the crews reported at FL330 and FL320 respectively, after the occurrence, that information was consistent with the information the controller had recorded on the flight progress strips. The controller was not aware that there had been an infringement of separation standards.

The BEA reported that the controller believed there were possibly two reasons why a climb instruction had unintentionally been assigned to the crew of OEB:

1. In reply to the request by OEB for climb to FL330, the controller pre-selected the wrong pre-formatted CPDLC message and sent the message without checking it, or

2. The controller confused the two aircraft because of their similar callsigns.

The BEA reported that four controllers had been rostered for the period between 1900 hours and 0700 hours (Papeete local time) and were rostered to cover the aerodrome control position, the approach control position and the area control position. The event occurred at 0050 Papeete local time. The controller involved in the occurrence was alone in the tower at the time of the occurrence and was performing all three functions. That controller considered that the workload was high due to poor quality HF radio, increased coordination with other centres in relation to aircraft using 'flexible routes' and difficulty validating CPDLC messages with OED.

The controllers at Tahiti had been trained in France but that training had not included the use of CPDLC. Initial training on the use of CPDLC was incorporated into a one-week training program in Papeete that included CPDLC with other local training requirements. Ongoing CPDLC training was incorporated into on-the-job training which could take controllers around 57 weeks to complete. Controllers reported that the initial training was essential but they had not been exposed to the system sufficiently during training to master all aspects of the system.

The controller involved in the occurrence had been working Tahiti Oceanic Controlled Airspace for approximately three and a half years and was qualified on the three ATC positions being managed at the time of the occurrence.

Occurrence summary

Investigation number 200200094
Occurrence date 31/01/2002
Location 111 km NNE PUMIS, (IFR)
State International
Report release date 23/01/2003
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration VH-OED
Serial number 25126
Sector Jet
Operation type Air Transport High Capacity
Departure point Auckland, NEW ZEALAND
Destination Los Angeles, U.S.A.
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration VH-OEB
Serial number 25778
Sector Jet
Operation type Air Transport High Capacity
Departure point Los Angeles, U.S.A.
Destination Auckland, NEW ZEALAND
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration ZK-SUJ
Sector Jet
Operation type Air Transport High Capacity
Departure point Los Angeles, U.S.A.
Destination Auckland, NEW ZEALAND
Damage Nil

Cessna U206F, VH-STL

Significant Factors

  1. Weather conditions at Horn Island aerodrome were less than visual meteorological conditions at the time of the occurrence.
  2. The pilot was not current for flight in IMC.
  3. The pilot lost control of the aircraft at an altitude from which recovery was not considered possible.



 

Summary

The pilot of a Cessna 206 (C206), departed from Badu Island, Qld at about 1210 Eastern Standard Time (EST) on a positioning flight to Horn Island, Qld in accordance with the visual flight rules (VFR). The aircraft had an estimated fuel endurance of 270 minutes. The pilot, who was the sole occupant, had been tasked to conduct a charter flight from Horn Island at 1330 with passengers who were reported as arriving on a scheduled flight from Cairns.

At about 1221 the pilot broadcast on the Torres Mandatory Broadcast Zone (MBZ) frequency that he was over Wednesday Island and tracking for a 3 NM final approach to runway 26 at Horn Island. A short time later he broadcast that he was holding until the weather over the runway cleared. At about 1238 the pilots of two aircraft in the Bamaga area reported hearing a MAYDAY broadcast from the pilot of the C206 on the MBZ frequency. The pilot did not describe the nature of the emergency. Further efforts by the pilots operating in the Bamaga area to contact the pilot of the C206 were unsuccessful and they advised air traffic services of the MAYDAY they had heard on the MBZ frequency.

An air and sea search was commenced. Later that day floating debris, identified as belonging to the C206, was located. The recovered items included the left main wheel and landing gear leg, the nose wheel and part of the nose gear landing leg and a seat. The following day divers located the aircraft approximately 3 NM east of Horn Island in 7 m of water but the pilot was not found.

The aircraft was recovered from the sea floor where it had been submerged for just over two days. It had been extensively damaged by impact forces. The nature of the recovery process resulted in further disruption of the wreckage. The outer left wing, left aileron and the engine cowls were not recovered. Salt-water corrosion had affected many of the aircraft components. The flaps were found in the retracted position and damage to the propeller blades was consistent with low engine power at the time of impact. Damage was consistent with the aircraft having struck the water at a moderate to high speed in a nose-down, left wing low attitude. The collision with the water was not survivable.

Examination of the damaged gyroscopic flight instruments did not reveal any indication of pre-impact malfunction. The vacuum pump was found in good condition and capable of normal operation. Although the aircraft was equipped with appropriate instrumentation for flight in instrument meteorological conditions (IMC) it was maintained to the VFR standard, as appropriate to the category of operation. Maintenance requirements were certified as having been performed and no evidence was found to indicate that the aircraft was other than serviceable prior to the flight. Analysis of recorded audio data determined that engine operation was normal during the pilot's radio transmissions.

The pilot was reported to have obtained a forecast from Airservices electronic briefing facility using the company computer terminal at Badu Island. That forecast predicted north-westerly stream weather characteristic of conditions normally experienced during the wet season in the Torres Strait area between October and April. The terminal area forecast for Horn Island, valid from 0600 to 1800, indicated light showers of rain and a visibility greater than 10 km. Throughout the forecast period, a temporary deterioration in conditions (up to 60 minutes) was forecast due to thunderstorms, with visibility reduced to 2000 m in rain and a cloud base of 800 ft. Approximately 40 minutes before he departed Badu Island, the pilot received a telephone call from the senior base pilot. The senior base pilot had flown from Badu Island to Horn Island that morning and advised him of the actual weather conditions he had encountered, including 20 minutes holding east of Horn Island while awaiting a rain shower to move from over the aerodrome.

Witnesses reported that the weather conditions at Horn Island aerodrome between 1230 and 1245 were less than visual meteorological conditions. Heavy rain had reduced visibility to less than 100 m. One witness reported seeing lightning to the north of the aerodrome. A Bureau of Meteorology assessment of weather conditions for the area east of Horn Island at the time of the occurrence indicated that the generally low overcast cloud contained embedded thunderstorm cells, with associated heavy rain and a cloud base less than 1,000 ft. The recorded rainfall intensity was heaviest between 1230 and 1300. Weather conditions at Horn Island at the time of the occurrence were described by witnesses as being the most severe seen that season.

The pilot held a Commercial Pilot (Aeroplane) Licence and a valid Class 1 medical certificate. He had obtained his commercial pilot licence in September 2000 and qualified for a command multi-engine instrument rating in April 2001. The pilot's logbook was not found. A compilation of flight time records showed that at the time of the occurrence the pilot had between 270 and 290 hours total flying experience that included approximately 45 hours on type. The company did not require the pilot to maintain IFR currency there was no evidence that the pilot had met recency requirements for instrument flight. The pilot was not reported to be suffering from any physiological condition that may have affected his capability as a pilot. He had been off duty for the two days prior to commencing duty on the morning of the accident.

In July 2001 the pilot moved to the Torres Strait area and gained some occasional flying experience with another operator. In November 2001 the pilot commenced employment with the operator he was working for at the time of the accident as a VFR charter pilot on C182 and C206 aircraft. On 19 November 2001, before commencing operational duties, the pilot had flown a familiarisation flight under supervision of the senior base pilot. On 27 November he had demonstrated proficiency on the C182 in normal and emergency procedures to an approved company check pilot. That flight of one and a half hours also incorporated a short area familiarisation. The pilot was then certified as competent to conduct company charter flights. On 1 December 2001 he flew the C206 while acting in-command under the supervision of the senior base pilot.

The flight was being conducted under the VFR, at an altitude that required the aircraft to remain clear of cloud, and with a minimum flight visibility of 5,000 m. The operator's operations manual instructed pilots to consider uplifting additional fuel for diverting or holding when the forecast indicated elements of weather below the minimum required for the flight. The pilot had departed with ample fuel reserves for holding or diverting. Company pilots reported that diversions and holding, due to rain showers and associated poor visibility, were not unusual during the wet season. The pilot had broadcast his intention to hold until weather conditions improved.

Although the pilot of the C206 had flown in IMC during his training he did not have any instrument flight recency and had very little exposure to tropical wet season weather conditions and its characteristic heavy rain shower activity.

The circumstances of the occurrence were consistent with a loss of control at low level and at an altitude from which recovery was not considered possible. Due to the limited information available to the investigation, the reason for the loss of control could not be determined. However, the circumstances were consistent with VFR flight into IMC.

Occurrence summary

Investigation number 200200035
Occurrence date 11/01/2002
Location 9 km E Horn Island, Aero.
State Queensland
Report release date 24/09/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of control
Occurrence class Accident
Highest injury level Fatal

Aircraft details

Manufacturer Cessna Aircraft Company
Model 206
Registration VH-STL
Serial number U20603389
Sector Piston
Operation type Charter
Departure point Badu Island, QLD
Destination Horn Island, QLD
Damage Destroyed