Loss of separation

Boeing 737-800, VH-VOA

Safety Action

Local Safety Action

As a result of this occurrence, the operator advised that the standard operating procedures detailed in the 737 Flight Crew Training Manual were amended to include:

"Altitude Restriction

Whenever there is a low-level altitude restriction after take-off, the autopilot will be engaged as soon as practical".

Analysis

The separation standard would not have been infringed if the crew of the B737 had complied with the 5,000 ft altitude requirement. At the time of the infringement, the B737 was being manually flown by the pilot in command who was distracted from his primary task of controlling the aircraft's flight path. The distraction occurred as he monitored the weather radar and assessed the meteorological conditions that the aircraft was encountering during the climb. The engagement of an autopilot would have reduced the pilot in command's workload and enabled him to monitor the weather situation while the auto-flight system levelled the aircraft at the assigned altitude. Crew coordination did not provide a defence against human error in this occurrence, as the co-pilot did not monitor the aircraft's flight path as it approached the assigned altitude.

Summary

The Boeing B737-800 (B737) was cleared to Melbourne via the Sydney RWY 34R MARUB THREE standard instrument departure (SID) to 5,000 ft. The Boeing B767-338ER (B767) was inbound to Sydney from Auckland, NZ, and had been cleared to descend to 6,000 ft with a vector to a right downwind leg for RWY 34R. As the aircraft approached each other 12 NM east of Sydney, an infringement of the radar separation standard occurred.

The pilot in command of the B737 was the handling pilot for the sector and was manually flying the aircraft while tracking via the SID. He had recently completed retraining on the aircraft after having not flown the type for 10 years.

After take-off, the B737 entered cloud and encountered turbulence as it climbed through 3,500 ft. The pilot in command was monitoring the aircraft's weather radar and stated that he became distracted while assessing the meteorological conditions. Although the co-pilot gave the 1,000 ft to assigned altitude call at 4,000 ft, he was also observing the weather situation and did not monitor the flight instruments as the aircraft approached the assigned altitude. The B737 continued to climb above 5,000 ft and reached 5,700 ft before the pilot in command descended the aircraft back to the assigned level. During the descent the aircraft's traffic alert and collision avoidance system issued a Traffic Alert.

The departure controller issued a turn instruction to the crew of the B737 for avoidance action and an evasive turn instruction to the crew of the B767, in addition to providing traffic information on the B737. Recorded radar data indicated that lateral separation between the aircraft reduced to 2.8 NM with a vertical separation of 900 ft. The required radar separation standard was 3 NM laterally or 1,000 ft vertically.

Occurrence summary

Investigation number 200200463
Occurrence date 20/02/2002
Location 22 km E Sydney, Aero.
State New South Wales
Report release date 21/10/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 737
Registration VH-VOA
Sector Jet
Operation type Air Transport High Capacity
Departure point Sydney, NSW
Destination Melbourne, VIC
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 767
Registration VH-OGP
Serial number 28153
Sector Jet
Operation type Air Transport High Capacity
Departure point Auckland, New Zealand
Destination Sydney, NSW
Damage Nil

Boeing 747-438, VH-OJL

Summary

A Boeing 747-438 (north-east bound B747) was travelling on air route B200 within the Tahiti flight information region (FIR) at flight level (FL) 330 and was assigned FL350 by Tahiti air traffic control. When the aircraft was at FL339, the crew reported that they observed a traffic alert and collision avoidance system (TCAS) indication of another aircraft. That aircraft was a Boeing 747-400 (south-west bound B747) that was travelling in the opposite direction at FL340 also on air route B200, approximately 40NM ahead. The crew of the north-east bound B747 immediately descended to FL330. However, there was an infringement of separation standards.

The air traffic controller had planned to assign FL350 to the crew of the north-east bound B747 to maintain a separation standard with a third B747 travelling on B200 at FL330 in the opposite direction. However, FL350 was not available to the north-east bound B747 crew until the controller in Tahiti could established a separation standard with the south-west bound B747 travelling in the opposite direction at FL340.

The controller had prepared a pre-formatted controller-pilot data link communication (CPDLC) message for transmission to the crew of the north-east bound B747. CPDLC is a `means of communications between a controller and pilot using data link for [Air Traffic Control] communication' (ICAO Doc 4444 ATM/501 1-5). The message was a clearance that instructed the crew to `climb to and maintain FL350'. The controller prepared the message in advance. That was reported to be a common practice and assisted with workload management. The controller intended to send the message to the crew of the north-east bound B747 once they had passed the south-west bound B747 and a separation standard had been established. However, he unintentionally sent the message before the two aircraft had passed. On receipt of the clearance to climb, the north-east bound B747 commenced climb to FL350.

The controller immediately realised the error. He reported that he had made seven unsuccessful attempts to contact the crew of the north-east bound B747 using `selcal'. Selcal is a coded tone sent to a specific aircraft that indicated to the crew that an ATC unit was attempting to contact them via HF radio. The crew of the north-east bound B747 reported that they did not receive an indication that the controller was attempting to contact them via selcal and did not reply. The controller eventually sent another CPDLC message to the crew instructing them to 'maintain FL330 due traffic'. The crew of the north-east bound B747 acknowledged receipt of that CPDLC message. They reported however, that they had already commenced descent to FL330 when they initially observed the south-west bound B747 on the TCAS.

Air traffic controllers used automatic dependent surveillance (ADS) to verify the position of appropriately equipped aircraft operating within the Tahiti FIR in accordance with the South Pacific Operations Manual (SPOM). The SPOM detailed the procedures and requirements applicable in South Pacific FIR's for ADS approved aircraft and applied within the Tahiti FIR. ADS provides data, including position and altitude information, from navigation equipment on-board an aircraft to air traffic control via a data link. The information is updated at specified time intervals known as the periodic reporting rate. The periodic reporting rate for ADS reporting in the Tahiti FIR was 30 minutes.

Despite the unintentional clearance issue, the controller did not realise that there had been an infringement of separation standards. He had received an ADS report from the north-east bound B747 that confirmed the aircraft was level at FL330, before he sent the clearance to climb, and he received a report from that crew, subsequent to the occurrence, confirming that they were level at FL330. There were no ADS reports from the north-east bound B747 to Tahiti ATC when the aircraft was changing levels. The controller was not aware that the north-east bound B747 had left FL330 and, therefore, was not aware there had been an infringement of separation standards.

Preparation of the CPDLC message in advance may assist controllers with workload management. However, controllers need to exercise care and ensure that pending messages are not unintentionally sent.

The aircraft operator could not determine why the crew of the north-east bound B747 did not receive an indication that the controller was attempting to contact them using selcal. The selcal equipment on board the aircraft was operational before and after the occurrence, although Tahiti air traffic control had reported degraded HF communication on the night of the occurrence.

Occurrence summary

Investigation number 200200190
Occurrence date 08/02/2002
Location PUMIS, (IFR)
State International
Report release date 22/10/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration VH-OJL
Serial number 25151
Sector Jet
Operation type Air Transport High Capacity
Departure point Auckland, New Zealand
Destination Los Angeles, United States
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration ZK-NBW
Sector Jet
Operation type Air Transport High Capacity
Departure point Los Angeles, United States
Destination Auckland, New Zealand
Damage Nil

Boeing 747-4H6, VH-OED

Significant Factors

The controller issued an incorrect climb instruction.

Analysis

The negative response `UNABLE' from the controller to the crew's request for a higher level, in accordance with the SPOM, would have reduced the possibility of error in the pre-formatted CPDLC message selected by the controller for transmission to the crew of OEB.

The use of HF radio and CPDLC combined with a high controller workload and similar radiotelephony callsigns of the two aircraft involved in the communications exchanges possibly contributed to the confusion to which the controller referred and may have resulted in the transmission of the incorrect CPDLC message.

When an individual controller combines a number of positions, diverse scenarios and increasing workloads can quickly distract controllers. Controllers and supervisors need to be vigilant so that ATC positions can be separated to facilitate effective workload management.

The monitoring of TCAS and high situational awareness by all the crews involved proved to be an effective defence for the aviation system.

Summary

A Boeing 747-48HE registered VH-OEB (OEB) was en-route from Los Angeles, USA to Auckland, New Zealand was maintaining flight level (FL) 330 as assigned by Tahiti air traffic control (ATC). A Boeing 747-4H6 registered VH-OED (OED) was en route from Auckland to Los Angeles and was also maintaining FL330. The crew of OEB reported that they observed, on their traffic alert and collision avoidance system (TCAS), another aircraft that was on a reciprocal track at the same level (OED). The crew of OEB turned their aircraft right 15 degrees and descended to FL325. The crew of OED later reported that they observed, on their TCAS, another aircraft that was on a reciprocal track at the same level (OEB), and climbed their aircraft to FL333. A third aircraft, a Boeing 747, was en-route from Los Angeles to Auckland at FL340. The crew of OED also observed an indication of that aircraft on their TCAS.

The vertical separation standard was 1,000 ft. The vertical distance between OED and OEB reduced to 800 ft, and to 700 ft between OED and the third aircraft. There was an infringement of separation standards.

The crews of OEB and OED were communicating with Tahiti ATC via both Controller-Pilot Data Link Communications (CPDLC) and high frequency (HF) radio. CPDLC was a 'means of communications between a controller and pilot using data link for [Air Traffic Control] communication' (ICAO Doc 4444 ATM/501 14.1.1). Messages were compiled and initiated either by the crew of the aircraft or by ATC and were, in this case, pre-formatted. The use of pre-formatted messages was 'intended to reduce the possibility of misinterpretation and ambiguity' (ICAO Doc 4444 ATM/501 14.3.4).

The crew of OEB had requested climb from FL320 to FL340 but that request was denied. About ten minutes later the crew of OED requested climb from FL330 to FL350. Tahiti ATC asked the crew of OED, via CPDLC, when they could reach FL350 and then denied the request for climb. The French Bureau d'Enquetes et d' Analyses pour la Securite de l'Aviation Civile (BEA) produced a report on the occurrence. The BEA reported that the crew of OED then contacted Tahiti ATC via HF radio and advised that they could reach FL350 by time 1140 universal coordinated time. The controller responded via HF radio and instructed the crew of OED to maintain FL330. The crew of OEB then requested, via CPDLC, climb to FL330. The CPDLC response provided to the crew of OEB was 'climb to and maintain FL330 due to traffic' even though FL330 was not available. The message was selected by the controller from the menu of pre-formatted messages available in the system.

The South Pacific Operations Manual (SPOM Part 5.5) stated that 'when a clearance request is denied, the controller shall use the element "UNABLE" in the uplink message'. The SPOM detailed the procedures and requirements applicable in the South Pacific flight information regions (FIRs) for CPDLC equipped aircraft and applied within the Tahiti FIR. The SPOM (Part 5.1) also stated that `generally, when a CPDLC aircraft is operating within a CPDLC FIR, CPDLC will be the primary means of communication'.

Subsequent to the occurrence OEB returned to FL320 and OED returned to FL330. The crews then reported to Tahiti ATC at those respective levels. The controller had not intended to assign FL330 to the crew of OEB and did not realise that they had been assigned FL330, or that they had climbed to FL330 and subsequently returned to FL320. When the crews reported at FL330 and FL320 respectively, after the occurrence, that information was consistent with the information the controller had recorded on the flight progress strips. The controller was not aware that there had been an infringement of separation standards.

The BEA reported that the controller believed there were possibly two reasons why a climb instruction had unintentionally been assigned to the crew of OEB:

1. In reply to the request by OEB for climb to FL330, the controller pre-selected the wrong pre-formatted CPDLC message and sent the message without checking it, or

2. The controller confused the two aircraft because of their similar callsigns.

The BEA reported that four controllers had been rostered for the period between 1900 hours and 0700 hours (Papeete local time) and were rostered to cover the aerodrome control position, the approach control position and the area control position. The event occurred at 0050 Papeete local time. The controller involved in the occurrence was alone in the tower at the time of the occurrence and was performing all three functions. That controller considered that the workload was high due to poor quality HF radio, increased coordination with other centres in relation to aircraft using 'flexible routes' and difficulty validating CPDLC messages with OED.

The controllers at Tahiti had been trained in France but that training had not included the use of CPDLC. Initial training on the use of CPDLC was incorporated into a one-week training program in Papeete that included CPDLC with other local training requirements. Ongoing CPDLC training was incorporated into on-the-job training which could take controllers around 57 weeks to complete. Controllers reported that the initial training was essential but they had not been exposed to the system sufficiently during training to master all aspects of the system.

The controller involved in the occurrence had been working Tahiti Oceanic Controlled Airspace for approximately three and a half years and was qualified on the three ATC positions being managed at the time of the occurrence.

Occurrence summary

Investigation number 200200094
Occurrence date 31/01/2002
Location 111 km NNE PUMIS, (IFR)
State International
Report release date 23/01/2003
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration VH-OED
Serial number 25126
Sector Jet
Operation type Air Transport High Capacity
Departure point Auckland, NEW ZEALAND
Destination Los Angeles, U.S.A.
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration VH-OEB
Serial number 25778
Sector Jet
Operation type Air Transport High Capacity
Departure point Los Angeles, U.S.A.
Destination Auckland, NEW ZEALAND
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration ZK-SUJ
Sector Jet
Operation type Air Transport High Capacity
Departure point Los Angeles, U.S.A.
Destination Auckland, NEW ZEALAND
Damage Nil

Saab SF-340B, VH-OLN

Analysis

It was likely that the Aztec pilot became distracted while attempting to identify the engine problem and did not maintain the aircraft's track clear of the control zone. The pilot's ability to navigate was probably constrained by the fluctuating in-flight visibility, his unfamiliarity with the Aztec's systems and stress due to the situation.

The proximity of the Sydney and Bankstown control zones required pilots of aircraft operating at the latter airport to be particularly attentive to maintaining track and altitude to reduce the possibility of inadvertently entering the Sydney control. The operation of the aircraft's transponder and radar surveillance of the control zone by the Sydney controllers were active defences for the airspace system.

Summary

The pilot of a Saab Aircraft AB SF-340B (Saab), on final to runway 16R at Sydney airport, was instructed by the aerodrome controller (ADC) to turn right heading 240 degrees M due to an unidentified aircraft in the control zone. The unidentified aircraft was observed to turn north and pass the Saab with 2 NM lateral and 400 ft vertical displacement. The required separation standard was either 3 NM laterally or 1,000 ft vertically. The unknown aircraft was subsequently identified as a Piper Aircraft Corporation PA-23-250 (Aztec). The Aztec pilot had entered the Sydney control zone without a clearance, resulting in an infringement of separation standards.

The Aztec pilot had intended to conduct a visual flight rules (VFR) flight from Bankstown, located 9.5 NM west of Sydney, to Grafton. He had recently purchased the Aztec and this was the first significant trip in that aircraft. The pilot had previously flown a Beech Baron and had completed a flight check on the Aztec.

Flights under the VFR conducted below 10,000 ft required a pilot to operate in the following meteorological conditions:

  • flight visibility greater than 5,000 m;
  • clear of cloud when in a general aviation control zone; and
  • 1,500 m horizontally and 1,000 ft vertically from cloud while en route.

The Bankstown terminal area forecast, issued at 0433, covering the period from 0600 to 1900 Eastern Summer Time forecast a flight visibility of 5,000 m in smoke and a few (1 to 2 OKTAS) clouds at 3,000 ft. The forecast indicated that visibility was expected to increase to greater than 10 km by mid afternoon. The actual meteorological conditions reported at Bankstown during the morning of the occurrence were:

  • 0900: westerly wind at 9 kts with visibility of 8,000 m, no cloud below 12,500 ft and temperature of 18 degrees C;
  • 0900 report was amended at 0919: westerly wind at 9 kts with visibility of 3,000 m in smoke, no cloud below 12,500 ft with the sky obscured and temperature of 18 degrees C;
  • 0930: south-westerly wind at 6 kts with visibility of 6,000 m, no cloud below 12,500 ft and temperature of 18 degrees C;
  • 1000: wind was calm with visibility of 7,000 m no cloud below 12,500 ft and temperature of 19 degrees C; and
  • 1030: north-westerly wind of 4 kts with visibility of 7,000 m, no cloud below 12,500 ft and temperature of 20 degrees C.

The actual reported weather conditions at Sydney during the morning were:

  • 0900: southerly wind at 7 kts with visibility of 4,000 m in smoke and scattered (3 to 4 OKTAS) clouds at 1,600 ft and temperature of 18 degrees C;
  • 0920: southerly wind at 7 kts with visibility of 6,000 m in smoke with a few (1 to 2 OKTAS) clouds at 4,500 ft and temperature of 18 degrees C;
  • 0930: southerly wind at 7 kts with visibility of 6,000 m in smoke with a few (1 to 2 OKTAS) clouds at 4,500 ft and temperature of 18 degrees C; and
  • 0955: south-easterly wind at 7 kts with visibility of 7,000 m in smoke with a few (1 to 2 OKTAS) clouds at 4,500 ft and temperature of 19 degrees C.

Weather conditions at the time were visual meteorological conditions that had been affected by bushfires in the Sydney basin.

The pilot had delayed departing from Bankstown in anticipation of the weather conditions improving and subsequently departed at about 0945. Immediately after take-off, while the pilot was still monitoring the Bankstown ADC frequency, the right engine commenced to `run rough'. The pilot reduced power on that engine and attempted to identify the cause of the problem. The pilot decided to return to Bankstown as the situation could not be rectified and the aircraft was vibrating. As he manoeuvred to return, the flight visibility was such that the pilot could not see Bankstown airport. He was aware of the aircraft's proximity to the Sydney control zone and reported that he was about to call Sydney air traffic control for a clearance when he was advised by the departure south controller that the Aztec had infringed the control zone.

The Aztec pilot had selected code 1200, the nominated code for a VFR flight operating in non-controlled airspace (and not participating in a radar information service) and was operating the aircraft's transponder.

The Sydney Aerodrome and Director West controllers saw, on the air traffic control radar, that the Aztec was in the control zone, northwest of Canterbury racecourse, and likely to conflict with aircraft on final to runway 16R. The ADC instructed the pilot of the Saab to turn right to avoid the Aztec. The pilot of another aircraft was similarly instructed.

Before the pilot could return to Bankstown, the right engine on the Aztec started to operate normally. The pilot decided to continue the flight and tracked to the north to vacate the control zone and to join the VFR lane. The flight continued uneventfully to Coffs Harbour where the pilot refuelled the aircraft. Subsequently, after take-off from Coffs Harbour, at approximately 300 ft, the right engine surged and the pilot landed the aircraft on the remaining runway. The pilot taxied the aircraft to a hangar for maintenance action and on reaching the hangar the left engine stopped. Inspection by a licensed aircraft maintenance engineer (LAME) found that the cooling flaps on both engines were inoperative and had caused the engines to overheat. The LAME re-rigged the cowl flaps for maximum cooling and a subsequent engine ground run confirmed normal operation.

Occurrence summary

Investigation number 200105942
Occurrence date 27/12/2001
Location 6 km NNW Sydney, (VOR)
State New South Wales
Report release date 20/09/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer Saab Aircraft Co.
Model 340
Registration VH-OLN
Serial number 207
Sector Turboprop
Operation type Air Transport Low Capacity
Departure point Moruya, NSW
Destination Sydney, NSW
Damage Nil

Aircraft details

Manufacturer Piper Aircraft Corp
Model PA-23
Registration VH-ALN
Serial number 27-3032
Sector Piston
Operation type Private
Departure point Bankstown, NSW
Destination Grafton, NSW
Damage Nil

Boeing 767-338ER, VH-OGG

Analysis

The controller did not detect that he had assigned an incorrect flight level when the crew of the B767 read-back FL300. There were no subsequent checks required of the controller that could have alerted him to the error until the CLAM alarm activated.

The additional coordination and TAAATS entries associated with those aircraft that had been provided with a shorter track increased the controller's workload and may have distracted him as he was trying to assist them in their important task. It is also possible that the controller may not have detected the incorrect level assignment of FL300 because the level read back by the pilot phonologically matched the information stored in the controller's short-term memory; he may not have consciously processed the assigned flight level information in the read-back provided by the crew of the B767.

The investigation did not establish why the controller unintentionally assigned FL300 when he had intended to confirm the assignment of FL330.

Summary

A Boeing 767-338ER (B767) was maintaining flight level (FL) 370 and had been assigned FL330 to maintain separation with a Cessna Citation 500 (C500), maintaining FL310, that was crossing the track of the B767. The controller entered FL330 into The Australian Advanced Air Traffic System (TAAATS). He subsequently, and unintentionally, assigned the crew of the B767 descent to FL300. The controller received a cleared level adherence monitor alarm (CLAM) when the B767 descended through FL326. Vertical separation between the B767 and the C500 reduced to 700 ft, and horizontal separation reduced to 3.4 NM. The required separation standard was 2,000 ft or 5 NM. There was an infringement of separation standards.

The controller had initially cleared the crew of the B767 to descend from FL370 to FL330. The descent was to be commenced at the discretion of the crew. He then entered FL330 into TAAATS as the new cleared flight level (CFL). The controller reported that he had made the necessary TAAATS entries on receipt of the correct level read back from the crew of the B767. There were no subsequent TAAATS entries required in relation to FL330 being assigned to the crew of the B767.

The B767 crew reported leaving FL370 approximately five minutes after they had been assigned FL330. The controller reported that he had intended to confirm FL330 as the cleared flight level with the B767 crew at that time, but he unintentionally assigned FL300. The crew of the B767 read-back FL300 and continued descent through FL330. The controller did not detect from the read back that he had assigned an incorrect flight level. There were no subsequent opportunities for the controller to realise the error until the CLAM alarm from TAAATS.

The controller indicated that he considered his workload at the time of the occurrence to be light. He was responsible for two sectors of airspace but he did not believe that the increase in workload caused by the combination of the two sectors contributed to the error. The replay of the voice recording indicated that the controller had up to ten aircraft under his control at the time of the occurrence. Three of those aircraft had requested a shorter route. The controller accommodated the requests because some of those aircraft were involved in bush fire fighting operations. When the routes for those aircraft were amended, the associated flight data record in TAAATS also needed to be amended and the changes needed to be coordinated with adjacent sectors. The controller did not believe the extra workload generated by those tasks contributed to the occurrence.

The controller was also the team leader on the shift. He reported that there were no distracting team leader issues at the time of the occurrence. The controller did not believe he was fatigued.

Occurrence summary

Investigation number 200106230
Occurrence date 26/12/2001
Location 159 km SW Sydney, (VOR)
State New South Wales
Report release date 10/09/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 767
Registration VH-OGG
Serial number 24929
Sector Jet
Operation type Air Transport High Capacity
Departure point Melbourne, VIC
Destination Sydney, NSW
Damage Nil

Aircraft details

Manufacturer Cessna Aircraft Company
Model 500
Registration VH-ZMD
Serial number 500-0263
Sector Jet
Operation type Charter
Departure point Orbost, VIC
Destination Cessnock, NSW
Damage Nil

Boeing 737-476, VH-TJY

Safety Action

The investigation found a safety deficiency relating to the limitations of self-checking of data inputs by controllers. Any outcome from the investigation of the safety deficiency will be published on the Australian Transport Safety Bureau website www.atsb.gov.au.

Analysis

It was likely that the controller was distracted by thoughts of the pending meeting. He may also have been fatigued to some degree as he had been occupied with either operational or administrative tasks since commencing work and had not had an adequate rest period.

It is possible that the controller did not appreciate the error, because the read back by the pilot phonologically matched the information stored in the controller's short-term memory. The controller had issued a clearance of FL330 to the crew and this was the same flight level that was read back.

The aviation system relied on the instruction and readback cycle used by pilots and controllers to prevent misunderstanding. The nature of interacting with TAAATS can make the controller response to the clearance read back an automatic process that provides no clue to input errors. While the read back process used two parties, a pilot and a controller, to challenge and check each other, the data input to TAAATS was reliant on controller self-checking. The occurrence highlighted the limitations inherent in using individuals to check their own work. Controllers need to be aware of the potential for error when checking TAAATS data inputs against clearance read backs.

The situational awareness of the crew of TJY, and their query regarding the assigned flight level, ensured that the situation was clarified and safety was maintained.

Summary

A Boeing 737 (B737) registered VH-TAW (TAW) was inbound to Ayers Rock from Sydney at flight level (FL) 320. A B737 registered VH-TJY (TJY) departed Ayers Rock for Sydney with a planned level of FL350. The Alice Springs sector controller calculated the estimated time of passing for the aircraft as 1328 Central Standard Time (CST). The controller entered FL310 into The Australian Advanced Air Traffic Control System (TAAATS) for TJY but unintentionally instructed the crew to "Climb to amended FL330". At 1321 CST, after the crew of TAW had reported on the sector frequency, the controller requested them to "Report sighting and passing TJY on climb to FL310". The crew of TAW responded that they would advise. The crew of TJY heard the controller's transmission and queried their assigned level of FL330. The controller advised that crew that they had been assigned FL310. The crew of TJY, having passed FL320, elected to continue the climb and at 1322 CST they reported maintaining FL330. The application of standard separation required the aircraft to be established 1,000 ft vertically apart ten minutes prior to the estimated time of passing. There was an infringement of separation standards.

Reduced vertical separation minimum (RVSM) procedures had been introduced across the Australian airspace on 1 November 2001. Those procedures reduced the previous 2,000 ft vertical separation standard for aircraft operating above FL290 to 1,000 ft for approved aircraft operating between FL290 and FL410. Both aircraft were RVSM approved and the controller had undergone RVSM training prior to the change in procedure.

The controller had seven years experience in air traffic control and was rated on the Alice Springs sector in June 2000. During the 12 months prior to the incident the controller had spent the majority of his time working on that sector. The controller was included on the team leader roster in September 2001.

The Ayers Rock sector position was located in the Melbourne Air Traffic Control centre. Team leaders worked a daily shift from 0830 to 1630 Eastern Summer Time (ESuT). The incident shift was the seventh day of the controller's shift period. After arriving at work the controller, as the team leader, was advised that a rostered controller was unavailable. He unsuccessfully sought approval to call in a replacement controller. The controller then self-briefed and from 0900 to 1030 ESuT operated one of the Group's control positions. The controller had a break during which he endeavoured to resolve the controller shortfall by roster adjustments before returning to another operating position at 1100 ESuT. The controller had scheduled a 1330 ESuT meeting for a project he was working on and organised his periods at the console to ensure that he was able to attend that meeting. He took a second break at 1230 ESuT before taking over the Alice Springs sector position at 1300 ESuT. He reported that he had lunch during one of the breaks when he left the operations room for about 10 minutes.

The controller reported that there was a medium level of air traffic. The Alice Springs sector was combined with the low-level Todd sector. That required the controller to operate on three radio frequencies. There were also several aircraft on frequency with similar callsigns, including aircraft registered: VH-TJY, VH-TJJ, VH-TAW and VH-TJD. Each of those aircraft required separation action or clearance adjustment. It was during that time that the controller made a communication error in that a crew was addressed by an incorrect callsign. That error was undetected but did not affect safety.

The crew of TJY had planned to operate at FL350 and the controller was aware that there was insufficient time to establish the required passing standard. He intended to maintain TJY at FL310 until it had passed TAW. The crew of TJY reported departure from Ayers Rock to the controller at 1311 and shortly after, were cleared to enter controlled airspace "On track to Oodnadatta, and planned route, on climb to amended FL330". The crew read back that clearance. The controller used the cleared flight level field in the aircraft's label on the air situation display to change the level to FL310. Analysis of the recorded system and audio data confirmed that the controller had entered, and accepted, FL310 in TAAATS and had transmitted FL330 to the crew.

Occurrence summary

Investigation number 200105559
Occurrence date 21/11/2001
Location 278 km ESE Alice Springs, (VOR)
Report release date 07/08/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 737
Registration VH-TJY
Serial number 28151
Sector Jet
Operation type Air Transport High Capacity
Departure point Ayers Rock, NT
Destination Sydney, NSW
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 737
Registration VH-TAW
Serial number 23488
Sector Jet
Operation type Air Transport High Capacity
Departure point Sydney, NSW
Destination Ayers Rock, NT
Damage Nil

Boeing 737-376, VH-TAZ

Safety Action

Local safety action

On 3 Feb 2000, Airservices Australia undertook to investigate methods to enhance controller awareness and application of the concept of separation assurance through, among other initiatives, the production and dissemination of information and a review of MATS. As at 24 May 2002, Airservices Australia had:

  1. included separation assurance as a refresher training module,
  2. highlighted occurrences in which a lack of separation assurance may have been a contributing factor, and
  3. described separation assurance, in MATS, in terms of conflict avoidance rather than conflict resolution.

ATSB safety action

Airservices Australia advised the ATSB on 21 April 2002 that it was reviewing all aspects of separation assurance matters, which will include a definition of separation assurance. On 26 July 2002, further correspondence from Airservices indicated that a definition of separation assurance would be included in the next amendment of MATS. The ATSB will continue to monitor these separation assurance matters until the amendment is promulgated.

Analysis

The CBE controller had developed a plan to provide the Hercules crew with a practice ILS. He unsuccessfully applied speed control and radar vectors to both the Hercules crew and the B737 crew to execute the plan and to achieve the required separation. As a contingency, the CBE controller planned to terminate the approach of the B737 if that became necessary to maintain required separation standards. However, the plan did not provide any separation assurance between the Hercules and the B737.

The CBE controller did not apply a separation standard between the Hercules and the B737 from the time the Hercules descended below radar coverage in the Canberra circuit area until the ADC accepted responsibility for separation following the touch and go landing. A procedural separation standard between the Hercules and the B737 should have been applied while the Hercules was outside radar coverage and while the ADC could not provide visual separation.

Summary

A Lockheed C-130J Hercules (Hercules) had conducted a practice Instrument Landing System (ILS) approach to runway 35 at Canberra followed by a touch and go landing and departure to the northwest. A Boeing 737-376 (B737) was simultaneously radar vectored for an instrument approach to runway 17. Both aircraft intended to use the same runway surface but in opposite directions. The Canberra Approach East (CBE) controller became concerned that the separation standard of either 3 NM laterally or 1,000 ft vertically would not be maintained between the aircraft and issued turn instructions to both crews. While complying with the instructions the two aircraft passed with approximately 2 NM and 100 ft separation. There was an infringement of separation standards.

The Hercules crew had requested an ILS approach to runway 35 at Canberra for instrument flight rules (IFR) flying training purposes. An ILS is a precision instrument approach that provides centreline and glideslope guidance to the pilot, aligned to the landing runway and is primarily used during periods of low cloud and/or poor visibility. Runway 35 was the only runway serviced by an ILS approach at Canberra. The En Route Supplement Australia (ERSA) required crews planning instrument training at Canberra to contact Canberra air traffic control to book an approach time slot for air traffic control traffic management purposes. The service provider reported that the Hercules was running late and had missed its booked slot.

The CBE controller planned to sequence the Hercules between the second of two aircraft taxiing for a departure from runway 17 and the B737, which was the first of a number of arrivals for that runway. The CBE controller was aware that the Hercules' practice ILS approach might be delayed by up to 45 minutes if he was unable to sequence that aircraft ahead of the B737. The CBE controller stated that he felt some pressure to provide a good service to the Hercules crew.

On first contact with the CBE controller the B737 crew was told to expect a Very High Frequency Omni-Directional Radio Range/Distance Measuring Equipment (VOR/DME) approach to runway 17. At various times thereafter, the crew was assigned radar vectors and a speed restriction of 270 knots indicated airspeed to position the B737 behind the Hercules and provide sufficient spacing to maintain the required separation standard. The CBE controller had asked the crew of the Hercules to maintain their best speed once established on the final approach track. That was a request only and the crew of the Hercules was under no obligation to comply. From that point, the Hercules was capable of maintaining an indicated airspeed between 10 to 20 kts faster than that which it would routinely maintain. The crew of the Hercules could not recall whether they had complied with the request.

The CBE controller was concerned about the application of separation between the B737 and the Hercules after the Hercules had completed its touch and go landing. The Letter of Agreement between the Canberra Tower and Canberra Approach Control stated that the approach controller was responsible for separation assurance during reciprocal runway operations unless it was assigned to the ADC "by mutual agreement". The CBE controller advised that his contingency plan was to instruct the B737 crew to terminate the approach if it became apparent that separation between the two aircraft may be infringed.

The CBE controller reported that he had based the traffic management plan on his expectation that the Hercules would be operated at a higher speed along the final approach path. The CBE controller also reported that the Hercules had commenced its turn later than he had expected following the touch and go landing. He could not see the Hercules on radar following the touch and go landing and was unsure of the position of that aircraft in relation to the B737. The CBE controller asked the ADC to confirm when the Hercules had commenced the turn and was visually clear of the inbound path of the B737. The ADC was unable to provide visual separation between the B737 and the Hercules before radar and vertical separation were infringed.

The CBE controller reported that his workload was very high at the time of the occurrence. He did not provide either crew with a safety alert in respect of the other aircraft, as required by MATS, despite the distance between the two aircraft being less than that prescribed by the applicable separation standards.

Both aircraft were equipped with a traffic alert and collision avoidance system (TCAS). The crew of the Hercules did not receive either a traffic advisory (TA) or a resolution advisory (RA) on the TCAS. The crew of the B737 did not report receiving a TA or a RA either during, or after, the occurrence.

Occurrence summary

Investigation number 200103353
Occurrence date 24/07/2001
Location Canberra, Aero.
State Australian Capital Territory
Report release date 12/08/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 737
Registration VH-TAZ
Serial number 23491
Sector Jet
Operation type Air Transport High Capacity
Departure point Melbourne, Vic.
Destination Canberra, ACT
Damage Nil

Aircraft details

Manufacturer Lockheed Aircraft Corp
Model C-130J
Sector Turboprop
Operation type Military
Departure point Richmond, NSW
Destination Richmond, NSW
Damage Nil

Boeing 767-336, VH-ZXA

Safety Action

Local Safety Action

Airservices Australia advised that the WOL/JVS ASD was replaced after being declared unsuitable for continued use due to reduced brightness levels.

Significant Factors

  1. The controllers approved route and level changes that eliminated effective separation assurance strategies.

Analysis

The crew of the B737 was recleared from a standard level to a non-standard level and, in order to provide track shortening, from a track that would have provided separation with the B767, to one that conflicted with the B767. The allocation of a non-standard flight level on a one-way route does not guarantee separation from opposite traffic on other, crossing, one-way routes. However, the planned routes of these two aircraft did not cross and were laterally separated. The conflict would have been avoided had the B737 continued on its planned route or had it maintained a standard level.

The B767 crew was recleared to F350 after the B737 crew had already been cleared direct to ALLOC and had been assigned FL350. Had an intermediate flight level below the B737 been assigned to the B767 crew, until the aircraft passed, the conflict would have been avoided.

The ELW/BLA instructor was concentrating on the student. Neither controller realised that the B737 had entered the WOL/JVS sectors. Had the transfer of control and jurisdiction of the B737 been initiated before that aircraft crossed the boundary between the sectors, as it should have been, the WOL/JVS controller may have become aware of the imminent conflict.

The WOL/JVS controller had been distracted by a low priority task. Also, the contrast on the WOL/JVS ASD may have been below specification and that possibly impaired the ability of that controller to maintain situational awareness.

Neither the WOL/JVS controller nor the ELW/BLA controller effectively employed the tools available in TAAATS to highlight the non-standard nature of the B737 flight, either the non-standard level, or the direct route. Use of a standardised method of highlighting the non-standard nature of a flight may assist controllers with conflict recognition.

When operating sectors that have been combined, diverse scenarios and increasing workloads can quickly distract controllers. Controllers need to be vigilant and recognise the need to separate sectors ahead of the requirement to do so.

All the controllers were distracted by events occurring on their ASD's away from where the conflict occurred. The instructor eventually detected the conflict using effective scanning techniques. Although scanning in this case was not done in time to avoid the conflict, it allowed for timely avoiding action. It also demonstrated the importance of effective scanning not only in conflict recognition, but in recognising when other actions are due, or over due, especially during, and after, busy periods and in larger sectors with multiple crossing points.

Summary

A Boeing 767-336 (B767) was en route from Sydney to Melbourne and was maintaining flight level (FL) 350. A Boeing 737-800 (B737) was en route from Melbourne to Nadi, Fiji, and was also maintaining FL350. The aircraft were on segregated routes that provided lateral separation until the crew of the B737 was provided with track shortening. That decision placed the two aircraft on conflicting flight paths at the same level. The Eildon Weir/Benalla (ELW/BLA) sector controllers saw the impending conflict and alerted the Wollongong/Jervis (WOL/JVS) controller. Both controllers then issued traffic information and instructions to the crews for avoiding action. Both crews received Traffic Alert and Collision Avoidance System (TCAS) Resolution Advisories (RA) and the controllers received a Short Term Conflict Alert (STCA) from The Australian Advanced Air Traffic System (TAAATS). The aircraft passed within 4.8 NM laterally and 800 ft vertically. The required separation standard was either 5 NM laterally or 2,000 ft vertically. There was an infringement of separation standards.

The B737 crew had flight planned, and had been initially cleared to, FL330. That was a standard level for the direction of flight. Levels were assigned depending on a number of factors including the track of the aircraft in accordance with the Table of Cruising levels in the Manual of Air Traffic Services (MATS). Aircraft operating at altitudes and flight levels in accordance with the table were considered to be at standard levels, and those operating at altitudes and levels not in accordance with the tables were considered to be at non-standard levels. The crew of the B737 subsequently requested, and was assigned, non-standard FL350. At the time of the level change, both the crew of the B767 and the crew of the B737 had been issued airways clearances on one-way, designated air routes that formed a segregated race-track pattern between Sydney and Melbourne.

The controller responsible for the ELW/BLA sectors was instructing a student training on the ELW sector. Both were concentrating on the sequencing and separation of two jet aircraft in a step descent into Melbourne. A step descent allowed aircraft to simultaneously descend to vertically separated levels provided that the higher aircraft was progressively assigned levels that provided vertical separation with the lower aircraft. The step descent was occurring in the bottom left quadrant of the controller's Air Situation Display (ASD). The instructor was positioned behind and to the left of the student so that he could readily view the ELW sector and the traffic on the left side of the ASD. The B767 and the B737 were displayed in the top right quadrant of the ASD. Once the step descent had been established, the instructor noticed that the B737 was about to conflict with the B767. By that time the B737 was within the WOL/JVS combined sector and the instructor advised the WOL/JVS sector controller that he would be turning the B737. The student instructed the crew of the B737 to turn right to avoid the opposite direction B767.

The B737 was within the WOL/JVS control area, but under the jurisdiction (and control) of the ELW/BLA controller. The Australian Advanced Air Traffic System Human Machine Interface (HMI) used different coloured tracks and labels to aid situational awareness. The track and label colour of the B737 was green to the ELW/BLA controller, and blue to the WOL/JVS controller. The B737 crew should have been transferred to the WOL/JVS sector prior to crossing the boundary between those sectors and the ELW/BLA sectors. Had the transfer been made the track label and symbol would have been green on the WOL/JVS ASD.

The WOL/JVS controller initiated the amended route clearance for the B737 at FL350, and verbally coordinated the change with the ELW/BLA controller. At that time, the southbound B767 was on climb to FL280. The crew of the B767 contacted the WOL/JVS controller and was assigned FL350. The amended route for the B737 was direct to ALLOC, a waypoint located 77NM east-north-east of Sydney.

The workload on the WOL/JVS sectors at the time of the occurrence was reported by the controller to be low. The controller was providing a directed traffic information (DTI) service to military helicopters operating under visual flight rules (VFR) in class "G" airspace. The provision of DTI to VFR aircraft was available on request and subject to controller workload.

The WOL/JVS controller reported that the ASD at that console had recently "been faulted" and found to be outside the acceptable parameters for contrast. Subsequent to the occurrence, the screen was again checked and was found to be below acceptable contrast parameters. The controller reported difficulty distinguishing the blue track colours from the grey background of the screen; they appeared faded. A track was blue to indicate that the track was about to become the responsibility of that controller. Tracks will appear (in this case) blue to only one console at a time. The same track symbol and label was a different colour to all other controllers to indicate the relevance of that track to each control position.

The WOL/JVS controller stated that a smaller information screen that was open on the WOL/JVS ASD initially obscured the track symbol and label of the B737. He had used the route function available in TAAATS to determine the cleared route of the B737. The controller also stated that he normally used the text message box in TAAATS as a visual reminder of potential conflicts. He did not use the text box on this occasion. He also indicated that he would have preferred using strips because they better facilitated the acquisition and maintenance of the traffic picture.

The ELW/BLA instructor commented that the angle of view from behind and to one side of a student made it difficult to see some areas of the ASD and to monitor keyboard entries.

Occurrence summary

Investigation number 200103344
Occurrence date 18/07/2001
Location 28 km E Canberra, (VOR)
State Australian Capital Territory
Report release date 15/04/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 767
Registration VH-ZXA
Serial number 24337
Sector Jet
Operation type Air Transport High Capacity
Departure point Sydney, NSW
Destination Melbourne, VIC
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 737
Registration DQFJH
Sector Jet
Operation type Air Transport High Capacity
Departure point Melbourne, VIC
Destination Nadi Fiji Islands
Damage Nil

Cessna 402C, VH-JOH

Analysis

The investigation did not establish why the Approach One controller believed that the Approach Two controller was responsible for the Cessna, and consequently, did not act to maintain separation between the aircraft. The controller, having completed his Flow control duties, and anticipating leaving the facility shortly, may have become occupied with non-operational thoughts to the detriment of his control.

The pilot of the Cessna had seen the Dash 8 ahead and anticipated a sight and follow instruction. This instruction would have required the pilot to monitor the aircraft ahead and maintain appropriate separation, while safely controlling the aircraft and scanning flight instruments as necessary. With his attention directed outside the cockpit the pilot did not realise that he had descended the aircraft below the assigned altitude of 3,000 ft. Instructions to sight and follow are often used during the approach phase and the pilot may have assumed that the instruction had been issued.

The integrity of the aviation system relies on the instruction and readback cycle used by pilots and controllers to prevent misunderstanding. This system, however, is only effective if both participants continually monitor the subsequent actions to ensure they match the instruction or clearance that has been issued. This occurrence highlights the need for both pilots and controllers to remain vigilant and be ready to verify perceptions.

Summary

The Cessna Aircraft Company 402C (Cessna) was established on final for a straight-in approach to runway 15 at Cairns. The pilot had been assigned a descent to 3,000 ft, due to a de Havilland Canada Dash 8 (Dash 8) that was on final approach ahead of the Cessna and was at or below 2,000 ft. The assigned altitude ensured that the 1,000 ft vertical separation standard was maintained. The Approach One controller did not notice the Cessna descend through 3,000 ft or that the ground speed of the Dash 8 had reduced such that the spacing between the aircraft was less than the required 3 NM radar separation standard. There was an infringement of separation standards. The weather was reported to be fine with a clear sky.

Cairns approach control was managed by two control positions; Approach One and Approach Two. The Approach One area of responsibility was over the sea and included the final approach for runway 15 and all departures. Approach Two was responsible for the area over land.

The Approach One controller had accepted responsibility for the position about 10 minutes before the occurrence. The controller had been the Flow controller for the afternoon and was due to finish his shift at 1830 Eastern Standard Time. Prior to leaving, he offered to take over Approach One to enable another controller to take a short break. A handover/takeover was conducted at the Approach One position and he was aware of the six aircraft in the arrival sequence; having established the sequence himself while in the Flow position. He was also aware of another four aircraft taxiing for departure.

The initial aircraft in the arrival sequence were a Twin Otter from Mackay, the Dash 8, the Cessna and then an Embraer Bandeirante from the west. The Approach One controller was responsible for the Twin Otter, Dash 8 and the Cessna, while the Bandeirante was under the control of the Approach Two controller.

The Twin Otter crew had been assigned a visual approach for left base to runway 15 but subsequently requested an instrument landing system (ILS) approach. Approval of the ILS would entail additional track miles and reduce the spacing between the Twin Otter and the Dash 8. The controller believed sufficient spacing for separation and sequencing would be maintained with some minor track adjustments. He instructed the Dash 8 crew to turn left heading 330 degrees and to descend to 3,000 ft to position the aircraft east of the coast and 6 miles behind the Twin Otter. About two minutes later the controller instructed the Dash 8 crew to descend to 2,000 ft and the pilot of the Cessna to descend to "3000 (ft) visual". Those instructions were appropriately acknowledged by the crews. As the Cessna was from the north, and effectively on a long final, the controller issued the instructions to establish the vertical separation standard between the aircraft.

The Approach One controller instructed the Dash 8 crew to turn left heading 250 degrees and to descend to 1,500 ft. The crew was aware of aircraft arriving from the north. As the Dash 8 approached the runway 15 extended centreline, the crew thought the approach controller may have forgotten them and they discussed whether or not to contact the aerodrome controller direct. The crew could see the terrain to the west and reduced the aircraft's speed to reduce the rate of closure with the terrain. Shortly after, the Approach One controller instructed them to make a visual approach. That required them to turn the Dash 8 approximately 140 degrees to the left and then turn back to the right to establish the aircraft on final for runway 15. The crew did not report, nor were they required to report, their reduced speed. The controller could monitor aircraft ground speeds via the air situation display radar track labels.

The pilot of the Cessna had been assigned a descent to 3,000 ft and was instructed to maintain the best approach speed. He had been given traffic information on the Dash 8 and was expecting to be instructed to sight and follow that aircraft. Use of the sight and follow procedure by air traffic control (ATC) was common and transferred separation responsibility from ATC to a pilot. The Cessna pilot could see the Dash 8 ahead on final and continued descent below 3,000 ft without a clearance. He later stated that he only became aware that he had not complied with his clearance after he transferred to the aerodrome control frequency. The pilot also said that he believed there was no risk of collision.

The Approach One controller was an experienced controller and was also a team leader. He was on the second shift of a four-day cycle and had commenced the shift at 1100. He had worked the same shift the previous day. The controller had two days off duty before commencing this shift cycle. On the day of the occurrence he had visited a relative in hospital at 0800 and then returned home to do some paperwork before going to work. The relative had entered hospital about a month previously and the controller had visited regularly over that period. The controller was aware of the need to not allow the relative's illness to impact on his work. He believed he had achieved a balance between work and non-work commitments.

The controller spoke briefly with the Approach Two controller and gained the impression that the Cessna was under the control of the Approach Two controller. Consequently, as he saw the distance reducing between the Dash 8 and the Cessna he was waiting for a response from the Approach Two controller despite the fact that both pilots were operating on the Approach One radio frequency.

The Aerodrome controller was concerned with the reduction in spacing between the aircraft, and asked the Approach One controller to slow the Cessna to provide sufficient time for the Dash 8 to vacate the runway. That prompted the controller to ask the pilot of the Cessna if he could see the Dash 8. The pilot replied that he could, and was then instructed to contact the Aerodrome controller, who instructed the pilot to make an orbit, as there was insufficient spacing to ensure that the runway standard would be met.

Occurrence summary

Investigation number 200103164
Occurrence date 16/07/2001
Location 5 km NNW Cairns, (VOR)
State Queensland
Report release date 17/12/2001
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer Cessna Aircraft Company
Model 402
Registration VH-JOH
Serial number 402C0486
Sector Piston
Operation type Air Transport Low Capacity
Departure point Cooktown, QLD
Destination Cairns, QLD
Damage Nil

Aircraft details

Manufacturer De Havilland Canada/De Havilland Aircraft of Canada
Model DHC-8
Registration VH-TNU
Serial number 203
Sector Turboprop
Operation type Air Transport Low Capacity
Departure point Townsville, QLD
Destination Cairns, QLD
Damage Nil

Boeing 747-400, VH-ANA, north-east of Mount Isa, Queensland, on 13 July 2001

Safety Action

During the investigation a number of unrelated issues were found. These related to controller operation of CPDLC. Airservices Australia is proposing a national review of those procedures during early 2002.

The investigation also found that the Aeronautical Information Publication did not include CPDLC as a form of communication, yet examples were included with only a limited explanation. This was reported to the Civil Aviation Safety Authority (CASA) for action. CASA subsequently advised that additional material was warranted in the AIP.

On 29 November 2001 AIP amendment A/L 32 was issued. The amendment contained changes to the Communication section that included more detail on CPDLC operation.

Analysis

It is probable that the crew's efforts to regain time during the flight became their primary focus. Thus, when the fuel transfer problem arose, they concentrated on that item to ensure that the flight could continue to make up time. That action caused them to be distracted from managing the flight in accordance with air traffic control instructions.

As the controller acted to ascertain the actual level of the B747, it appears that the crew became aware that they had not descended in accordance with their clearance. As they descended the B747 they may have became focused on that task to the detriment of monitoring the VHF radio. While it was probably appropriate to give priority to managing the aircraft's descent, a short transmission advising their intended action would have assisted the controller to appreciate the possible effect on the airways system.

The use of ambiguous annotations by the flight crew to note the descent requirement, probably did not assist them in monitoring their flight progress.

Summary

The Boeing 747-400 (B747) was tracking northwest on air route R340 at flight level (FL) 330 and estimated TASHA, a position 61 NM northeast of Mount Isa, at 1530 Eastern Standard Time. The Boeing 737-400 (B737) was tracking northeast on air route J64 at FL330 and estimated TASHA at 1531. The Isa sector controller, located in the Brisbane Air Traffic Control Centre, identified the potential conflict between the aircraft and offered the B747 crew a change of level to FL350. The crew preferred a lower level due to the ability to maintain a greater ground speed; the flight had departed later than scheduled and the crew were endeavouring to make up time en route.

At 1501, the controller instructed the B747 crew to descend, when ready, to FL310 with a requirement to reach that level by 31 NM southeast of TASHA. That position was the lateral separation point between the air routes and the controller required the 2,000 ft vertical separation standard to be established between the aircraft before they entered the area of conflict. The pilot in command (PIC) readback the amended clearance in accordance with Aeronautical Information Publication (AIP) procedures. Subsequently, the crew did not descend the aircraft in accordance with the clearance and it entered the area of conflict at FL330. There was an infringement of separation standards as the required vertical standard was not achieved before the aircraft entered the area of conflict.

At about 1508, a change of controllers occurred at the Isa sector position. The new controller instructed the B747 crew to change frequency at 1512. The crew contacted the Isa controller on the new frequency and reported maintaining FL330. The AIP required a crew operating in controlled airspace to report, after any en route frequency change, the last assigned level and whether the aircraft was on climb, in the cruise, or on descent. The crew did not report the assigned level of FL310 and the controller did not query the crew regarding that report.

The controller became concerned, as the B747 approached the lateral separation point, by the lack of a report indicating that the aircraft was on descent to the amended level. The AIP required a report from a crew when an aircraft had left a level at which level flight had been conducted in the course of a climb, cruise, or descent.

The controller conducted a single interrogation (one shot) of the aircraft's automatic dependant surveillance (ADS) system and attempted to contact the crew by very high frequency (VHF) radio. Automatic Dependant Surveillance was a system dependant on a datalink and a series of reporting `contracts' (a rate of reporting) established between an aircraft and a ground system. The Australian Advanced Air Traffic Control system (TAAATS) automatically initiated contracts and specified the type of report, the content of a report, and the reporting frequency required. As the contracted reporting occurred automatically, it required no flight crew action. There was no cockpit indication that a "one shot" request had been actioned by an aircraft's ADS system.

The ADS response from the aircraft at 1527 indicated that it was maintaining FL330 and was 26 NM from TASHA, within the area of conflict. The controller again attempted to contact the crew by radio and also by the controller pilot datalink (CPDLC) facility. The controller made another "one shot" interrogation of the aircraft's ADS. That ADS response at 1529 indicated that the aircraft was at FL329 and 14 NM from TASHA.

Flight crews were required to maintain continuous communications with air traffic control while in controlled airspace and within VHF radio coverage. Crews of ADS equipped aircraft were able to report to ATC using that facility; however, they were required to communicate using VHF radio when operating within radio coverage. The B747 was operating in non-radar airspace and the crew reported their position via ADS. The route was within VHF radio coverage for the sector.

The controller was about to instruct the B737 crew to climb to FL340 when an ADS altitude report of FL312 was received from the B747. That report established that the 2,000 ft separation standard had been achieved as it was within 200 ft of the assigned level.

At 1529:43, after five unsuccessful attempts to contact the B747 crew on VHF radio, the controller asked the crew of the B737 (on the crossing route) to contact the B747 crew and have them call on 125.2 Mhz. At 1531, the B747 crew contacted the controller on the VHF radio and reported maintaining FL310. At the same time the B747's ADS issued a Waypoint Report for TASHA which reported the aircraft's level as FL309. Later analysis of the ADS reports indicated that the B747 had descended 1,700 ft in about 28 seconds.

The automatic reporting rate for ADS tracks was set by TAAATS. The flight information region was divided into cells that were allocated a reporting rate for a Basic Report. The rate was normally 30 minutes (or 40 minutes for oceanic areas). A controller with the jurisdiction of an aircraft on an ADS track can manually amend the rate as required. Also, when the aircraft passed a designated waypoint the system automatically generated a Waypoint Change Event report that was appended to a Basic Report. Furthermore, an Altitude Range Event report was automatically generated when an aircraft left a contracted vertical range. When in the cruise, that vertical range was plus or minus 200 ft of the cleared flight level (CFL). Assignment of an amended level reset the range. When on climb, the reset range was the present level minus 200 ft to CFL minus 200 ft, with the reverse range for aircraft on descent. At that time, for the B747 maintaining FL330 and then assigned FL310, the vertical range would change from FL332 - FL328 to FL332 - FL312. As the aircraft descended through FL312 the Altitude Range Event report was generated and the contract reset to FL312 - FL308; to monitor the amended CFL (FL310).

The B747 PIC later reported that they had endeavoured to remain at FL330 for as long as possible due to turbulence at FL310 that would have likely required a speed reduction, which in turn, would have constrained their efforts to make up time during the flight. At the time of the issue of the amended clearance, the PIC was the pilot flying the aircraft and the first officer had left the flight deck shortly before to take a break. On the return of the first officer, the PIC briefed him on the clearance as per company procedures and the FO wrote the clearance on the flight plan. The incident report submitted by the crew stated that the annotations used by the FO on the flight plan indicated that descent should commence at 31 NM from TASHA, instead of the requirement to be at FL310 at that point.

The crew then became involved in troubleshooting a problem with balancing the main fuel tanks. The PIC stated that they had been distracted and forgot about the requirement to descend to FL310 by 31 NM southeast of TASHA. The PIC reported that he was aware of the B737 on the crossing track as he had heard the controller request the B737 crew to contact them (the B747 crew).

The South Pacific Air Traffic Services Coordinating Group's Southern Pacific Operations Manual (SPOM) V3.1 set the standard for ADS operations for air traffic control service providers and operators. The system status and serviceability was checked following the occurrence. Between 1332 and 1719 there were 31 downlink messages of which the minimum transit time was 6 seconds and the maximum transit time was 24 seconds. Those times were within the required SPOM system performance parameters. During that period there were no reported failures of the communication or TAAATS systems.

The investigation did not establish why the B747 crew did not respond to the controller's radio calls.

Occurrence summary

Investigation number 200103079
Occurrence date 13/07/2001
Location 46 km SE TASHA, (IFR)
State Queensland
Report release date 17/04/2002
Report status Final
Investigation type Occurrence Investigation
Investigation status Completed
Mode of transport Aviation
Aviation occurrence category Loss of separation
Occurrence class Incident
Highest injury level None

Aircraft details

Manufacturer The Boeing Company
Model 747
Registration VH-ANA
Sector Jet
Operation type Air Transport High Capacity
Departure point Sydney, NSW
Destination Hong Kong
Damage Nil

Aircraft details

Manufacturer The Boeing Company
Model 737
Registration VH-TJP
Serial number 24441
Sector Jet
Operation type Air Transport High Capacity
Departure point Yulara, NT
Destination Cairna, QLD
Damage Nil