3 ms·
< change the MCAS software to give the system input from more than one AOA sensor That's even worse than I thought. The data from both sensors was being logged
by pauljurczak 8y ago
< change the MCAS software to give the system input from more than one AOA sensor
That's even worse than I thought. The data from both sensors was being logged. Some reports indicated cases of huge discrepancies (20 degrees) between sensors. It is incomprehensible to me that MCAS ignored the other sensor. The lawyers will have a field day with that and in this case I say: go for it!
- planteen 8y agoWhat if the system was arranged such that there were 2 MCAS systems and 2 AOA sensors, each redundantly wired in a cross-strapped fashion? Then, in the cockpit there are two switches: MCAS PRI/RED and AOA PRI/RED. You could then tolerate a simultaneous failure of one MCAS and AOA sensor, as well as have a method to bypass and ignore any failing sensor/actuator. Disclaimer: I've never worked on aircraft software. I've worked on unmanned spacecraft and the scheme I described is very common for fault tolerance.