2 ms·
What if the system was arranged such that there were 2 MCAS systems and 2 AOA sensors, each redundantly wired in a cross-strapped fashion? Then, in the cockpit
by planteen 8y ago
What if the system was arranged such that there were 2 MCAS systems and 2 AOA sensors, each redundantly wired in a cross-strapped fashion? Then, in the cockpit there are two switches: MCAS PRI/RED and AOA PRI/RED. You could then tolerate a simultaneous failure of one MCAS and AOA sensor, as well as have a method to bypass and ignore any failing sensor/actuator.
Disclaimer: I've never worked on aircraft software. I've worked on unmanned spacecraft and the scheme I described is very common for fault tolerance.