Purpose

This paper aims to show the current situation and additional requirements for the aircraft automation systems based on the lessons learned from the two 737 MAX crashes.

Design/methodology/approach

In this study, the Swiss cheese model was used to find the real root causes of the 737 MAX accidents. Then, the results have been compared with the actions taken by the manufacturers and authorities. Based on the comparison, the necessary improvements to prevent such accidents are defined. Regarding the faulty sensor that forms the accidents, a synthetic sensor was developed using an aerodynamic model.

Findings

It has been proven that the safety-critical automation systems should not be designed by relying on a single set of sensor data. Automation levels should be defined in a standard way. Depending on the defined automation level, the system must be designed as either fail-safe or fail-operational system. When designing backup systems, it should be decided by looking at not only whether it has power but also the accuracy of the incoming signals.

Practical implications

Aviation certification requirements related to automation systems need to be revised and improved. With this context, it was revealed that the certification processes for automation systems should be re-evaluated and updated by aviation authorities, especially Federal Aviation Administration and European Union Aviation Safety Agency.

Originality/value

Task sharing between automation system and pilot based on the classification of automation levels and determining certification requirements accordingly has been brought to the agenda. A synthetic Angle of Attack sensor was developed by using an aerodynamic model for fault detection and diagnosis.

中文翻译：

---

基于波音 737 MAX 坠机事故的自动化系统要求

目的

本文旨在根据两起 737 MAX 坠机事故的经验教训，展示飞机自动化系统的现状和额外要求。

设计/方法/方法

在这项研究中，瑞士奶酪模型被用来寻找 737 MAX 事故的真正根源。然后，将结果与制造商和当局采取的行动进行了比较。根据比较，确定了防止此类事故的必要改进。对于导致事故的故障传感器，使用空气动力学模型开发了一种合成传感器。

发现

已经证明，安全关键自动化系统不应依赖于一组传感器数据来设计。应以标准方式定义自动化级别。根据定义的自动化级别，系统必须设计为故障安全或故障运行系统。在设计后备系统时，不仅要看它是否有电，还要看输入信号的准确性。

实际影响

需要修订和改进与自动化系统相关的航空认证要求。在此背景下，据透露，航空当局，尤其是联邦航空管理局和欧盟航空安全局，应重新评估和更新自动化系统的认证流程。

原创性/价值

基于自动化级别的分类和相应地确定认证要求的自动化系统和飞行员之间的任务分担已被提上议事日程。通过使用空气动力学模型开发了一种合成攻角传感器，用于故障检测和诊断。