Can someone here explain a pretty basic question that I have had ever since this controversy came to light? I don't understand why any aircraft manufacturer, engineer, software developer, would make a device that forces the nose of the plane down. You can't land unless you're in control and landing safely is the only reason to go down that I know of. So I just don't get that as an initial thing, but the second part of that is, given the hazards of pointing the nose down, which are obvious even to me, why would you not design the system so that it's a warning, and allow the pilots who are actually sitting there to decide whether going down is a good idea or not? That just fundamentally, as a threshold issue, makes no sense to me at all. So I'm hoping you could help me understand. Thank you.
The main thing to avoid in aeroplane stability & control, is an aerodynamic nose up moment that is not commanded by the pilot. The uncommanded nose-up moment would not auto-stabilise, but rapidly get progressively larger with increasing angle of attack, and run away to a stalled aeroplane.
During certification of a passenger aeroplane, many tests are carried out to check if the airframe does not start to have a mind of its own.
- If the pilot does not provide a control input, the airframe must return to the trimmed position.
- Forces and inputs to move the aeroplane away from trimmed position must be such that there is an ever increasing force required to achieve an ever increasing nose-up position. The nose-up position must always be commanded by the flight control surfaces, elevator and stabiliser, in a predictable way.
One of the tests to be performed during certification is stick-force-per-g. Bank the aeroplane and start turning while pulling the stick back in order to maintain altitude. Then bank more and pull back more, in ever tightening turns. It must be progressively harder to pull back on the stick to maintain altitude, never easier.
It was during this wind-up turn that due to the engine configuration of the MAX an aerodynamic nose-up moment appeared, which would cause the pitch stick force to suddenly become less than expected. Not as bad as a runaway pitch, but still an undesirable situation when the pilot is still straining to maintain the manoeuvre. This is the situation that MCAS was originally designed for, to auto-compensate for this situation only. The aeroplane should always stabilise itself and manner of control must be predictable and within the reaction times of humans.
More info in the links in this question, very interesting articles which illustrate how MCAS design bloated from the original scope, under time pressure.
Counter-intuitively, lowering the nose of an aircraft is not done for the purpose of "going down". Climb/descent is managed with throttle, and speed is managed with the control column/stick. The logic of this makes sense when you consider that going up or down involves the addition or removal of potential energy which is sourced by the engines and sunk into drag.
Pull back on the column/stick and you increase pitch angle, which increases angle of attack, which increases lift. That causes the aircraft to go up, yes, but going up requires extra energy which most immediately comes from the aircraft's forward motion - it slows down. As it slows, lift decreases and (ideally), equilibrium is restored at some lower airspeed and increased angle of attack.
Same thing in reverse - push forward and you go faster.
Due to the way the new engines were fitted to the 737 Max 8, it acquired a handling problem in which the nose could pitch up unexpectedly; if uncorrected, this pitch-up could induce a stall. MCAS was intended to compensate for this bit of bad behavior by detecting its occurrence and automatically pushing the nose down to maintain the expected attitude and prevent a stall. The crashes tragically revealed points of failure in the MCAS; in those cases, MCAS responded to a falsely indicated high angle of attack condition.
A fairly lengthy article was published at The Verge recently, which details the story of the 737's evolution into the Max 8. The article outlines the reason the MCAS exists and why it does what it does (both nominally and erroneously), as well as a short history of one of the accident aircraft leading up to its final moments. Not sure how authoritative the article is, but I believe all the stated facts are correct.
To add a bit to the existing answers, the reason for the unexpected pitch-up moment on the 737 MAX, as far as I understand it, had to do with the flattened portion on the bottom of the engine cowling.
The root of the problem is that the 737 was designed back in the day of low-bypass turbofans (specifically, the Pratt & Whitney JT8D.) Due to the low bypass ratio around the core, these engines had much smaller diameters than today's high-bypass turbofans. The JT8D had a fan diameter of only 49 inches, while the LEAP-1B on the 737 MAX has a fan diameter of 69 inches (and even that is notably held smaller than the 78 inch diameter on the LEAP-1As for the A320neo series.)
Due to the massive increase of engine diameter with the switch to high-bypass turbofan engines, ground clearance became a problem, since the landing gear height was designed with much smaller engines in mind. So, you will see even on the 737 NG series that there is a flattened portion on the bottom of the engine cowling in order to improve the ground clearance a bit while still allowing the landing gear to fit into the wheel wells. Since the LEAP engines on the MAX are even larger than the CFM56 engines on the NG, the flattened part became larger in order to fit the new engines under the wing.
737NG with flattened engine cowlings (Source)
It turns out that this flattened portion can create a significant amount of lift (and, due to its positioning, nose-up moment) at high angles of attack. This causes the aircraft to want to pitch up even more at high AoA, which is bad for the reasons that Koyovis has already explained well. Thus, MCAS was designed to prevent this tendency for AoA to continue uncommanded increases at high AoA by intentionally pushing the nose down if the AoA got too high.
The idea itself is not necessarily a bad one and systems with similar purposes (pushing the nose down to prevent AoA from getting too high) exist on nearly all Airbus planes still flying and also on other newer Boeing designs. The problem was with the implementation of the MCAS, which apparently did not cross-check the AoA vane inputs against each other or otherwise do sufficient sanity-checking on the inputs from from the AoA vanes before acting on one of the AoA vane inputs to push the nose down without command from the pilots. In the case of the Ethiopian crash, preliminary information from the investigators indicates that the AoA vane that the MCAS was using for input was likely completely sheared off of the aircraft, possibly during a bird strike or similar FOD event during takeoff. Due to the counterweight of the vane still being attached, this caused it to indicate an extremely high AoA, which in turn triggered the MCAS.
MCAS forces the nose of the 737 MAX down because, under some circumstances, the nose of the aircraft can pitch up and this may result in a stall.
The Maneuvering Characteristics Augmentation System (MCAS) is a flight control software system developed for the Boeing 737 MAX to provide handling qualities similar to the Boeing 737 NG, especially in low-speed and high angle of attack (AoA) flight. It lowers the nose without pilot action when it determines the aircraft is too nose-high, based on input from airspeed, altitude and angle of attack sensors. However, it is susceptible to erroneous activation, as evidenced in the deadly crashes of Lion Air Flight 610 and Ethiopian Airlines Flight 302. The 737 MAX is indefinitely grounded until regulators decide the aircraft is airworthy, pending software and instrumentation updates and revisions to information for flight crews. They may also be required to undergo MCAS training sessions in flight simulators.
IIRC, the modifications to the 737 (including the new engines that powered it) meant the engines had to be positioned further forward and higher. (This was a similar case when they swapped from the original "cigars" to the CFM-56). And under some flight conditions, this resulted in automatic pitching up of the aircraft.
MCAS was designed to counter this tendency, to avoid pilots constantly having to make corrections. Since it was inherent behaviour of the new design, it was implemented in such a way that the pilots were not intended to even know such a system existed on their aircraft, for all intents and purposes it was flying "just as the other ones did".
For stable flight all forces and moments must be at equilibrium. For a given speed and thrust there is a window of acceptable angles of attack (AoA) when the wing produces enough lift. If the angle of attack is too high, the wing stalls and plane loses lift abruptly. The critical AoA can be reached by either excessive pitch up for a given speed or slow-down for a given pitch.
The Boeing 737 design dates back to 1964 and the latest 737s are evolutions of that design. The most apparent differences in design of the now-grounded planes are:
- Hull lenght
- Engine thrust
If you compare engine positions and the fact that the thrust doubled over time you can clearly see where the unintended pitch up is coming from.
This pitch up can lead to stalling and pitch down countermove must be performed to avoid such situation because power-up will lead to further pitch up move.
Also note that the MCAS intervention led to a disater only twice; in all other cases not worth to be documented it worked as intended. The issue, that made all 737-MAX grounded, is NOT about that such system was implementd but how it was implemented and how it was documented - which is a comletely different story. Also note that it is not the first case of
anti-stall not-well-documented safety system malfunction leading to disastrous consequences.
I don't understand why any aircraft manufacturer, engineer, software developer, would make a device that forces the nose of the plane down.
Because history has proven that pilots themselves don't always do it.
I recon the engineers thought it would improve safety.
Looking at the Air France flight 447, if (a working) MCAS was in place it probably would have saved the plane.
In short the first officer stalled the plane in to the water.
First officer Robert said to himself, "climb" four times. Bonin heard this and replied, "But I've been at maximum nose-up for a while!" Captain Dubois realized Bonin was causing the stall, causing him to shout, "No no no, don't climb!"
This is just one accident where lowering the nose would have saved the plane.
I'm not blaming the air crew, it's "counter-intuitive" to lower the nose and once your reptile brain is in charge it is hard to get back in control of your mind.
Planes fly with speed. If they don't have enough speed, they fall down like bricks.
Nose down trades altitude for speed. You're losing altitude, but you're "flying more".
Nose up tries to trade speed for altitude. At best, you're gaining altitude, but you're "flying less". At worst, you're not gaining anything, you're just slipping down while looking up. This is how Air France Flight 447 crashed: copilot kept pulling up and they've lost all altitude just by that.
737 MAX, due to it's unplanned engine size, has natural tendency of pulling the nose up, which is super-dangerous because of the reasons above. Pushing it down is a way to keep this danger at bay. The problem is not in pushing the nose down itself, but pushing it down too often and too much. They've replaced big danger with as smaller one - which unfortunately proven to be designed even worse than oversized engines.
The real problem is not that the lift from the nacelles provide a upward pitching moment. The issue is why. Stability demands that the center of lift of the total airplane be aft of the center of gravity. Total lift comes from several sources, the wing, some contribution from the fuselage, contribution due to the engine thrust angle relative to the angle of attack, and engine nacelle contribution. At high angle of attack the engine nacelle contribution becomes significant. Add all of these sources and the result is that center of lift of the total airplane moves forward at high angle of attack. As angle of attack is increased the center of lift moves forward resulting in a pitch up. As angle of attack is progressively increased the center of lift moves forward of the center of gravity and potentially uncontrolled pitch up occurs.
I read an article about this that helped me understand it very well.
The engines built for the 737 Max are very powerful.
Think of yourself riding a motorcycle or car. What happens to the car nose level when you start at a fast rate? The front moves up. And when slowing down fast? The front moves down. Right?
Due to this problem according to the engineers, something needed to control the level of the plane which is what the MCAS was designed for. To help stabilize the plane during these quick movements events speeding up or quickly slowing down.
With correct data fed to MCAS, it works very well stabilizing the plane throughout the flight so the pilot can fly the plane like a 737 as it was designed to be.
Without MCAS, the pilot would have a difficult time keeping the plane stabilized when the speed of the plane shifts. Pilot can't focus on many things going on without MCAS.
That in a nutshell made alot of sense to me. Any plane with powerful engines is going to need a MCAS type of system for this reason. And it was designed to run in the background.
Driving our cars, lots of devices are at work in the background enabling us to drive and focus on the road. Same principle here for the pilot because of the new powerful engines.
I think the issue for Boeing was the risk of falling behind Airbus in sales. So they modifed the 737 using far larger engines which because of limited ground clearance had to be mounted in such a way that increased the risk of stall during take off. So with a plane that is not as aerodynamic as it should be Boeing fitted a system to overcome the aerodynamic flaws, MCAS. It seems strange to knowingly produce a plane which is not as aerodynamic as its predecessor, but in their desperation to keep up with Airbus, Boeing did exactly that.