The following disussion has been moved from L2 since the subject has deviated from the original topic and fits in the Shuttle Q&A.
kneecaps - 5/3/2007 5:27 AM
mkirk - 5/3/2007 1:08 AM
This is a hefty set of questions, all of which have complex answers made up of lots of ifs, ands, ors and buts.
I can't wait, as much as I absorb myself, nothing beats hearing from a professional on the subject!
Pete
Here is what I can tell you about Command Path Failures, I will try and answer at least one of the other questions each day...time permitting.
Command Path Failures:
The main engine controller operates by comparing the commands within its 3 command channels, if at least 2 of those incoming commands are identical then the command is executed (refer to the diagram I attached below). If all 3 commands are different, a Command Path Failure is declared and the controller informs the GPCs (general purpose computers) which annunciate the failure for that engine.
The training philosophy is to pound into crew members heads two important points concerning Command Path Failures; 1) the affected engine MUST be shutdown manually and 2) the engine MUST be shutdown using what is called the AC/PB method.
When an engine is experiencing a Command Path Failure it will not accept any incoming commands, including the command to shutdown - the engine should remain at its last valid commanded setting.
The crew can not use the Main Engine Shutdown Pushbuttons (PBs), located on the center console, to initiate a shutdown because the buttons only send out a GPC shutdown command. That shutdown command will be rejected by the engine controller because of the Command Path Failure.
The crew has to shutdown the engine by taking the respective engine power switches known as the “ACs” to off. These switches which are located to the right of the Pilot (on panel R2) will remove all electrical power from that engine’s main engine controller – with a complete loss of the controller the engine will perform a pneumatic shutdown using the helium supply as a safety feature to ensure an uncontrolled engine is not allowed to keep running.
A pneumatic shutdown uses helium to close the 5 main SSME valves, these are normally closed hydraulically.
Since the engines were shutdown using the power switches (rather than the pushbuttons) the GPCs do not know what has happened. From the perspective of the GPCs, data is no longer coming in from the engine and they therefore assume a Data Path Failure (I will cover those in my next post) has occurred. In order to let the GPCs know that the engine has been shutdown the pushbutton for that engine is pressed.
Pressing the PB is referred to as “moding guidance”. This is important because you want the guidance system to know it doesn’t have the engine running any more, otherwise it will assume the engine is running and fly accordingly.
The timing of the manual shutdown is dictated by the type of ascent being flown (i.e. Nominal, ATO, RTLS, or TAL) and the number of engines operating. For a nominal uphill ascent with all 3 engines running, the one with a Command Path Failure will be shutdown at Mach 23. This allows the engine to run as long as possible but shuts it down with enough time for guidance to compensate for the lost engine prior to MECO. The engine needs to be shutdown in this manner to protect it from possible fuel starvation and to protect against LO2 NPSP (net positive suction pressure) violations caused by a rapid loss of acceleration at MECO.
Mark Kirkman