Lessons From Aloha

by Martin Aubury
It is just four years since the amazing survival of a Boeing 737 which lost a large section of its fuselage over Hawaii. Only one person died, yet the accident galvanised the air transport industry to make monumental improvements. Ponder the lessons about complacency which have been learned from that accident.

Aloha Airlines Flight 243 departed Hilo en route to Honolulu at 1.25 p.m. on 28 April 1988. As the Boeing 737 leveled off at top of its climb the fuselage ruptured and senior flight attendant Clarabelle Lansing was blown from the aircraft. To her death.
 

The public hearing convened by the National Transportation Safety Board (NTSB) two months later revealed just how complacent airlines and regulators had become. The factors which caused the accident were well known, some had been known for twenty years. It was just a matter of time before the factors came together and caused a tragedy.

The Aloha Boeing was being flown by First Officer Madeline Tompkins when it burst apart. She told investigators how her head was jerked back by the blast. The Captain told how the cockpit door was blown away, how he could see back into the cabin and how there was blue sky where the roof had been. Back in the cabin, 89 passengers were strapped in but well aware of their plight. They had seen nearly six metres of cabin disappear, and 

some had seen Clarabelle Lansing swept through a hole in the left wall. The two other flight attendants had been standing in the aisle and were blown to the floor. One was seriously injured and a seated passenger had to hold on to her to keep her in the aircraft. The other attendant crawled along the aisle, clinging on to seat legs and comforting passengers. Not all of the structure had torn away cleanly. There were jagged bit of metal being battered by the slipstream, then breaking loose and spearing back among the passengers. Most of the passengers were injured, seven seriously.

The crew diverted the crippled aircraft to nearby Maui. The Captain said that the aircraft was "shaking a little, rocking slightly, and felt springy." No doubt everyone on board was shaking. Experienced engineers still do not know how the aircraft held together and landed safely.

The fuselage of the Aloha Boeing failed, despite the fact that it was designed and built to well proven rules. Why? A fuselage is designed to sustain all flight and landing loads and most importantly it must be strong enough to contain cabin air pressure. The skin is less than 1mm thick, the thickness of a credit card. It is made in panels which are typically about 4 metres long and 2 metres wide. These are joined together with rows of rivets. Obviously the skin is weaker where it is drilled for the rivets, so on early B737's Boeing engineers tried to reinforce the joints with epoxy adhesive. It was these joints which failed first and let the skins rip away from the aircraft.

The first Boeing 737 was delivered in 1967, the Aloha aircraft was delivered in May 1969 and by about then Boeing became aware of problems with the adhesive bonding process. The adhesive worked much like a two tube mix used by a home handyman except that the glue was premixed and held on a scrim tape. By keeping it refrigerated the adhesive reaction was suspended. At the right time in construction the adhesive tape was laid between the skins, these were riveted together 

and the glue then cured as it warmed up to room temperature. That was the theory. In practice the adhesive did not really bond to the aluminium skin, it only bonded to the very thin layer of oxide on the surface of the aluminium. Attachment of the oxide film to the metal underneath was dangerously variable. Also if the scrim was too cold when it was applied it attracted condensation which prevented proper adhesion. If the scrim got too warm it partially cured before it was in place and again adhesion failed. Whenever adhesion failed the rivets and surrounding skin were overloaded and the skin began to crack.

Boeing was not secretive about the problem. The bonding deficiencies and their rectification were discussed in many technical papers in the early 1970's. The whole U.S. industry was embarrassed because the Europeans had been successfully bonding aircraft for 30 years. In 1975 the U.S.A.F. stepped in with a large contract to catch up with the Europeans. It went to Boeing's arch rival, Douglas.

Boeing progressively improved the design of the skin joints and hoped that for aircraft already in service the problem could be controlled with enhanced inspections. From May 1970 onwards Boeing sent the airlines a series of bulletins recommending inspection and sealing of the joints. Cracking and corrosion still went on. Diligent airlines found it and fixed it. Less diligent ones stayed lucky. After 17 years of increasing concern the U.S. regulatory authority, the Federal Aviation Administration (F.A.A.) issued a compulsory order, known as an Airworthiness Directive (A.D.) which required that all U.S. airlines inspect the skin joints on their old B737's. To keep costs down the F.A.A. only made the inspections mandatory along the two most critical joints. Inspection of the other joints was still at the discretion of each airline.

John Mapel was the F.A.A. representative who had the job of ensuring that Aloha complied with aircraft maintenance requirements, including A.D.'s. His job title was Principle Maintenance Inspector and he had been assigned to Aloha for three years at the time of the accident. He told the accident enquiry that he had been concerned about maintenance practices at Aloha ever since he had gone there. F.A.A. has a surveillance program known as the National Aviation Safety Inspection Program (N.A.S.I.P.), which began because of widespread safety breaches engendered by deregulation. So Mapel instigated a N.A.S.I.P. audit of Aloha. It found problems, but they were related to paperwork and management rather than to the actual condition of the aircraft. Not much seems to have been done. Aloha people were still sure that their maintenance was good enough and Mapel still worried.

Boeing too was concerned about maintenance of aging aircraft and had set up its own team to survey airlines when they were doing major work. Mr. Maple claims that due to his "nudging" Aloha invited the Boeing team to audit them. This happened in September 1987, October 1987 and January 1988. The Boeing people were thorough and had no doubt that Aloha and its aircraft were in trouble. But they would not tell F.A.A. or Mr Mapel. When the Boeing team met with Aloha executives to report its criticisms, Mr Mapel was excluded. He only heard of the meeting by chance and told the enquiry of the heated exchange which occurred when he tried to attend the crucial meeting. Apparently Boeing felt that if it passed any adverse findings to the regulatory authority it would lose the confidence of customer airlines and its own monitoring would be constrained. Boeing has since changed that view. It tells airlines to report adverse finding to their regulatory authority immediately, because Boeing will do so within 24 hours.

It seems that Aloha did listen to Boeing and had improvements in train but not soon enough to save Flight 243 and Clarabelle Lansing.

Maintenance standards at Aloha were not abnormal. The whole industry had become complacent about maintenance and particularly about the durability of old aircraft. To put this in perspective the accident aircraft was nineteen years old, older no doubt than the cars driven by most of the passengers. The aircraft had operated for 35,496 hours, in other words it had actually been up in the air for a total of four years. The aircraft had taken off 89,680 times, that means each flight had averaged only about 25 minutes. Every 25 minutes the skin, the frames and the joints had been stretched as the fuselage had been pumped up to maximum pressure. How could the airlines and their mechanics have become complacent about their planes while treating them like this?

Although Boeing was concerned about its old aircraft in general terms, it too was complacent about the fuselage. This was because of a naive faith in a concept called the "lead crack". Boeing engineers believed that if the fuselage did crack anywhere, a single "lead crack" would grow along the skin until it reached a fuselage frame, then it would turn at right angles and a triangular shaped tear would blow out and safely dump fuselage pressure. Boeing is a close knit company and when an idea like this takes hold it becomes accepted as gospel. It went unchallenged by most of the FAA. The British and Australian authorities never accepted the concept but needed an accident to prove them right.

Amid the reams of evidence tabled at the enquiry is a letter from Australian fatigue experts questioning Boeing on the integrity of skin joints on their older B737's. The response from Boeing glibly assured that it had "demonstrated safe decompression in lap joints with a 32inch crack and verified multiple site damage in fastener holes". It is precisely this failure which crippled Flight 243. The Boeing letter was dated 14 April, just two weeks before the accident.

The alternative possibility which was feared by the Australians, was that small cracks would grow simultaneously at many nearby rivet holes. If this happened there would be little chance of finding the cracks by visual inspection, they would be too small or hidden by paint. And, when the cracks started to join up it could happen almost instantaneously. The debris left behind in the Aloha hull clearly showed that this had caused the accident.

The Aloha accident got dramatic media coverage around the world. In the U.S. it crystallized public concern about deteriorating safety standards in the aftermath of deregulation. The public and the media pressured Congress who, in turn pressured the F.A.A. If F.A.A would not take stringent action then the matter would be handled directly by Congress and all aircraft over a certain age would be banned.

Just five weeks after the accident the F.A.A. called an International Conference on Aging Airplanes. It was attended by 400 very concerned representatives from airlines, manufacturers and airworthiness authorities from 12 countries. In a keynote address, Jim Oberstar, Chairman of the Congressional Sub-Committee on Transport said:

"The purpose of this conference is to apply the combined genius of experts from the three pillars of modern aviation: the manufacturers, the carriers and the FAA to resolve yet another vexing question for civil aviation: the problem of aging aircraft."
He went on to promise; "If more inspectors and inspections are needed, Congress, I assure you, will provide the funding, as we have done in the past" FAA field inspector staff had sunk from 1672 to a low of 1331 in 1984. Since then, with the impetus of Aloha and other accidents the number has doubled.

The conference set up an Airworthiness Assurance Task Force, led by Robert Doll, Vice President of Technical Services at United Airlines. Under it are three working groups; one reviewing the integrity of Boeing aircraft, one for Douglas aircraft and one for other transport aircraft (Lockheed and European). The very experienced, practical engineers in these groups quickly confirmed the extent of complacency which had set in throughout the industry. The problems were not limited to Boeing or Aloha or the 737 or the U.S.A. Since the Aloha accident, unseen by the public, unprecedented improvements in maintenance have had to be made.

Far too many safety recommendations from the manufacturers were ignored by the airlines. The working groups have had the enormous task of reassessing all service instructions ever issued and deciding which must be made mandatory. Moreover they have rejected the previous belief that safety could be assured by inspection alone. If there is a safety hazard then a permanent fix must be found and applied.

Mandatory corrosion control programs have been developed and are being introduced from the start of 1992. These require that all operators have in place prevention and inspection systems sufficient to ensure that hazardous corrosion never occurs. If hazardous corrosion is ever found, it signifies that the operators whole program is suspect. It is no longer sufficient just to fix the immediate defect. The program must be reassessed and if necessary the whole fleet of aircraft must be re-inspected.

Another danger recognized by the working groups is that of repairs. Every aircraft suffers cracks, corrosion and occasional scrapes with service vehicles; and it all gets patched up. A hundred patches on an aircraft is not unusual. Too often they are riveted on in a hurry, with dubious engineering and dubious records. Every one has got to be found, inspected, evaluated and if necessary replaced. It is a huge task and will take years.

It should never have been necessary to make the extra work mandatory. It should have been good practice. Good practice fell by the wayside under the insidious pressures of complacency. Safety is no accident. It depends on the concerted effort of manufacturers, operators and regulators always working together to maintain the fine safety record of the aviation industry.

Nobody in our industry must ever become complacent.

This story was originally published in BASI Journal and is reproduced with authors permission. (Photos from the NTSB files)

  http://www.pprune.org/ubb/NonCGI/Forum1/HTML/005913.html   http://www.thestar.com.my/online/newsreport.asp?file=/2000/1/11/nation/1104stko.asp&newspage=nation    Looks like the 747 Classics are starting to break up (aloha Style).  
     
   
Nation
Courts & Crime
Parliament
States
Metro KL
Penang
Focus/Opinion
Asean
Asia
World
Links
AP-Asia
AP-World
 
BUSINESS
 
SPORTS
FEATURES
EDUCATION
TECHNOLOGY
DESTINATIONS
LEISURE
WEATHER
ARCHIVES
CLASSIFIEDS


Alfred and Lucy, Cyril
RM 80
Buy Now
Tuesday, January 11, 2000

DCA grounds Korean cargo plane

By K. Suthakar

PENANG: The Department of Civil Aviation is investigating a Korean Air Cargo plane which landed at the Penang International Airport on Sunday evening with a gaping hole in its fuselage.

It is learnt that the Boeing 747-200 aircraft was ordered to be grounded after the hole was visually detected by an air traffic controller before it landed on Runway 22 at 6pm.
Star Online Pix alt
UNDER INVESTIGATION. . . the Korean cargo plane with the hole in its fuselage (insert) parked at the freighter cargo bay at the Penang International Airport yesterday.
STARpic by H.N.LEONG

A source said DCA was conducting an inquiry into the incident and among those who would be interviewed were the pilot of Flight KE367 and two crew members.

He said the plane took off from Seoul about six hours earlier.

"The DCA views the matter seriously as the plane could have exploded in mid-air following an outflow of compressed cabin air through the hole," he said.

He added that since this did not happen, it was possible that the hole only occurred when the plane was flying at low altitude where there would not be much of a difference between cabin and outside air pressure.

The source said the hole could have been caused by a falling object but added that it was too early to confirm the cause.

A check late yesterday showed that the plane was parked at the freighter cargo bay behind MAS Catering Sdn Bhd. Workers had covered the hole with canvas, apparently to prevent rain water from seeping into the cabin.



Printer Friendly


Copyright © 1995-2000. Star Publications (Malaysia) Bhd. (Co No. 10894-D)
All rights reserved.
I hesitate to speculate ahead of the official findings & hate to worry you
"fly guys", but Boeing designed all aircraft from B707 thru 747 to fail like this.

It is called safe flapping.  Theory was that fuselage fatigue cracks could
not be found reliably but a single crack would grow lengthwise along the
fuselage (usually starting from a rivet hole and joining others) and when it
reached a frame the crack would turn at right angles.  The triangular area
of skin would flap out and safely dump pressure.  On B737 the frames were
supplemented with intermediate crack stopping tear straps to make the crack
turn sooner.  All of this was proven safe by test, except the testing was
"fiddled" on 737

Problem was that cracks often occur at many adjacent rivets, sometimes
either side of a crack stopper.  This was never covered by the tests and the
cracks can get hellish long before they turn.  Some consider the Aloha
accident to be the ultimate "safe flapping" failure.

Fixing all this has been the bulk of the FAA Aging Aircraft research.

Attached is article I did for BASI Journal in 1992 - some of you may have
seen it at the www.avstop.com site.  Earlier I'd done a similar one for
Canberra Times but BASI wanted it "without the politics".  Sometime I'll dig
out the better one - with politics.

Regards

Martin

++++++++++++++++++++++++++++++++++++++++++++++++
> From:  <safety@iasa-intl.com>
Sorry if I wasn't clear. On Pprune they were asking the same question. i.e.
How could it possibly have come all the way from Seoul with a hole that big
(i.e. quite big)? The answer is that the pressurization and thermal cycle of
climbing to altitude and descending did the final loosening job so that it
probably lost the bit of skin on finals (or at least somewhere on descent
below 10,000ft where pressurization is not a factor). The change of
configuration and slow speed is where flight control bits normally fall off.
The change of airflow and incidence on approach is also good for ripping off
bits of proud metal. I'd say it's corrosion and poor maint practice that
we're looking at here. Martin Aubury knows all about that because he's very
familiar with the shabby build and maint practices that led to the Aloha
roof-shedding. All the surmise on Pprune and in papers about how it must
have been hit by something is likely to be rubbish. Aircraft metal in
stressed skin monocoque construction rapidly loses strength once debonding
and rivet loosening occurs due to the cumulative effects of corrosion. Once
it's loose, it's just a flapping piece of metal looking to detach. Metal
fatigue in bending does the rest.

> From:  <safety@iasa-intl.com>
> To: Alex Paterson <apaterson@vision.net.au>
> Cc: <andrew@pem.com.au>; David Evans <devans@phillips.com>;
> John D. King <jking1@mediaone.net>; Martin Aubury
<ozaubury@ozemail.com.au>
> Sent: Wednesday, January 12, 2000 10:46 AM
> Subject: Re: KAL Penang 747-200 Freighter HOLED
>
>
> > Alex
> > Sounds to me more like an Aloha repeat. The Classics are old enough that
> > this is possible. If it's at a position of natural flexure then rivets and
> > bonds may have worked loose. I would guess that the pressure and thermal
> > stresses of altitude caused the ultimate partial debonding - but the area
> > was held in place by the pressurization. Once below 8000ft, depressurized
> > and at a higher angle of attack at low speed the suck of the airflow
> > probably whipped the semi-detached piece away (probably also because it
>> was by that time presenting a lip to the airflow). These sorts of failures are
> > very progressive and without specific specialist inspections can obviously
> > be headed in one direction only => failure. Condensation moisture, salty air
> > and unseen "working" corrosion between laps plays a big part in the
> > debonding process. Repaint intervals and any protective finishes applied/not
> > applied would also affect the rate I would guess.
> > I can see it happening in KAL but probably not with QANTAS.
> >
> > John S.
> > *****
> >
> > ----- Original Message -----
> > From: "Alex Paterson" <apaterson@vision.net.au>
> > To:  <safety@iasa-intl.com>
> > Sent: Wednesday, January 12, 2000 9:46 PM
> > Subject: KAL Penang
> >
> > > John,
> > >
> > > Harro Ranter sent me this:  worth a look.
> > >
> > > Knowing your interest in Korean Air, you've got to see THIS:
http://www.thestar.com.my/online/newsreport.asp?file=/2000/1/11/nation/1104s
> > tko.asp&newspage=nation
> > >
> > > I wonder if this happened in flight or if they left Seoul with this....

> > > Harro

Anyone who isn't confused here doesn't really know what's going on.

The world is made of people who never quite get into the first team and who just miss the prizes at the flower show.- Jacob Bronowski

I've told you for the fifty-thousandth time, stop exaggerating.