Aircraft Accident Brief [PDF version]
Presentations from Boardmeeting
Accident No.: DCA00MA005
Operator or Flight Number: Sunjet Aviation
Aircraft and Registration: Learjet Model 35, N47BA
Location: Aberdeen, South Dakota
Date: October 25, 1999
On October 25, 1999, about 1213 central daylight time (CDT), a Learjet Model 35, N47BA, operated by Sunjet Aviation, Inc., of Sanford, Florida, crashed near Aberdeen, South Dakota. The airplane departed Orlando, Florida, for Dallas, Texas, about 0920 eastern daylight time (EDT). Radio contact with the flight was lost north of Gainesville, Florida, after air traffic control (ATC) cleared the airplane to flight level (FL) 390. The airplane was intercepted by several U.S. Air Force (USAF) and Air National Guard (ANG) aircraft as it proceeded northwestbound. The military pilots in a position to observe the accident airplane at close range stated (in interviews or via radio transmissions) that the forward windshields of the Learjet seemed to be frosted or covered with condensation. The military pilots could not see into the cabin. They did not observe any structural anomaly or other unusual condition. The military pilots observed the airplane depart controlled flight and spiral to the ground, impacting an open field. All occupants on board the airplane (the captain, first officer, and four passengers) were killed, and the airplane was destroyed.
HISTORY OF FLIGHT
On October 25, 1999, the flight crew was scheduled to begin a 2-day trip sequence consisting of five flights. The flights on the first day were to be from Orlando Sanford International Airport (SFB), Sanford, Florida, to Orlando International Airport (MCO), Orlando, Florida; from MCO to Dallas-Love Field Airport (DAL), Dallas, Texas; and from DAL to William P. Hobby Airport, Houston, Texas.
The first flight of the day, a visual flight rules positioning flight operating under 14 Code of Federal Regulations (CFR) Part 91, was scheduled to depart SFB about 0800 EDT bound for MCO, which is approximately 15 nautical miles (nm) away. According to the Sunjet Aviation customer service representative on duty at SFB on the day of the accident, the captain reported for duty at SFB about 0630 EDT, and the first officer arrived about 0645 EDT. She stated that both pilots were in a good mood and appeared to be in good health.
A Sunjet Aviation line service technician stated that the captain asked him to pull the airplane out of the hangar, fuel it to 5,300 pounds fuel weight, connect a ground power unit to the airplane, and put a snack basket and cooler1 on the airplane. The first officer arrived at the airplane just before the fueling process started and stayed in the cockpit while the airplane was being fueled. The first officer then went inside the terminal building while the captain performed the preflight inspection of the airplane.
About 0725 EDT, an instrument flight rules flight plan was filed with the St. Petersburg Automated Flight Service Station for the second flight of the day, MCO to DAL, which would operate under 14 CFR Part 135. The flight plan indicated that N47BA was scheduled to depart MCO about 0900 EDT; follow a route over Cross City, Florida, to 32 degrees, 51 minutes north and 96 degrees, 51 minutes west; and proceed directly to DAL. The requested altitude was 39,000 feet.2 The flight plan also indicated that there would be five persons on board (two pilots and three passengers) and 4 hours and 45 minutes of fuel.
According to a witness, the accident airplane departed SFB about 0754 EDT. The flight arrived at MCO about 0810 EDT. An Aircraft Service International Group employee at MCO stated that after the airplane arrived, the captain told him that they were picking up passengers and did not require additional fuel. According to this witness, the passengers arrived about 30 minutes later and boarded the airplane. The Sunjet Aviation director of operations indicated that an additional passenger who was not on the original charter flight request boarded the accident airplane at MCO. Several bags were placed on board the airplane, including what the Aircraft Service International Group employee described as a big golf bag weighing about 30 pounds.
According to ATC radio transmissions, the flight departed MCO about 0919 EDT bound for DAL. At 0921:46 EDT, the flight contacted the Jacksonville Air Route Traffic Control Center (ARTCC) and reported climbing through an altitude of 9,500 feet to 14,000 feet.3
At 0921:51 EDT, the controller instructed N47BA to climb and maintain FL 260. N47BA acknowledged the clearance by stating, "two six zero bravo alpha." At 0923:16 EDT, the controller cleared N47BA direct to Cross City and then direct to DAL. N47BA acknowledged the clearance. At 0926:48 EDT, N47BA was issued instructions to change radio frequency and contact another Jacksonville ARTCC controller. N47BA acknowledged the frequency change.
At 0927:10 EDT, N47BA called the Jacksonville ARTCC controller and stated that the flight was climbing through an altitude of FL 230. At 0927:13 EDT, the controller instructed N47BA to climb and maintain FL 390. At 0927:18 EDT, N47BA acknowledged the clearance by stating, "three nine zero bravo alpha." This was the last known radio transmission from the airplane.4 The sound of the cabin altitude aural warning5 was not heard on the ATC recording of this transmission.6
At 0933:38 EDT (6 minutes and 20 seconds after N47BA acknowledged the previous clearance), the controller instructed N47BA to change radio frequencies and contact another Jacksonville ARTCC controller. The controller received no response from N47BA. The controller called the flight five more times over the next 4 1/2 minutes but received no response.
About 0952 CDT,7 a USAF F-16 test pilot from the 40th Flight Test Squadron at Eglin Air Force Base (AFB), Florida, was vectored to within 8 nm of N47BA.8 About 0954 CDT, at a range of 2,000 feet from the accident airplane and an altitude of about 46,400 feet,9 the test pilot made two radio calls to N47BA but did not receive a response. About 1000 CDT, the test pilot began a visual inspection of N47BA. There was no visible damage to the airplane, and he did not see ice accumulation on the exterior of the airplane. Both engines were running, and the rotating beacon was on. He stated that he could not see inside the passenger section of the airplane because the windows seemed to be dark. Further, he stated that the entire right cockpit windshield was opaque, as if condensation or ice covered the inside. He also indicated that the left cockpit windshield was opaque, although several sections of the center of the windshield seemed to be only thinly covered by condensation or ice; a small rectangular section of the windshield was clear, with only a small section of the glare shield visible through this area. He did not see any flight control movement. About 1012 CDT, he concluded his inspection of N47BA and proceeded to Scott AFB, Illinois.
About 1113 CDT, two Oklahoma ANG F-16s with the identification "TULSA 13 flight" were vectored to intercept the accident airplane by the Minneapolis ARTCC. The TULSA 13 lead pilot reported to the Minneapolis ARTCC controller that he could not see any movement in the cockpit. About 1125 CDT, the TULSA 13 lead pilot reported that the windshield was dark and that he could not tell if the windshield was iced.
About 1133 CDT, a TULSA 13 airplane maneuvered in front of the accident airplane, and the pilot reported, "we're not seeing anything inside, could be just a dark cockpit though...he is not reacting, moving or anything like that he should be able to have seen us by now."
About 1138 CDT, the TULSA 13 lead pilot stated, "my wingman is going to make a final pass and then we are going to head back to the [midair refueling] tanker." The TULSA 13 wingman reported, "we did not get close enough to see any icing on the window due to our configuration...we did get up behind him but did not see anything." About 1139 CDT, TULSA 13 flight departed for the tanker.
About 1150 CDT, two North Dakota ANG F-16s with the identification "NODAK 32 flight" were vectored to intercept N47BA. (TULSA 13 flight had returned from refueling, and both TULSA 13 and NODAK 32 flights maneuvered in close proximity to N47BA.) About 1157 CDT, the TULSA 13 lead pilot reported, "we've got two visuals on it. It's looking like the cockpit window is iced over and there's no displacement in any of the control surfaces as far as the ailerons or trims." About 1201 CDT, TULSA 13 flight returned to the tanker again.
At 1210:41 CDT, the sound of an engine winding down, followed by sounds similar to a stickshaker and an autopilot disconnect, can be heard on N47BA's cockpit voice recorder (CVR), which recorded the final 30 minutes of cruise flight. The CVR also captured the continuous activation of the cabin altitude aural warning, which ceased at 1212:26 CDT. At 1211:01 CDT, ATC radar indicated that N47BA began a right turn and descent. One NODAK 32 airplane remained to the west, while one TULSA 13 airplane broke away from the tanker and followed N47BA down. At 1211:26 CDT, the NODAK 32 lead pilot reported, "the target is descending and he is doing multiple aileron rolls, looks like he's out of control...in a severe descent, request an emergency descent to follow target." The TULSA 13 pilot reported, "It's soon to impact the ground he is in a descending spiral."
Both flight crewmembers were certificated under Sunjet Aviation, Inc., and Federal Aviation Administration (FAA) certification requirements. A review of FAA records indicated that the flight crewmembers had no records of airplane accidents, incidents, or enforcement actions. In addition, both flight crewmembers held valid Florida driver's licenses with no history of accidents or violations during the 3 years before the accident. A search of the National Driver Registry found no history of driver's license revocation or suspension for either flight crewmember.
The captain, age 42 at the time of the accident, held an airline transport pilot certificate (certificate no. 389484668, issued September 21, 1999) with the ratings and limitations of airplane multiengine land, commercial privileges for airplane single-engine land, and type ratings for Boeing 707, Boeing 720, and Learjet. His most recent FAA first-class medical certificate was issued on June 16, 1999, with no limitations.
According to his resume, the captain served as a copilot and a standardization/evaluation copilot on a USAF KC-135A from 1981 to 1984. His resume also indicated that he was an emergency procedures evaluator (simulator) during this period. From 1984 to 1988, the captain served as an aircraft commander on a USAF E-3A. From 1988 to 1993, the captain served as a classroom and in-flight instructor pilot on a Maine ANG KC-135E. During his USAF and ANG career, the captain accumulated 3,953 hours flying KC-135 and E-3A airplanes and achieved the rank of Major. For approximately the next 6 years, the captain worked in a nonflying capacity.
The captain was hired by Sunjet Aviation on September 21, 1999.10 According to Sunjet Aviation records, the captain had accumulated a total of 4,280 hours of flight time (including his military flight time). He had flown a total of 60 hours with Sunjet Aviation, 38 hours as a Learjet pilot-in-command and 22 hours as a Learjet second-in-command. The captain had flown 35 and 6 hours in the last 30 and 7 days (respectively) and 0 hours in the last 24 hours before the accident. Sunjet Aviation records indicate that the captain received his initial Learjet 35 type rating and completed the airman competency/proficiency check for the Learjet 35 on September 21, 1999. According to Sunjet Aviation employees, the captain was an excellent pilot who transitioned into the Learjet without difficulty. They also indicated that he was knowledgeable about the airplane and that he was a confident pilot with good situational awareness.
Family and coworkers indicated that the captain was in excellent health. He was a nonsmoker who did not take medications or consume alcohol. The captain lived in the Orlando, Florida, area. During the 3 days before the accident, the captain's family reported that he participated in routine activities around the house. They further reported that on the night before the accident, the captain went to bed about 2200 EDT and, on the day of the accident, left the house between about 0530 and 0600 EDT.
The First Officer
The first officer, age 27 at the time of the accident, held a commercial pilot certificate (certificate no. 595521666, issued April 15, 1999) with the ratings and limitations of airplane multiengine land, airplane single-engine land, instrument airplane, and type ratings for Learjet and Cessna Citation 500. The first officer was also certified as a flight instructor. Her most recent FAA first-class medical certificate was issued on October 1, 1999, with the limitation that she must wear corrective lenses.
The first officer was hired by Sunjet Aviation on February 24, 1999. According to Sunjet Aviation records, the first officer had accumulated a total of 1,751 hours of flight time, 1,300 of which were as a pilot-in-command. She had flown a total of 251 hours with Sunjet Aviation as a second-in-command, 99 hours of which were as a Learjet second-in-command. The first officer had flown 35 and 6 hours in the last 30 and 7 days (respectively) and 0 hours in the last 24 hours before the accident. Sunjet Aviation records indicate that the first officer received her initial Learjet 35 type rating, completed her initial Learjet 35 second-in-command check ride, and completed the airman competency/proficiency check for the Learjet 35 on April 15, 1999.
Pilots who had flown with the first officer before she was hired by Sunjet Aviation indicated that she was a knowledgeable pilot with good aircraft handling skills; one pilot stated that she was a serious pilot who had a "meticulous" style in the cockpit and was not someone who abbreviated procedures or neglected checklists. Sunjet Aviation pilots indicated that she was a confident pilot with excellent radio communication skills.
The first officer's friends reported that she was in good health. Friends further described the first officer as a nonsmoker who did not use caffeine and did not take other medications. The first officer lived in the Orlando, Florida, area. During the 3 days before the accident, she visited with friends in the Daytona Beach and Orlando areas. According to her friends, two nights before the accident, the first officer went to bed about 0100 EDT and awoke about 0900 EDT and, on the night before the accident, went to bed about 2200 EDT and awoke about 0545 EDT.
According to FAA records, the accident airplane, a Gates Learjet Model 35, serial number (S/N) 060, was manufactured in 1976 and had been maintained and operated by Sunjet Aviation since January 1999. The airplane's titleholder as of October 25, 1999, was Jet Shares One, Inc., and the previous titleholder was McMillin Aircraft, Inc. The airplane had a total of eight passenger seats. Two AlliedSignal (Honeywell) Model TFE731-2-2B turbofan engines powered the airplane.
Oxygen System Procedures
According to the Limitations section of the Learjet Model 35/36 Aircraft Flight Manual (AFM), flight crew and passenger oxygen masks are not approved for use above 40,000 feet cabin altitude.11 A "warning" in this section states that "passenger masks are intended for use during an emergency descent to an altitude not requiring supplemental oxygen." The manual also indicates that "passenger masks will not provide sufficient oxygen for prolonged operation above 34,000 feet cabin altitude. Prolonged operation above 25,000 feet cabin altitude with passengers on board is not recommended." In addition, the manual indicates that, above FL 250, in aircraft with ZMR-series oxygen masks, one flight crewmember must wear the oxygen mask around the neck; in aircraft with 6600214-series oxygen masks, the masks must be in the quick donning position.12 Further, the manual indicates that, above FL 410, the pilot, copilot, and passengers must wear oxygen masks. The maximum operating altitude for the airplane is 45,000 feet.
Normal Procedures Checklist
The Learjet Model 35/36 AFM states the following:
Normal preflight procedures (all checklist line items) must be accomplished prior to takeoff at the original departure point of a flight. At each intermediate stop of flight where both engines are shutdown, the Through-Flight Checklist may be used for preflight provided certain criteria are met during a stop.
Procedures on the checklist marked with the symbol (t) denote Through-Flight checklist items. The following items pertaining to the oxygen system are listed in the exterior preflight procedure: "Oxygen Bottle Supply Valve (if applicable)-Open (On)" and "Oxygen Discharge Disc (if applicable)-Condition." (Neither item is marked with the symbol t.) According to the FAA principal operations inspector (POI) assigned to the Sunjet Aviation certificate, the labeling on the oxygen bottle13 supply valve is misleading; the word "OFF" is visible when the valve is open. In addition, according to the Sunjet Aviation chief pilot, during the exterior preflight procedure, it would be possible to confuse the ON/OFF status of the oxygen system because of misleading markings. He stated that he reviewed that issue with the accident captain during training. He further stated that Sunjet Aviation pilots never turn the oxygen system off; this issue is emphasized during preflight training, and it is not company procedure to disconnect the flight crew oxygen masks. In addition, briefing the passengers (which includes oxygen system operation) is a required item in the Cabin Preflight section of the Learjet Model 35/36 AFM.
The Before Starting Engines checklist requires that the oxygen system must be checked and set as follows:
a. PASS MASK Valve - AUTO.
b. PASS OXY Valve - NORM.
c. OXYGEN PRESSURE Gauge - Check. (t)
d. Crew Masks:
(1) Check oxygen flow available. Select 100% oxygen.
Warning system checks are also included in the Before Starting Engines checklist. The Cabin Altitude Warning Check checklist includes the following:
(5) TEST Selector Switch - Rotate to CABIN ALT, then depress and hold TEST button. Cabin altitude warning horn shall sound.
(6) HORN SILENCE Switch - Momentarily engage. Cabin altitude warning shall cease.
(7) TEST Button - Release.
The Before Starting Engines checklist calls for the pressurization controls to be checked and set as follows:
(4) L [left] and R [right] BLEED AIR Switches - Check, On.
(5) CABIN AIR Switch - OFF.
(6) PRESSURIZATION AUTO-MAN Switch - AUTO.
(7) AIRCRAFT ALT [altitude] Selector Knob - Rotate to cruise altitude. (t)
(8) Cabin RATE Selector - Position as desired.
(9) IN NORMAL-OUT DEFOG Knob - Push in.
The Taxi and Before Takeoff checklist includes the following:
18. Pressurization System - Set. (t)
19. CABIN AIR Switch - NORM. (t)
The After Takeoff checklist includes the following:
6. Pressurization System - Set.
a. Cabin Altitude and Cabin Climb Indicators - Monitor.
b. Cabin RATE Selector - As desired.
The Climb checklist indicates that the following check should be made when climbing through 18,000 feet:
Crew Masks - Positioned to quick donning position at or before FL 250.
Federal Aviation Regulations Part 135 Oxygen-Use Rules
Title 14 CFR 135.89, "Pilot Requirements: Use of Oxygen," states the following:
(a) Unpressurized aircraft. Each pilot of an unpressurized aircraft shall use oxygen continuously when flying-
(1) At altitudes above 10,000 feet through 12,000 feet MSL [mean sea level] for that part of the flight at those altitudes that is of more than 30 minutes duration; and
(2) Above 12,000 feet MSL.
(a) Pressurized aircraft.
(1) Whenever a pressurized aircraft is operated with the cabin pressure altitude more than 10,000 feet MSL, each pilot shall comply with paragraph (a) of this section.
(2) Whenever a pressurized aircraft is operated at altitudes above 25,000 feet through 35,000 feet MSL, unless each pilot has an approved quick donning type oxygen mask -
(i) At least one pilot at the controls shall wear, secured and sealed, an oxygen mask that either supplies oxygen at all times or automatically supplies oxygen whenever the cabin pressure altitude exceeds 12,000 feet MSL; and
(ii) During that flight, each other pilot on flight deck duty shall have an oxygen mask, connected to an oxygen supply, located so as to allow immediate placing of the mask on the pilot's face sealed and secured for use.
(1) Whenever a pressurized aircraft is operated at altitudes above 35,000 feet MSL, at least one pilot at the controls shall wear, secured and sealed, an oxygen mask required by paragraph (b)(2)(i) of this section.
(2) If one pilot leaves a pilot duty station of an aircraft when operating at altitudes above 25,000 feet MSL, the remaining pilot at the controls shall put on and use an approved oxygen mask until the other pilot returns to the pilot duty station of the aircraft.
Abnormal Procedures Checklist
According to the Learjet Model 35/36 AFM Abnormal Procedures checklist, the following must be accomplished for a pressurization loss at altitude:
Up to 10,000 (± 500) Feet Cabin Altitude
1. Oxygen Masks - Don.
2. Engine RPM - Maintain.
3. IN NORMAL OUT DEFOG Knob - Push in.
4. WSHLD [windshield] HEAT Switch - AUTO.
5. CABIN AIR Switch - OFF.
6. AUTO MAN Switch - MAN.
7. UP DN [up down] Manual Control (red) - As required to maintain satisfactory pressurization.
At 10,000 (± 500) Feet Cabin Altitude
1. Cabin altitude aural warning horn will sound.
NOTE: At 10,000 (± 500) Feet Cabin Altitude, control pressure to the outflow valve is trapped. This deactivates the Automatic Mode and stops cabin altitude from rising higher if the failure is in the automatic control system.
2. If cabin pressurization cannot be maintained, execute EMERGENCY DESCENT as follows:
a. Oxygen Masks - Don. Select 100% oxygen.
b. Thrust Levers - Idle.
c. Autopilot - Disengage.
d. Spoiler Switch - EXT [extend].
e. LANDING GEAR Switch - DN below [maximum operating limit speed] or [maximum landing gear extended speed] as appropriate for altitude. Keep sideslip angles to a minimum (ball centered) when extending landing gear.
f. Descend at [maximum operating limit speed] or [maximum gear extended speed] as appropriate for altitude. Descent from 45,000 feet to 15,000 feet requires approximately 2 minutes, 45 seconds.
g. Transponder - 7700.
h. Oxygen Mic Switches (Pilot and Copilot - On).
i. Notify ATC.
j. Check and Assist Passengers.
The airplane oxygen system provides emergency oxygen for the flight crew and passengers and consists of a single oxygen bottle, an oxygen bottle pressure regulator/shutoff valve, an oxygen pressure gauge, an overboard discharge relief valve and indicator, flight crew mask quick disconnect valves, flight crew masks, a manual passenger shutoff valve (labeled PASS OXY), an oxygen aneroid valve, an oxygen aneroid bypass shutoff valve (labeled PASS MASK), passenger oxygen actuator lanyard valves, and passenger masks. The quick disconnect valve allows the connection of the flight crew oxygen masks to the oxygen system.
Oxygen Bottle Components and Cockpit Oxygen Pressure Gauge
Oxygen is available to the flight crew at all times when the oxygen bottle pressure regulator/shutoff valve is open. Oxygen is available to the passengers automatically above 14,000 ± 750 feet cabin altitude or manually (at any cabin altitude) by opening the normally closed oxygen aneroid bypass shutoff valve, which is located on the pilot's sidewall.
The oxygen bottle has a storage capacity of 38 cubic feet at 1,800 pounds per square inch (psi). Oxygen pressure for the flight crew and passenger distribution systems is reduced to 70 psi via the oxygen bottle pressure regulator/shutoff valve that is mounted directly on the bottle. The oxygen bottle and attached oxygen bottle pressure regulator/shutoff valve are located in the nose cone of the airplane and are inaccessible to the flight crew during flight.
Flight Crew Masks/Regulators
This airplane was equipped with two different types of flight crew masks: the ZMR-series mask and the 6600214-series mask. Both flight crew masks have mask-mounted regulators manufactured by Puritan-Bennett and are plugged into quick disconnect valves located in the left and right sidewalls of the cockpit. Each mask has a microphone controlled by the OXY-MIC-ON-OFF switch on the crew microphone jack panel near the pilot's and copilot's armrests. The masks are stowed in bracket and strap assemblies located behind the captain's and first officer's seats.
The ZMR-series regulator has two positions (NORMAL and 100%) and provides oxygen diluted with cabin air upon demand when the selector lever (located on the side of regulator) is in the NORMAL position. When the lever is in the 100% position, the regulator provides 100 percent oxygen upon demand, regardless of cabin altitude.
6600214-Series (Rogers) Regulator
The second regulator, a Rogers regulator, part number 112145A, has three positions (NORMAL, 100%, and EMERGENCY) and functions similarly to the ZMR-series regulator in the NORMAL and 100% positions. This regulator design also incorporates a dilution aneroid that will progressively shut off the diluter (cabin) port upon rising cabin altitudes, thereby supplying 100 percent oxygen at cabin altitudes above 33,000 feet. When the selector lever is in the EMERGENCY position, the regulator supplies 100 percent oxygen, regardless of altitude, at a positive pressure of approximately 0.15 psi. This regulator will also automatically supply oxygen under positive pressure (approximately 130 liters per minute at 0.5 psi) at cabin altitudes above 39,000 feet, regardless of the regulator-selected mode.
Passenger Oxygen Distribution System
Manual Passenger Shutoff Valve and Oxygen Aneroid Bypass Shutoff Valve
Normal operation of these valves requires approximately two complete turns of the valve actuator shaft. Normal oxygen system configuration is with the manual passenger shutoff valve open and the oxygen aneroid bypass shutoff valve closed. (Aside from the knobs and the identification labels, the valves are identical.)
Passenger Oxygen Actuator Lanyard Valves
After the passenger oxygen masks fall from their compartments, passengers must pull a lanyard that is attached to the passenger oxygen actuator valve to initiate the flow of oxygen to the masks.
The pneumatic system uses bleed air extracted from the engine compressor sections and includes controls for the regulation and distribution of low-pressure air from the fourth stage axial compressor and high-pressure air from the centrifugal compressor.
Bleed air is provided to a bleed air shutoff/regulator valve (modulation valve) on each engine. When open, these valves regulate the flow of bleed air to a common manifold that supplies the pneumatic systems. This regulated bleed air is used for cabin pressurization and heating, anti-icing systems (for example, the engine nacelles, wing and stabilizer leading edges, and windshield), the pressurization system jet (vacuum) pump, and pressurization of the hydraulic reservoir.
Control of pneumatic bleed air is accomplished with the left and right BLEED AIR switches, which are located on the copilot's lower right switch panel. When the BLEED AIR switch is placed in its OFF position, a shutoff solenoid on the respective modulation valve is energized, and the spring-loaded open modulation valve is closed using bleed air pressure. When the BLEED AIR switch is placed in its ON position, the respective shutoff solenoid is deenergized, causing the modulation valve to regulate a downstream pressure of 27 to 35 psi.
Bleed air check valves, located downstream of each modulation valve, allow flow in one direction and prevent the loss of bleed air during single-engine operation. A bleed air manifold serves as a collection/distribution point for regulated bleed air from either engine. From the manifold, bleed air is distributed to the cabin for pressurization and heating via the flow control valve. The bleed air manifold also supplies the various other pneumatic systems previously identified.
Windshield Anti-Ice (Defog) Shutoff Valve
The windshield anti-ice shutoff valve is used to provide an alternate bleed air source for emergency pressurization when the IN NORMAL/OUT DEFOG knob, which is located below the instrument panel to the left of the pedestal, is pushed in. The shutoff valve is controlled by one of two switches mounted on the anti-ice control panel, which is located on the left side of the instrument panel, by positioning the WSHLD HEAT AUTO/MAN switch to AUTO or by placing the same switch in MAN and using the ON/OFF switch to open and close the shutoff valve.
In the event of a loss of normal pressurization, windshield anti-ice (defog) air can be routed into the cabin as an emergency source of pressurization16 by ensuring that the IN NORMAL/OUT DEFOG knob is in the IN NORMAL position, setting the WSHLD HEAT switch to AUTO, and setting the CABIN AIR switch to OFF (closing the flow control valve). Pressurization will then be maintained automatically. If pressurization is not maintained in the AUTO position, cabin altitude can be maintained by manually controlling the outflow valve using the UP/DN control switch, located on the pressurization module.
Air Conditioning System
The air conditioning system regulates the volumetric flow rate and temperature of bleed air entering the cabin and cockpit areas. Primary system components include system switches, the flow control valve, hot air bypass valve, ram air heat exchanger, and distribution ducts/check valves.
Flow Control Valve
The flow control valve, which is solenoid controlled by the CABIN AIR switch and pneumatically operated, is located in the tail cone and regulates the flow rate of conditioned bleed air entering the cabin for pressurization and heating.
Hot Air Bypass Valve
The position of the hot air bypass valve is controlled by the cabin temperature control system and determines how much bleed air passes through the ram air heat exchanger to control the temperature of bleed air supplied to the cabin.
CABIN AIR Switch
The CABIN AIR switch has three positions (OFF, NORM, and MAX). When the CABIN AIR switch is in the OFF position, the shutoff solenoid is energized, and the flow control valve is closed. When the CABIN AIR switch is in the NORM and MAX positions, the shutoff solenoid is deenergized, and the flow control valve supplies bleed air for cabin pressurization.
Cabin pressurization is provided by conditioned air entering the cabin through the air distribution ducts and is controlled by modulating the amount of air exhausted from the cabin. The major components of the pressurization system include the cabin air exhaust control valve, cabin safety valve, differential pressure relief valves, cabin altitude limiters, pressurization jet pump (a vacuum regulator), and the pressurization module. During flight, the pressurization system is completely independent of the electrical system.
Normal pressurization is controlled with the altitude controller and RATE selector, located on the pressurization module. Before takeoff, the pressurization module AUTO/MAN switch should be set to AUTO, the CABIN AIR switch should be set to NORM, the AIRCRAFT ALT selector knob on the altitude controller should be set to cruise altitude, and the IN NORMAL/OUT DEFOG knob should be pushed in. After takeoff, the RATE selector may be adjusted to obtain the desired rate of cabin pressurization. The rate is monitored by the flight crew with the cabin rate-of-climb indicator, and the cabin altitude is monitored with the cabin altimeter.
Outflow Valve17 and Safety Valve Cabin Altitude Limiters
There are two cabin altitude limiters; one is associated with the outflow valve, while the other is associated with the safety valve. If cabin pressure decreases for any reason (such as a loss of bleed air or a faulty outflow valve), the cabin altitude limiters would command the outflow valve and the safety valve closed at an altitude of 11,000 ± 1,000 feet in an attempt to maintain cabin pressure.
Differential Pressure Relief Valve
There are two differential pressure relief valves; one is installed in the outflow valve control pressure line to limit the normal operating cabin differential pressure to 8.9 psi, while the other is set to limit the maximum cabin differential pressure to 9.2 psi by opening the safety valve.
Cabin Altitude Controller
The cabin altitude controller consists of a selector dial with a window and pointer that displays the cabin altitude setting in relation to aircraft altitude.
The accident site was located at 45 degrees, 25 minutes north latitude and 98 degrees, 45 minutes west longitude and was characterized by a crater that measured 42 feet, 4 inches long (oriented east to west) by 21 feet, 7 inches wide (oriented north to south). The crater measured 8 feet, 6 inches at its deepest point, which was approximately 7 feet south of the crater's northern wall. The local terrain was relatively flat. A marsh was located approximately 80 feet due east of the crater.
The main airframe wreckage was located in or near the impact crater. The majority of the rest of the wreckage was found within an approximately 75-foot radius. Additional wreckage was recovered up to 150 feet away. Almost all of the wreckage found outside of the crater was located east of the crater.
A debris field of smaller wreckage, including instrument panel components, the flight manual, seat cushions, life vests, and personal effects, extended outward from the impact crater in a north-northeasterly direction toward the marsh. The debris field formed a conical shape of approximately 35 degrees.
Oxygen Bottle Components and Cockpit Oxygen Pressure Gauge
The oxygen bottle was dented but not breached during the impact sequence. All oxygen lines to the bottle were separated during the breakup. The oxygen bottle regulator/shutoff valve was found in the open position. The cockpit oxygen pressure gauge viewing glass was broken. The needle remained attached and read just below zero; needle slap marks were found at this reading.
Quick Disconnect Valves
Both flight crew oxygen mask quick disconnect valves were recovered.18 Minor scratches were noted on the face of the pilot's quick disconnect valve and internally near one of the retainer pins. The retainer pins that interlock with the flight crew oxygen mask connector were found intact; one pin was slightly bent.
The inner walls of the copilot's quick disconnect valve showed minor scoring and gouges, which penetrated the nickel plating of the retainer assembly and gouged the (brass) base metal beneath. The internal scoring was predominately noted midway between the two retainer pins and was in line with the bore of the valve. Minor scoring was also noted immediately adjacent to each retainer pin.
Flight Crew Masks/Regulators
Portions of two different flight crew mask regulators were recovered.19 Investigators could not determine the installation location of the flight crew masks at the time of impact because of severe disruption of the cockpit furnishings.
One regulator was identified as a ZMR-series diluter-demand regulator. Because of impact fragmentation, no determination could be made regarding the position of the selector lever from the section of the mask recovered.
6600214-Series (Rogers) Regulator
Approximately 70 percent of the Rogers regulator selector knob, including its pointer, was not recovered. Examination of the disassembled regulator revealed that the regulator was in the EMERGENCY position after impact; rotational scoring was noted external to the regulator assembly and on the lower surfaces of the remaining portion of the selector knob.
Passenger Oxygen Distribution System
Manual Passenger Shutoff Valve and Oxygen Aneroid Bypass Shutoff Valve
The manual passenger shutoff valve and the oxygen aneroid bypass shutoff valve were found intact, but their operating knobs and identification labels were not recovered. Neither valve exhibited additional external damage, and each valve was packed with dirt and debris. One valve was found in the open position, and the other valve was found in the closed position. No determination could be made regarding which valve was the manual passenger shutoff valve and which was the oxygen aneroid bypass shutoff valve because of the missing knobs and identification labels.
Passenger Oxygen Actuator Lanyard Valves
All five passenger oxygen actuator lanyard valves were recovered and examined. No determination could be made as to whether these valve assemblies were pressurized at the time of impact. None of the lanyards remained attached to the oxygen actuator lanyard valve assemblies.
Passenger Oxygen Masks
Several pieces of passenger oxygen masks were recovered. Enough fragments were recovered to compose approximately four separate masks, but none of the pieces composed a single mask. Several miscellaneous sections of passenger oxygen mask hoses were also recovered.
Bleed Air Shutoff/Regulator (Modulation) Valves
The left and right modulation valves were recovered, and both valves were determined to be near their closed positions. Assembly data plates were not found; therefore, no determination could be made regarding their installation on the left or right engine. Because the modulation valves are redundant, the malfunction of one valve would not disable the pneumatic system on the airplane.20
Windshield Anti-Ice (Defog) Shutoff Valve
The motor-operated windshield anti-ice (defog) shutoff valve21 was found in the closed position. Investigators determined the valve position by comparing the valve OPEN/CLOSED indicator flag and actuator arm with that of an exemplar shutoff valve. Neither WSHLD HEAT switch was recovered.
Air Conditioning System
Flow Control Valve
The flow control valve was recovered from the wreckage in its fully closed position. The flow control valve upper actuator housing and servo mechanism were missing. (The valve was in its spring-loaded closed position when the lower actuator housing was destroyed.) The valve main spring was in place and fully relieved because of the missing upper valve housing. The valve was free to operate in its full range of motion.
Hot Air Bypass Valve, Ram Air Check Valve, and a Cabin Air Distribution Check Valve
The hot air bypass valve vane was found intact and in an intermediate position. No obstructions were noted. The ram air check valve was examined and found to operate properly. One of two cabin air distribution check valves was recovered intact and removed from its crushed duct; the valve was complete and was found installed correctly.
Cabin Altitude Controller
The cabin altitude controller display assembly was found crushed; the selector dial and underlying cabin/aircraft altitude dial remained together. The aircraft altitude setting was found set to approximately 36,000 feet.22
Outflow Valve and Safety Valve Cabin Altitude Limiters
The outflow valve cabin altitude limiter, which is located in the pressurization module, was disassembled, and the ball valve and valve stem assembly moved freely after cleaning. No damage was noted to the upper surface of the aneroid bellows (capsule). The safety valve cabin altitude limiter was not recovered.
Differential Pressure Relief Valve
One of two differential pressure relief valves was recovered. The valve was disassembled, and its internal metering valve moved freely. The valve diaphragm was torn around its entire perimeter, and the housing was destroyed; the valve spring was present. Investigators could not determine which relief valve was recovered.
MEDICAL AND PATHOLOGICAL INFORMATION
Tissue specimens from the first officer tested negative for a wide range of drugs, including major drugs of abuse.23 The FAA's Final Forensic Toxicology Fatal Accident Report indicated that 41 mg/dL of ethanol and 1 mg/dL of acetaldehyde were detected in muscle. The report noted that the "ethanol found in this case may potentially be from postmortem ethanol formation and not from the ingestion of ethanol."
No toxicology testing was completed for the captain because of the difficulty of identifying and isolating tissue samples.
TESTS AND OTHER RESEARCH
Learjet Model 35 Flight Test
At the Safety Board's request, Learjet performed a flight test of a Model 35 airplane to capture CVR audio for comparison to the accident CVR tape24 and to validate the performance of the pressurization system during an ascent similar to that of the accident flight. The test of the pressurization system was performed with the air conditioning system selected OFF at takeoff. (The CABIN AIR switch was placed in the OFF position.)
The flight test revealed that during the climb with cabin air secured, the cabin altitude lagged the actual altitude of the airplane by approximately 3,500 feet. The cabin altitude aural warning25 activated at a cabin altitude of 10,000 feet while the airplane was passing through a flight altitude of 13,500 feet.
After the accident, engine teardowns performed by Honeywell, Inc., revealed that the type and degree of damage observed on the right engine was indicative of windmilling engine rotation, but not operation, at the time of impact. The type and degree of damage observed on the left engine was indicative of engine operation at the time of impact. Further inspection revealed that no preaccident condition on either engine would have interfered with normal operation.
Pressurization System Computer Simulations
At the Safety Board's request, Honeywell performed two computer simulations to provide a better understanding of the cabin rate of climb during ascent. The first simulation assumed that the air conditioning system (the CABIN AIR switch) was selected OFF at takeoff, resulting in the loss of bleed air to the cabin; the second simulation assumed that a loss of cabin air occurred at several altitudes at or above 25,000 feet.26
The first simulation predicted that the cabin altitude would lag slightly behind the flight altitude of the airplane as it continued its climb. (The cabin reached an altitude of 10,000 feet as the airplane passed through a flight altitude of 10,600 feet.)
The second simulation considered the loss of cabin air at flight altitudes of 25,000; 30,000; 35,000; and 40,000 feet. The results predicted that the cabin altitude would ascend to 9,500 feet in approximately 24 to 44 seconds, depending on the cabin altitude at the time of inflow valve closure. The simulation further predicted that the cabin altitude would ascend to 25,000 feet in approximately 2 ½ minutes and approach the aircraft flight altitude in 4 to 5 minutes from the initiation of the failure condition.
Oxygen Depletion Calculations
The airplane's maintenance records indicated that the oxygen bottle was last serviced on September 3, 1999. Between September 3 and the date of the accident flight, Sunjet Aviation operated the airplane for about 104.6 flight hours, on 90 flights. The Safety Board was unable to determine exactly how many of these flight hours were above 35,000 feet. ATC voice tapes from one of the flights indicated that the airplane was cleared to FL 370 on one leg. Although no radar data for that flight was available, the Board estimated (using ground speed and distance) that the airplane would have cruised above 35,000 feet for at least 30 to 40 minutes during that round trip itinerary. The captain of that flight told investigators that when the airplane was above 35,000 feet during that flight, he used supplemental oxygen. Board calculations indicated that this reported oxygen usage would have depleted the airplane's oxygen supply by 14 to 25 percent, depending on which mask was used.
Quick Disconnect Valve Tests
In an attempt to determine if the flight crew oxygen masks were connected to the oxygen system at the time of impact, testing of exemplar flight crew oxygen mask connections was performed to determine the structural failure modes of these connections when the mask connectors are forcefully separated from their mating oxygen outlet quick disconnect valves (receptacles).
Four separate tests (tensile, shear, bending, and vibration) were performed. Test results indicated that the connectors separated from the valves when exposed to shear and bending loads. During the shear test, a small scratch was observed on the lip of the valve, and during the bending test, minor scuffs were noted on the surface of the valve near one of its retainer pins. In addition, during the shear and bending tests, half of the connector sleeve, which interlocks with the retainer pins of the quick disconnect valve, broke away, and the other half was bent. During the vibration and tensile tests, the connector remained securely installed. Post-test examination revealed no observable damage to the connector or the oxygen outlet valve.
Air Conditioning System
Flow Control Valve
Functional tests of an exemplar flow control valve evaluated the performance of the valve assuming various mechanical failure modes. One possible failure mode assumed the loss of the venturi throat pressure sense line. The functional tests revealed that when the venturi throat pressure sense line was removed, simulating a leak to atmosphere, the flow control valve fully closed when sensing a back pressure27 of 0.5 psi. A closed flow control valve would prevent the supply of bleed air flow to the cabin during normal cabin pressurization.
A second possible failure mode assumed damage to the actuator diaphragm. The functional tests revealed that relatively small areas of damage to the actuator diaphragm, such as a 0.040-inch diameter hole (0.00125 square inches), caused the flow control valve to operate sluggishly and outlet flow to vary significantly with changes in inlet pressure.28 With a back pressure of 8.4 psi, the flow of bleed air through the valve was reduced significantly from its nominal flow rate of 12 ± 1 pounds per minute. Testing revealed that diaphragm damage equivalent to a 0.052-inch diameter hole (0.00212 square inches) prevented the valve from operating at any inlet pressure and further disabled the maximum flow29 function of the valve.
Two additional possible failure modes that would close the flow control valve include blockage at the actuator opening chamber inlet orifice and blockage at the shutoff solenoid bleed port orifice. No determination could be made regarding blockage at either location because of the impact breakup of the valve assembly.
According to its president, Sunjet Aviation was a diversified aviation company founded in 1992.30 The company operated a fixed-base operation providing fuel, catering, aircraft detailing, ground transportation, and hotel accommodation arrangements. The company was certified by the FAA as a 14 CFR Part 135 jet charter operator specializing in Learjet and Cessna Citation aircraft. With 70 employees, the company operated a total of six airplanes and also operated a certified maintenance repair station, including an interior refurbishing shop. In addition, Sunjet Aviation managed aircraft for other corporations and had an aircraft sales division, including a fractional ownership program.
Federal Aviation Administration Oversight and Postcrash Actions
The FAA POI at the time of the accident was assigned to the Sunjet Aviation certificate in October 1998 and held a Learjet type rating that he received in 1989. He stated that he had attended some of Sunjet Aviation's pilot training sessions on a limited basis. He further stated that he had not flown on a Sunjet Aviation airplane; another FAA POI who was current and qualified on the Learjet had flown on Sunjet Aviation's airplanes and monitored its training courses as well. The POI assigned to Sunjet Aviation stated that he did not give pilot checkrides; rather, an approved, designated pilot examiner performed this function. The POI stated that his responsibility included approval for training, procedures, and company manuals. He stated that he had accomplished a "spot inspection" in the spring of 1999 and did not find any problem areas. He indicated that, in the year before the accident, at his request, Sunjet Aviation had "upgraded" all of the manuals except for the General Operations Manual.
On June 11, 1999, the FAA Orlando Flight Standards District Office principal maintenance inspector performed a surveillance inspection of Sunjet Aviation at the company's Sanford, Florida, headquarters. The results were "satisfactory," and the inspection was closed out on the same day. According to the FAA, the June 11, 1999, inspection was the only surveillance of Sunjet Aviation's maintenance functions during the year preceding the accident.
Federal Aviation Administration Special Certification Review
On November 4, 1999, the FAA began conducting a Special Certification Review (SCR) of the Learjet Model 35/36 oxygen and pressurization systems as a result of this accident to determine (1) whether the noted systems were properly certificated and (2) whether any unsafe design features existed. The SCR team did not identify issues associated with the oxygen and pressurization systems that would lead to an unsafe condition. Further, the SCR team did not identify any unsafe conditions associated with the oxygen and pressurization system modifications as installed on the accident airplane, but the team made several recommendations. In November 16 and December 1, 2000, memoranda provided to the Safety Board, the FAA indicated that it had already issued Notices of Proposed Rulemaking (NPRM) regarding several airplane models and that it was working with manufacturers to address the recommendations.
In its review, the FAA found that the Learjet Model 35/36 AFM does not have an emergency procedure requiring the flight crew to don oxygen masks immediately after the cabin altitude aural warning is activated. Because the AFM contains an abnormal procedure allowing the flight crew to troubleshoot the pressurization system before donning oxygen masks, the FAA noted that the flight crew may delay donning oxygen masks and become incapacitated.
On June 8, 2000, the FAA issued NPRM "Airworthiness Directives; Learjet Model 35, 35A, 36, and 36A Series Airplanes," which was published in 65 Federal Register (FR) 36391. The NPRM proposed to require revising the AFM to add emergency procedures instructing the flight crew to don oxygen masks when the cabin altitude warning horn is activated.31 In a July 26, 2000, letter, the Safety Board commented on the NPRM, stating the following:
The Safety Board supports the proposed AD and agrees that the flight crew's oxygen masks should be donned immediately on activation of the cabin altitude warning horn. However, the Board notes that the proposed AFM changes instruct the flight crew to perform an emergency descent upon activation of the cabin altitude warning horn, regardless of the existing flight conditions. It is possible for the cabin altitude warning horn to activate during flight conditions that would not require an emergency descent and landing. To further improve the AFM guidance for flight crews, the Board encourages the FAA to identify all flight conditions in which an emergency descent is not required subsequent to donning oxygen masks and clearly present the appropriate instructions in the final rule.
The SCR team recommended that Bombardier Aerospace develop a kit to provide an annunciator light (or the equivalent) to advise the flight crew if the CABIN AIR switch is in the OFF position for Learjet airplanes without automatic emergency pressurization systems.
The SCR team also requested that all aircraft certification offices (ACO) review the AFMs of all transport-category pressurized airplanes certificated for flight above 25,000 feet and ensure they contain information about emergency procedures upon activation of the cabin altitude warning. The SCR team recommended that the flight crew don the oxygen masks immediately after a cabin altitude warning.
In addition, the SCR team requested that all ACOs forward the following recommendation to all manufacturers of transport-, normal-, and commuter-category pressurized airplanes certificated for operation above 25, 000 feet: "Determine if there is a means to annunciate to the flight crew that the pressurization system is selected off or develop a modification to provide an annunciation of the same." (This recommendation would not apply to aircraft with automatic emergency pressurization systems.)
The SCR team also recommended that the FAA review and investigate Learjet Service Bulletin 35/36-21-7, "Inspection of Cabin Pressurization Outflow Valve and Safety Valve," for FAA action, if necessary. In addition, the SCR team recommended that the FAA distribute information to the pilot community, including FAA operations inspectors and examiners, that emphasizes the importance of pressurization and oxygen systems operations and procedures to avoid hypoxia.32
The accident airplane's airworthiness certificate was issued on April 4, 1976, and Sunjet Aviation began operating and maintaining the airplane in January 1999. According to the accident airplane's maintenance records, Sunjet Aviation performed a prepurchase inspection on January 31, 1999, and completed the inspection on February 8, 1999. The last approved aircraft inspection program 300-hour/12-month inspection was completed on June 12, 1999, and 179 flight hours had accumulated since that date. As of October 23, 1999, N47BA had a total flight time of 10,505.8 hours and had 8,043 total landings.
Cabin Pressurization and Oxygen System Maintenance History
The accident airplane's maintenance records revealed that, from 1976 to 1994, the left and right modulation valves, the pressurization system vacuum regulator, the flight crew oxygen masks, and an oxygen pressure gauge capillary line were replaced. The pressurization module was replaced twice.
On April 12, 1995, a prepurchase inspection performed by Learjet at its Wichita, Kansas, facility indicated the following:
Cabin pressure follows throttles - 2,000 feet bump both directions...R/H [right] engine mod...Valve does not shift when power is brought up...when moving cabin air switch to max flow you get no increase of air flow...with cabin pressure at 1 pound in auto, cabin will not up rate when selecting a higher altitude...should up rate depending on where rate knob is at...emergency exit seal...coming loose...main cabin door is smashed at split line area...O2 need serviced.33
Since April 12, 1995, the right and left modulation valves and the copilot's oxygen mask regulator were replaced. A February 9, 1998, report indicated that the cabin occasionally would not hold pressure at low altitudes. The maintenance clearing action noted in the airplane's logbook indicated that the airplane had been operationally checked on the ground and that the problem could not be duplicated. On May 19, 1999, an oxygen pressure gauge capillary line was replaced, and on May 21, 1999, maintenance personnel complied with the Phase A1-6 inspection, which included pressurization system checks.
A Sunjet Aviation pilot reported to Safety Board investigators that on a July 22, 1999, flight in the accident airplane, the pressurization system would not maintain a full pressure differential and that later the cabin altitude "started climbing well past 2,000 feet per minute." In a postaccident statement to the Board, the Sunjet Aviation chief pilot indicated that on July 22, 1999, "at no time was any pressurization problem observed" on the accident airplane. A July 23, 1999, Work Order discrepancy sheet 5895 indicates the following: "Discrepancy: Pressurization check and operation of system." The discrepancy sheet also indicates that maintenance personnel cleaned the outflow valve. No mechanic's signatures or initials (indicating completion of corrective actions) or inspector's signatures or initials (indicating inspection of the completed corrective actions) were found on Work Order 5895. A note on the discrepancy sheet stated the following: "transferred to WO [work order] # 5929 item # 2."34
Before the maintenance work was performed under Work Order 5929, the accident airplane was flown to Aspen, Colorado; however, according to the FAA-approved operations specifications for Sunjet Aviation, the company was not authorized to use a Minimum Equipment List on any of its airplanes. The Sunjet Aviation maintenance supervisor stated to the Safety Board in a November 15, 1999, interview that a pilot gave him a "verbal squawk" (discrepancy) on July 28, 1999, that when retarding the throttles on descent into Aspen "with anti-ice ON," the cabin would "climb." Sunjet Aviation Work Order 5929, which was opened on July 28, 1999, and closed on August 1, 1999, indicates the following: "Problem: Check pressurization system." In addition, according to the accident airplane's maintenance log and Sunjet Aviation Work Order 5929, from July 29 through August 1, 1999, maintenance personnel performed the following actions: "cleaned [the] outflow valve in accordance with Lear maintenance manual chapter 21-30-01...Pressurization test as advertised. O.K. for flight." A Sunjet Aviation maintenance inspector indicated that maintenance personnel also checked the cabin pressurization module for loose connections and conditions.
Two Learjet mechanics from Bombardier Aerospace, Fort Lauderdale, Florida, were at Sunjet Aviation's facilities on October 5, 1999, to work on another airplane. They stated that they were "approached by a [Sunjet] mechanic who asked [them] if [they] knew anything about...Learjet model 35 pressurization systems. [They] informed him that [they] were engine shop specialists and had limited knowledge on [the] airframe pressurization system." Safety Board investigators questioned Sunjet Aviation personnel, who stated that they were unaware that any Sunjet Two Learjet mechanics from Bombardier Aerospace, Fort Lauderdale, Florida, were at Sunjet Aviation's facilities on October 5, 1999, to work on another airplane. They stated that they were "approached by a [Sunjet] mechanic who asked [them] if [they] knew anything about...Learjet model 35 pressurization systems. [They] informed him that [they] were engine shop specialists and had limited knowledge on [the] airframe pressurization system." Safety Board investigators questioned Sunjet Aviation personnel, who stated that they were unaware that any Sunjet Aviation maintenance personnel made such an inquiry. In addition, the two Learjet mechanics were unable to identify the Sunjet Aviation mechanic who made the inquiry.
On October 7, 1999, Sunjet Aviation maintenance personnel adjusted the left engine's fuel computer to equalize the left and right engines' rotation speeds at takeoff power.
On October 12, 1999, a gasket was replaced at the "V" clamp at the flow control valve. A Sunjet Aviation maintenance inspector stated that he inspected the "V" clamp and checked the torque; no defects were noted.
A Sunjet Aviation maintenance supervisor indicated that on October 22, 1999, maintenance personnel were troubleshooting to correct a staggered throttle condition at takeoff power settings. During an engine run, a maintenance inspector visually checked the left engine modulation valve and found "the spring not functioning." Maintenance personnel ordered a replacement modulation valve that day from Learjet and received it on October 23, 1999; the left modulation valve was then removed and replaced. The repair tag for the modulation valve that was removed from the accident airplane indicated the following: "Reason removed: ITT [interstage turbine temperature] split at altitude and cabin pressurization loss with reduced power setting."
In a statement provided to the Safety Board, the Sunjet Aviation maintenance inspector who had identified the malfunctioning valve indicated that "[a]ll work was performed in accordance with Learjet maintenance manual, 21-30-00, page 201 and 202." These sections of the maintenance manual include an "operational check of the cabin pressurization system," performed on the ground with the engines running and the airplane configured to simulate an in-flight condition. The Sunjet Aviation maintenance supervisor stated that because they were troubleshooting for a power problem, the airplane was not checked in flight. After the airplane was back in service, a pilot flew it on a training flight that afternoon to St. Augustine and stated, "the flight to St. Augustine was flown at altitudes of 12,000 and 13,000 feet. The bleed air and pressurization system were operating normally. Sea level cabin pressure was selected with normal differential indicated."35
Scheduled Pressurization Maintenance Checks
The maintenance records reviewed, including the pressurization maintenance checks required by Learjet, revealed that the following were the last checks that had been complied with before the accident:
A Pressurization Control System Filters- c/w [complied with] November 13, 1998, 600 hr.
B Cabin air exhaust control valve- c/w August 22, 1997, 1200 hr.
C Cabin altitude limiter inlet screen- c/w November 13, 1998.
D Pressurization control system jet pump- c/w November 18, 1998.
Servicing of the Oxygen Bottle Components and Cockpit Oxygen Pressure Gauge
According to a Sunjet Aviation official who spoke to the accident captain before takeoff, the captain told him that the oxygen pressure gauge was noted in the green band (1550 to 1850 psi) during preflight checks on the day of the accident. According to maintenance records, the oxygen system was last serviced36 (by Sunjet Aviation) on September 3, 1999. The only written records of servicing of the oxygen system were from Sunjet Aviation;37 a survey of 15 of the fixed-base operators visited by the accident airplane between September 26 and October 20, 1999,38 revealed no charges for oxygen servicing. A flight manifest log indicates that N47BA was flown approximately 104.6 flight hours (90 cycles) between the last time the oxygen system was known to have been serviced and the accident flight. After the accident, the oxygen source used by Sunjet Aviation to service N47BA on September 3, 1999, was tested and was found to be more than 99.8 percent pure oxygen.39
Flight Discrepancy Log
A review of the Sunjet Aviation General Operations Manual and interviews conducted on November 15, 1999, with Sunjet Aviation maintenance and operations personnel revealed that, at the time of the accident, Sunjet Aviation had a Flight Discrepancy Log for all flight crewmembers to document maintenance discrepancies. The form consisted of one white page and a duplicate yellow page. According to Sunjet Aviation personnel, one copy was to be kept in the airplane for 3 to 5 days, and the other copy was for maintenance personnel. When the discrepancy was corrected, the yellow copy was to go to operations to be kept on file for an unspecified amount of time. When the Sunjet Aviation operations employee was asked to produce the Flight Discrepancy Logs for N47BA from January 1999 to the date of the accident, he stated that Sunjet Aviation "did not have them." According to Sunjet Aviation, the Flight Discrepancy Logs for the last 5 days were still on the accident airplane at the time of the accident. Maintenance and operations personnel were unable to locate the duplicate (yellow) copy of the Flight Discrepancy Log. In addition, the maintenance supervisor revealed that it was more common for a flight crewmember to verbally tell maintenance personnel about a problem instead of filling out the Flight Discrepancy Log. If no maintenance personnel were available, the problem would be documented on a piece of paper.
The captain and first officer were properly certificated and qualified in accordance with applicable Federal regulations and company requirements. Their duty time, flight time, rest time, and off-duty activity patterns did not indicate any preexisting medical, behavioral, or physiological factors that might have affected their performance on the day of the accident.
Visual meteorological conditions prevailed along the route of flight, and weather was not a factor in the accident.
The airplane was properly certificated and equipped in accordance with Federal regulations and approved procedures.
No significant preexisting airframe or powerplant problems40 were discovered during a review of available maintenance records and interviews with maintenance personnel and witnesses who observed the airplane just before and during its final descent. There was no evidence in the wreckage of an in-flight fire.
INCAPACITATION OF THE FLIGHT CREW
The flight crew's last communication with air traffic control (ATC) was at 0927:18 eastern daylight time, when the first officer acknowledged an ATC clearance to flight level (FL) 390 and the airplane was climbing through 23,200 feet.41 Her speech was normal, her phraseology was accurate and appropriate, and Safety Board testing indicated that she was not using an oxygen mask microphone for this transmission or those that she had made earlier.42 The flight crew's failure to respond to repeated ATC radio inquiries beginning at 0933:38, when the airplane was climbing through about 36,400 feet, was the first indication of a problem on board the accident flight. As the flight continued, it deviated from its assigned course and failed to level at its assigned altitude (FL 390). There was no evidence that the flight crew attempted to intervene43 over the next 4 hours, as the airplane continued to fly off course, ascending to 48,900 feet, and finally descended to impact.44 These events indicate that the flight crewmembers became incapacitated at some point during the 6 minutes and 20 seconds between 0927:18 and 0933:38.
The continuous sounding of the cabin altitude aural warning during the final 30 minutes of cruise flight (the only portion recorded by the CVR) indicates that the airplane and its occupants experienced a loss of cabin pressurization some time earlier in the flight.45 Further, although the severity of the impact precluded extensive analysis, there was no evidence suggesting any alternative reason for incapacitation.
If the pilots had received supplemental oxygen from the airplane's emergency oxygen system, they likely would have properly responded to the depressurization by descending the airplane to a safe altitude. Therefore, it appears that the partial pressure46 of oxygen in the cabin after the depressurization was insufficient for the flight crew to maintain consciousness and that the flight crewmembers did not receive any, or adequate, supplemental oxygen.
Because this accident would not have occurred without both the loss of cabin pressure and the failure of the flight crew to receive supplemental oxygen, the Safety Board considered possible reasons for both of these key events in the accident sequence.
LOSS OF CABIN PRESSURIZATION
Availability of Bleed Air
Postaccident examination of the left and right bleed air shutoff/regulator valves (modulation valves) indicated that they were near their fully closed positions. Because the modulation valves are spring loaded to the open position and require bleed air to close, the nearly closed position of both valves at impact is consistent with a normal and adequate supply of engine bleed air from one or both engines. Further, these nearly closed valve positions indicate that there was a low demand for bleed air by the airplane's air conditioning and anti-icing systems and that both BLEED AIR switches, which were not recovered, would have had to have been selected to the ON position. The nearly closed valve positions also indicate that the airplane's pneumatic system was intact, and, therefore, normal system pressure was being supplied to the air conditioning system flow control valve.
Lack of Bleed Air Supply to the Cabin
The flow control valve regulates the flow rate of conditioned bleed air entering the cabin for pressurization and heating. If there is no inlet bleed air, the valve main spring will close the flow control valve completely. Although, as previously discussed, bleed air was available to open the flow control valve, the condition of the flow control valve indicated that it was in its fully closed position at impact. The valve requires several seconds to move from its fully open to fully closed position in normal operation, indicating that the valve was in its closed position before impact. This closed valve would have prevented bleed air from entering the cabin, thereby preventing normal pressurization.47
Closure of the flow control valve on a Learjet Model 35 and the resulting loss of bleed air supply to the cabin would cause the airplane to quickly lose cabin pressure (depressurize) at a rate dependent upon the cabin leakage rate. Computer simulations by Honeywell indicated that if a loss of normal bleed air supply to the cabin occurred at flight altitudes above 25,000 feet, the cabin altitude could ascend to 10,000 feet in about 30 seconds and reach 25,000 feet in about 2 1/2 minutes.
The military pilots who observed the accident airplane in flight before its final descent reported that the accident airplane's windshield was obscured by condensation or frost. Condensation or frost would be consistent with a loss of bleed air supply to the cabin. When bleed air is supplied to the cabin, the cockpit windshield receives a constant flow of warm air that prevents or removes condensation, regardless of the ambient temperature or pressure in the cabin.48 Thus, the windshield would be relatively clear following depressurization from a breach or other undesired outflow from the cabin with continued bleed air supply to the cabin, whereas condensation could form and remain on the windshield following a depressurization caused by a loss of bleed air inflow to the cabin. Therefore, the accident airplane most likely did not have an inflow of bleed air to the cabin.
Possible Explanations for the Closed Flow Control Valve
Investigators considered several possible explanations for the closed flow control valve on the accident airplane. First, Safety Board investigators considered whether the flow control valve might have malfunctioned and closed uncommanded. Investigators identified several mechanical failure modes that might have caused the flow control valve to close, including the loss of the venturi throat pressure sense line, damage to the actuator diaphragm, blockage at the actuator opening chamber inlet orifice, and blockage at the shutoff solenoid bleed port orifice. Because the condition of the wreckage did not allow investigators to determine whether any of these failures occurred on the accident airplane, the Board cannot exclude the possibility that the flow control valve closed uncommanded because of a mechanical malfunction.
Investigators also considered the possibility that the pilots failed to select the CABIN AIR switch to NORM, which activates the air conditioning system (and pressurizes the airplane), before takeoff.49 Even though the Taxi and Before Takeoff checklist specifies, in item 19, "CABIN AIR SWITCH - NORM," the FAA Special Certification Review (SCR) team observed that "there is incentive to leave the pressurization system off during taxi and takeoff in warm weather because inflow air can be hotter than cabin ambient air."50 However, without the cabin air conditioning system, the occupants of the airplane likely would have perceived a high cabin climb rate after takeoff, possibly causing discomfort. At about 10,000 feet cabin altitude, the cabin altitude aural warning should have begun to sound, further alerting the flight crew to the lack of pressurization. Although the pilots could have manually silenced the warning, they would have had to repeat this action every 60 seconds. At about 14,000 feet cabin altitude, deployment of the passengers' oxygen masks would have provided an additional cue that the cabin was not properly pressurized.51 It is unlikely that the flight crew would have continued to climb despite this clear information that the airplane was unpressurized.
In addition, the first officer showed no signs of hypoxia52 in her radio transmission at 0927:18, when the airplane was climbing through 23,200 feet.53 Safety Board tests indicated that with the CABIN AIR switch off at this altitude, the cabin altitude would have been increasing to above 20,000 feet. With a cabin altitude of 20,000 feet, flight crewmembers would very likely have been impaired by hypoxia. Further, the cabin altitude warning was not heard in the background of these radio transmissions. While it is possible that the frequency of the pilot's headset, the airplane's radios, or the ATC recording system may have masked the sound of the cabin altitude warning, the lack of such a sound suggests that the airplane had not depressurized to a cabin altitude greater than 10,000 feet by that time. Therefore, although the Board acknowledges that flight crew failure to activate the cabin air conditioning system before takeoff may be a valid safety concern for the Learjet Model 35,54 it considered this unlikely to have occurred on the accident flight.
Investigators also considered the possibility that the flight crew selected the CABIN AIR switch to OFF (closing the flow control valve) during flight. Step 4 of the Learjet Model 35/36 Aircraft Flight Manual (AFM) Abnormal Procedures checklist for a pressurization loss at altitude instructs pilots to select the WSHLD (windshield) HEAT AUTO/MAN switch to AUTO, thus initiating the emergency bleed air supply to the cabin.55 (The wreckage indicated that the windshield anti-ice [defog] shutoff valve was closed at impact,56 strongly suggesting that the emergency bleed air was not activated.) Step 5 in the Abnormal Procedures checklist instructs pilots to select the CABIN AIR switch to OFF, thereby closing the flow control valve. The accident airplane was not equipped with automatic emergency pressurization;57 consequently, if it had experienced a loss of cabin pressurization, the pilots should have executed this procedure to initiate the alternate, emergency source of bleed air.
There is no evidence that an earlier pressurization problem (such as an outflow valve malfunction or a break in the fuselage) preceded the closing of the flow control valve. However, investigators considered the possibility that the flight crew might have experienced (or thought that they had experienced) such a problem and responded by attempting to execute the abnormal procedure for a loss of pressurization at altitude but omitted step 4 (selecting the WSHLD HEAT AUTO/MAN switch to AUTO) before accomplishing step 5 (selecting the CABIN AIR switch to OFF). Therefore, the closed position of the flow control valve could have been a consequence of the flight crew's attempt to address a pressurization malfunction or failure (cause unknown), rather than its cause.
In summary, as previously discussed, an uncommanded closure of the flow control valve would have been sufficient to depressurize the airplane. However, there was insufficient evidence to determine whether the depressurization was initiated by a loss of bleed air inflow (caused by a malfunction of the flow control valve or by inappropriate or incomplete flight crew action) or by some other event.
Inadequate Maintenance Recordkeeping
The sequence of maintenance actions from July 22 through October 23, 1999, indicate that there were several pressurization-related discrepancies during this period. Maintenance records indicate that Sunjet Aviation personnel attempted to correct the discrepancies by cleaning the pressurization system outflow valve and performing system ground checks. Work on a staggered engine throttle condition, which resulted in the replacement of the left modulation valve on October 23, 1999, was also related to concerns about the pressurization system (as shown by Sunjet Aviation's reference to pressurization on the removed modulation valve's part tag). However, Sunjet Aviation was not able to provide records of pilot-reported discrepancies that led to these maintenance actions.
The investigation did not identify any evidence that the preceding discrepancies were related to the cause of this accident. However, if Sunjet Aviation had maintained pilot discrepancy reports (as required by its General Operations Manual), the Safety Board may have learned additional details about the frequency and nature of the airplane's prior pressurization-related problems and possibly been able to determine whether they were related to a common problem. Further, available records from Sunjet Aviation did not verify whether the discrepancies were corrected before flight. In addition, the investigation revealed that maintenance work performed on the pressurization system under Work Order 5895 was not signed off by mechanics or inspectors and that Sunjet Aviation then operated the accident airplane on revenue trips with deferred maintenance on the pressurization system (without authorization under an FAA-approved Minimum Equipment List). The Board notes that Sunjet Aviation's failure to maintain pilot discrepancy records and its unauthorized operation of flights with deferred maintenance items reflects shortcomings in the company's procedures for identifying, tracking, and resolving repetitive maintenance items and adverse trends.58
FLIGHT CREW'S FAILURE TO RECEIVE SUPPLEMENTAL OXYGEN
Following the depressurization, the pilots did not receive supplemental oxygen in sufficient time and/or adequate concentration to avoid hypoxia and incapacitation. The wreckage indicated that the oxygen bottle pressure regulator/shutoff valve was open on the accident flight. Further, although one flight crew mask hose connector was found in the wreckage disconnected from its valve receptacle (the other connector was not recovered), damage to the recovered connector and both receptacles was consistent with both flight crew masks having been connected to the airplane's oxygen supply lines at the time of impact. In addition, both flight crew mask microphones were found plugged in to their respective crew microphone jacks. Therefore, assuming the oxygen bottle contained an adequate supply of oxygen, supplemental oxygen should have been available to both pilots' oxygen masks.
The Safety Board evaluated several explanations for the flight crewmembers' failure to receive supplemental oxygen, including an inadequate quantity of oxygen or improper servicing of the oxygen bottle and the failure (or inability) of the pilots to don their oxygen masks rapidly enough following the loss of cabin pressure.
Investigators considered the possibility that there might have been an insufficient quantity of oxygen on board the accident flight to sustain the flight crewmembers while they addressed the depressurization. The oxygen bottle was found empty. Witness marks on the cockpit oxygen pressure gauge caused by the impact were consistent with an indication of no pressure in the oxygen bottle.
A Sunjet Aviation official stated to the Safety Board that the accident captain had reported that the oxygen pressure gauge was in the green zone, indicating adequate pressure of 1,550 to 1,850 psi, during preflight checks on the day of the accident. The airplane's maintenance records indicate that the oxygen bottle was last serviced with oxygen (by Sunjet Aviation) on September 3, 1999. Between this date and the date of the accident flight, Sunjet Aviation operated the airplane for about 104.6 flight hours, on 90 flights. The Board was unable to determine exactly how many of these flight hours were above 35,000 feet,59 but ATC voice tapes from one of the flights60 indicated that the airplane was cleared to FL 370 on one leg. Although no radar data for that flight were available, the Board estimated (using ground speed and distance) that the airplane would have cruised above 35,000 feet for at least 30 to 40 minutes during that round trip flight. The captain from that flight told investigators that when the airplane was above 35,000 feet during that flight, he used supplemental oxygen. Board calculations indicated that the flight crew's reported oxygen usage that day would have depleted the airplane's oxygen supply by up to 14 to 25 percent, depending on which mask was used. Even though oxygen use was required on this flight (and perhaps others) and was reported to have been used, the Board is aware that pilots do not always use oxygen when required by regulation.
The Safety Board contacted fixed-based operators (FBO) at 15 known destination airports visited by the accident airplane between September 26 and October 20, 1999, and none had any record of charges for oxygen servicing of the accident airplane. However, the Board cannot exclude the possibility that the airplane was serviced with oxygen after September 3, 1999, at a different airport or at no charge to Sunjet Aviation61 and that no record was made.62
However, even if the oxygen bottle had been full at the beginning of the accident flight, the oxygen supply would have been completely depleted before impact because the Rogers regulator installed on one of the two flight crew masks would have automatically supplied 100 percent oxygen when the cabin altitude increased beyond 39,000 feet. This oxygen would have been released at 130 liters per minute at a pressure of approximately 0.5 psi even if the mask was not being worn by a flight crewmember, depleting a fully charged oxygen bottle in about 8 minutes. Therefore, the postimpact reading on the oxygen pressure gauge is not necessarily indicative of an inadequate predeparture oxygen supply on the accident flight.
In summary, the Safety Board could not determine the quantity of oxygen that was on board the accident flight.
If the airplane's oxygen bottle had been improperly serviced with air, rather than oxygen, there would have been insufficient partial pressure of oxygen in the supplied mixture to avoid hypoxia at high cabin altitudes after a depressurization. The Safety Board is aware of an accident involving pilot incapacitation from hypoxia as a result of improper servicing of an oxygen bottle with compressed air.63 The oxygen source from which the accident airplane's oxygen bottle was serviced on September 3, 1999, was tested after the accident and found to contain 99.8 percent pure oxygen. However, because of the possibility that the oxygen bottle might have been serviced elsewhere after that, the Board could not rule out the possibility that the oxygen bottle contained air instead of oxygen.
Timeliness in Donning Oxygen Masks
Another possible explanation for the failure of the pilots to receive emergency oxygen is that their ability to think and act decisively was impaired because of hypoxia before they could don their oxygen masks. No definitive evidence exists that indicates the rate at which the accident flight lost its cabin pressure; therefore, the Safety Board evaluated conditions of both rapid and gradual depressurization.
If there had been a breach in the fuselage (even a small one that could not be visually detected by the in-flight observers) or a seal failure, the cabin could have depressurized gradually, rapidly, or even explosively.64 Research has shown that a period of as little as 8 seconds without supplemental oxygen following rapid depressurization to about 30,000 feet may cause a drop in oxygen saturation that can significantly impair cognitive functioning and increase the amount of time required to complete complex tasks.65
A more gradual decompression could have resulted from other possible causes, such as a smaller leak in the pressure vessel or a closed flow control valve. Safety Board testing determined that a closed flow control valve would cause complete depressurization to the airplane's flight altitude over a period of several minutes. However, without supplemental oxygen, substantial adverse effects on cognitive and motor skills would have been expected soon after the first clear indication of decompression (the cabin altitude warning), when the cabin altitude reached 10,000 feet (which could have occurred in about 30 seconds).
Investigations of other accidents66 in which flight crews attempted to diagnose a pressurization problem or initiate emergency pressurization instead of immediately donning oxygen masks following a cabin altitude alert have revealed that, even with a relatively gradual rate of depressurization, pilots have rapidly lost cognitive or motor abilities to effectively troubleshoot the problem or don their masks shortly thereafter. In this accident, the flight crew's failure to obtain supplemental oxygen in time to avoid incapacitation could be explained by a delay in donning oxygen masks of only a few seconds in the case of an explosive or rapid decompression or a slightly longer delay in the case of a gradual decompression.
In summary, the Safety Board was unable to determine why the flight crew could not, or did not, receive supplemental oxygen in sufficient time and/or adequate concentration to avoid hypoxia and incapacitation.
The National Transportation Safety Board determines the probable cause of this accident was incapacitation of the flight crewmembers as a result of their failure to receive supplemental oxygen following a loss of cabin pressurization, for undetermined reasons.
1 The cooler contained soft drinks and wet ice. (The cooler did not contain dry ice.)
2 All altitudes are mean sea level unless noted otherwise.
3 ATC voice tapes indicate that all transmissions from N47BA were made by a female pilot.
4 During a flight test conducted as part of this investigation, a ground communications station recorded pilots transmitting normally and with the use of an oxygen mask. Members of the National Transportation Safety Board Cockpit Voice Recorder Group listened to the flight test transmissions made with the mask on and off and then compared them to the accident airplane's transmissions. All group members unanimously agreed that the first officer on N47BA was not wearing an oxygen mask during those transmissions.
5 The cabin altitude warning is a unique aural warning in the Learjet Model 35/36.
6 A sound spectrum study was completed on the radio transmissions from N47BA recorded by the Jacksonville ARTCC. The transmissions were examined on an audio spectrum analyzer to identify any background sound signatures that could be associated with aural cockpit warning tones or any other aircraft system background noise. No background signature noises could be discerned on the ATC tape; the frequency response of the pilot's headset, the airplane's radios, and the center's recording system may have masked such sounds.
7 About 1010 EDT, the accident airplane crossed from the EDT zone to the CDT zone in the vicinity of Eufaula, Alabama.
8 This interception was at the request of the Jacksonville ARTCC mission coordinator through the USAF.
9 The accident airplane reached a maximum altitude of 48,900 feet.
10 According to the Sunjet Aviation director of operations, on September 21, 1999, the captain was assigned his duty position on the Learjet with Sunjet Aviation.
11 Pressurized aircraft cabins allow physiologically safe environments to be maintained for flight crew and passengers during flight at physiologically deficient altitudes. (At altitudes above 10,000 feet, the reduction in the partial pressure of oxygen impedes its ability to transfer across lung tissues into the bloodstream to support the effective functioning of major organs, including the brain. These altitudes are typically referred to as "physiologically deficient altitudes.") At cruising altitudes, pressurized cabins of turbine-powered aircraft typically maintain a consistent environment equivalent to that of approximately 8,000 feet by directing engine bleed air into the cabin while simultaneously regulating the flow of air out of the cabin. The environmental equivalent altitude is referred to as "cabin altitude."
12 In accordance with 14 CFR 25.1477(c)(2), flight crewmembers must be able to don the oxygen mask within 5 seconds for the mask to be considered quick donning.
13 The single oxygen bottle supplies the pilots and all passengers with emergency oxygen.
14 With the PASS OXY valve in the NORM position, oxygen is available to the passenger oxygen distribution system. With the PASS OXY valve in the NORM position and the PASS MASK valve in the AUTO position, the passenger oxygen masks should drop from their storage compartments if the cabin altitude reaches 14,000 feet; passengers must then don the masks and pull the lanyard, which releases oxygen to the masks.
15 Items "a" through "f" are to be accomplished by the pilot without the aid of the AFM; these are called memory items.
16 According to Learjet, later models of the Learjet Model 35/36 are equipped with an automatic emergency pressurization system.
17 Two airworthiness directives (AD) were applicable to the inspection and replacement of outflow valves on certain Learjet Model 35 airplanes; because of the serial number of the accident airplane's outflow valve, these ADs were not applicable to the accident airplane.
18 One flight crew mask oxygen hose connector was recovered, but it was not attached to either quick disconnect valve. Half of the connector's outer sleeve was broken away and missing, and the remaining half of the outer sleeve was bent inward.
19 In addition, both crew microphone jack panels were recovered. (The flight crew oxygen mask microphones were plugged in.)
20 On October 23, 1999, the left engine modulation valve, S/N P-247, was removed and replaced with one of the modulation valves that was discovered in the wreckage. The functional test of the replaced modulation valve revealed that the flow mixing poppet between the low- and high-pressure stages did not operate (open) at low bleed air pressures.
21 The IN NORMAL/OUT DEFOG knob and its associated check valve were not recovered.
22 The accident flight was cleared to FL 390.
23 The five drugs of abuse tested in postaccident analysis are marijuana, cocaine, opiates, phencyclidine, and amphetamines.
24 The test flight CVR tape was acoustically compared with the accident CVR tape to determine whether the sounds of aircraft pressurization system airflow could be heard on the accident CVR tape; it was not possible to discern such sounds. However, the comparison indicated that the emergency pressurization system was not activated on the accident flight.
25 The cabin altitude aural warning will sound at a cabin altitude of 10,000 ± 500 feet. The cabin altitude aural warning will cease between cabin altitudes of 10,000 and 7,500 feet.
26 The aircraft ascent profile used by Honeywell during each simulation was based on recorded radar data for the accident airplane. During each simulation, a cabin leakage rate of 115 standard cubic feet per minute (scfm) was modeled at a cabin differential pressure equal to 8.0 psi and 28 scfm at 0.5 psi.
27 Normal operation of the cabin pressurization system (outflow valve) maintains a positive differential pressure of 8.7 psi across the fuselage, thereby exerting a back pressure (equal in magnitude to the cabin differential pressure) upon the flow control valve.
28 The flow control valve is designed to operate with an inlet pressure between 7 and 85 psi. A nominal inlet pressure of 35 psi is supplied to the flow control valve by one or both engine modulation valves.
29 When the CABIN AIR switch is placed in the MAX position, the max flow solenoid is energized, thereby causing the flow control valve to open fully, allowing full (unregulated) bleed air flow to the cabin.
30 Sunjet Aviation surrendered its operating certificate to the FAA on July 17, 2000.
31 In addition, on August 30, 2000, the FAA issued an NPRM (65 FR 52677) proposing that the AFM for Lockheed Model 188A and 188C series airplanes be revised to add procedures for donning the flight crew oxygen masks when the cabin altitude warning horn is activated. As with the Learjet Model 35/36, the FAA found that the Lockheed 188A and 188C series AFM did not contain emergency procedures directing flight crews to don oxygen masks upon onset of the cabin altitude warning.
32 Hypoxia is the physiological state of insufficient oxygen in the blood and body tissue.
33 According to Learjet, these items were not corrected per the customer's request.
34 Work Order 5929 refers to maintenance performed after a problem was noted with the accident airplane on July 28, 1999.
35 The airplane's pneumatic and pressurization systems were not required to perform to their maximum limits during this flight. Sea level cabin pressure at 13,000 feet flight altitude would pressurize the cabin to 5.7 pounds per square inch differential pressure (psid); the airplane's maximum differential pressure limit was 8.7 psid.
36 Oxygen servicing is not required to be entered in the aircraft maintenance logbook or accomplished by an airframe and powerplant qualified mechanic.
37 The oxygen system was also serviced by Sunjet Aviation on January 30, 1999, during the prepurchase inspection, and on March 10, May 19, and June 11, 1999.
38 This information is based on "Load Manifest/Aircraft Flight Log" forms provided by Sunjet Aviation.
39 Because the oxygen bottle was empty when it was recovered from the wreckage, the investigation could not positively determine if it contained any oxygen during the accident flight. The possibility that it was filled with air, nitrogen, or some other gas exists.
40 Sunjet Aviation's documentation of aircraft systems discrepancies is discussed later in this analysis.
41 All altitudes are mean sea level unless noted otherwise.
42 Investigators compared radio transmissions made during the accident flight with recordings of transmissions made with normal microphones and with oxygen mask microphones during a test flight and confirmed that the first officer was not wearing an oxygen mask during her transmissions.
43 ATC radar data indicate that the airplane turned slightly to the right at 0930:45 while climbing through an altitude of 30,200 feet. Because the airplane's ground track (and presumably its heading) was maintained for nearly the remainder of the flight, it is likely that this right turn was initiated by human input to the autopilot heading select knob. However, the National Transportation Safety Board was unable to ascertain whether this input was the result of an intentional act.
44 Information on the cockpit voice recorder (CVR) indicated that the airplane's final descent was initiated by an engine ceasing to operate. Considering the length of time that the airplane had been flying, this was most likely caused by fuel exhaustion. (Wreckage examination also indicated that the right engine was not operating at impact.) The CVR further indicated that engine spooldown was followed by aerodynamic stall and disengagement of the autopilot.
45 The Safety Board was unable to conclusively determine whether the cabin altitude warning initiated as designed. (The warning is designed to begin at 10,000 feet cabin altitude ± 500 feet.) However, the aneroid device that initiates the warning functioned properly to terminate the warning as the airplane descended.
46 Partial pressure, which is a function of the concentration of the gas in the atmosphere, represents the amount of total pressure accounted for by a particular gas. For example, at sea level (14.7 pounds per square inch [psi]), there is a 21 percent oxygen concentration, which provides a partial pressure of about 3.1 psi. A 100 percent concentration of oxygen from supplemental oxygen would provide the same partial pressure of oxygen at about 34,000 feet.
47 By interrupting the inflow for cabin pressurization, the closed flow control valve would have reduced the demand for engine bleed air, which is consistent with the nearly closed position in which the modulation valves were found.
48 Condensation occurs when temperature drops to the dew point. At the conditions present in aircraft cabins at normal cabin altitude, the dew point is substantially lower than the normal cabin temperature, and any moisture remains evaporated in the air. When the cabin decompresses, the resulting temperature decrease and reduction in cabin pressure cause the dew point to increase; consequently, moisture in the air will tend to condense out of the cabin air. With a supply of bleed air to the cabin, the constant flow of warm air on the Learjet cockpit windshield would not permit the temperature drop necessary for such condensation to occur on the windshield surface. Any observable condensation is consistent with a lack of bleed air inflow to the cabin.
49 The CABIN AIR switch was not recovered.
50 For more information, see FAA SCR Team Report, Learjet Model 35/36. February 25, 2000. Federal Aviation Administration. p. 9. In addition, many Learjets, including the accident airplane, are equipped with a freon air conditioning system that is useful for ground operations. Anecdotal evidence revealed that some Learjet flight crews have forgotten to activate the cabin air conditioning system before takeoff.
51 No abnormal findings were noted during the Safety Board's examination of the passenger oxygen system components to suggest that the passengers' masks would not have deployed as designed.
52 Hypoxia is the physiological state of insufficient oxygen in the blood and body tissue and may ultimately cause impaired vision, judgment, or motor control; drowsiness; slurred speech; memory decrements; difficulty thinking; and loss of consciousness and death.
53 In contrast, in a January 18, 1990, accident near Ansonia, Ohio, involving a Learjet 23, the flight crewmembers showed signs of hypoxia (including a deterioration in their ability to control the airplane) about 17 minutes after takeoff. They deviated from ATC instructions to enter a holding pattern at FL 220 and displayed confusion about assigned headings and other ATC instructions. The controller noted that the pilot's speech was slurred and that some portions of his transmissions were not understandable. The airplane subsequently climbed above its assigned altitude to FL 291. For more information, see Brief of Accident ATL90MA051.
54 The FAA SCR team recommended that "Bombardier Aerospace (Learjet Inc.) should develop a kit to provide an annunciator light or equivalent to advise the crew if the cabin air switch is in the off position (conditioned air supply off)." FAA SCR Team Report. p. 11. In a November 16, 2000, memorandum provided to the Safety Board, the FAA indicated that Learjet plans to issue service bulletins by September 2001 to address this recommendation.
55 This action initiates emergency bleed air supply to the cabin only if the IN NORMAL OUT DEFOG knob is pushed in. Given the weather conditions during the accident flight, this knob would most likely have been pushed in.
56 Neither WSHLD HEAT switch was recovered from the wreckage.
57 Later models of the Learjet Model 35/36 are equipped with an automatic emergency pressurization system that provides an alternate supply of bleed air to the cabin without pilot action in the event of a decrease in cabin pressurization.
58 Sunjet Aviation surrendered its operating certificate to the FAA on July 17, 2000.
59 Title 14 Code of Federal Regulations 135.89(b)(3) requires that one pilot wear and use an oxygen mask when an airplane is cruising above 35,000 feet.
60 The flight was a round trip from Jacksonville, Florida, to Wheeling, West Virginia, on October 20, 1999.
61 The Safety Board's survey of several FBOs that had recently serviced the accident airplane indicated that none of them provide complimentary oxygen supplies.
62 According to the FAA, oxygen servicing is not required to be entered in the aircraft maintenance logbook.
63 For more information, see Brief of Accident IAD97FA060.
64 Explosive decompressions typically occur in less than 1/2 second and are accompanied by loud noise and fog. Rapid decompressions typically last from 1/2 to 10 seconds, whereas gradual decompressions occur over a longer period of time.
65 Marotte, H.; Toure, C.; Clere, J. M.; and Vieillefond, H. 1990. "Rapid Decompression of a Transport Aircraft Cabin: Protection Against Hypoxia." Aviation, Space, and Environmental Medicine 61: 21-27; Noble, J.; Jones, J G.; and Davis, E. J. 1993. "Cognitive Function During Moderate Hypoxaemia." Anesthesia and Intensive Care 21(2): 180-184.
66 For more information, see Brief of Accident CHI96IA157 and Air Accidents Investigation Branch Bulletin No: 6/99 Ref: EW/C98/8/6.
NTSB Home | Publications