Engineering topics

Pritchett, Amy R.

Publications and source records attributed to Pritchett, Amy R..

13 records

NASA NTRS2008

The Nation's Needs in Aviation Formal Methods

Aviation, both on-board systems and the National Airspace System, can be transformed by many current and future technical capabilities. To name but a few, improved efficiency may be achieved by integrating functions; robustness may be improved by distributing functions; and safety may be improved by building in risk mitigation through not only redundant, independent systems but also through operational concepts and effective interaction with human operators. This talk will review the key aspects of verification, validation and certification for which formal methods will provide a critical function in enabling truly revolutionary designs to enter the operational community, illustrating successes in formal modeling to date and posing further questions for the formal modeling community.

Pritchett, Amy R.↗

NASA NTRS2005

Intelligent Pilot Aids for Flight Re-Planning in Emergencies

Effective and safe control of an aircraft may be difficult or nearly impossible for a pilot following an unexpected system failure. Without prior training, the pilot must ascertain on the fly those changes in both manual control technique and procedures that will lead to a safe landing of the aircraft. Sophisticated techniques for determining the required control techniques are now available. Likewise, a body of literature on pilot decision making provides formalisms for examining how pilots approach discrete decisions framed as the selection between options. However, other aspects of behavior, such as the task of route planning and guidance, are not as well studied. Not only is the pilot faced with possible performance changes to the aircraft dynamics, but he or she is also tasked to create a plan of actions that will effectively take the aircraft down to a safe landing. In this plan, the many actions that the pilot can perform are closely intertwined with the trajectory of the aircraft, making it difficult to accurately predict the final outcome. Coupled with the vast number of potential actions to be taken, this problem may seem intractable. This is reflected in the lack of a pre-specified procedure capable of giving pilots the ability to find a resolution for this task. This report summarizes a multi-year effort to examine methods to aid pilots in planning an approach and arrival to an airport following an aircraft systems failure. Ultimately, we hypothesize that automatic assistance to pilots can be provided in real-time in the form of improving pilot control of a damaged aircraft and providing pilots with procedural directives suitable for critical flight conditions; such systems may also benefit pilot training and procedure design. To achieve this result, a systematic, comprehensive research program was followed, building on prior research. This approach included a pencil-and-paper study with airline pilots examining methods of representing a flight route in an immediately understandable manner, and in a manner that would allow the pilot to modify an automatically-generated route and/or detect any inappropriate elements in an automatically-generated route. Likewise, a flight simulator study examined different cockpit systems for the relative merits of providing pilots with any of a variety of automated functions for emergency flight planning. The results provide specific guidance for the design of such systems.

Pritchett, Amy R.↗

NASA NTRS2002

Intelligent Pilot Aids for Flight Re-Planning in Emergencies

Experimental studies were conducted with pilots to investigate the attributes of automation that would be appropriate for aiding pilots in emergencies. The specific focus of this year was on methods of mitigating automation brittleness. Brittleness occurs when the automatic system is used in circumstances it was not designed for, causing it to choose an incorrect action or make an inaccurate decision for the situation. Brittleness is impossible to avoid since it is impossible to predict every potential situation the automatic system will be exposed to over its life. However, operators are always ultimately responsible for the actions and decisions of the automation they are monitoring or using, which means they must evaluate the automation's decisions and actions for accuracy. As has been pointed out, this is a difficult thing for human operators to do. There have been various suggestions as to how to aid operators with this evaluation. In the study described in this report we studied how presentation of contextual information about an automatic system's decision might impact the ability of the human operators to evaluate that decision. This study focused on the planning of emergency descents. Fortunately, emergencies (e.g., mechanical or electrical malfunction, on-board fire, and medical emergency) happen quite rarely. However, they can be catastrophic when they do. For all predictable or conceivable emergencies, pilots have emergency procedures that they are trained on, but those procedures often end with 'determine suitable airport and land as quickly as possible.' Planning an emergency descent to an unplanned airport is a difficult task, particularly under the time pressures of an emergency. Automatic decision aids could be very efficient at the task of determining an appropriate airport and calculating an optimal trajectory to that airport. This information could be conveyed to the pilot through an emergency descent procedure listing all of the actions necessary to safely land the plane. However, there is still the potential problem of brittleness. This study examined the impact of contextual information in presentations of emergency descent procedures to see if they might impact the pilot's evaluation of the feasibility of the presented procedure. The study and its results are described in detail.

Pritchett, Amy R.↗

NASA NTRS2002

Rapidly Re-Configurable Flight Simulator Tools for Crew Vehicle Integration Research and Design

While simulation is a valuable research and design tool, the time and difficulty required to create new simulations (or re-use existing simulations) often limits their application. This report describes the design of the software architecture for the Reconfigurable Flight Simulator (RFS), which provides a robust simulation framework that allows the simulator to fulfill multiple research and development goals. The core of the architecture provides the interface standards for simulation components, registers and initializes components, and handles the communication between simulation components. The simulation components are each a pre-compiled library 'plugin' module. This modularity allows independent development and sharing of individual simulation components. Additional interfaces can be provided through the use of Object Data/Method Extensions (OD/ME). RFS provides a programmable run-time environment for real-time access and manipulation, and has networking capabilities using the High Level Architecture (HLA).

Pritchett, Amy R.↗

NASA NTRS2001

Techniques for Improving Pilot Recovery from System Failures

This project examined the application of intelligent cockpit systems to aid air transport pilots at the tasks of reacting to in-flight system failures and of planning and then following a safe four dimensional trajectory to the runway threshold during emergencies. Two studies were conducted. The first examined pilot performance with a prototype awareness/alerting system in reacting to on-board system failures. In a full-motion, high-fidelity simulator, Army helicopter pilots were asked to fly a mission during which, without warning or briefing, 14 different failures were triggered at random times. Results suggest that the amount of information pilots require from such diagnostic systems is strongly dependent on their training; for failures they are commonly trained to react to with a procedural response, they needed only an indication of which failure to follow, while for 'un-trained' failures, they benefited from more intelligent and informative systems. Pilots were also found to over-rely on the system in conditions were it provided false or mis-leading information. In the second study, a proof-of-concept system was designed suitable for helping pilots replan their flights in emergency situations for quick, safe trajectory generation. This system is described in this report, including: the use of embedded fast-time simulation to predict the trajectory defined by a series of discrete actions; the models of aircraft and pilot dynamics required by the system; and the pilot interface. Then, results of a flight simulator evaluation with airline pilots are detailed. In 6 of 72 simulator runs, pilots were not able to establish a stable flight path on localizer and glideslope, suggesting a need for cockpit aids. However, results also suggest that, to be operationally feasible, such an aid must be capable of suggesting safe trajectories to the pilot; an aid that only verified plans entered by the pilot was found to have significantly detrimental effects on performance and pilot workload. Results also highlight that the trajectories suggested by the aid must capture the context of the emergency; for example, in some emergencies pilots were willing to violate flight envelope limits to reduce time in flight - in other emergencies the opposite was found.

Pritchett, Amy R.↗

NASA NTRS2000

Rapidly Re-Configurable Flight Simulator Tools for Crew Vehicle Integration Research and Design

While simulation is a valuable research and design tool, the time and difficulty required to create new simulations (or re-use existing simulations) often limits their application. This report describes the design of the software architecture for the Reconfigurable Flight Simulator (RFS), which provides a robust simulation framework that allows the simulator to fulfill multiple research and development goals. The core of the architecture provides the interface standards for simulation components, registers and initializes components, and handles the communication between simulation components. The simulation components are each a pre-compiled library 'plug-in' module. This modularity allows independent development and sharing of individual simulation components. Additional interfaces can be provided through the use of Object Data/Method Extensions (OD/ME). RFS provides a programmable run-time environment for real-time access and manipulation, and has networking capabilities using the High Level Architecture (HLA).

Schutte, Paul C.↗

NASA NTRS1999

Pilot Performance on New ATM Operations: Maintaining In-Trail Separation and Arrival Sequencing

Cockpit Display of Traffic Information (CDTI) may enable new Air Traffic Management (ATM) operations. However, CDTI is not the only source of traffic information in the cockpit; ATM procedures may provide information, implicitly and explicitly, about other aircraft. An experiment investigated pilot ability to perform two new ATM operations - maintaining in-trail separation from another aircraft and sequencing into an arrival stream. In the experiment, pilots were provided different amounts of information from displays and procedures. The results are described.

Pritchett, Amy R.↗

NASA NTRS1997

Pilot Non-Conformance to Alerting System Commands

Instances of pilot non-conformance to alerting system commands have been identified in previous studies. Pilot non-conformance changes the final behavior of the system, and therefore may reduce actual performance from that anticipated. A simulator study has examined pilot non-conformance, using the task of collision avoidance during closely spaced parallel approaches as a case study. Consonance between the display and the alerting system was found to significantly improve subject agreement with automatic alerts. Based on these results, a more general discussion of the factors involved in pilot conformance is given, and design guidelines for alerting systems are given.

Pritchett, Amy R.↗

NASA NTRS1997

Experimental Studies Of Pilot Performance At Collision Avoidance During Closely Spaced Parallel Approaches

Efforts to increase airport capacity include studies of aircraft systems that would enable simultaneous approaches to closely spaced parallel runway in Instrument Meteorological Conditions (IMC). The time-critical nature of a parallel approach results in key design issues for current and future collision avoidance systems. Two part-task flight simulator studies have examined the procedural and display issues inherent in such a time-critical task, the interaction of the pilot with a collision avoidance system, and the alerting criteria and avoidance maneuvers preferred by subjects.

Pritchett, Amy R.↗

NASA NTRS1997

Pilot Non-Conformance to Alerting System Commands During Closely Spaced Parallel Approaches

Pilot non-conformance to alerting system commands has been noted in general and to a TCAS-like collision avoidance system in a previous experiment. This paper details two experiments studying collision avoidance during closely-spaced parallel approaches in instrument meteorological conditions (IMC), and specifically examining possible causal factors of, and design solutions to, pilot non-conformance.

Pritchett, Amy R.↗

NASA NTRS1996

Experimental Study of Collision Detection Schema Used by Pilots During Closely Spaced Parallel Approaches

An experimental flight simulator study was conducted to examine the mental alerting logic and thresholds used by subjects to issue an alert and execute an avoidance maneuver. Subjects flew a series of autopilot landing approaches with traffic on a closely-spaced parallel approach; during some runs, the traffic would deviate towards the subject and the subject was to indicate the point when they recognized the potential traffic conflict, and then indicate a direction of flight for an avoidance maneuver. A variety of subjects, including graduate students, general aviation pilots and airline pilots, were tested. Five traffic displays were evaluated, with a moving map TCAS-type traffic display as a baseline. A side-task created both high and low workload situations. Subjects appeared to use the lateral deviation of the intruder aircraft from its approach path as the criteria for an alert regardless of the display available. However, with displays showing heading and/or trend information, their alerting thresholds were significantly lowered. This type of range-only schema still resulted in many near misses, as a high convergence rate was often established by the time of the subject's alert. Therefore, the properties of the intruder's trajectory had the greatest effect on the resultant near miss rate; no display system reliably caused alerts timely enough for certain collision avoidance. Subjects' performance dropped significantly on a side-task while they analyzed the need for an alert, showing alert generation can be a high workload situation at critical times. No variation was found between subjects with and with out piloting experience. These results suggest the design of automatic alerting systems should take into account the range-type alerting schema used by the human, such that the rationale for the automatic alert should be obvious to, and trusted by, the operator. Although careful display design may help generate pilot/automation trust, issues such as user non-conformance to automatically generated commands can remain a possibility.

Pritchett, Amy R.↗

NASA NTRS1995

Variations in "Party Line" Information Importance Between Pilots of Difference Characteristics

The introduction of digital datalink communications into the air traffic control (ATC) system may cause a reduction of the situation awareness of flight crews due to the reduction of 'Party Line' Information (PLI) that can be overheard on the shared voice frequencies. A survey was distributed to determine current PLI use by pilots from different geographic regions, operational groups, experience levels, and aircraft equipage. Pilots indicated highest perceived importance for PLI during the phases of flight nearest the airport and lowest importance during cruise. Several specific traffic and weather information elements were identified as particularly important; traffic and weather information was also cited by pilots as information required for global situation awareness. Some variations in responses were found between pilots from different operational types.

Pritchett, Amy R.↗

NASA NTRS1994

Variations in Party Line Information Requirements for Flight Crew Situation Awareness in the Datalink Environment

Current Air Traffic Control communications use shared very high frequency (VHF) voice frequencies from which pilots can obtain 'Party Line' Information (PLI) by overhearing communications addressed to other aircraft. A prior study has shown pilots perceive this PLI to be important. There is concern that some critical PLI may be lost in the proposed datalink environment where communications will be discretely addressed. Different types of flight operations will be, equipped with datalink equipment at different times, generating a 'mixed environment' where some pilots may rely on PLI while others will receive their information by datalink. To research the importance, availability and accuracy of PLI and to query pilots on the information they feel is necessary, a survey was distributed to pilots. The pilots were selected from four flight operation groups to study the variations in PLI requirements in the mixed datalink environment. Pilots perceived PLI to be important overall. Specific information elements pertaining to traffic and weather information were identified as Critical. Most PLI elements followed a pattern of higher perceived importance during terminal area operations, final approach and landing. Pilots from the different flight operation groups identified some elements as particularly important. Pilots perceived PLI to be only moderately available and accurate overall. Several PLI elements received very low availability and accuracy ratings but are perceived as important. In a free response question designed to find the information requirements for global situation awareness, pilots frequently indicated a need for traffic and weather information. These elements were also frequently cited by them as information that could be presented by a datalink system. The results of this survey identify specific concerns to be addressed when implementing datalink communications.

Pritchett, Amy R.↗