Turbine engine failure

The damaged engine that catastrophically failed on United Airlines Flight 232

A turbine engine failure occurs when a turbine engine in an aircraft unexpectedly stops producing thrust or power production due to a malfunction other than fuel exhaustion, although the term "turbine engine failure" can also apply to failure of any turbine engine, such as ground based turbines used in power plants, turbine-engined vessels (i.e. CODAG) and vehicles, etc.

Turbine engines in use on today’s turbine-powered aircraft are reliable. Engines operate efficiently with regularly scheduled inspections and maintenance. These units can have lives ranging in the thousands of hours of operation. However, engine malfunctions or failures occasionally occur that require an engine to be shut down in flight. Since multi-engine airplanes are designed to fly with one engine inoperative and flight crews are trained to fly with one engine inoperative, the in-flight shutdown of an engine typically does not constitute a serious safety of flight issue. Following an engine shutdown, a precautionary landing is usually performed with airport fire and rescue equipment positioned near the runway. Once the airplane lands, fire department personnel assist with inspecting the airplane to ensure it is safe before it taxis to its parking position. Turboprop-powered aircraft and turboshaft-powered helicopters are also powered by turbine engines and are subject to engine failures for many similar reasons as jet-powered aircraft. In the case of an engine failure in a helicopter, it is often possible for the pilot to enter autorotation, using the unpowered rotor to slow the aircraft's descent and provide a measure of control, usually allowing for a safe emergency landing even without engine power.

Shut downs that are not engine failures

Most in-flight shutdowns are harmless and likely to go unnoticed by passengers. For example, it may be prudent for the flight crew to shut down an engine and perform a precautionary landing in the event of a low oil pressure or high oil temperature warning in the cockpit. However, passengers in a jet powered aircraft may become quite alarmed by other engine events such as a compressor surge — a malfunction that is typified by loud bangs and even flames from the engine’s inlet and tailpipe. A compressor surge is a disruption of the airflow through a gas turbine jet engine that can be caused by engine deterioration, a crosswind over the engine’s inlet, ingestion of foreign material, or an internal component failure such as a broken blade. While this situation can be alarming, the condition is momentary and not dangerous.

Other events that can happen with jet engines, such as a fuel control fault, can result in excess fuel in the engine’s combustor. This additional fuel can result in flames extending from the engine’s exhaust pipe. As alarming as this would appear, at no time is the engine itself actually on fire.

Also, the failure of certain components in the engine may result in a release of oil into bleed air that can cause an odor or oily mist in the cabin. This is known as a fume event. The dangers of fume events are the subject of debate in both aviation and medicine.^[1]

Possible causes

Engine failures can be caused by mechanical problems in the engine itself, such as damage to portions of the turbine or oil leaks, as well as damage outside the engine such as fuel pump problems or fuel contamination. A turbine engine failure can also be caused by entirely external factors, such as volcanic ash, bird strikes or weather conditions like precipitation or icing. Weather risks such as these can sometimes be countered through the usage of supplementary ignition or anti-icing systems.^[2]

Failures during takeoff

A turbine-powered aircraft's takeoff procedure is designed around ensuring that an engine failure will not endanger the flight. This is done by planning the takeoff around three critical V speeds, V1, VR and V2. V1 is the critical engine failure recognition speed, the speed at which a takeoff can be continued with an engine failure, and the speed at which stopping distance is no longer guaranteed in the event of a rejected takeoff. VR is the speed at which the nose is lifted off the runway, a process known as rotation. V2 is the single-engine safety speed, the single engine climb speed.^[3] The use of these speeds ensure that either sufficient thrust to continue the takeoff, or sufficient stopping distance to reject it will be available at all times.

Failure during extended operations

In order to allow twin-engined aircraft to fly longer routes that are over an hour from a suitable diversion airport, a set of rules known as ETOPS (Extended Twin-engine Operational Performance Standards) is used to ensure a twin turbine engine powered aircraft is able to safely arrive at a diversionary airport after an engine failure or shutdown, as well as to minimize the risk of a failure. ETOPS includes maintenance requirements, such as frequent and meticulously logged inspections and operation requirements such as flight crew training and ETOPS-specific procedures.^[4]

Contained and uncontained failures

The engine of Delta Air Lines Flight 1288 after it experienced catastrophic uncontained compressor rotor failure in 1996.

Two terms are helpful in describing the nature of engine failures. A "contained" engine failure is one in which components might separate inside the engine but either remain within the engine’s cases or exit the engine through the tail pipe. This is a design feature of all engines and generally should not pose an immediate flight risk. An "uncontained" engine failure can be more serious because pieces from the engine exit the engine at high speeds in other directions, posing potential danger to the aircraft structure and persons within the plane. In the United States, the National Transportation Safety Board will likely investigate any uncontained engine failure involving a transport category aircraft.

Notable uncontained engine failure incidents

• National Airlines Flight 27: a McDonnell Douglas DC-10 flying from Miami to San Francisco in 1973 had an overspeed failure of a General Electric CF6-6, resulting in one fatality.
• Two LOT Polish Airlines flights, both Ilyushin Il-62s, suffered catastrophic uncontained engine failures in the 1980s. The first was in 1980 on LOT Flight 7 where flight controls were destroyed, killing all 87 on board. In 1987, on LOT Flight 5055, the aircraft's inner left (#2) engine, damaged the outer left (#1) engine, setting both on fire and causing in-flight break up, killing all 183 people on board. In both cases, the turbine shaft in engine #2 disintegrated due to production defects in the engines' bearings, which were missing rollers.^[5]
• Cameroon Airlines Flight 786: a Boeing 737 flying between Douala and Garoua, Cameroon in 1984 had a failure of a Pratt & Whitney JT8D-15 engine. 2 people died.
• United Airlines Flight 232: a McDonnell Douglas DC-10 flying from Denver to Chicago in 1989. The failure of the rear General Electric CF6-6 engine caused the loss of all hydraulics forcing the pilots to attempt a landing using differential thrust. 111 fatalities. Prior to the United 232 crash, the probability of a simultaneous failure of all three hydraulic systems was considered as high as a billion-to-one. However, the statistical models used to come up with this figure did not account for the fact that the number-two engine was mounted at the tail close to all the hydraulic lines, nor the possibility that an engine failure would release many fragments in many directions. Since then, more modern aircraft engine designs have focused on keeping shrapnel from penetrating the cowling or ductwork, and have increasingly utilized high-strength composite materials to achieve the required penetration resistance while keeping the weight low.
• Delta Air Lines Flight 1288: a McDonnell Douglas MD-88 flying from Pensacola, Florida to Atlanta in 1996 had a cracked compressor rotor hub failure on one of its Pratt & Whitney JT8D-219 engines. 2 died.
• Qantas Flight 32: an Airbus A380 flying from London Heathrow to Sydney (via Singapore) in 2010 had an uncontained failure in a Rolls-Royce Trent 900 engine. The failure was found to have been caused by a misaligned counter bore within a stub oil pipe leading to a fatigue fracture. This in turn led to an oil leakage followed by an oil fire in the engine. The fire led to the release of the Intermediate Pressure Turbine (IPT) disc.
• British Airways Flight 2276: a Boeing 777-200ER flying from Las Vegas to London in 2015 suffered an uncontained engine failure on its #1 GE90 engine during takeoff, resulting in a large fire on its port side. The aircraft successfully aborted takeoff and the plane was evacuated with no fatalities.
• American Airlines Flight 383: a Boeing 767-300ER flying from Chicago to Miami in 2016 suffered an uncontained engine failure on its #2 engine during takeoff resulting in a large fire which destroyed the outer right wing. The aircraft aborted takeoff and was evacuated with 21 minor injuries, but no fatalities.

References

• "Engine Failure: Guidance for Controllers" accessed 4 November 2010

This article contains text from a publication of the United States National Transportation Safety Board. which can be found here As a work of the United States Federal Government, the source is in the public domain and may be adapted freely per USC Title 17; Chapter 1; §105 (see Wikipedia:Public Domain).