Failure detection by pilots during automatic landing - Models and experiments

A model is proposed to describe the pilot as a monitor of automatic landing systems. The failures treated are equivalent to the addition of a dynamic change in the mean of the observation process. The failure detection model of the pilot consists of two stages: a linear estimator (Kalman filter) and a decision mechanism based on sequential analysis. The filter equations are derived from a simplified version of the linearized dynamics of the airplane and the control loop. The perceptual observation noise is modified to include the effects of allocation of attention among the several instruments. The final result is a simple model consisting of a high-pass filter to produce the observation residuals and a decision function which is a pure integration of the residuals minus a bias term. The dynamics of a Boeing 707 were used to simulate the fully coupled final approach in a fixed-base simulator. Observers monitored the approaches and detected the failures; their performance was compared with the predictions of the model.