ANC03IA001

The instrument flight rules scheduled international flight was in cruise flight at FL350 with the autopilot engaged, when it abruptly rolled into a 30 to 40 degree left bank. There were indications that the lower rudder moved to the left blowdown limit, and remained there. Emergency procedures failed to correct the problem, and the flight diverted to the nearest airport for an emergency landing. As the airspeed decreased during the approach, the lower rudder deflected further to the left. The flightcrew used asymmetric engine thrust to maintain heading. After landing, the lower rudder remained deflected fully to the left, and could not be repositioned until the hydraulic pressure was relieved. An inspection of the forged aluminum manifold of the lower rudder power control module (PCM) revealed the end portion which houses the yaw damper actuator had fractured off from the main portion of the manifold. The lower rudder PCM and the flight data recorder (FDR) were sent to the NTSB laboratory. The data retrieved from the FDR showed an initial lower rudder deflection of 17.5 degrees left, and a subsequent increase to 32 degrees (full) left. The incident airplane has two independently supported and operated rudders, which provide yaw control. Typically, the upper and lower rudders operate in unison. The hydraulic actuators for the lower and upper rudders are controlled by independent power control modules. The power control modules for both the upper and lower rudders are virtually identical. The fractured power control module was disassembled and inspected. The yaw damper piston was protruding from the fracture, and precluded functional testing of the module. The individual components of the power control module were tested, and no anomalies were found. Dimensional checks showed no discrepancies, and metallurgical testing showed the manifold material was consistent with the manufacturer's specifications. Metallurgical examination revealed a mode of crack initiation and growth consistent with fatigue. A non-destructive inspection process was developed, and a group of similar power control modules were inspected. The group contained power control modules with higher and lower use cycles than the incident airplane's power control module. No similar fractures were found. As a result of this incident, the airplane's manufacturer has issued an Alert Service Bulletin which recommends operators perform an ultrasonic inspection on pertinent high-time lower and upper rudder power control modules. The Federal Aviation Administration has issued a Notice of Proposed Rule Making for a airworthiness directive which would make the ultrasonic inspection mandatory for all affected airplanes.

History of flight

On October 9, 2002, about 1740 Alaska daylight time, a Boeing 747-400 airplane, N661US, experienced a lower rudder hardover during cruise flight at FL350. The airplane was being operated as Flight 85, by Northwest Airlines Inc., as an instrument flight rules (IFR) scheduled international flight under Title 14, CFR Part 121. The 4 flight crew members, 14 flight attendants, and the 386 passengers, were not injured. Visual meteorological conditions prevailed, and an instrument flight plan was filed. The flight originated at the Detroit International Airport, Detroit, Michigan, about 1403 eastern daylight time, and was bound for the Narita International Airport, Tokyo, Japan. Following the lower rudder hardover, the flight diverted to Anchorage, Alaska, where an uneventful landing was made.

During an interview with the National Transportation Safety Board (NTSB) investigator-in-charge (IIC), on October 10, 2002, the captain said the airplane was at a cruise altitude of 35,000 feet with the autopilot engaged, when it abruptly rolled into a 30 to 40 degree left bank. He said there were indications that the lower rudder initially moved left to the blowdown limit of 17 degrees deflection, and remained there. (The blowdown limit is a function of airspeed; the lower the airspeed, the greater the allowed deflection.) He said he declared an emergency, and diverted the airplane to the Ted Stevens International Airport, Anchorage, Alaska. The captain said he and the first officer ran through the available emergency procedures, but none of these could correct the problem. He said as the airspeed decreased during the approach for landing, the lower rudder deflected further to the left. During the approach and landing, the crew used differential power to aid in directional control. The captain said after landing, he observed that the lower rudder remained deflected fully to the left.

During an inspection of the airplane by the IIC on October 10, the lower rudder was found in the centered position. A mechanic for the operator said during his initial inspection the lower rudder was deflected full left as witnessed by the pilot. He said the lower rudder could not be repositioned until the hydraulic line connected to the positioning actuator was disconnected, relieving the hydraulic pressure. An inspection of the lower rudder power control module (PCM) revealed the forged aluminum housing (manifold) of the lower rudder power control module was fractured. The end portion of the control module manifold that houses the yaw damper actuator piston, had fractured off from the main portion of the manifold. The fractured end contained a metal end cap that was safety-wired to the manifold. The separated portion of the manifold remained attached to the main portion by the safety wire.

The lower rudder power control module, and the flight data recorder (FDR) were removed, and sent to the NTSB laboratory in Washington, DC, for examination.

FDR information

The data retrieved from the flight data recorder showed an initial uncommanded lower rudder deflection of 17.5 degrees to the left, and as the airplane slowed during the approach and landing, a subsequent increase to 32 degrees (full) left deflection for the remainder of the flight.

Rudder system information

The Boeing 747-400 has two independently supported and operated rudders (upper and lower) which provide yaw control for the airplane. Each rudder is positioned by a hydraulically operated power control package (PCP). The hydraulic system operating pressure is 3000 psi, and typically the upper and lower rudders operate in unison. The lower rudder has less surface area than the upper, and is positioned by two hydraulic actuators, whereas the upper rudder has three actuators. The hydraulic actuators for the lower and upper rudders are controlled by independent power control modules. The power control modules for both rudders are virtually identical and are located next to each other in the vertical stabilizer. Each power control module contains a primary and secondary hydraulic control system, housed within a single manifold. In the event of a failure of the primary or secondary system, the remaining system can position the rudder. In this incident, the lower rudder power control module manifold fractured, allowing the yaw damper piston to travel beyond its normal position. This resulted in a full left command input to the main control valve hence driving the two actuators to the full left rudder position.

Test and research

The initial metallurgical examination of the fractured power control module by the NTSB laboratory revealed a mode of crack initiation and growth consistent with fatigue. Under the supervision of the NTSB systems group chairman, the fractured power control module was returned to the manufacturer for disassembly and further inspection. The yaw damper piston was visibly protruding from the manifold, and precluded operational testing of the manifold. All the individual components of the power control module were tested, and no anomalies were found. Dimensional checks of the power control module showed no discrepancies, and metallurgical testing by the manufacturer showed the manifold was made of material consistent with the manufacturer's specification. Since a fatigue type of failure typically cannot be visually detected prior to the actual failure, a non-destructive inspection process was developed. A group of similar power control modules that were installed on other airplanes, as well as a spare unit, were inspected. The inspected group contained power control modules with higher and lower use cycles than the incident airplane's power control module. No similar fractures were found.

As a result of this incident, the airplane's manufacturer has issued Alert Service Bulletin 747-27A2397, dated July 24, 2003, which recommends operators perform an ultrasonic inspection of pertinent high-time lower and upper rudder power control modules. The Federal Aviation Administration has issued a Notice of Proposed Rule Making (NPRM), "Airworthiness Directive; Boeing Model 747-400, -400D, and -400F Series Airplanes," published in the Federal Register on August 28, 2003, which would make this inspection mandatory on affected airplanes.