What happened
On 25 October 2016, an instructor was supervising students in the operation of a Lockheed Martin Stalker eXtended Endurance (XE) unmanned aerial system (UAS) (Figure 1) at the Avoca racetrack in Victoria.
Figure 1: Typical Stalker XE aircraft
Source: UAS manufacturer
At about 1700 Eastern Daylight-saving Time (EDT), the instructor reviewed the student’s programmed mission and proceeded through the ground control station (GCS) launch wizard application. The launch wizard functions as a pre-flight checklist and ensures that all systems are ready for flight and that the mission is valid. The student then armed the aircraft for launch, pulled the aircraft back on the bungee cord and released the aircraft in accordance with the normal bungee launch procedures.
After release, the aircraft tracked straight ahead for 10 seconds according to standard operation, then climbed and commenced a right turn towards the first programmed waypoint. After passing the first waypoint, the aircraft made another right turn towards the second waypoint. About 20 seconds into the flight, the aircraft entered an uncontrolled descent from about 225 ft above ground level and collided with the ground. The aircraft sustained substantial damage, and no one was injured.
Manufacturer’s investigation
Power failure
The aircraft was powered by a lithium polymer battery. A battery adapter cable was plugged into the aircraft’s battery. The adapter cable was connected to the aircraft’s main power cable via the main power (battery) connector. The main power cable was secured into a pocket at the back of the connector pin.
After the accident, the aircraft’s negative main power cable was found to have separated from its pin in the connector.
The battery connector consisted of two mating pairs of contacts. In normal operation, all current flow passed through spring contacts on the male plug to the female contact. Spring tension increased the mating area and generated pressure upon the surfaces.
A different Stalker XE aircraft also experienced a battery connector failure about one month prior to this incident. In both incidents, the failed battery connector pins had the following problems:
- significant pitting and erosion of the outer quarter of the male contact
- heat damage to the spring contact surface
- loss of spring tension in most or all of the contact springs
- minor pitting of the outermost edge of the female contact.
It was determined that the capacitive load of the electrical system caused inrush current,[1] and the operator payload and communication links increased both the capacitive load and the power draw. The contact damage from the inrush current initiated the failure process. Sustained current, which produced contact heating, then removed the contact temper[2] and significantly degraded the connection. The manufacturer was able to duplicate the unsoldering failures via this mechanism.
The connector failure was likely the result of multiple factors:
- Inrush current produced pitting, erosion and metal splatter on other contact surfaces.
- The erosion and splatter then produced localised areas of very high current density.
- The current density resulted in localised hotspots that removed the spring contact temper, which produced very high resistance on that spring contact.
- The load was then distributed across the remaining spring contacts, compounding the failure rate.
- Eventually the connector resistance was high enough that the normal operating current heated the solder joint until the solder melted and the circuit was interrupted.
The first steps probably took many flight cycles to develop, while the last probably required only seconds to a few minutes of normal operating current.
The separation of the negative main power cable from its pin in the main power connector interrupted electrical power to all of the aircraft systems. This included the autopilot, motor and control surface servos.
Uncontrolled flight
The flight data stopped suddenly at 225 ft – the subsequent lack of data logging indicated a power interruption to the autopilot.
Once battery power was lost, all systems in the aircraft were inoperative and any subsequent ‘flight’ was uncontrolled. Due to the loss of electrical power to the motor and the autopilot, the aircraft was unable to glide to a safe landing.
Findings
These findings should not be read as apportioning blame or liability to any particular organisation or individual.
- The main power connector pins had sustained degradation from arcing and high temperatures due to inrush current, resulting in increased resistance.
- During the initial climb, high current across the increased resistance of the main power connector heated the negative pin to a temperature high enough to melt the solder on the negative main power cable.
- The separation of the negative main power cable from its pin in the main power connector interrupted electrical power to all aircraft systems, including the autopilot, motor and control surface servos.
- Due to the total loss of electrical power, the aircraft was unable to maintain normal flight or conduct a safe glide landing, therefore collided with the ground.
Safety action
Whether or not the ATSB identifies safety issues in the course of an investigation, relevant organisations may proactively initiate safety action in order to reduce their safety risk. The ATSB has been advised of the following safety action in response to this occurrence.
Aircraft manufacturer
As a result of this occurrence, the aircraft manufacturer has advised the ATSB that they are taking the following safety actions with regard to Stalker XE aircraft:
- All battery connectors are being replaced and sacrificial pigtails are being added to the connectors, to be replaced after a number of connections.
- The aircraft battery circuitry is being modified to prevent arcing during connection and disconnection.
Aviation Short Investigations Bulletin - Issue 57
Purpose of safety investigationsThe objective of a safety investigation is to enhance transport safety. This is done through:
It is not a function of the ATSB to apportion blame or provide a means for determining liability. At the same time, an investigation report must include factual material of sufficient weight to support the analysis and findings. At all times the ATSB endeavours to balance the use of material that could imply adverse comment with the need to properly explain what happened, and why, in a fair and unbiased manner. The ATSB does not investigate for the purpose of taking administrative, regulatory or criminal action. TerminologyAn explanation of terminology used in ATSB investigation reports is available here. This includes terms such as occurrence, contributing factor, other factor that increased risk, and safety issue. Publishing informationReleased in accordance with section 25 of the Transport Safety Investigation Act 2003 Published by: Australian Transport Safety Bureau © Commonwealth of Australia 2017 Ownership of intellectual property rights in this publication Unless otherwise noted, copyright (and any other intellectual property rights, if any) in this report publication is owned by the Commonwealth of Australia. Creative Commons licence With the exception of the Coat of Arms, ATSB logo, and photos and graphics in which a third party holds copyright, this publication is licensed under a Creative Commons Attribution 3.0 Australia licence. Creative Commons Attribution 3.0 Australia Licence is a standard form licence agreement that allows you to copy, distribute, transmit and adapt this publication provided that you attribute the work. The ATSB’s preference is that you attribute this publication (and any material sourced from it) using the following wording: Source: Australian Transport Safety Bureau Copyright in material obtained from other agencies, private individuals or organisations, belongs to those agencies, individuals or organisations. Where you wish to use their material, you will need to contact them directly. |
__________
- Inrush current, input surge current or switch-on surge is the maximum, instantaneous input current drawn by an electrical device when first turned on (Wikipedia).
- Tempering involves heating steel to a specific temperature to achieve certain properties such as hardness and elasticity and to remove brittleness.