Fuselage, Wings and Stabilizing Surfaces — Page 11, Lesson 15

Let's start with the big idea that governs how every modern airliner is built. Large modern aircraft are designed with what we call a Fail-safe or Damage tolerant structure. I want you to hold onto that phrase, because it's the philosophy behind the whole airframe. Here's the precise definition. A fail-safe structure is one in which a failure of a particular part is compensated for by an alternative load-path provided by an adjacent part that is able to carry the loads for a limited time period. Let me unpack that. When you're flying, every structural member is carrying a share of the load. If one member cracks or fails, the structure doesn't just give up — a neighbouring part steps in and takes over that load through a different path. That's the alternative load-path. But it can only do this for a limited time. So the structure is designed so that, after any single failure or crack in any one structural member, it can still safely carry the normal operating loads — but only until the next periodic inspection. That's the key: the aircraft is safe to keep flying, but you must find that crack before it becomes critical. Where do we actually see this true dualling of load-paths in practice? The classic examples are the wing attachments, and also the attachment points for the vertical stabilizer and the horizontal stabilizer. Those are the places where you genuinely have two parallel load-paths. Now, detection of these faults is reliant upon a planned inspection programme capable of finding such failures. To gain access to the vulnerable areas, a certain amount of dismantling is necessary. However, in less critical areas, we can use non-destructive testing — that's NDT — which lets us inspect without taking the structure apart. But here's the catch: the disadvantage of true dualling of load-paths is that it is fundamentally very heavy. You're adding extra structure to protect the structure, and that costs weight. So modern construction has moved on. Modern concepts use the 'Stressed skin' or 'Semi-monocoque' style of construction. In this style, each piece of the aircraft has its part to play in spreading loads throughout the airframe, and it's tolerant to a certain amount of damage. The programmed inspection cycle periodicity — that's how often you inspect — is determined on the basis that if a crack of detectable length has been missed at the first inspection, the structure will allow that crack to develop until a subsequent inspection before it becomes critical. In other words, the inspection interval is set so that even if you miss a crack once, it won't reach a critical size before you get another chance to find it. And the criteria for these inspection cycles, along with the Design Limit Loads and the Design Ultimate Loads, are all agreed at the time of certification. Those are the load levels the structure is designed to survive, and they're locked in during the certification process. Now, let's contrast that with the Damage tolerant structure proper. Fail-safe structures are rather heavy, as I said, because of those extra structural members. Damage tolerant structure eliminates those extra members by spreading the loading of a particular structure over a larger area. So instead of adding a parallel load-path, you distribute the load across a bigger region. This means the structure is designed so that damage can be detected during the normal inspection cycles before a failure occurs. So the philosophy shifts — you don't build redundancy, you build distribution, and you rely on catching damage in time. Now let's talk about Fatigue, because this is the enemy that inspection programmes are fighting. A structure may be subject to cyclic loads. That's where a structure experiences continual reversals of loading — think of pressurising and depressurising the cabin, or the wings flexing up and down on every flight. And here's the crucial fact: a structure under cyclic loads will fail at a load of less than would be the case for a steadily applied load. That's fatigue. The failing load depends on the number of reversals experienced. Let me give you the example from the text. If the applied stress was 80% of the ultimate stress, the specimen could expect to fail after 100 applications. But if the applied stress was reduced to 20%, the failure would not occur until 10 million applications. So the lower the stress, the more cycles you can survive — and that relationship between stress level and number of cycles is the heart of fatigue analysis. So to tie it all together: we design fail-safe or damage tolerant structures, we set inspection intervals based on detectable crack growth, and we understand fatigue as the mechanism that drives crack growth under cyclic loading. That's the foundation of how we keep an airframe safe for its entire life.