Garmin’s Autoland: Testing The Threshold Of Type Certification

11

By now almost everyone in aviation has heard of Garmin’s Emergency Autoland. If you missed our flight trial video, here it is again. Generally jaded by new avionics, you’ll tell by my expressions in the footage that Garmin’s Emergency Autoland is a remarkably well-executed third layer of automated backstop in what’s called Autonomi. More than seven years in the making by a talented team measured in hundreds, fly with Autoland and it’s impossible not to feel respect for Garmin’s achievement.

Although if anyone can do it, I’d expect Garmin would, given its record for dishing out new products by the hour. But let’s tamp this announcement down some and look beyond the shock, awe and the sappy product advertising clips, shall we? There’s a series of bigger stories getting lost in the celebration—from aircraft sales to insurance matters. 

Impressive, yes, but Autonomi Emergency Autoland means more for the future than for the present. That’s kind of cliché, but we can no longer say someday the airplane will land itself down with the push of a button, or even without the push if the pilot can’t even muster that effort.

This tech to me screams that in the not-too-distant future you’ll likely climb into the left seat, program the FMS to fly to the planned destination and cross your arms while the automation does the rest, just as the system does now for the en route, approaches and landings portion. I can’t think of many technical obstacles in the way of that, except the FAA’s signature on the type certificate.

Garmin, Piper and Cirrus haven’t discussed the certification process at any length, but I sense there have been obstacles trickled down from the Boeing MAX investigation. If you’ve been reading the coverage, you can plainly see the crisis hasn’t abated. In that sense, the timing of Garmin’s Autoland rollout couldn’t be worse. For a while, Garmin initially chose not to announce the system before it was officially written on the $2.994 million Piper M600 SLS type certificate. As it stands now, it’s close enough and reason to clap. But it hasn’t been an easy go and the FAA could have said no to the mere premise of a system that lands the airplane. But it didn’t.

For a while, we were cruising with a certification tailwind— experimental products given the FAA nod without having to do a budget-draining TSO. This is the case with Garmin, Dynon and Aspen EFIS, plus autopilots, at a sizable decrease in the retail price. I wonder if this liberal approval tone around the FAA office got Autoland as far as it did. Still, the Autonomi suite has high-level software as you’d expect. I’m not so sure any certifications for autonomous systems will be easy moving forward, and Garmin’s Autoland is testing the thresholds of FAA type certification.

As I write this, Autonomi Autoland isn’t certified (the supporting layers in the G3000 avionics are)—Piper is still in the late stages of type certificate flight testing. More challenging is that the fly-offs are generally out of Garmin’s own regular channels of certification. Instead, it’s up to the aircraft manufacturer to bring its aircraft to the governing FAA region for proving and hopefully to earn a type certificate that encompasses Garmin’s Autoland (in this case Piper’s M600 SLS and Cirrus’ Vision Jet).

I asked Garmin the other day when it expects the Piper M600 to have a type certificate and it said certification is imminent. Still, I long ago learned to never rely on certification dates, partly because of government office hours. But something’s a little different here.

Is there tap-the-brakes caution in play because of the Boeing thing? Maybe, and that hasn’t been good for Piper or Cirrus, who surely want to close deals on Autoland and Cirrus Safe Return-equipped airplanes. Autonomi Autoland has got to be the biggest marketing buzzword in the history of the aircraft sales market. Even though the chance of this system being used in real numbers is slim. To be clear, deploying Autoland is a full-up 7700 emergency, confessed on the comms for traffic-clearing immediate priority ATC handling, and it’s not intended otherwise.

It can be overridden via autopilot disconnect. Without sifting through the wreck reports, it’s easy to suggest that pilot incapacitation is relatively rare, although there have been fatal hypoxic events in airplanes you’d least expect, and likely enough good outcomes that might have been fatal that we haven’t heard about. Still, for someone with the means to write a check for a $3 million airplane that already has layers of autopilot envelope protection, I’m not sure Autoland will sway the decision either way. Then again, it might for some, just for bragging rights.

Garmin’s Phil Straub sees it differently. He told me the company had a duty to bring Autoland to market in the name of passenger safety because it could. No matter the intent, Garmin deserves a tip of the hat for even venturing into and sticking with the Autoland product. Think of the enormity of the project, especially the software code. Even though it already had a lot of the supporting Autonomi hardware and software in place—mainly autopilot and autothrottle tech—it’s obviously a huge corporate investment that includes sizable risk because, well, avionics can fail, and the airplane could make a smoking crater even if it’s not at fault.

Maybe there’s a collision with another aircraft on the runway at an uncontrolled field, despite its radio calls. Maybe a passenger freaks out and ham-fists the controls or maybe the pilot is slumped over into the controls and interferes. Garmin should add that one to its silky smooth passenger briefing: “Pull dead pilot off yoke.”

If the aircraft had an engine failure (or ran out of fuel) on the way to the destination, Garmin can’t help by adding more fuel. Autoland is designed for a functional airplane, but the autopilot’s Underspeed Protection (USP) would kick in and control the aircraft speed to remain above stall while descending. The airplane would likely land off-airport, probably in a flat configuration with the gear up. It could also theoretically have a midair—more of a chance for that at an uncontrolled field, I suppose. The algorithm favors towered airports for obvious reasons.

Speaking of risk glossed over by the ultimate marketing tool, Jackie Carlon at Piper told me that the M600 is already appealing to some older pilots who fly under BasicMed certification. They’d have to fly the airplane low to comply with BasicMed limits, which probably makes the M600 the wrong airplane, but Carlon reasoned that families of these older pilots would see the value in an airplane that can land itself should grandpa check out behind the controls. She’s right, of course, and this got me thinking about the hardened insurance market that’s clobbering owners—especially aging ones—who fly their own turboprops or jets.

I asked Jon Doolittle at Sutton James Aviation Insurance Brokers in Connecticut if he thought insurers would offer discounts for policyholders who own an Autonomi Autoland airplane. After asking if the thing will fly to the nearest cardiac center, Doolittle said, “Discounts is not a word anyone in the aircraft insurance underwriting world understands right now.” Makes you want to run out and buy a jet, no? 

Oh, and for the conspiracy theorists who are convinced the landing footage in our Autoland video was shot in a flight simulator, thanks for the amusement (I needed it), but rest assured it was not a sim. Look carefully and you’ll see the blazing Kansas summer sun on the control yokes when I shot the footage last June. The over-the-shoulder landing B-roll was shot by a back seater with my gyro stabilized iPhone. My sense is the M600’s heated windshield and lack of prop filter on the camera made it look artificial. You can plant your eyes on more real-world Autoland footage in a Cirrus Jet flight report in an upcoming video here at AVweb and at sister publication Aviation Consumer.

Larry Anglisano
Larry Anglisano is a regular AVweb contributor and the Editor in Chief of sister publication Aviation Consumer magazine. He's an active land, sea and glider pilot, and has over 30 years experience as an avionics tech.

Other AVwebflash Articles

11 COMMENTS

  1. Why would anyone – even the FAA – NOT want to certify a likely-life-saving apparatus like this?

    Is “Oh, well – let ’em crash” a more desirable alternative to pilot incapacitation?

    As brilliant as Garmin’s engineers may be, Garmin’s lawyers have the winning argument with this one. “For emergency use only.” Now THAT’s brilliant!

  2. My initial take is that people with poor decision making skills (who would benefit most from the technology) would also be using it for all sorts of uses beyond what the FAA and Garmin had in mind. Low IFR at the destination? I have a Garmin auto-land, lets go!

    • That would work – once.
      The system automatically self-reports its activation to ATC, including the vehicle’s mode-S ID. Expect to hear from the FAA after ANY activation.

  3. An impressive system for top tier aircraft. I can think of at least three depressurization accidents that such a system could have rescued. Unfortunately, for those of us who must content ourselves with older legacy aircraft, it is nothing more than interesting reading in the news. Still, Garmin should be applauded for its development.

    Regarding your tap-on-the-brakes comment about FAA approvals, I can attest that it is happening to many projects under application, even down at the lower levels of product development. Most of those with which I am familiar involve software either being reviewed for the first time or for approval to modifications to already approved code. I have been waiting for over six months to purchase an autopilot that was already approved, but is now hung up in review of updated software to access additional avionics.

  4. Is anyone really surprised that this technology is coming? For some time now – it’s not been ‘IF’ but ‘WHEN’. It’s going to happen. Airlines will eventually move to a single pilot resource (the economics will ultimately demand it…And given sufficient time into the future – it’s going to be all autonomous.

    All of this technology will, one day, trickle down to GA. The proverbial horse has left the barn…..

  5. GARMIN’s Emergency Autoland. Hype or meaningful?

    In-Flight Medical Incapacitation and Impairment of U.S. Airline Pilots: 1993 to 1998

    Office of Aerospace Medicine Federal Aviation Administration 800 Independence Ave., S.W. Washington, DC 20591

    “Although it is not known when the first accident due to pilot in-flight medical incapacitation occurred, a recent survey showed that almost one-third of all pilots who responded had experienced an incapacitation requiring another crewmember to take over their duties, with safety of flight significantly threatened in 3% of cases. The importance of in-flight medical incapacitation and impairment can be better understood when it is realized that each in-flight medical incapacitation or impairment could potentially lead to an aircraft accident. We studied in-flight medical incapacitations and impairments in U.S. airline pilots from 1993 through 1998. We defined in-flight medical incapacitation as a condition in which a flight crewmember was unable to perform any flight duties and impairment as a condition in which a crewmember could perform limited flight duties, even though performance may have been degraded. We found 39 incapacitations and 11 impairments aboard 47 aircraft during the six-year period. All pilots were males. The average age for incapacitations was 47.0 years (range 25 to 59 years). The average age for impairments was 43.3 years (range 27 to 57 years). The in-flight medical event rate was 0.058 per 100,000 flight hours. The probability that an in-flight medical event would result in an aircraft accident was 0.04. Incapacitations significantly increased with age, with more serious categories in the older age groups. The most frequent categories of incapacitation were loss of consciousness, cardiac, neurological, and gastrointestinal. Safety of flight was seriously impacted in seven of the 47 flights and resulted in two non-fatal accidents.”

    For full text go to: http://libraryonline.erau.edu/online-full-text/faa-aviation-medicine-reports/AM04-16.pdf

    GENERAL AVIATION STATISTICS

    “Incapacitation in the general aviation flight environment is a matter of utmost concern to the Federal Aviation Administration since the likelihood of accident
    is greater due to a lack of redundant pilot skills in most instances. The purpose of this study was to appraise the adequacy of medical standards in minimizing the risk of sudden incapacitation.”

    For full text go to: https://apps.dtic.mil/dtic/tr/fulltext/u2/a187044.pdf

  6. GARMIN’s Emergency Autoland. Hype or meaningful?

    In-Flight Medical Incapacitation and Impairment of U.S. Airline Pilots: 1993 to 1998

    Office of Aerospace Medicine Federal Aviation Administration 800 Independence Ave., S.W. Washington, DC 20591

    “Although it is not known when the first accident due to pilot in-flight medical incapacitation occurred, a recent survey showed that almost one-third of all pilots who responded had experienced an incapacitation requiring another crewmember to take over their duties, with safety of flight significantly threatened in 3% of cases. The importance of in-flight medical incapacitation and impairment can be better understood when it is realized that each in-flight medical incapacitation or impairment could potentially lead to an aircraft accident. We studied in-flight medical incapacitations and impairments in U.S. airline pilots from 1993 through 1998. We defined in-flight medical incapacitation as a condition in which a flight crewmember was unable to perform any flight duties and impairment as a condition in which a crewmember could perform limited flight duties, even though performance may have been degraded. We found 39 incapacitations and 11 impairments aboard 47 aircraft during the six-year period. All pilots were males. The average age for incapacitations was 47.0 years (range 25 to 59 years). The average age for impairments was 43.3 years (range 27 to 57 years). The in-flight medical event rate was 0.058 per 100,000 flight hours. The probability that an in-flight medical event would result in an aircraft accident was 0.04. Incapacitations significantly increased with age, with more serious categories in the older age groups. The most frequent categories of incapacitation were loss of consciousness, cardiac, neurological, and gastrointestinal. Safety of flight was seriously impacted in seven of the 47 flights and resulted in two non-fatal accidents.”

    For full text go to: libraryonline.erau.edu/online-full-text/faa-aviation-medicine-reports/AM04-16.pdf

    GENERAL AVIATION STATISTICS

    “Incapacitation in the general aviation flight environment is a matter of utmost concern to the Federal Aviation Administration since the likelihood of accident
    is greater due to a lack of redundant pilot skills in most instances. The purpose of this study was to appraise the adequacy of medical standards in minimizing the risk of sudden incapacitation.”

    For full text go to: apps.dtic.mil/dtic/tr/fulltext/u2/a187044.pdf

LEAVE A REPLY