N68043

On May 21,1998, at 1305 hours Pacific daylight time, Continental Airlines Flight 75, a McDonnell Douglas DC-10-10, N68043, experienced an upset while climbing through FL290. The airplane was not damaged. Three flight attendants and one passenger sustained serious injuries and there were 5 minor injuries to passengers. There were 285 passengers, 10 flight attendants, and 3 cockpit crew onboard. The aircraft was operated by Continental Airlines, Inc., under 14 CFR Part 121 of the Federal Aviation Regulations as a scheduled domestic passenger flight, which originated at 1234 from Los Angeles, California, en-route to Honolulu, Hawaii.

According to the captain's written statement, he was the flying pilot on this leg of the flight. The aircraft was climbing in smooth air about 500 feet per minute with the No. 1 autopilot engaged. The captain reported that the aircraft began a sudden and hard uncommanded 2g pull-up, with the control yoke moving rapidly aft. He stated that he immediately grabbed the control yoke, disengaged the autopilot, and leveled the aircraft. The captain reported that during this process the aircraft gained 1,200 feet in altitude and lost 30 knots of airspeed before he was able to disconnect the autopilot and regain control.

Statements from the cabin crew were reviewed and one passenger was interviewed by telephone. The three flight attendants that sustained serious injuries were in the aft galley preparing for the initial beverage and meal service. The seriously injured passenger was in the aft lavatory near door 4R at the time of the upset. Minor injuries were sustained by the passengers in the following seats: 45K, 44G, 44H, 17E and 29A.

The statements from the three flight attendants in the aft galley were consistent in describing the onset of the event as "being pulled to the floor by what felt like a strong pull of gravity." The force suddenly reversed and the three described being "thrown up into the ceiling." One of the flight attendants said that after his head hit the ceiling, the force continued until his entire back was against the overhead and he was looking down at the floor. Another force reversal followed and the three were "slammed down against the floor." The flight attendants said that a "roller coaster" type movement then occurred, which quickly damped into a steady state.

The passenger who was in the aft lavatory stated in a telephone interview that he was repeatedly bounced off the ceiling and floor during the event.

Two doctors and four paramedics who were traveling as passengers immediately went to the assistance of the injured personnel in the aft galley area.

Following recovery of the aircraft to a steady state condition, a flight attendant from the first class section went aft to assess the situation in the rear cabin. Moving aft past door 3L, he observed the doctors assisting the injured and glimpsed the aft galley area. He described the area as "torn apart," with overturned meal carts, food trays, drink cans, and other debris "everywhere." He reported that a passenger was lying half in and half out of the 4R lavatory door and went to that person's assistance. Following that, he proceeded to the cockpit to brief the captain on the situation.

Following recovery from the upset and the briefing from the cabin crew, the captain decided to return to Los Angeles. ATC was advised of the problem, and a clearance received for the return. During the flight back to Los Angeles fuel was dumped to achieve landing weight restrictions and an uneventful landing was made at 1355. Medical personnel met the flight as it arrived at the gate and the injured were taken to a local hospital.

PERSONNEL INFORMATION

The captain holds an airline transport pilot certificate with a type rating in the DC-10. According to records supplied by Continental Airlines, his total flight time was 17,000 hours, with 9,000 in the DC-10, 6,000 of which were accrued as pilot-in-command. His most recent simulator proficiency check was completed on April 5, 1998.

The first officer holds an airline transport pilot certificate with an airplane multiengine land rating. According to records supplied by Continental Airlines, his total flight time was 5,000 hours, with 364 in the DC-10. His most recent simulator proficiency check was completed on May 8, 1997.

AIRCRAFT INFORMATION

The aircraft, a McDonnell Douglas DC-10-10, serial number 46902, was manufactured in 1972, and the airframe had accrued a total time in service of 84,423 hours and 29,977 cycles.

A review of the aircraft's maintenance records for the year preceding the accident revealed that the autopilot system had been written up as a discrepant system over 50 times for uncommanded disconnects, uncommanded pitch-ups, and failures to engage. One item in the discrepancy log dated 12 November 1992 states "A/C [aircraft] has a long history of pitch oscillations, both autopilots." A complete list of the preceding year's discrepancies related to the autopilot are appended to this report.

The maintenance records disclosed that the first officer's control wheel sensor unit had accrued 29,402 hours since new and installation in the aircraft.

Further investigation revealed that this aircraft was involved in a similar accident on November 7, 1986, when it experienced an uncommanded pitch excursion in cruise flight with the No. 1 autopilot engaged. In the accident, one flight attendant sustained a fractured ankle. The Safety Board determined that the probable cause of that accident was the erratic electrical signal output from the first officer's control wheel sensor.

McDonnell Douglas issued Service Bulletin 22-115 on April 14, 1987, which was applicable to DC-10 series 10, 15, 30, and 40 aircraft and with an affectivity that included this aircraft. The service bulletin noted that the reason for issuance was that, "Six operators have reported seven instances of abrupt pitch and/or roll motion with the aircraft in autopilot cruise flight mode." The bulletin further attributed the condition to "an intermittent open circuit in the autopilot control wheel steering sensor strain gage network resulting in an erroneous input to the autopilot." The details of the bulletin called for the modification of the pitch and roll computers so that they would automatically disengage the autopilot when an electrical signal greater than +/-3.5 volts was detected from the control wheel sensor unit. Review of the records and comparison of the pitch computer part number disclosed compliance with Service Bulletin 22-115.

FLIGHT RECORDER INFORMATION

The aircraft was equipped with a Sundstrand Digital Flight Data Recorder (DFDR), serial number 8597, which was removed from the aircraft and sent to the Safety Board's Vehicle Recorders Laboratory for readout and evaluation. A complete report of the DFDR readout is appended to this report.

Review of the data revealed that as the aircraft passed through 29,200 feet, four pitch cycles were recorded between sub frame reference numbers (elapsed seconds) 1905 and 1915, and were accompanied by vertical, longitudinal, and lateral accelerations. The first pitch cycle generated vertical accelerations between 1.84 and -0.12 g's. The initial uncommanded nose pitch-up was preceded by a left inboard elevator (controlled by the autopilot) movement from -1.88 degrees to +2.79 degrees from 1904 to 1905 and resulted in a nose pitch change from 2.24 degrees to 4.02 degrees. During this time, the right outboard elevator remained constant at -1.48 degrees. The first nose down pitch change consisted of about 4 degrees, and occurred in just over 1 second with the movement of the right outboard elevator to -6.43 degrees. The second cycle's vertical accelerations were between 1.62 and 0.37 g's, again accompanied by movement of the right outboard elevator between -6.43 and +1.97 degrees. The remaining two cycles varied between 1.21 and 0.80 g's, with corresponding movements of the right outboard elevator, before the aircraft returned to a steady state condition.

During the event, a 3-knot airspeed loss and a 242-foot altitude gain were recorded.

TESTS AND RESEARCH

Following the aircraft's return to Los Angeles it was taken out of service for detailed examination of the autopilot system.

All wiring related to the No. 1 autopilot was checked and found serviceable. Bite checks of the related autopilot computers were satisfactory. The cannon plugs on the left inboard and right outboard elevator actuators/transducers were changed due to corrosion.

Postaccident test of the control wheel sensor units revealed that the first officers showed an out of tolerance and drifting null signal. The control wheel sensor units were then removed from both the captain's and first officer's control wheels for further testing. Spares from stock were used as replacements for the removed sensor units. The units removed from the aircraft were taken to the manufacturer's facility in Leonia, New Jersey, for detailed diagnostic tests.

The following components were then removed for further testing and were replaced with serviceable units from spares stock: pitch computer, air data computer, autopilot control panel, and the power control units for both the left inboard and right outboard elevators. These components bench tested satisfactorily. At the conclusion of ground diagnostic checks of the autopilot and the elevator control rigging, the aircraft was test flown. During the test flight, the No. 1 autopilot would not engage under certain circumstances. The aircraft was returned to Los Angeles and further diagnostic tests revealed a failed control wheel sensor unit in the first officer's wheel. This second unit was replaced with another from stores and the test flight was repeated, with satisfactory results. The aircraft was then returned to service.

The control wheel sensor unit used strain gages to provide electrica...