Dangerous Interface: John Denvers Aircraft

1
Dangerous Interface John Denvers Aircraft

• Katja A. Rodgers
• Embry-Riddle Aeronautical University

2
John Denvers Aircraft
Background On October 12, 1997, singer John
Denver died when his experimental aircraft
crashed. Investigators concluded that, in
addition to pilot carelessness, poor visual and
manual interfaces contributed to the crash.
3
Description of Dangerous Interfaces
mirror
fuel gauges
fuel tank switch
rudder controls

• un-calibrated fuel gauges were behind pilot
• gauges had to be read in reverse with a mirror
• fuel tank switch was behind pilots left
  shoulder
• - switch must be turned to the right to activate
  left tank

4
Consequences of switching fuel tanks

• Pilot must
• take eyes off horizon
• take right hand off controls
• twist body to left
• brace body with right foot
• (may press down on rudder control)
• switch fuel tank with right hand
• Possible Result
• select wrong tank (unintuitive
• design and mirror image)
• plane dives from rudder pressure
• engine stops from empty tank
• loss of control and crash

5
Summary

• Conflict in design and construction
• Aircraft builder changed design of front panel
  controls for fire safety reasons (fuel indicators
  and valves were placed behind firewall in back of
  pilot)
• Lack of concern for user testing
• New design not tested with inexperienced pilots.
• Lack concern for historical problems
• Several pilots had experienced similar problems
• Poor interfaces were a major cause of the crash