CS 29.571 Fatigue Tolerance Evaluation of Metallic Structure

ED Decision 2012/022/R

(a) A fatigue tolerance evaluation of each Principal Structural Element (PSE) must be performed, and appropriate inspections and retirement time or approved equivalent means must be established to avoid Catastrophic Failure during the operational life of the rotorcraft.

(b) Reserved

(c) Reserved

(d) Each PSE must be identified. Structure to be considered must include the rotors, rotor drive systems between the engines and rotor hubs, controls, fuselage, fixed and movable control surfaces, engine and transmission mountings, landing gear, and their related primary attachments.

(e) Each fatigue tolerance evaluation must include:

(1) In-flight measurements to determine the fatigue loads or stresses for the PSEs identified in sub-paragraph (d) in all critical conditions throughout the range of design limitations required in CS 29.309 (including altitude effects), except that manoeuvring load factors need not exceed the maximum values expected in operations.

(2) The loading spectra as severe as those expected in operations based on loads or stresses determined under sub-paragraph (e)(1), including external load operations, if applicable, and other high frequency power-cycle operations.

(3) Take-off, landing, and taxi loads when evaluating the landing gear (including skis and floats) and other affected PSEs.

(4) For each PSE identified in sub-paragraph (d), a threat assessment, which includes a determination of the probable locations, types, and sizes of damage taking into account fatigue, environmental effects, intrinsic and discrete flaws, or accidental damage that may occur during manufacture or operation.

(5) A determination of the fatigue tolerance characteristics for the PSE with the damage identified in sub-paragraph (e)(4) that supports the inspection and retirement times, or other approved equivalent means.

(6) Analyses supported by test evidence and, if available, service experience.

(f) A residual strength determination is required that substantiates the maximum damage size assumed in the fatigue tolerance evaluation. In determining inspection intervals based on damage growth, the residual strength evaluation must show that the remaining structure, after damage growth, is able to withstand design limit loads without failure.

(g) The effect of damage on stiffness, dynamic behaviour, loads and functional performance must be considered.

(h) The inspection and retirement times or approved equivalent means established under this paragraph must be included in the Airworthiness Limitation Section of the Instructions for Continued Airworthiness required by CS 29.1529 and paragraph A29.4 of Appendix A.

(i) If inspections for any of the damage types identified in sub-paragraph (e)(4) cannot be established within the limitations of geometry, inspectability, or good design practice, then supplemental procedures, in conjunction with the PSE retirement time, must be established to minimize the risk of occurrence of these types of damage that could result in a catastrophic failure during the operational life of the rotorcraft.

[Amdt 29/3]

ROLLING CONTACT FATIGUE

This AMC supplements FAA AC 29-2C, § AC 29.571 and should be used in conjunction with that AC when demonstrating compliance with CS 29.571.

(a) Definitions

(1) Rolling contact fatigue (RCF): a form of fatigue that occurs due to the cyclic strains arising from the loading present during rolling contact between two parts of an assembly, e.g. a bearing race and a rolling element.

Note: For the purposes of this AMC, RCF also includes combinations of rolling and sliding contact phenomena.

(2) Integral race: a bearing race that is an integral part of the transmission structural component such as a gear or shaft.

(b) Explanation

Service experience has shown that RCF can initiate on the surface and below the surface in contact areas of structural elements (typically, but not limited to, bearing races and rolling elements and gear teeth) that, in some cases, can propagate to a failure with catastrophic results. It is often assumed that RCF leads first to non-critical partial failures such as micro-pitting and spalling that will be detected before more severe failure modes can develop, such as a complete crack through a part. However, experience has shown that, in some cases, critical failure modes can develop shortly after the occurrence of non-critical partial failures. In such cases, analyses and tests are necessary to demonstrate that sufficient time is available, and the performance of the detection system is adequate to ensure the timely detection to prevent a catastrophic failure.

The certification specifications in CS 29.571 require the identification and fatigue tolerance evaluation of principal structural elements (PSEs), leading to the establishment of inspection and retirement time or approved equivalent means to avoid a catastrophic failure during the operational life of the rotorcraft. In order to complete this evaluation, the impact of threats such as environmental effects, flaws and damages should be considered.

However, specific characteristics of parts submitted to RCF (e.g. bearings and gears), such as the difficulty to visually inspect the operating nature of these elements, which can lead to mechanical degradation and the impact of RCF, make the application of some of the methods challenging.

The procedures of this AMC are intended to help ensure that the effects of RCF are accounted for in the fatigue tolerance evaluations required by CS 29.571.

(c) Procedure

The fatigue tolerance evaluation of PSEs should include, when applicable, the effect of RCF considering:

              damage threats such as dents, scratches, corrosion, loss of pre-load in bearings or joints, surface and sub-surface material defects;

              residual stress coming from surface treatments and other manufacturing processes and all other applicable loading conditions.

For this purpose, steps should be taken to minimise the risk of crack initiation due to RCF on PSEs (and in particular for integrated bearing races), by minimising contact pressures, specifying high standards for surface finishes, ensuring good lubrication, guaranteeing cleanliness and maintaining lubricant quality regardless of the fatigue tolerance approach selected. The applicant should verify that the selected allowables are suitable to ensure the integrity of the affected components in the operating conditions (temperature, lubrication, cleanliness, etc.) applicable to their design. Experience has demonstrated that it can be beneficial for bearings to be designed so that the reliability of any integrated race subject to the fatigue tolerance evaluation is even higher than the less critical race of the bearing. In this way, degradation of the less critical race can lead to detection of the bearing failure before cracking initiates in the integrated race. The consequences of damage to the integrated race from the debris generated in such scenarios should be considered in the evaluation.

As it is difficult to totally preclude cracking initiated by RCF, a fail-safe approach is recommended wherever possible, such that cracking of the affected structural element(s) is detected prior to its residual strength capability falling below the required levels prescribed in CS 29.571(f). Should fatigue cracks initiate and develop into:

(1) Partial failure, such as spalling: the applicant should demonstrate that this condition will be detected at an early stage to avoid a catastrophic failure due to further fatigue failure, or loss of integrity of the affected part or any surrounding ones. Any assumptions regarding potential surface and sub-surface cracking considering possible damages or flaws, and whether a through crack may develop and its relationship with other forms of damage including spalling should be verified.

(2) Failure, such as through-cracking of a part together with any other associated damage in the system: the applicant should demonstrate that the remaining structure will withstand service loads and design limit loads without failure until the failure is detected and damaged components are repaired or replaced to avoid a catastrophic failure. Any assumptions regarding crack path development (i.e. bifurcation, multicracks, etc.) that could affect this fail-safe demonstration should be verified.

This demonstration should be performed as appropriate using experience from similar designs, functional tests, structural tests and/or reliable analyses to substantiate that the fail-safe design objective has been achieved, including residual strength demonstration. In addition, the continued safe operation of the affected mechanical system(s) should be ensured for this period considering the potential effect of the failure or partial failure taking into account any pre-existing fatigue damage accrued prior to the failure in the affected component and/or surrounding ones on stiffness, dynamic behaviour, loads and functional performance.

The effectiveness and reliability of means of crack detection for the fail-safe approach, including indirect means of detection such as chip detection systems, and associated instructions for continued airworthiness should be evaluated to show that, if implemented as required, they will result in timely detection and repair or replacement of damaged components. Furthermore, the instructions for continued airworthiness, prescribing the maintenance actions leading up to and following detection of potential failure or partial failure should be substantiated sufficiently to ensure timely repair or replacement of damaged components. The substantiation should consider aspects such as threshold criteria on indicators of means of detection for additional investigative actions and removal from service of the damaged parts, the overall clarity and practicality of the instructions for continued airworthiness and human factors aspects.

In addition to following a fail-safe approach, inspection and retirement times may be needed in order to ensure that the assumptions supporting the fail-safety and detection of failure remain valid throughout the operational life of the component.

[Amdt No: 29/11]

CS 29.573 Damage Tolerance and Fatigue Evaluation of Composite Rotorcraft Structures

ED Decision 2012/022/R

(a)  Composite rotorcraft structure must be evaluated under the damage tolerance requirements of sub-paragraph (d) unless the applicant establishes that a damage tolerance evaluation is impractical within the limits of geometry, inspectability, and good design practice. In such a case, the composite rotorcraft structure must undergo a fatigue evaluation in accordance with sub-paragraph (e)

(b) Reserved

(c) Reserved

(d) Damage Tolerance Evaluation:

(1) Damage tolerance evaluations of composite structures must show that Catastrophic Failure due to static and fatigue loads is avoided throughout the operational life or prescribed inspection intervals of the rotorcraft.

(2) The damage tolerance evaluation must include PSEs of the airframe, main and tail rotor drive systems, main and tail rotor blades and hubs, rotor controls, fixed and movable control surfaces, engine and transmission mountings, landing gear, and any other detail design points or parts whose failure or detachment could prevent continued safe flight and landing.

(3) Each damage tolerance evaluation must include:

(i) The identification of the structure being evaluated;

(ii) A determination of the structural loads or stresses for all critical conditions throughout the range of limits in CS 29.309 (including altitude effects), supported by in-flight and ground measurements, except that manoeuvring load factors need not exceed the maximum values expected in service;

(iii) The loading spectra as severe as those expected in service based on loads or stresses determined under sub-paragraph (d)(3)(ii), including external load operations, if applicable, and other operations including high torque events;

(iv) A Threat Assessment for all structure being evaluated that specifies the locations, types, and sizes of damage, considering fatigue, environmental effects, intrinsic and discrete flaws, and impact or other accidental damage (including the discrete source of the accidental damage) that may occur during manufacture or operation;

(v) An assessment of the residual strength and fatigue characteristics of all structure being evaluated that supports the replacement times and inspection intervals established under sub-paragraph (d)(4); and

(vi) allowances for the detrimental effects of material, fabrication techniques, and process variability.

(4) Replacement times, inspections, or other procedures must be established to require the repair or replacement of damaged parts to prevent Catastrophic Failure. These replacement times, inspections, or other procedures must be included in the Airworthiness Limitations Section of the Instructions for Continued Airworthiness required by CS 29.1529.

(i) Replacement times must be determined by tests, or by analysis supported by tests to show that throughout its life the structure is able to withstand the repeated loads of variable magnitude expected in-service. In establishing these replacement times, the following items must be considered:

(A) Damage identified in the Threat Assessment required by sub-paragraph (d)(3)(iv);

(B) Maximum acceptable manufacturing defects and in-service damage (i.e., those that do not lower the residual strength below ultimate design loads and those that can be repaired to restore ultimate strength); and

(C) Ultimate load strength capability after applying repeated loads.

(ii) Inspection intervals must be established to reveal any damage identified in the Threat Assessment required by sub-paragraph (d)(3)(iv) that may occur from fatigue or other in-service causes before such damage has grown to the extent that the component cannot sustain the required residual strength capability. In establishing these inspection intervals, the following items must be considered:

(A) The growth rate, including no-growth, of the damage under the repeated loads expected in-service determined by tests or analysis supported by tests; and

(B) The required residual strength for the assumed damage established after considering the damage type, inspection interval, detectability of damage, and the techniques adopted for damage detection. The minimum required residual strength is limit load.

(5) The effects of damage on stiffness, dynamic behaviour, loads and functional performance must be taken into account when substantiating the maximum assumed damage size and inspection interval.

(e) Fatigue Evaluation:

If an applicant establishes that the damage tolerance evaluation described in sub- paragraph (d) is impractical within the limits of geometry, inspectability, or good design practice, the applicant must do a fatigue evaluation of the particular composite rotorcraft structure and:

(1) Identify structure considered in the fatigue evaluation;

(2) Identify the types of damage considered in the fatigue evaluation;

(3) Establish supplemental procedures to minimise the risk of Catastrophic Failure associated with damage identified in sub-paragraph (e)(2); and

(4) Include these supplemental procedures in the Airworthiness Limitations section of the Instructions for Continued Airworthiness required by CS 29.1529.

[Amdt 29/3]