See how an aircraft flight control computer processes inputs, commands control surfaces, manages failures and differs from autopilot and the FMS.
A flight control computer is an onboard computer that turns pilot, autopilot and sensor inputs into commands for an aircraft’s control surfaces or related actuators. Depending on the design, it also stabilises the aircraft, applies control laws, monitors faults and works with redundant computers so control remains available after many single failures.
In Aviation & Real-World Flying, the key distinction is that flight control computer describes a function rather than one universal piece of equipment. An aircraft may have several computers or processing channels, and manufacturers use different names for them.
How does a flight control computer work?
It repeatedly compares the demanded aircraft motion with measured aircraft and control-surface response, then adjusts actuator commands through a closed control loop.
- Receive the demand: Sensors in a yoke, control column, sidestick or pedals convert pilot movement into electrical signals. The autopilot can provide commands through the same flight-control architecture.
- Read aircraft data: The computer receives airspeed, altitude, attitude, angular rates, acceleration, angle of attack, configuration and control-surface position as required by that aircraft.
- Validate the inputs: It compares sensors and other processing channels, rejecting or flagging information that is missing or disagrees beyond permitted limits.
- Apply the control law: Software calculates the required response. Depending on the aircraft and operating mode, the pilot may be commanding a surface position, pitch or roll rate, normal acceleration or another controlled response.
- Command the actuators: Electrical outputs go to actuator-control electronics, hydraulic servos or electric actuators that move the elevator, ailerons, rudder, spoilers, stabiliser or other applicable surfaces.
- Check the result: Position and motion feedback tells the computer whether the command was achieved, allowing it to correct errors or detect a fault.
The computer does not usually supply the physical force that moves a large control surface; the actuator and its hydraulic or electrical power system do that. Our explanation of the complete fly-by-wire command and feedback path covers this relationship in more detail.
Beyond basic pitch, roll and yaw control, an aircraft’s computers may coordinate several surfaces, schedule control sensitivity with airspeed, provide yaw damping, command automatic trim or limit certain unsafe demands. These functions are type-specific. Not every fly-by-wire aircraft provides the same envelope protections, and degraded modes may remove some of them.
A named software function is not necessarily a separate computer. For example, the relationship between MCAS logic, sensor data and stabiliser trim shows how a function hosted within flight-control computers can issue a control command.
Is a flight control computer the same as the autopilot or FMS?
No. These systems exchange information, but their main jobs are different; some aircraft integrate several jobs into the same processing unit, so the boundaries are not always visible from the cockpit.
| System | Main job | Relationship to aircraft control |
|---|---|---|
| Flight control computer | Calculates and commands control-surface or actuator responses | Forms part of the control loop between demands, sensors and actuators |
| Autopilot or flight-guidance system | Determines the commands needed to hold or capture a selected path | Sends pitch, roll or related demands into the flight-control system |
| Flight management system | Manages the flight plan, navigation and performance calculations | Supplies guidance targets rather than normally driving surfaces directly |
| FADEC | Controls engine operation and protects engine limits | Responds to thrust demands but does not normally control aerodynamic surfaces |
For example, an autopilot may request a bank to intercept a localiser, while the flight control computer determines which surfaces to move and by how much. See how autopilot guidance reaches the aircraft controls for the full sequence.
The shorter term flight computer is less precise and can refer to navigation, guidance, performance or control equipment. We explain how the broader term flight computer is used in aviation separately.
Does every aircraft use a flight control computer?
No; its authority depends on whether the aircraft has mechanical, hydro-mechanical or fly-by-wire controls.
- Conventional controls: Cables, rods or hydraulic linkages may connect the cockpit controls to the surfaces. Computers can still operate the autopilot, yaw damper, stability augmentation or trim without being the primary manual-control path.
- Fly-by-wire controls: Pilot inputs are measured electrically and processed before actuators move the surfaces. Multiple flight control computers or channels are therefore essential to normal control.
- Hybrid systems: Some axes or functions are computer-controlled while others retain mechanical connections. A mechanical backup may provide only limited control rather than full normal handling.
Aircraft architecture matters more than the label printed on a component. A comparison of fly-by-wire, cable and hydraulic control systems shows where the computer sits in each arrangement.
What happens if a flight control computer fails?
A detected fault normally causes the affected computer or channel to be isolated while another channel continues control, sometimes with reduced functions or a different control law.
- Computer or processing-channel fault: The remaining channels take over or continue operating, and the crew receives a caution or status indication.
- Sensor disagreement: The system may reject the suspect source, compare independent sources or revert to a mode that relies on fewer calculated protections.
- Actuator or position mismatch: The relevant actuator or surface may be disabled, with the remaining surfaces compensating where the design permits.
- Power or data-bus loss: Equipment on independent electrical supplies and communication paths may preserve control, though some functions can be lost.
Redundancy is more than installing two identical boxes. Certified designs may separate power supplies, sensors, wiring routes, processors and actuator channels so that one failure cannot remove every control path. The exact voting logic and reversion sequence are aircraft-specific.
Most aircraft can tolerate the loss of one flight-control computer because that failure is anticipated by the architecture. A conventionally controlled aircraft may retain direct manual control after losing augmentation, while a fly-by-wire aircraft depends on its remaining computers and electrical or hydraulic power. A total loss of all required control channels is a far more serious condition and cannot be treated as equivalent to a single-computer failure.
After a failure, handling may change even when the aircraft remains controllable. Control sensitivity, automatic trim, spoiler availability or envelope protection can differ in a degraded law, so pilots follow the aircraft’s published cockpit indications and checklist rather than improvising a computer or circuit-breaker reset.