Engine control, indications and protection

A 747 engine is both a propulsion system and a source of power for other aircraft systems. Its fuel control must respond to a thrust request while keeping combustion, rotating machinery and airflow working together. That is a more demanding job than simply opening a fuel valve farther.

The 747 family spans several generations of engine control. This guide explains the common principles, then distinguishes the engine installations. A function described for the GEnx-2B must not be assumed to exist in exactly the same form on a JT9D, CF6, RB211 or PW4000.

Engine families through the generations

Aircraft family	Representative engine families
Original 747-100	Pratt & Whitney JT9D
747-200 and 747-300	JT9D, General Electric CF6 and Rolls-Royce RB211, depending on model and customer configuration
747-400	Pratt & Whitney PW4000, General Electric CF6-80C2 and Rolls-Royce RB211-524G/H
747-8	General Electric GEnx-2B

Boeing's classic 747 planning data and 747-400 planning manual distinguish configurations rather than assigning one thrust rating to every aircraft. GE's GEnx data sheet identifies the -2B application on the 747-8 and its FADEC III control.

Airflow comes before fuel scheduling

A turbofan divides the entering air between the core and the bypass stream. The core compressor raises pressure, combustion adds heat, and turbines extract power to drive the compressor and fan through shafts. The bypass stream passes around the core and contributes substantially to thrust.

The fuel control has to match fuel delivery to the engine's changing airflow. Adding fuel faster than the rotating machinery and compressor can accommodate can produce excessive temperature or unstable operation. Reducing fuel too far can extinguish combustion. Acceleration and deceleration therefore require controlled schedules, not an unrestricted connection between the cockpit lever and fuel flow.

The FAA Powerplant Handbook, chapter 2, explains turbine fuel scheduling, atomization and the effects of excessive or insufficient fuel relative to airflow. It is a general engineering reference; its example systems are not all 747 installations.

A thrust request passes through several layers

The pilot or autothrottle requests a change. Engine control interprets that demand using its inputs and operating logic. The fuel-metering hardware delivers the commanded flow, and the engine responds. Sensors then report the resulting speeds, temperatures, pressures and other parameters.

Original illustration: Boeing-747.com. Conceptual control and feedback path; not a wiring diagram or a protection schedule for a particular engine.

These stages explain why lever position, fuel flow and thrust are not interchangeable measurements. The same lever position can correspond to different engine conditions as altitude, temperature or operating mode changes. Nor does moving the lever mean the rotor instantly reaches the new speed: the engine has inertia and must accelerate through a controlled transition.

The autopilot and autothrottle guide describes the aircraft-level request. The engine controller manages the engine's response. Those are related functions with different responsibilities.

Hydromechanical control, EEC and FADEC

A hydromechanical fuel control uses mechanical and pressure-responsive elements to calculate and meter an appropriate fuel flow. It can account for engine conditions without a digital computer. Electronic supervisory systems added another layer of correction and control to some engine designs.

An electronic engine control, or EEC, is an electronic controller; the abbreviation alone does not establish the complete architecture. A full-authority digital engine control, or FADEC, has authority over the relevant engine-control functions rather than merely trimming a separately governing mechanical system. Fuel is still physically moved by pumps and metered by valves: "digital" describes the control, not the disappearance of fluid hardware.

The FAA handbook distinguishes these architectures and cautions that their arrangements differ. In particular, a genuine full-authority system should not be pictured as automatically reverting to an independent mechanical throttle cable if all electronic control is lost. Redundant channels, power supplies and fallback modes must be understood for the specific engine.

What the controller needs to know

Typical inputs include the thrust request, rotor speeds, air temperature and pressure, and engine operating conditions. The controller can use them to schedule fuel and other variable features fitted to that engine. Compressor airflow management, for example, helps keep different parts of the compressor operating compatibly as speed changes.

Redundancy can include alternative channels and inputs, but it is not a promise that every failed sensor leaves identical performance. A controller may use another valid input or a defined substitute, or it may lose a particular function. The resulting indication and available capability depend on the design and fault.

This is why an engine-control message, an engine mechanical failure and a loss of thrust are different observations. They can be related, but one label should not be substituted for diagnosis. The FAA turbine fuel-control chapter describes the relationship between sensed variables, electronic computation and metering hardware.

Reading the engine indications

Indication	What it describes	What it cannot prove alone
N1, N2 and, where applicable, N3	Speeds of different rotating assemblies	That every bearing, blade or shaft is undamaged
Exhaust gas temperature (EGT)	Temperature measured at defined locations in the exhaust/turbine region	The temperature of every component or the presence of every nacelle fire
Fuel flow	Rate of fuel delivered as measured by the installation	The amount remaining in the aircraft's tanks
Oil pressure, temperature and quantity	Different aspects of lubrication condition	That all three conditions are satisfactory from a single reading
Vibration	Measured vibration at the monitored locations	A unique diagnosis of the faulty component

The number of spools and the primary thrust-setting indication differ between engine families. N1 and engine pressure ratio are not universal substitutes for each other. The engine's approved indications and limits determine how a particular installation is monitored.

The FAA's turbofan familiarization guide explains why crews interpret combinations of indications. A high temperature, a changing rotor speed and abnormal vibration each add information; none is an all-purpose engine-health gauge.

Starting is a transition to self-sustaining operation

A starter first supplies rotational energy. Ignition and fuel must be introduced under the conditions required by the engine, and combustion must accelerate the machinery to a self-sustaining state. Starter power, airflow, fuel delivery and ignition are therefore separate dependencies.

A hot start involves an excessive temperature during starting. A start that fails to accelerate normally presents a different pattern. Automatic start monitoring and intervention vary by aircraft, engine and control mode, so this guide does not assign a universal automatic shutdown capability to every 747.

For the aircraft-side source of starter air, read pneumatic and bleed-air systems. A powered cockpit alone does not establish that sufficient pneumatic starting power is available.

Protections have defined boundaries

Fuel scheduling and protective logic help keep an engine within its intended operating envelope. They cannot prevent every external event or make damaged machinery safe. Bird ingestion, foreign-object damage, loss of lubrication and structural failures create different challenges from an excessive thrust demand.

An engine shutdown can also remove useful services. Depending on the installation, the engine drives electrical generation and a hydraulic pump and supplies bleed air. The aircraft's remaining systems must accommodate the loss. Four engines therefore offer more than four separate sources of thrust, but their support functions still have specific distribution paths and limitations.

A fire warning is another distinct signal. Nacelle fire detection monitors the surrounding protected zone; it is not simply a high-EGT alarm. See fire detection and suppression for the distinction between combustion inside the engine and a hazardous fire outside its normal combustion path.

What changed with the GEnx-2B?

The 747-8's GEnx-2B belongs to the same broader family as the 787's GEnx-1B, but it is a different installation. GE lists a smaller fan for the -2B. Boeing retained engine bleed-air capability to support the 747's systems architecture; the 787's arrangements must not be copied into a 747 explanation. See Boeing's 747-8 development paper.

Efficiency also needs a clear comparison basis. Engine specific fuel consumption, whole-aircraft trip fuel and fuel per passenger seat are different measures. A per-seat improvement cannot be attributed to the engine alone without accounting for seating, airframe and mission assumptions.

Watch the architecture, then identify the installation

GE's animated overview below introduces the GEnx family and its physical architecture. It provides useful context for the airflow and rotating assemblies, but is not a 747-8 cockpit procedure or a detailed FADEC lesson. Its promotional comparisons belong to the video's publication period and stated basis.

The archive photographs show other uses of the 747 platform: transporting a spare engine on an appropriately equipped aircraft, and serving as an engine testbed. A carried spare is cargo, not a fifth operating powerplant; do not infer that every 747 variant has the same ferry installation.

Continue with fuel storage and management, electrical power and hydraulic systems to follow the engine's connections to the rest of the aircraft.