Control system for a gas turbine engine

Systems and methods for shutting down a gas turbine engine in response to a severe mechanical failure include determining a rate of change of one or more process conditions. If the rate of change of the one or more process conditions exceeds a respective predetermined failure threshold, a potential severe mechanical failure of the gas turbine engine may be determined. Steps may be taken to confirm the potential severe mechanical failure of the gas turbine engine. In response, an engine restart is prevented.

FIELD OF THE INVENTION

The present subject matter relates generally to a control system for a gas turbine engine.

BACKGROUND OF THE INVENTION

A gas turbine engine generally includes a fan and a core arranged in flow communication with one another. Additionally, the core of the gas turbine engine generally includes, in serial flow order, a compressor section, a combustion section, a turbine section, and an exhaust section. In operation, air is provided from the fan to an inlet of the compressor section where one or more axial compressors progressively compress the air until it reaches the combustion section. Fuel is mixed with the compressed air and burned within the combustion section to provide combustion gases. The combustion gases are routed from the combustion section to the turbine section. The flow of combustion gasses through the turbine section drives the turbine section and is then routed through the exhaust section, e.g., to atmosphere.

The fan includes a plurality of fan blades rotatable by the core. During extreme events, sometimes referred to as a “fan blade out event”, a fan blade of the plurality fan blades may detach during operation causing a severe mechanical failure of the gas turbine engine. Subsequent to such an event, the gas turbine engine is inoperable. However, upon detection of a flame within the combustion section having extinguished, current control systems for gas turbine engines typically attempt to relight or reignite. Such may create a hazard.

Hardware fixes to the above issue can be complicated and prohibitively expensive. Accordingly, a system or method for preventing the control system of a gas turbine engine from attempting to relight or reignite following a severe mechanical failure of the gas turbine engine would be useful. More specifically, such a system or method addressing the above issue without adding significantly to a cost or weight of the gas turbine engine would be particularly beneficial.

BRIEF DESCRIPTION OF THE INVENTION

In one exemplary aspect of the present disclosure, a method for preventing a gas turbine engine restart in response to a severe mechanical failure is provided. The method includes determining if a first process condition, or a rate of change of a first process condition, exceeds a first failure threshold, the first failure threshold indicative of a severe mechanical failure of the gas turbine engine. The method also includes determining a potential severe mechanical failure of the gas turbine engine based at least in part on the determined process condition, or determined rate of change of the first process condition, exceeding the first failure threshold. The method also includes confirming the potential severe mechanical failure of the gas turbine engine by determining an accommodation time period following the determined potential severe mechanical failure has not elapsed. The method also includes preventing an engine restart.

In another exemplary aspect of the present disclosure, a method for preventing a gas turbine engine restart in response to a severe mechanical failure is provided. The method includes determining a rate of change of a first process condition, a rate of change of a second process condition, and a third process condition. The method also includes determining a potential severe mechanical failure of the gas turbine engine based on at least two of the following: the rate of change of the first process condition exceeding a first failure threshold; the rate of change of the second process condition exceeding a second failure threshold; or the third process condition, or the rate of change of the third process condition, exceeding a third failure threshold. The method also includes preventing an engine restart.

In an exemplary embodiment of the present disclosure, a control system for preventing a gas turbine engine restart in response to a severe mechanical failure is provided. The system includes one or more processors and one or more memory devices included with the gas turbine engine, the one or more memory devices storing instructions that when executed by the one or more processors cause the one or more processors to perform operations. The operations include determining a rate of change of a first process condition exceeds a first failure threshold, the first failure threshold indicative of a severe mechanical failure of the gas turbine engine. The operations also include determining a potential severe mechanical failure of the gas turbine engine based at least in part on the determined rate of change of the first process condition exceeding the first failure threshold. The operations also include confirming the potential severe mechanical failure of the gas turbine engine by determining an accommodation time period following the determined potential severe mechanical failure has not elapsed. The operations also include preventing an engine restart.

DETAILED DESCRIPTION OF THE INVENTION

The present application is directed generally to systems and methods for shutting down a gas turbine engine in response to a severe mechanical failure of the gas turbine engine. For example, particular aspects of the present disclosure are directed to systems and methods for shutting down the gas turbine engine in response to a fan blade out event. Prior gas turbine engines may attempt to relight or ignite during or subsequent to a fan blade out event, which may result in a fire hazard.

The present application reviews certain process conditions, and more particularly, rates of change of certain process conditions, to determine a potential severe mechanical failure of the gas turbine engine. In response to determining a potential severe mechanical failure of the gas turbine engine, the present application initiates one or more steps for confirming the severe mechanical failure of the gas turbine engine. Once the severe mechanical failure of the gas turbine engine is confirmed, systems and methods in accordance with the present disclosure prevent an engine restart to prevent the engine from attempting to relight or reignite. A control system for a gas turbine engine incorporating such an exemplary method or system has the technical effect of providing for a more safe gas turbine engine with a reduced risk of fire hazard following a fan blade out event, or other severe mechanical failure, without increasing a cost or weight of the gas turbine engine.

Referring now to the drawings, wherein identical numerals indicate the same elements throughout the figures,FIG. 1is a schematic cross-sectional view of a gas turbine engine in accordance with an exemplary embodiment of the present disclosure. More particularly, for the embodiment ofFIG. 1, the gas turbine engine is a high-bypass turbofan jet engine10, referred to herein as “turbofan engine10.” As shown inFIG. 1, the turbofan engine10defines an axial direction A (extending parallel to a longitudinal axis12provided for reference), a radial direction R, and a circumferential direction C (i.e., a direction extending about the axial direction A; not depicted). In general, the turbofan10includes a fan section14and a core turbine engine16disposed downstream from the fan section14.

For the embodiment depicted, the fan section14includes a variable pitch fan38having a plurality of fan blades40coupled to a disk42in a spaced apart manner. As depicted, the fan blades40extend outwardly from disk42generally along the radial direction R. Each fan blade40is rotatable relative to the disk42about a pitch axis P by virtue of the fan blades40being operatively coupled to a suitable actuation member44configured to collectively vary the pitch of the fan blades40in unison. The fan blades40, disk42, and actuation member44are together rotatable about the longitudinal axis12by LP shaft36across a power gear box46. The power gear box46includes a plurality of gears for stepping down the rotational speed of the LP shaft36to a more efficient rotational fan speed.

Moreover, a number of sensors80can also be included in the turbofan engine10and such sensors80can output any number of usable signals regarding the operation of the turbofan engine10and its various systems and components. For example, the sensors80can include a variety of sensors80for determining a rotational speed N1of the low pressure shaft or spool36, a rotational speed N2of the high pressure shaft or spool34, a compressor pressure such as a compressor discharge pressure P3(i.e., a pressure of the compressed air provided at an outlet of the HP compressor24to the combustion section26), etc.

Additionally, the turbofan engine10depicted includes a controller82for controlling certain aspects of the turbofan engine10. In some embodiments, the controller82can include one or more computing device(s), such as the one or more of a computing device100described below with reference toFIG. 2. The controller82can utilize inputs from the sensors80to monitor the turbofan engine10, and further may receive inputs from one or more operators of an aircraft with which the turbofan engine10is installed. The controller82can be connected with other controllers of the turbofan engine10, of other gas turbine engines, and/or of an aircraft with which the turbofan engine10is installed.

Referring now toFIG. 2, a block diagram of an example computing system is depicted that can be incorporated into the exemplary controller82ofFIG. 1, and further may be configured to implement the control systems described below with reference toFIGS. 3 through 6, or other systems of a gas turbine engine according to other exemplary embodiments of the present disclosure. As shown, the exemplary control system100includes one or more computing device(s)102. The one or more computing device(s)102include one or more processor(s)104and one or more memory device(s)106. The one or more processor(s)104may include any suitable processing device, such as a microprocessor, microcontroller, integrated circuit, logic device, or other suitable processing device. The one or more memory device(s)106may include one or more computer-readable media, including, but not limited to, non-transitory computer-readable media, RAM, ROM, hard drives, flash drives, or other memory devices.

The one or more memory device(s)106can store information accessible by the one or more processor(s)104, including computer-readable instructions108that can be executed by the one or more processor(s)104. The instructions108can be any set of instructions that when executed by the one or more processor(s)104, cause the one or more processor(s)104to perform operations. The instructions108can be software written in any suitable programming language or can be implemented in hardware. In some embodiments, the instructions108can be executed by the one or more processor(s)104to cause the one or more processor(s)104to perform operations, such as the operations described herein.

The memory device(s)106can further store data110that can be accessed by the processors104. For example, the data110can include operational schedules, operational thresholds, operational limits, etc. Further, the data110can include one or more table(s), function(s), algorithm(s), model(s), equation(s), etc. for determining events of the gas turbine engine as described below.

The one or more computing device(s)102can also include a communication interface112used to communicate, for example, with the other components of system. The communication interface112can include components for communicating with a user, such as an output device for outputting display, audio, and/or tactile information to the user. The communication interface112can include any suitable components for interfacing with one or more network(s), including for example, transmitters, receivers, ports, controllers, antennas, or other suitable components.

Referring now toFIG. 3, a control scheme200is depicted implementable by a controller of a gas turbine engine according to example embodiments of the present disclosure. In at least certain exemplary embodiments, the exemplary control scheme200ofFIG. 3may be implemented in the controller of the turbofan engine10described above with reference toFIG. 1. However, in other embodiments, the exemplary control scheme200ofFIG. 3may additionally or alternatively be implemented by a controller of any other suitable gas turbine engine (such as, for example, a turboshaft engine, a turbojet engine, a turboprop engine, an aeroderivative gas turbine engine, etc.), or alternatively still, by any other suitable controller, such as a controller of an aircraft or other vehicle with which the gas turbine engine is installed.

Although not depicted, the control scheme200may generally receive information regarding a first process condition, a second process condition and a third process condition. For example, the control scheme200may receive information from one or more sensors80for determining the process conditions. Specifically, for the embodiment depicted, the first process condition is a low pressure spool rotational speed (“LP spool speed N1”), the second process condition is a high pressure spool rotational speed (“HP spool speed N2”), and the third process condition is a compressor discharge pressure P3. Notably, the first, second, and third process conditions may each be corrected process conditions, i.e., process conditions corrected to a standard temperature and pressure, such as a standard day temperature at sea level.

From this information, a rate of change {dot over (N)}1of the LP spool speed N1is determined at202, a rate of change {dot over (N)}2of the HP spool speed N2is determined at204, and a rate of change {dot over (P)}3of the compressor discharge pressure P3is determined at206. At208, one or more the rates of change {dot over (N)}1, {dot over (N)}2, and {dot over (P)}3of the LP spool speed N1, the HP spool speed N2, and the compressor discharge pressure P3are reviewed to determine a potential severe mechanical failure of the gas turbine engine. The one or more the rates of change {dot over (N)}1, {dot over (N)}2, and {dot over (P)}3may each be corrected to standard temperatures and pressures.

The rates of change {dot over (N)}1, {dot over (N)}2, and {dot over (P)}3of the LP spool speed N1, HP spool speed N2, and compressor discharge pressure P3may be determined based on a relatively short timeframe. In certain exemplary embodiments, these rates of change may be based on a timeframe of less than 100 milliseconds (“ms”), such as less than about 75 ms. However, the rates of change may also be based on more than two consecutive data points. For example, in certain exemplary aspects, the rate of change may be based on at least three data points, at least four data points, or any other suitable number data points. Such may ensure that any noise in the communications network, including the sensors80, does not trigger a false positive. Additionally, in certain embodiments, the severe mechanical failure of the gas turbine engine may be a fan blade out event. However, in other embodiments, the severe mechanical event may be a shaft sheer event, such as a shearing of an LP shaft or a shearing of an HP shaft.

Determining at208a potential severe mechanical failure of the gas turbine engine includes, for the aspect depicted, determining at least one of the rate of change {dot over (N)}1of the LP spool speed N1exceeds a first failure threshold at210, determining the rate of change {dot over (N)}2of the HP spool speed N2exceeds a second failure threshold at212, or determining both the rate of change {dot over (P)}3of the compressor discharge pressure exceeds a third failure threshold and a present value of the compressor discharge pressure P3is below a minimum pressure threshold at214. Each of the first failure threshold, second failure threshold, and third failure threshold are indicative of a severe mechanical failure of the gas turbine engine. Additionally, the minimum pressure threshold may be a sub-idle pressure to ensure the rate of change {dot over (P)}3of the compressor discharge pressure exceeding the third failure threshold was not a result of a compressor stall without accompanying mechanical damage.

For example, referring briefly toFIG. 4, a chart300is provided depicting the second failure threshold. More specifically, the chart depicts a rate of change {dot over (N)}2of the HP spool speed N2on the Y-axis (in %/second) and a range of HP spool speed N2(in percentage of a maximum HP spool speed N2) on the X-axis. The chart300depicts a reference line302, which indicates the quickest slowdown of an exemplary gas turbine engine during operating conditions outside of a severe mechanical failure. Notably, the chart300may be specific to a particular gas turbine engine. The reference line302may be determined through, e.g. testing of the particular gas turbine engine, modeling for the particular gas turbine engine, etc. The chart300additionally includes the second failure threshold304. For the embodiment depicted, the second failure threshold304is separated from the reference line302by a margin306. The margin306may be a fixed margin (e.g., a 20% difference from the reference line302), or may be a variable margin determined in any other suitable manner. The margin306may reduce a chance of determining a false positive.

Moreover, for exemplary purposes, the chart300depicts via exemplary line308a sample fast shutdown of the gas turbine engine, outside of a severe mechanical failure. As shown, the exemplary line308does not exceed the reference line302, and therefore necessarily does not exceed the second failure threshold304. By contrast, the chart300additionally depicts via exemplary line310a sample shutdown profile during a fan blade out event. As shown, during the fan blade out event, the rate of change of the second process condition exceeds the second failure threshold.

Although not depicted, the first failure threshold and third failure threshold may each define charts similar to the exemplary chart300depicted inFIG. 4for the second failure threshold.

It should be appreciated, however, that although for the embodiment depicted the control scheme200utilizes the rates of change {dot over (N)}1, {dot over (N)}2, and {dot over (P)}3of the LP spool speed N1, HP spool speed N2, and compressor discharge pressure P3to determine the potential severe mechanical failure at208, in other embodiments, the control scheme may additionally or alternatively use one or more other process conditions. For example, in certain embodiments, the control scheme may additionally or alternatively determine a vibration of one or more components of the gas turbine engine (i.e., “component vibration”). Such may be determined through one or more sensors80of the gas turbine engine. For example, the control scheme may determine a vibration of the LP shaft, of the HP shaft, of the fan, etc. Such a control scheme200may determine a potential severe mechanical failure at least in part based on the determined component vibration exceeding a predetermined threshold. For example, the control scheme200may determine a potential severe mechanical failure of the gas turbine engine based on the determined component vibration exceeding a predetermined threshold, in addition to one or more of step210, step212, or step214additionally indicating a potential severe mechanical failure of the gas turbine engine.

Referring now back to the exemplary control scheme200depicted inFIG. 3, after determining a potential severe mechanical failure at208, the control scheme includes confirming the potential severe mechanical failure at216. For the exemplary control scheme200depicted, confirming the potential severe mechanical failure at216includes at218determining whether or not at least two of the three process conditions sensed indicate a potential severe mechanical failure. Specifically, the exemplary control scheme200includes at218determining whether or not at least two of step210, step212, and step214indicate a potential severe mechanical failure of the gas turbine engine. Notably, although for the exemplary aspect depicted inFIG. 3, this confirmation step is separate from the initial step of determining a potential severe mechanical failure at208, in other exemplary aspects, this aspect of the confirmation step may be incorporated within the initial determination of a potential severe mechanical failure of the gas turbine engine (seeFIG. 6, discussed below).

In addition, for the embodiment depicted, confirming the potential severe mechanical failure at216includes at220determining whether or not a predetermined accommodation time period following the determined potential severe mechanical failure (at208) has elapsed and, if it has not, determining at222if the engine is operating below idle conditions (i.e., sub-idle conditions as may be determined, e.g., by one or more of the spool speeds) and within a susceptibility window. In certain embodiments, such as the embodiment depicted, the susceptibility window may refer to the gas turbine engine operating below a predetermined fire threat flight altitude. More specifically, confirming the potential severe mechanical failure at216includes at220and222ensuring the engine reaches sub-idle conditions within the accommodation time period, indicating that there in fact was a severe mechanical damage causing the engine to reach sub-idle conditions in a short period of time (i.e., more quickly than during a normal shutdown procedure), and further ensuring that the gas turbine engine is below an altitude threshold above which a threat of fire is no longer an issue (e.g., due to a lack of oxygen at such an altitude). In certain exemplary aspects, the accommodation time period may be, for example, twenty (20) seconds or less, such as ten (10) seconds or less.

Notably, if it is determined at222that the engine is not in sub-idle conditions, or that the gas turbine engine is operating above the predetermined fire threat flight altitude, the control scheme includes at224waiting for an amount of time allowed by the accommodation time period at220to see if such conditions are met. Further, as is also shown inFIG. 3, if it is determined that the accommodation time period has elapsed at220, or that only one of the determinations made at step210, step212, and step214indicate a potential severe mechanical failure of the gas turbine engine, the control scheme200includes at226taking no further action.

Moreover, the exemplary control scheme200depicted inFIG. 3includes at228preventing an engine restart after the potential severe mechanical failure determined at208is confirmed at216. In certain embodiments, preventing the engine restart at228may include one or more of closing one or more fuel metering valves of a fuel system of the gas turbine engine, closing a main fuel shutoff valve (such as a fuel high pressure shutoff valve), and disabling an ignition system of the gas turbine engine.

A control scheme200in accordance with the exemplary aspect described herein may allow for determining a severe mechanical failure of the gas turbine engine with relatively high confidence (e.g., in light of the confirmation steps216), and in response shutting down the gas turbine engine to quickly reduce a risk of fire damage resulting from the engine trying to relight during such an event. Although not depicted, the exemplary control scheme200may additionally include a manual override feature, such that the prevention of an engine restart may be reversed or prevented by, e.g., a pilot or operator of an aircraft incorporating the gas turbine engine having the exemplary control scheme200, in the unlikely event that a false positive is detected.

It should be appreciated, that the exemplary control scheme200depicted inFIG. 3is provided by way of example only. In other exemplary embodiments, the control scheme200may have any other suitable configuration. For example, although for the embodiment depicted, the determination made at218is in series with the determinations made at220and222, in other embodiments, the determination made at218may be in parallel with the determinations made at220and222. Additionally, in other embodiments, at least certain of the determinations made at222may be separated out into separate parallel or series determinations.

Referring now toFIG. 5, a flow diagram is provided of an exemplary method (400) for shutting down the gas turbine engine in response to a severe mechanical failure. The exemplary method (400) includes at (402) determining a first process condition of the gas turbine engine, determining a second process condition of the gas turbine engine, and determining a third process condition of the gas turbine engine. In certain exemplary aspects, determining the process conditions at (402) may include determining corrected process conditions, i.e., process conditions corrected for, e.g., temperature and pressure. Additionally, in certain exemplary aspects, the first process condition may be a low pressure spool speed, the second process condition may be a high pressure spool speed, and the third process condition may be a compressor pressure, such as a compressor discharge pressure.

Additionally, the exemplary method (400) includes at (404) determining a rate of change of the first process condition, determining a rate of change of the second process condition, and determining a rate of change of the third process condition. Again, the rates of change of the process conditions may be corrected for, e.g., temperature and pressure. Further, the exemplary method (400) includes at (406) determining a rate of change of at least one of the process conditions exceeds a respective failure threshold, each failure threshold indicative of a severe mechanical failure of the gas turbine engine. In response, the exemplary method (400) includes at (408) determining a potential severe mechanical failure of the gas turbine engine based at least in part on the determined rate of change of the at least one process condition exceeding a respective failure threshold.

For example, in certain exemplary aspects, the exemplary method (400) includes at (406) determining the rate of change of the first process condition exceeds a first failure threshold, and at (408) determining a potential severe mechanical failure of the gas turbine engine based at least in part on the determined rate of change of the first process condition exceeding the first failure threshold. Notably, the severe mechanical failure of the gas turbine engine may be a fan blade out event, a shaft sheer event, or any other severe mechanical failure of the gas turbine engine.

It should be appreciated, however, that in other aspects, at least one of the process conditions may be a component vibration (e.g., a vibration of an LP shaft, HP shaft, fan, etc.). With such an exemplary aspect, the exemplary method (400) may not include determining a rate of change of each of the process conditions at (404) or determining the potential severe mechanical failure at (408) based on the rate of change of the process condition exceeding the respective failure threshold. Instead, for example, the method (400) may include determining the component vibration exceeds a failure threshold, and determining the potential severe mechanical failure may be based on the determined component vibration exceeding the failure threshold.

Having determined the potential severe mechanical failure, the exemplary method (400) includes at (410) confirming the potential severe mechanical failure of the gas turbine engine. For the exemplary aspect depicted, confirming the potential severe mechanical failure at (410) includes at (412) determining that the rate of change of at least one additional process condition also exceeds a failure threshold. For example, when the exemplary method (400) includes at (406) determining the rate of change of the first process condition exceeds the first failure threshold, confirming the potential severe mechanical failure at (410) includes at (412) determining at least one of the rate of change of the second process condition exceeds a second failure threshold or the rate of change of the third process condition exceeds a third failure threshold. In certain exemplary aspects, the third process condition is a compressor pressure. For such an exemplary aspect, determining the rate of change of the third process condition exceeds the third failure threshold additionally includes determining a present value of the compressor pressure remains below a determined value. Such may ensure that a false positive is not triggered by, e.g., a compressor stall.

Moreover, for the exemplary aspect depicted, confirming the potential severe mechanical failure of the gas turbine engine at (410) includes at (414) determining an accommodation time period following the determined potential severe mechanical failure has not elapsed. More particularly, determining the accommodation time period has not elapsed at (414) includes determining at (416) the gas turbine engine is operating in sub-idle conditions within the accommodation time period. Such a confirmation may ensure the severe mechanical failure has actually occurred, as in the event of a severe mechanical failure the gas turbine engine will be operating in sub-idle conditions within a relatively short period of time. Additionally, waiting until the engine is operating in sub-idle conditions may assist with preventing a greater than necessary change in thrust output, as engines do not produce much thrust sub-idle. In certain exemplary aspects, the accommodation time period may be, for example, twenty (20) seconds or less, such as ten (10) seconds or less.

Further, for the exemplary embodiment depicted, confirming the potential severe mechanical failure of the gas turbine engine at (410) includes at (418) determining the gas turbine engine is operating within a susceptibility window. In certain exemplary aspects, determining the gas turbine engine is operating within the susceptibility window may include determining the gas turbine engine is operating below a predetermined fire threat flight altitude. For example, when the gas turbine engine is operating above such predetermined fire threat flight altitude, the air may be sufficiently thin to ensure a threat of fire is not a concern.

Referring still to the exemplary method (400) depicted inFIG. 5, the method (400) additionally includes at (420) preventing an engine restart. Preventing an engine restart at (420) includes, for the aspect depicted, at least one of closing one or more fuel metering valves of a fuel system of the gas turbine engine, closing a main fuel shutoff valve (such as a fuel high pressure shutoff valve), or disabling an ignition system of the gas turbine engine. Such may ensure the gas turbine engine does not attempt to relight in the event of a severe mechanical failure, which may otherwise result in a potential fire hazard.

Referring now toFIG. 6, a flow diagram is provided of an exemplary method (500) for shutting down a gas turbine engine in response to a severe mechanical failure. The exemplary method (500) may operate in substantially the same manner as exemplary method (400) described above with reference toFIG. 5. For example, the exemplary method (500) includes at (502) determining a first process condition of the gas turbine engine, determining a second process condition of the gas turbine engine, and determining at third process condition of the gas turbine engine. Additionally, the exemplary method (500) includes at (504) determining a rate of change of the first process condition, determining a rate of change of the second process condition, and determining a rate of change of the third process condition.

However, the exemplary method (500) essentially incorporates one of the confirmation steps of the exemplary method (400) as a precondition for determining a potential severe mechanical failure of the gas turbine engine. Specifically, the exemplary method (500) includes at (506) determining a potential severe mechanical failure of the gas turbine engine based on at least two of the following: the rate of change of the first process condition exceeding a first failure threshold; the rate of change of the second process condition exceeding a second failure threshold; or the third process condition, or the rate of change of the third process condition, exceeding a third failure threshold. Notably, when the potential severe mechanical failure is determined at least in part based on the rate of change of the third process condition (and wherein the third process condition is a compressor pressure), the method (500) may additionally include at (506) determining a present value of the compressor pressure is below a certain threshold is a precondition for determining the potential severe mechanical failure. Additionally, when the potential severe mechanical failure is determined at least in part based on the third process condition, the third process condition may be a component vibration.

After determining the potential severe mechanical failure at (506), the exemplary method (500) may operate in a similar manner as exemplary method (400). For example, as is depicted, the exemplary method (500) includes at (508) confirming the potential severe mechanical failure of the gas turbine engine and at (510) preventing an engine restart. In certain exemplary aspects, confirming the potential severe mechanical failure of the gas turbine engine at (508) may operate in a similar manner as (410) described above with reference toFIG. 5, and more particularly, as (414), (416), and (418). Additionally, preventing the engine restart at (510) may operate in a similar manner as (420) described above with reference toFIG. 5.