Abstract:Cockpit door is an important barrier to protect flight crew and flight safety. Since the tragic of German deliberate crash happened in 2015, how to balance between ensuring flight safety and preventing pilots from deliberately controlling aircraft has become the focus of civil aircraft cockpit door design. To deal with the top event of illegal control of an aircraft’s cockpit in a deliberate crash case, the fault tree model is constructed. The quantitative and qualitative analysis of the fault tree is carried out to find out the weakness to prevent an aircraft from encountering illegal control. And the corresponding suggestions and measures are put forward. To solve the serious logic defect of cockpit door control that pilots can not pass the locked door again after leaving the cockpit, the control priority of cockpit door is reallocated. The improved control flow and logic of cockpit door are proposed. After performing the reliability analysis of the new fault tree, the results show that the critical importance of pilots' abnormal event decreases significantly from 0.99 to 4.02*10-4, which had little impact on the illegal control of the aircraft. The incidence of the top accident also decreases to 5.02*10-11, and flight safety has been effectively improved.