Mechanical
Airbag Deployment: Chemistry That Inflates in 30 Milliseconds
Airbag deployment is the pyrotechnic sequence in which a crash sensor, a chemical gas generator, and a folded nylon bag combine to place a cushion between an occupant and the car's interior in about 30 milliseconds — faster than a human can blink. An accelerometer detects the sudden deceleration of a crash, an electrically fired igniter lights a solid propellant, and the gas released by that reaction unfurls the bag through the trim cover at up to 300 km/h.
What makes it remarkable is not just the speed but the restraint: the bag must inflate hard enough to beat the occupant to the steering wheel, then immediately deflate through vent holes so it behaves like a cushion instead of a trampoline. Get the timing wrong by a few milliseconds and the same device that saves a life can take one.
- Inflation time~20–30 ms folded to fully inflated
- Deploy thresholdBarrier crash > ~15–25 km/h; peak vehicle decel ~20–40 g
- Deployment speedFabric front reaches up to ~300 km/h (~190 mph)
- Azide reaction2 NaN₃ → 2 Na + 3 N₂; ~50–60 g azide → ~1.3 mol N₂ (~30 L cold), hot-filling a ~60 L driver bag
- Bag volumeDriver ~35–70 L, passenger ~120–150 L silicone-coated nylon 6,6
- Standard / sensorUS FMVSS 208; MEMS accelerometer (ADI ADXL50, ±50 g, 1991)
Interactive visualization
Press play, or step through manually. The visualization is yours to drive — try it before reading on.
Watch the 60-second explainer
A condensed visual walkthrough — narrated, captioned, under a minute.
The Supplemental Restraint System and the 30-Millisecond Clock
An airbag is not a stand-alone device but the visible part of a Supplemental Restraint System (SRS): crash sensors, an airbag control unit (ACU), pyrotechnic inflators, seatbelt pretensioners, and the folded bags themselves. The word supplemental is the whole design philosophy — the bag is engineered to work with the belt, never instead of it. The belt keeps the occupant coupled to the car's ride-down; the bag adds a soft, load-spreading interface for the head and chest at the very end of that ride-down.
The event unfolds on a merciless clock. Taking the moment of first contact as t = 0:
- 0–15 ms: accelerometers register the deceleration; the ACU runs its crash-discrimination algorithm and reaches a fire/no-fire decision, typically within ~10–15 ms for a hard frontal hit.
- ~15 ms: the electric igniter (squib) fires; the solid propellant lights and gas floods the bag.
- ~20–30 ms: the bag bursts through the trim seam and reaches full inflation.
- ~40–60 ms: the occupant, still moving forward relative to the decelerating car, sinks into the now-venting bag.
- ~80–100 ms: the bag is largely deflated and the event is over — all before a human blink (100–400 ms) finishes.
The governing design rule is often stated as the "five-inch, thirty-millisecond" requirement: the bag must be fully inflated before the unbelted-equivalent occupant moves roughly 127 mm forward relative to the vehicle, which for a severe crash happens within about 30 ms. Miss that window and the head arrives at a hard, half-inflated bag or the wheel itself.
Sensing the Crash: Accelerometers and the Fire Decision
The trigger is a deceleration measurement, not an impact switch. Modern cars use MEMS accelerometers — surface-micromachined silicon proof masses suspended on folded-beam springs, with interdigitated comb fingers whose differential capacitance shifts as the mass lags behind the decelerating chip. Analog Devices' ADXL50 (1991), a single-chip ±50 g capacitive accelerometer, was the breakthrough that replaced bulky electromechanical sensors; today's ACUs use ranged parts (often ±100–250 g) plus lateral and roll sensors for side and curtain bags.
The ACU does not fire on peak g alone, because a pothole or a hammer blow to the frame can spike acceleration harmlessly. Instead it integrates acceleration into velocity change (Δv) and compares the evolving Δv-versus-time trace against calibrated must-fire and no-fire boundaries. A rigid-barrier crash below roughly 15–25 km/h (~9–16 mph) is a no-fire; a harder hit that accumulates enough Δv fast enough is a must-fire. Peak vehicle decelerations in a serious frontal crash run ~20–40 g, sustained over tens of milliseconds. This discrimination is why airbags do not deploy in low-speed fender-benders yet fire reliably in a survivable-but-severe crash.
Historically this job was done mechanically. Allen K. Breed's ball-in-tube sensor (late 1960s) held a steel ball against a bias magnet; a large enough deceleration overcame the magnet, the ball rolled forward, and it closed the firing contacts. Breed's electromechanical sensor made practical airbags possible before cheap silicon existed. The firing circuit itself is deliberately simple and robust: a low-resistance bridgewire (~2 Ω) in the igniter is driven with roughly 1–2 A for a couple of milliseconds, heating a primary charge (commonly zirconium potassium perchlorate) that ignites the main gas generant. A backup capacitor keeps the ACU powered even if the crash severs the battery.
The Inflator: Making Sixty Liters of Gas in Milliseconds
The heart of the system is a solid-propellant gas generator. It is chemically a close relative of a rocket's monopropellant charge: a stable solid that, once lit, self-sustains a rapid decomposition producing a large volume of gas. The engineering problem is producing ~60 liters of clean, cool-enough gas in under 30 ms without the metal housing bursting.
Sodium azide chemistry defined the first generation. The primary reaction is a fast decomposition once the generant is heated past ~300 °C:
- 2 NaN₃ → 2 Na + 3 N₂ — this liberates the nitrogen that fills the bag.
- The metallic sodium is dangerously reactive, so an oxidizer scavenges it: 10 Na + 2 KNO₃ → K₂O + 5 Na₂O + N₂, producing yet more nitrogen.
- The alkali oxides are then locked into a harmless alkaline silicate glass (slag) with added SiO₂. A driver inflator holds roughly 50–60 g of sodium azide — about 1.2–1.4 mol of N₂, which is only ~30 L at room temperature and pressure but fills a ~60 L bag once it is hot.
Sodium azide was abandoned not because it worked poorly but because it is acutely toxic (oral LD₅₀ in the same league as cyanide) and hazardous to manufacture, store, and scrap. Non-azide propellants — guanidine nitrate or tetrazole compounds blended with an oxidizer such as basic copper nitrate — now dominate. They deliver more gas per gram and produce N₂, CO₂, and water vapor, though they burn hotter and demand more gas cooling, even as they leave less solid slag than azide.
Inside the steel or aluminum inflator, combustion drives the chamber pressure to the order of tens of MPa (thousands of psi) and the gas is generated at roughly 1,000–2,000 K. That gas is far too hot and particle-laden to dump into a nylon bag, so it is forced through a coiled-wire or ceramic filter/heat sink that cools it and traps molten slag, then past a metal burst disk that ruptures at a set pressure and meters flow into the bag. By the time gas enters the fabric, the bag's own working pressure is only a few psi above atmospheric — the enormous chamber pressure is the source, not the fill pressure.
The Bag and the Physics of Cushioning
The bag is silicone-coated nylon 6,6 fabric, roughly 0.4 mm thick, folded into the hub or dash and sealed under a trim cover with molded tear seams. Inflation pressure splits those seams and the fabric front races out at up to ~300 km/h (~190 mph). Driver bags are typically 35–70 L; passenger bags, which must span a larger gap to the dashboard, are 120–150 L.
The physics that saves the occupant is impulse–momentum. To bring a body from crash speed to rest requires a fixed impulse, J = ∫F dt = m·Δv. Since Δv is set by the crash, the only free variable is time: stretch the deceleration over a longer interval and the average force falls in proportion. The bag, belt, and crumple zone together extend the ride-down from the few milliseconds of a rigid impact to tens of milliseconds of controlled stopping.
A work–energy estimate shows the stakes. A ~75 kg occupant at a change of speed of ~15 m/s carries kinetic energy KE = ½mv² ≈ 8.4 kJ. If that body were stopped against a rigid steering wheel over just ~5 mm of crush, the average force would be KE/d ≈ 1.7 MN — instantly fatal. Spread that same energy over ~0.3 m of soft ride-down and distributed across the face and chest, and the force drops to a survivable few tens of kN over a large area. The regulatory targets that encode this are the Head Injury Criterion (HIC₁₅ ≤ 700 under US FMVSS 208) and a chest deceleration limit near 60 g.
The subtlety that makes the whole thing work is venting. The bag has calibrated vent holes (typically a pair of ~30–40 mm openings), and it begins deflating the instant it is full. This is deliberate: a sealed elastic bag would store the occupant's energy and hurl them back like a trampoline. Instead, as the occupant loads the bag, gas is pushed out the vents and the kinetic energy is dissipated as flow work — the occupant "sinks" into a collapsing cushion. The bag is fully firm for only a few milliseconds around the moment of contact; timing the inflation peak to that instant is the entire art.
Design Trade-offs and Failure Modes
Airbag design lives on a knife-edge between too slow and too violent. Early US airbags were calibrated to protect an unbelted 50th-percentile male in FMVSS 208's ~30 mph rigid-barrier test, which meant a very aggressive, high-energy deploy. That same aggression proved lethal to small, close, or out-of-position occupants — children in front seats, short-statured drivers, and rear-facing infant seats were killed or injured by the deploying bag itself in the 1990s. NHTSA responded by allowing "depowered" inflators (~20–35% less aggressive) in 1997–98.
The modern answer is the advanced airbag, phased in under FMVSS 208 between 2003 and 2006:
- Dual-stage (multi-stage) inflators carry two propellant charges fired together or in sequence; a belted occupant in a moderate crash gets a softer, single-stage deploy, a severe crash gets both.
- Occupant classification systems — seat weight sensors and belt-buckle sensors — suppress or soften the passenger bag for a child or empty seat.
- Tethered bags and revised vent sizing shape how the bag unfolds so it cushions rather than punches.
The defining failure mode in recent history is the Takata recall. Takata used phase-stabilized ammonium nitrate (PSAN) as a cheap, high-yield propellant, but ammonium nitrate cycles through solid phases with temperature and absorbs moisture; over years of heat and humidity the propellant degrades and burns too fast, spiking chamber pressure until the metal inflator ruptures and sprays shrapnel into the occupant. The recall reached roughly 67 million inflators in the US (about 100 million worldwide) and has been linked to more than two dozen deaths — the largest recall in automotive history, and a textbook lesson in propellant aging and safety margins.
History, Standards, and How Airbags Are Tested
The idea is old; the enabling technology was not. John W. Hetrick (US patent 2,649,311, 1953) and Walter Linderer in Germany both patented compressed-air cushions in the early 1950s — but stored air inflated far too slowly to beat an occupant to the wheel. Practical airbags waited for two inventions: Allen Breed's fast crash sensor and reliable solid-propellant gas generators. General Motors offered its Air Cushion Restraint System on full-size cars in 1973–76, and Mercedes-Benz introduced the first modern production driver airbag with a pyrotechnic seatbelt pretensioner on the 1981 W126 S-Class — the fruit of decades of passive-safety work by Béla Barényi, the engineer who also patented the automotive crumple zone.
Regulation drove adoption. US FMVSS 208 (Occupant Crash Protection) mandated dual frontal airbags in all new passenger cars by 1998 and light trucks by 1999; Europe's ECE R94 and Euro NCAP crash-rating programs pushed frontal, side, and curtain bags worldwide.
Validation is brutally physical. Manufacturers fire inflators into instrumented tank tests to log pressure-versus-time and total gas output, then run full-vehicle crash and sled tests into rigid and offset-deformable barriers with instrumented anthropomorphic test devices (Hybrid III and THOR dummies) carrying accelerometers and load cells in the head, neck, chest, and femurs. High-speed cameras at 1,000+ frames per second capture the unfold, and the measured HIC, chest g, and femur loads must fall under the FMVSS 208 limits across a range of occupant sizes — from the 5th-percentile female to the 50th-percentile male dummies the rule specifies — and in both belted and unbelted, in-position and out-of-position configurations. Open engineering questions remain: externally deployed pedestrian airbags, seat-mounted far-side and center airbags for reclined occupants in autonomous vehicles, and inflator chemistries that stay stable for the 20-year life of a car without the aging pitfalls that doomed PSAN.
| Inflator type | Gas source | Gas / byproducts | Notes and hazards |
|---|---|---|---|
| Pyrotechnic — sodium azide | 2 NaN₃ → 2 Na + 3 N₂, Na scavenged by KNO₃/SiO₂ to glass | Nearly pure N₂ + inert silicate slag | First mass-market chemistry; azide is acutely toxic (oral LD₅₀ within an order of magnitude of cyanide), phased out |
| Pyrotechnic — non-azide | Guanidine nitrate or tetrazoles + oxidizer | N₂, CO₂, H₂O, some CO | Safer solids, higher gas yield per gram; today's default |
| Hybrid (stored gas + pyro) | Argon/helium bottle heated by a small propellant charge | Inert stored gas, warmed | Cooler, cleaner deploy; heavier, used in many passenger/side bags |
| Stored-gas / cold-gas | Compressed inert gas released by a rupture disk | Inert gas only, no combustion | Slow to fill; largely superseded for frontal use |
| PSAN (Takata) | Phase-stabilized ammonium nitrate propellant | N₂, H₂O, CO₂ | Degrades with heat/humidity → over-pressure → inflator rupture; largest recall in auto history |
Frequently asked questions
How can an airbag possibly inflate in 30 milliseconds?
Because the gas is made chemically, not pumped. An electric igniter lights a solid propellant that decomposes in a fast, self-sustaining reaction, releasing tens of liters of nitrogen almost instantly — the same class of chemistry as a rocket's gas generator. Stored compressed air, the approach of the 1950s patents, was far too slow, which is why practical airbags waited for solid-propellant inflators.
Why does the airbag deflate right after it inflates?
Deflation is the safety feature, not a flaw. The bag has calibrated vent holes and begins emptying the instant it is full, so when the occupant hits it the gas is pushed out and their energy is dissipated as flow work. A sealed, elastic bag would store that energy and bounce the occupant back like a trampoline; a venting bag lets them sink into a collapsing cushion, spreading the deceleration over more time and area.
Is sodium azide still used in airbags, and is it dangerous?
It is largely phased out. Sodium azide (NaN₃) decomposes cleanly into nitrogen, but it is acutely toxic — roughly as poisonous as cyanide by ingestion — and hazardous to manufacture and dispose of. Modern inflators use non-azide propellants such as guanidine nitrate, which produce more gas per gram and far less toxic residue, though they burn hotter and need more filtering.
Why don't airbags deploy in every collision?
The control unit measures the accumulated velocity change (Δv), not just a single acceleration spike, and compares it against calibrated must-fire and no-fire boundaries. A low-speed impact, a pothole, or a curb strike does not build up enough Δv fast enough to fire, while a rigid-barrier crash above roughly 15–25 km/h does. This discrimination prevents needless, potentially injurious deployments.
Can the airbag itself injure or kill you?
Yes, which is why timing and calibration are everything. A bag deploying at up to ~300 km/h can seriously injure a small, close, or out-of-position occupant — early US airbags killed some children and short adults, prompting depowered and later dual-stage 'advanced' airbags with weight and belt sensors. The Takata defect went further: aged propellant over-pressurized inflators until they ruptured and sprayed metal shrapnel.
Does the airbag replace the seatbelt?
No — it is a Supplemental Restraint System, designed to work with the belt. The belt keeps you coupled to the car's ride-down and in the correct position to meet the fully inflated bag; without it you may reach the bag too early, while it is still deploying, or be thrown out of its coverage. Airbags are tuned assuming the belt does most of the restraint work.