Failsafe method and apparatus for a modular multi-parameter patient monitor

• US 5,947,907 A
• Filed: 03/04/1998
• Issued: 09/07/1999
• Est. Priority Date: 03/04/1998
• Status: Expired due to Fees

• Current Assignee: GE Medical Systems Information Technologies Incorporated (General Electric Company)
• Original Assignee: Critikon Co. LLC
• Inventors: Duich, Michael B.
• Primary Examiner(s): Getzow, Scott M.
• Application Number:
  US09/034,686
• Time in Patent Office: 552 Days
• Field of Search: 600/481, 600/482, 600/483, 600/484, 600/485, 600/508, 600/522, 600/523, 600/509
• US Class Current: 600/483
• CPC Class Codes: A61B 2560/0443 Modular apparatus
• CPC Class Codes: A61B 2560/0456 Apparatus provided with a docking unit
• CPC Class Codes: A61B 5/02055 Simultaneously evaluating both cardiovascular condition and temperature
• CPC Class Codes: A61B 5/021 Measuring pressure in heart or blood vessels A61B5/0205 takes precedence
• CPC Class Codes: A61B 5/0816 Measuring devices for examining respiratory frequency measuring frequency of electric signals G01R23/00
• CPC Class Codes: A61B 5/145 Measuring characteristics of blood in vivo, e.g. gas concentration, pH value; Measuring characteristics of body fluids or tissues, e.g. interstitial fluid, cerebral tissuemeasuring of blood pressure or blood flow A61B5/02; non-radiation detecting or locating of foreign bodies in blood A61B5/06
• CPC Class Codes: A61B 5/318 Heart-related electrical modalities, e.g. electrocardiography [ECG]

Abstract

A failsafe supervisor system for a processing module of a modular multi-parameter patient monitor which detects a module error or malfunction, places such module in a safe state, and alerts the operator to improper operation of the patient monitor module processor hardware or software. Upon detection of a hardware or software error, an inconsistent system/module time-base check, or other malfunctions during module operation, the impaired parameter module and its associated parameter data gathering apparatuses are powered down and the patient monitor system electrically isolates the impaired module in a failsafe manner to a safe state while permitting other parameter modules to continue with their normal operation. The failsafe supervisor system preferably includes a watchdog timer and discrete logic incorporated with the parameter module'"'"'s microprocessor control system.

Claims

1. A failsafe system for a multi-parameter patient monitor which collects parameter data related to physiological parameters of a patient via patient interface circuitry and displays said parameter data on a display, said failsafe system comprising:

a watchdog timer which is reset within a predetermined period of time so long as said patient monitor is operating properly;

a failsafe signal generator responsive to an overflow output of said watchdog timer, said failsafe signal generator generating a failsafe signal which places said patient interface circuitry in a safe state when said watchdog timer provides an overflow signal to an input thereof; and

a disable circuit which disables the output of parameter data to said display upon receipt of said failsafe signal.

2. A failsafe system as in claim 1, wherein said patient monitor includes a parameter processing module having a module processor which checks an execution sequence of software loaded thereon and resets said watchdog timer within said predetermined period of time so long as said execution sequence is correct.

3. A failsafe system as in claim 2, wherein said patient monitor includes an acquisition unit having a display processor which presents parameter data to said display, wherein said module processor compares a time base of said display processor to a time base of said module processor and resets said watchdog timer within said predetermined period of time so long as said time bases compare within a predetermined tolerance.

4. A failsafe system as in claim 3, wherein said failsafe signal generator is a Reset-Set latch which receives said overflow signal from said watchdog timer at a set input and outputs said failsafe signal upon receipt of a reset signal from said display processor or said module processor.

5. A failsafe system as in claim 4, wherein said display processor provides said reset signal to said Reset-Set latch when said display processor detects that said parameter processing module is connected to said acquisition unit but not transmitting parameter data for display.

6. A failsafe system as in claim 1, wherein said disable circuit includes a data transceiver and a logic gate which disables said transceiver upon receipt of said failsafe signal.

7. A modular multi-parameter patient monitor which collects parameter data related to physiological parameters of a patient, comprising:

a display;

patient interface circuitry which collects said parameter data from said patient;

a parameter module responsive to parameter data from said patient interface circuitry, said parameter module including a module processor which processes said parameter data and a data output circuit which outputs processed parameter data;

an acquisition unit which receives said processed parameter data from said parameter module and presents said processed parameter data to said display; and

a failsafe system comprising a watchdog timer which is reset within a predetermined period of time so long as said parameter module is operating properly and a failsafe signal generator responsive to an overflow output of said watchdog timer, said failsafe signal generator generating a failsafe signal which disables said data output circuit and places said patient interface circuitry and parameter module in a safe state when said watchdog timer provides an overflow signal to an input thereof.

8. A patient monitor as in claim 7, wherein said module processor checks an execution sequence of software loaded thereon and resets said watchdog timer within said predetermined period of time so long as said execution sequence is correct.

9. A patient monitor as in claim 8, wherein said acquisition unit comprises a display processor which presents parameter data from said parameter module to said display, and said module processor compares a time base of said display processor to a time base of said module processor and resets said watchdog timer within said predetermined period of time so long as said time bases compare within a predetermined tolerance.

10. A patient monitor as in claim 9, wherein said failsafe signal generator is a Reset-Set latch which receives said overflow signal from said watchdog timer at a set input and outputs said failsafe signal upon receipt of a reset signal from said display processor or said module processor.

11. A patient monitor as in claim 10, wherein said acquisition unit comprises a detection circuit which detects a connection of said parameter module to said acquisition unit, said display processor providing said reset signal to said Reset-Set latch when said detection circuit detects the connection of said parameter module to said acquisition unit but said display processor does not receive parameter data from said parameter module for display.

12. A patient monitor as in claim 7, wherein said data output circuit includes a data transceiver and said failsafe system includes a logic gate which disables said transceiver upon receipt of said failsafe signal.

13. A patient monitor as in claim 7, further comprising a plurality of parameter modules which provide parameter data to said acquisition unit for display, whereby said failsafe system generates separate failsafe signals for each parameter module and whereby each parameter module for which a failsafe signal is generated and its associated patient interface circuitry is placed in said safe state while other parameter modules continue normal operation.

14. A failsafe method for a multi-parameter patient monitor which collects parameter data related to physiological parameters of a patient via patient interface circuitry and displays said parameter data on a display, said failsafe method comprising the steps of:

checking an execution sequence of software of said patient monitor and resetting a watchdog timer within a predetermined period of time so long as said execution sequence is correct;

generating a failsafe signal in response to an overflow output from said watchdog timer, said failsafe signal placing said patient interface circuitry in a safe state; and

disabling the output of parameter data to said display upon receipt of said failsafe signal.

15. A failsafe method for a modular multi-parameter patient monitor comprising an acquisition unit and at least one parameter module which collects parameter data related to physiological parameters of a patient via patient interface circuitry and provides said parameter to said acquisition unit for display of said parameter data on a display, said failsafe method comprising the steps of:

comparing a time base of a display processor of said acquisition unit to a time base of a module processor of said at least one parameter module and resetting a watchdog timer of said at least one parameter module within a predetermined period of time so long as said time bases compare within a predetermined tolerance;

generating a failsafe signal in response to an overflow output from said watchdog timer, said failsafe signal placing said patient interface circuitry in a safe state; and

disabling the output of parameter data to said display upon receipt of said failsafe signal.

16. A method as in claim 15, wherein said patient monitor comprises at least two parameter modules, comprising the steps of generating separate failsafe signals for each parameter module and placing a parameter module for which a failsafe signal has been generated and its associated patient interface circuitry in said safe state while any other parameter modules continue normal operation.

17. A method as in claim 15, comprising the further steps of determining whether said at least one parameter processing module is connected to said acquisition unit but not transmitting parameter data and causing said failsafe signal to be generated in said generating step when said at least one parameter processing module is connected to said acquisition unit but not transmitting data.