Failsafe programming of implantable medical devices
First Claim
Patent Images
1. A method comprising:
- sending, by a programming device, a signal to a watchdog unit, the signal indicating the beginning of a programming session, wherein the signal causes the watchdog unit to initialize a watchdog timer in response to receipt of the signal indicating the beginning of the programming session;
sending, by the programming device, programming signals via wireless telemetry to an implantable medical device during the programming session, wherein the programming signals are configured to affect operation of the implantable medical device; and
sending, by the programming device, stay-alive signals to the watchdog unit during the programming session, wherein the stay-alive signals are configured to reset the watchdog timer of the watchdog unit to allow the watchdog unit to detect failure of a wireless telemetry session between a programming device and the implantable medical device during the programming session,wherein the watchdog unit is configured to detect failure of the wireless telemetry session based on whether the watchdog timer has expired during the programming session, and to output a signal to the implantable medical device to change a mode of operation of the implantable medical device in response to expiration of the watchdog timer.
0 Assignments
0 Petitions
Accused Products
Abstract
A watchdog unit receives stay-alive signals from a programming device during programming of an implantable medical device. The watchdog unit maintains a watchdog timer, and resets the timer upon receipt of each stay-alive signal. If the watchdog timer expires, the watchdog unit changes a mode of operation of the implantable device, e.g., places the implantable medical device into a known, safe state. For example, the watchdog unit may cause the implantable medical device to suspend delivery of therapy, perform a power-on reset, and/or recall a known, safe, therapy delivery program.
65 Citations
20 Claims
-
1. A method comprising:
-
sending, by a programming device, a signal to a watchdog unit, the signal indicating the beginning of a programming session, wherein the signal causes the watchdog unit to initialize a watchdog timer in response to receipt of the signal indicating the beginning of the programming session; sending, by the programming device, programming signals via wireless telemetry to an implantable medical device during the programming session, wherein the programming signals are configured to affect operation of the implantable medical device; and sending, by the programming device, stay-alive signals to the watchdog unit during the programming session, wherein the stay-alive signals are configured to reset the watchdog timer of the watchdog unit to allow the watchdog unit to detect failure of a wireless telemetry session between a programming device and the implantable medical device during the programming session, wherein the watchdog unit is configured to detect failure of the wireless telemetry session based on whether the watchdog timer has expired during the programming session, and to output a signal to the implantable medical device to change a mode of operation of the implantable medical device in response to expiration of the watchdog timer. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. A programming device comprising:
-
a telemetry circuit configured to communicate via wireless telemetry; and a processor configured to; send a signal to a watchdog unit, the signal indicating the beginning of a programming session, the signal configured to initiate a watchdog timer in the watchdog unit in response to receipt of the signal at the watchdog unit; send programming signals via the wireless telemetry to an implantable medical device during the programming session, wherein the programming signals are configured to affect operation of the implantable medical device; and send stay-alive signals to the watchdog unit during the programming session, wherein the stay-alive signals are configured to reset the watchdog timer of the watchdog unit to allow the watchdog unit to detect failure of a wireless telemetry session between the programming device and the implantable medical device during the programming session, wherein the watchdog unit is configured to detect failure of the wireless telemetry session based on whether the watchdog timer has expired during the programming session, and to output a signal to the implantable medical device to change a mode of operation of the implantable medical device in response to expiration of the watchdog timer. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17)
-
-
18. A computer-readable storage medium comprising instructions that cause a programmable processor to:
-
send a signal to a watchdog unit, the signal indicating the beginning of a programming session, the signal configured to initiate a watchdog timer in the watchdog unit in response to receipt of the signal at the watchdog unit; send programming signals via wireless telemetry to an implantable medical device during the programming session, wherein the programming signals are configured to affect operation of the implantable medical device; and send stay-alive signals to the watchdog unit during the programming session, wherein the stay-alive signals are configured to reset the watchdog timer of the watchdog unit to allow the watchdog unit to detect failure of a wireless telemetry session between a programming device and the implantable medical device during the programming session, wherein the watchdog unit is configured to detect failure of the wireless telemetry session based on whether the watchdog timer has expired during the programming session, and to output a signal to the implantable medical device to change a mode of operation of the implantable medical device in response to expiration of the watchdog timer. - View Dependent Claims (19, 20)
-
Specification