FAILSAFE PROGRAMMING OF IMPLANTABLE MEDICAL DEVICES

• US 20110125221A1
• Filed: 01/27/2011
• Published: 05/26/2011
• Est. Priority Date: 10/31/2002
• Status: Active Grant

• Current Assignee: Medtronic Incorporated (Medtronic Plc)
• Original Assignee: Medtronic Incorporated (Medtronic Plc)
• Inventors: North, Richard B., Sieracki, Jeffrey M.
• Granted Patent: US 9,867,992 B2
• Time in Patent Office: Days
• US Class Current: 607/60
• CPC Class Codes: A61N 1/37252 Details of algorithms or data aspects of communication system, e.g. handshaking, transmitting specific data or segmenting data
• CPC Class Codes: A61N 1/37254 Pacemaker or defibrillator security, e.g. to prevent or inhibit programming alterations by hackers or unauthorised individuals
• CPC Class Codes: A61N 1/37264 Changing the program; Upgrading firmware
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G16H 40/40 for the management of medical equipment or devices, e.g. scheduling maintenance or upgrades

Abstract

A watchdog unit receives stay-alive signals from a programming device during programming of an implantable medical device. The watchdog unit maintains a watchdog timer, and resets the timer upon receipt of each stay-alive signal. If the watchdog timer expires, the watchdog unit changes a mode of operation of the implantable device, e.g., places the implantable medical device into a known, safe state. For example, the watchdog unit may cause the implantable medical device to suspend delivery of therapy, perform a power-on reset, and/or recall a known, safe, therapy delivery program.

Claims

1. A method comprising:

sending programming signals that affect operation of an implantable medical device to the implantable medical device via wireless telemetry during a programming operation; and

sending stay-alive signals to a watchdog unit during the programming operation to allow the watchdog unit to detect failure of a wireless telemetry session between a programming device and the implantable medical device during the programming operation.

2. The method of claim 1, further comprising sending signals to the watchdog unit to indicate the beginning and ending of the programming operation.

3. The method of claim 1, wherein sending stay-alive signals comprises generating transitions on a data line.

4. The method of claim 1, wherein sending stay-alive signals comprises sending stay-alive signals via wireless telemetry.

5. The method of claim 1, wherein sending stay-alive signals comprises:

resetting a timer upon delivery of a programming signal; and

sending a stay-alive signal upon expiration of the timer.

6. A programming device comprising:

a telemetry circuit; and

a processor to send programming signals that affect operation of an implantable medical device to the implantable medical device via the telemetry circuit during a programming operation, and send stay-alive signals to a watchdog unit during the programming operation to allow the watchdog unit to detect failure of a wireless telemetry session between the programming device and the implantable medical device during the programming operation.

7. The programming device of claim 6, wherein the programming device is coupled to a telemetry head by a cable, and wherein the processor sends stay-alive signals by generating transitions on a data line of the cable.

8. The programming device of claim 6, wherein the processor sends stay-alive signals via the telemetry circuit.

9. The programming device of claim 6, wherein the processor resets a timer upon delivery of a programming signal, and sends a stay-alive signal upon expiration of the timer.

10. A computer-readable medium comprising instructions that cause a programmable processor to:

send programming signals that affect operation of an implantable medical device to the implantable medical device via wireless telemetry during a programming operation; and

send stay-alive signals to a watchdog unit during the programming operation to allow the watchdog unit to detect failure of a wireless telemetry session between a programming device and the implantable medical device during the programming operation.

11. The computer-readable medium of claim 10, further comprising instructions that cause the programmable processor to send signals to the watchdog unit to indicate the beginning and ending of the programming operation.

12. The computer-readable medium of claim 10, wherein the instructions that cause the programmable processor to send stay-alive signals comprise instructions that cause the programmable processor to:

reset a timer upon delivery of a programming signal; and

send a stay-alive signal upon expiration of the timer.