Error handling in infusion devices with distributed motor control and related operating methods

Patent metadata

Field	Value
Publication number	US-10617816-B2
Application number	US-201815981824-A
Country	US
Kind code	B2
Filing date	May 16, 2018
Priority date	May 26, 2015
Publication date	Apr 14, 2020
Grant date	Apr 14, 2020

Abstract

Infusion systems, infusion devices, and related operating methods are provided. An exemplary infusion device includes a motor operable to deliver fluid to a body of a user, a first control module to enable input power for the motor and provide a dosage command for operating the motor, and a second control module coupled to the first control module to receive the dosage command and operate the motor using at least a portion of the input power based at least in part on the dosage command. One of the first control module and the second control module detects an anomalous condition, and in response, disables the input power to the motor, stores diagnostic information for the anomalous condition in its internal memory, and automatically resets thereafter.

First claim

What is claimed is:

1. A method of operating a motor of an infusion device to deliver fluid using a first control module and a second control module, the first control module generating one or more dosage commands and the second control module converting the one or more dosage commands to corresponding one or more motor commands for providing input power to the motor, the method comprising:
communicating one or more heartbeat messages between the first control module and the second control module; and
in response to one of the first control module and the second control module detecting an absence of a heartbeat message of the one or more heartbeat messages:
disabling, by the one of the first control module and the second control module, the input power to the motor;
storing, by the one of the first control module and the second control module, diagnostic information from its processing core to its internal memory; and
after storing the diagnostic information, loading, by the one of the first control module and the second control module, boot loader code from its internal memory to its processing core.

2. The method of claim 1 , further comprising:
detecting, by the other of the first control module and the second control module, an anomalous condition; and
in response to the anomalous condition:
storing, by the other of the first control module and the second control module, an anomalous condition, second diagnostic information for the anomalous condition from its processing core to its internal memory; and
after storing the second diagnostic information, loading, by the other of the first control module and the second control module, second boot loader code from its internal memory to its processing core.

3. The method of claim 2 , wherein the detecting the anomalous condition results in the other of the first control module and the second control module failing to communicate the heartbeat message.

4. The method of claim 1 , further comprising:
verifying the storing of the diagnostic information prior to loading the boot loader code; and
generating, by the one of the first control module and the second control module, a notification via an output user interface element in response to a failure to store the diagnostic information.

5. The method of claim 1 , further comprising:
determining, by the one of the first control module and the second control module, whether a reset limit has been met after loading the boot loader code; and
generating, by the one of the first control module and the second control module, a notification via an output user interface element when the reset limit has been met.

6. The method of claim 1 , wherein disabling the input power to the motor comprises disconnecting the motor from the input power.

7. The method of claim 6 , wherein loading the boot loader code comprises loading, by the one of the first control module and the second control module, boot loader code from its internal memory to its processing core after disconnecting the motor from the input power.

8. A method of operating a motor using a first control module and a second control module, the first control module generating one or more commands and the second control module converting the one or more commands to corresponding one or more motor commands for providing input power to the motor, the method comprising:
detecting, by one of the first control module and the second control module, an anomalous condition in response to an absence of a communication from the other of the first control module and the second control module; and
in response to the anomalous condition,
disconnecting, by the one of the first control module and the second control module, the motor from the input power;
storing, by the one of the first control module and the second control module, diagnostic information for the anomalous condition in an internal memory of the one of the first control module and the second control module; and
reinitializing a processing core of the one of the first control module and the second control module to execute boot loader code after disconnecting the motor from the input power and storing the diagnostic information.

9. The method of claim 8 , further comprising:
enabling, by the first control module, the input power to a driver module coupled to the motor; and
operating, by the second control module, the driver module to deliver a portion of the input power to the motor in accordance with the one or more commands prior to detecting the anomalous condition.

10. The method of claim 8 , wherein detecting the anomalous condition comprises a first operating system executing on the one of the first control module and the second control module detecting the anomalous condition in response to the absence of the communication from a second operating system executing on the other of the first control module and the second control module.

11. The method of claim 8 , further comprising:
detecting, by the other of the first control module and the second control module, the anomalous condition in response to an absence of a second communication from the one of the first control module and the second control module; and
in response:
storing, by the other of the first control module and the second control module, second diagnostic information for the anomalous condition in its internal memory; and
resetting the other of the first control module and the second control module after storing the second diagnostic information.

12. The method of claim 8 , further comprising:
executing, by the processing core of the one of the first control module and the second control module, the boot loader code for a first boot loader;
generating, by the one of the first control module and the second control module, a notification via an output user interface element in response to a failure to communicate with a second boot loader executed by the other of the first control module and the second control module.

Assignees

• Medtronic Minimed Inc

Inventors

• Chow Steve
• Campbell Alexander S
• Wang Yongbo
• Collins Thomas W
• Torres Linda I

Classifications

• A61M5/1452

  pressurised by means of pistons · CPC title

• A61M2205/6018

  providing set-up signals for the apparatus configuration · CPC title

• G16H40/63

  for local operation · CPC title

• A61M5/16831

  Monitoring, detecting, signalling or eliminating infusion flow anomalies (low-level float-valves causing cut-off A61M5/40; indicating or recording presence, absence or direction of flow in general G01P13/0066) · CPC title

• A61M2005/14208

  with a programmable infusion control system, characterised by the infusion program · CPC title