Classifications

• • G—PHYSICS
  • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
  • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
  • G16H20/00—ICT specially adapted for therapies or health-improving plans, e.g. for handling prescriptions, for steering therapy or for monitoring patient compliance
  • G16H20/40—ICT specially adapted for therapies or health-improving plans, e.g. for handling prescriptions, for steering therapy or for monitoring patient compliance relating to mechanical, radiation or invasive therapies, e.g. surgery, laser therapy, dialysis or acupuncture
• • A—HUMAN NECESSITIES
  • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
  • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
  • A61M1/00—Suction or pumping devices for medical purposes; Devices for carrying-off, for treatment of, or for carrying-over, body-liquids; Drainage systems
  • A61M1/36—Other treatment of blood in a by-pass of the natural circulatory system, e.g. temperature adaptation, irradiation ; Extra-corporeal blood circuits
  • A61M1/3621—Extra-corporeal blood circuits
  • A61M1/3622—Extra-corporeal blood circuits with a cassette forming partially or totally the blood circuit
  • A61M1/36222—Details related to the interface between cassette and machine
• • A—HUMAN NECESSITIES
  • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
  • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
  • A61M1/00—Suction or pumping devices for medical purposes; Devices for carrying-off, for treatment of, or for carrying-over, body-liquids; Drainage systems
  • A61M1/36—Other treatment of blood in a by-pass of the natural circulatory system, e.g. temperature adaptation, irradiation ; Extra-corporeal blood circuits
  • A61M1/3621—Extra-corporeal blood circuits
  • A61M1/3622—Extra-corporeal blood circuits with a cassette forming partially or totally the blood circuit
  • A61M1/36225—Extra-corporeal blood circuits with a cassette forming partially or totally the blood circuit with blood pumping means or components thereof
• • A—HUMAN NECESSITIES
  • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
  • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
  • A61M1/00—Suction or pumping devices for medical purposes; Devices for carrying-off, for treatment of, or for carrying-over, body-liquids; Drainage systems
  • A61M1/36—Other treatment of blood in a by-pass of the natural circulatory system, e.g. temperature adaptation, irradiation ; Extra-corporeal blood circuits
  • A61M1/3621—Extra-corporeal blood circuits
  • A61M1/3622—Extra-corporeal blood circuits with a cassette forming partially or totally the blood circuit
  • A61M1/36226—Constructional details of cassettes, e.g. specific details on material or shape
  • A61M1/362262—Details of incorporated reservoirs
• • A—HUMAN NECESSITIES
  • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
  • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
  • A61M1/00—Suction or pumping devices for medical purposes; Devices for carrying-off, for treatment of, or for carrying-over, body-liquids; Drainage systems
  • A61M1/36—Other treatment of blood in a by-pass of the natural circulatory system, e.g. temperature adaptation, irradiation ; Extra-corporeal blood circuits
  • A61M1/3621—Extra-corporeal blood circuits
  • A61M1/3622—Extra-corporeal blood circuits with a cassette forming partially or totally the blood circuit
  • A61M1/36226—Constructional details of cassettes, e.g. specific details on material or shape
  • A61M1/362266—Means for adding solutions or substances to the blood
• • A—HUMAN NECESSITIES
  • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
  • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
  • A61M1/00—Suction or pumping devices for medical purposes; Devices for carrying-off, for treatment of, or for carrying-over, body-liquids; Drainage systems
  • A61M1/14—Dialysis systems; Artificial kidneys; Blood oxygenators ; Reciprocating systems for treatment of body fluids, e.g. single needle systems for hemofiltration or pheresis
  • A61M1/16—Dialysis systems; Artificial kidneys; Blood oxygenators ; Reciprocating systems for treatment of body fluids, e.g. single needle systems for hemofiltration or pheresis with membranes
• • A—HUMAN NECESSITIES
  • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
  • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
  • A61M2205/00—General characteristics of the apparatus
  • A61M2205/18—General characteristics of the apparatus with alarm
• • A—HUMAN NECESSITIES
  • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
  • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
  • A61M2205/00—General characteristics of the apparatus
  • A61M2205/50—General characteristics of the apparatus with microprocessors or computers
  • A61M2205/502—User interfaces, e.g. screens or keyboards
  • A61M2205/505—Touch-screens; Virtual keyboard or keypads; Virtual buttons; Soft keys; Mouse touches
• • A—HUMAN NECESSITIES
  • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
  • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
  • A61M2205/00—General characteristics of the apparatus
  • A61M2205/50—General characteristics of the apparatus with microprocessors or computers
  • A61M2205/52—General characteristics of the apparatus with microprocessors or computers with memories providing a history of measured variating parameters of apparatus or patient
• • G—PHYSICS
  • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
  • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
  • G16H40/00—ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or operation of medical equipment or devices
  • G16H40/60—ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or operation of medical equipment or devices for the operation of medical equipment or devices
  • G16H40/63—ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or operation of medical equipment or devices for the operation of medical equipment or devices for local operation
• • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
  • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
  • Y02A—TECHNOLOGIES FOR ADAPTATION TO CLIMATE CHANGE
  • Y02A90/00—Technologies having an indirect contribution to adaptation to climate change
  • Y02A90/10—Information and communication technologies [ICT] supporting adaptation to climate change, e.g. for weather forecasting or climate simulation

Definitions

• the present invention relates to a new and improved dialysis machine and method of validating information entered by a machine operator to control the machine during dialysis treatment. More particularly, the present invention effectively confirms that the entered information is what the operator intended and that the machine validly accepted the information, all of which occurs more conveniently for the operator while maintaining safety according to commonly accepted safety standards.
• This invention is related to the inventions described in U.S. patent applications for a Graphical Operator Machine Interface and Method for Information Entry and Selection in a Dialysis Machine, Serial No. (044.306) and for a Single Microcontroller Execution of Control and Safety System Functions in a Dialysis
• a dialysis machine is used as a substitute for the natural kidney functions of a human body.
• the dialysis machine cleanses the blood of the natural accumulation of bodily wastes and separates the wastes from the blood outside of or extracorporeally of the body. The separated wastes are discharged, and the cleansed blood is returned to the body.
• the wastes are separated from the blood in a dialyzer.
• the dialyzer includes an internal housing which is separated by a porous medium into a blood side or compartment and a dialysate side or compartment.
• the blood removed from the patient flows through the blood side of the dialyzer.
• a prepared solution of dialysate is passed through the dialysate side of the dialyzer.
• the wastes from the blood pass through the medium by osmosis, ionic transfer or fluid transport into the dialysate and, depending upon the type of dialysis treatment, desirable components from the dialysate may pass in the opposite direction through the medium and into the blood.
• the transfer of the wastes into the dialysate cleanses the blood while allowing the desired components from the dialysate to enter the bloodstream.
• the dialysis machine must be properly operated to perform effective dialysis in a safe and reliable manner.
• care must be taken that the treatment progresses safely and as intended according to the dialysis prescription for the patient. Since the patient's blood and the dialysate separated only by the dialyzer medium, it is apparent that numerous safety concerns must be satisfied on a continual and reliable basis.
• the safety features include sensors located in the extracorporeal and dialysate flow paths to derive signals representative of the operating conditions or parameters which indicate the proper operation of the dialysis machine and/or the early development of a safety or risk condition.
• the control system features result in operational control over the pumps, dialysate heater, flow control valves and other devices associated with the extracorporeal and dialysate flow paths. Because of the pre-eminent importance of the safety system, all known modern dialysis machines utilize microcontrollers or similar types of processor devices to execute the safety functions.
• microcontrollers offer a greater possibility of more effective control over the safety features than other types of safety systems.
• one microcontroller is used to execute the safety functions, and at least one and frequently two other microcontrollers execute the control system functions.
• the safety microcontroller Upon recognizing a safety or risk condition, the safety microcontroller takes control of the dialysis machine and places it in a safe state which prevents or greatly reduces the risk of injury to the patient.
• the use of separate microcontrollers for the safety and control systems is a result of the relatively stringent standards established by governmental, health and safety groups pertaining to dialysis machines.
• the multiple-microcontroller approach to achieving the basic safety and control system functions satisfies the regulatory standards by making the functionality of the safety system microcontroller independent of and separate from the functionality of the control system microcontroller.
• the safety standards also apply to the entry of the information when setting up the machine to perform the dialysis treatment, as well as to the entry of information during the progress of the treatment.
• the safety standards are concerned with promoting operator accuracy when entering information, and assuring that the entered information is not corrupted before it is used by the control system and safety system microcontrollers.
• the machine can not protect against an operator-generated human error, many dialysis machines require the operator to enter information twice before the microcontrollers will accept the information.
• the theory behind the double-entry requirement is that the operator is more likely to recognize an error if the operator is required to check, view or consider the entered information twice.
• the first entry results in the information being recorded in memory and then displayed to the operator.
• the microcontroller compares the first and second entries. If the two entries are the same, the first entry previously recorded in memory will be transferred to the control system and safety system microcontrollers for use during the treatment.
• Other typical information entry techniques used in dialysis machines display the second entry in a separate location from the display of the first entry. The operator must then mentally compare the two entered values, and if they are equal, accept the entered value. In this double-display technique, the dialysis machine does not make the comparison, but instead leaves the comparison to the operator.
• One of the significant aspects of the present invention pertains to an information entry system and method which requires the operator to enter the value only a single time, but which achieves a standard of validation that satisfies existing safety standards relating to the entry of information in dialysis machines. Another aspect of the invention relates to alerting the operator if the information which has been entered has been corrupted by the machine. Another aspect of the invention relates to entering and validating information in a manner which will assure that both the control system and safety system microcontrollers validly receive the same information which the operator has entered and approved. A further aspect of the invention relates to an information entry validation technique in which the proper functionality of certain input/output (I/O) devices is confirmed as an adjunct of the information entry. Still another aspect of the invention relates to a convenient and user- friendly technique for entering and confirming information used by a dialysis machine.
• I/O input/output
• the present invention pertains to a system and method for a dialysis machine in which entered control and safety information is validated.
• the machine includes an information entry device, for example a touch screen, and a display device, for example a cathode ray tube (CRT) .
• a safety system of the machine receives information entered from the entry device.
• the entered information is first converted into a first form using a first conversion relationship.
• the information in the first form is next converted into a second form using a second conversion relationship.
• the second conversion relationship is different from the first conversion relationship.
• Thereafter the information in the second form is converted back to the first form using the first conversion relationship.
• the information in the first form which resulted from the third conversion is displayed on a display device for acceptance for rejection by the operator.
• the multiple sequential conversions provide the operator with an opportunity to evaluate the internal functionality of the machine and to determine if the machine has corrupted the entered information.
• a malfunction will usually result in the information being displayed improperly or in an unusual form. Conversion of the information from one form into another form is likely to reveal that a corruption problem has occurred. Presentation of the displayed information only after and based on the sequential multiple conversions assures an opportunity for the operator to evaluate the entries for accuracy.
• sequential entries each new entry is subjected to the same series of conversions, but the collective value of the previous sequential entries is displayed.
• the re-display of the previously entered information repeatedly presents the information to the operator, but in a naturally-appearing manner which does not create the impression of duplicity, redundancy or multiple confirmation. As a result, the entered information is validated in a more time-conserving and reliable manner, while reducing the operator's workload without compromising the degree of validation.
• Preferred aspects of the invention involve using an ASCII conversion relationship for the first conversion 7 and a floating point numeric conversion relationship for the second conversion.
• the font table is employed to derive the information displayed to the operator. The use of the font table further confirms a state of proper functionality in the machine by notifying the operator if the characters presented are improper or unusual. Improper or unusual characters would result from an error in the font table. Furthermore using the same font table to derive the characters for all of the displayed information has the additional benefit of confirming significant parts of the overall machine functionality, apart from the information entry.
• Other preferred aspects of the invention involve storing the entered information in the second form into a third permanent memory location after the value has been previously stored in the second memory location. After the operator has accepted all of the values previously entered, the information in the second and third memory locations is compared. If the comparison reveals equal values in both locations, the information in the third memory location is displayed to the operator in a location which is different from that location where the same information was displayed while the operator entered the information. The information displayed from the third memory location is thereafter transferred to the control system of the dialysis machine for use during operation of the machine. An error detecting code is also calculated from the information in the second memory location and is stored in association with the information in the third memory location. The error detecting code is employed to validate the transfer of the information to the control system and/or the safety system.
• FIG. 1 is a perspective view of a dialysis machine which incorporates the present invention.
• Fig. 2 is a generalized view illustrating a dialyzer, an extracorporeal flow path for blood from a patient through the dialyzer, and a hydraulics flow path for dialysate through the dialyzer, as are present during treatment of a patient with the dialysis machine shown in Fig. 1.
• Fig. 3 is a block diagram of the control system and safety system of the dialysis machine shown in Figs. 1 and 2, illustrating the components which accomplish information entry validation according to the present invention.
• Fig. 4 is an illustration of a screen display initially presented on a monitor of the dialysis machine shown in Figs. 1 and 3, prior to entry of information.
• Fig. 5 is an illustration similar to that shown in Fig. 4, upon which a keypad is displayed for the entry of information.
• Figs. 6, 7 and 8 are screen displays similar to those shown in Figs. 4 and 5, which illustrate other displays during the entry and validation of information according to the present invention.
• Figs. 9A and 9B collectively form a single flow chart which illustrates steps involved in the entry and validation of information by a operator machine interface and safety microcontroller shown in Fig. 3.
• Fig. 10 is another illustration of some of the steps in the flow chart shown in Fig. 9A and the relationship of those steps with a temporary memory array and a temporary numeric memory shown in Fig. 3.
• Fig. 11 is an illustration of some of the steps in the flow chart shown in Fig. 9B and the relationship of those steps with a permanent memory shown in Fig. 3.
• the dialysis machine 30 includes the devices generally shown in Fig. 2, and those devices establish an extracorporeal flow path and a hydraulics flow path.
• the extracorporeal flow path conducts blood from a patient 32 to a dialyzer 34, and then returns the blood from the dialyzer 34 to the patient 32.
• the hydraulics flow path conducts dialysate from a supply 36 to the dialyzer 34, and then returns the used dialysate to a waste drain 38.
• the blood in the dialyzer 34 is confined to a blood chamber 40, and the dialysate in the dialyzer 34 is confined to a dialysate chamber 42.
• the blood chamber 40 and the dialysate chamber 42 are separated by a micro- porous or other type of dialysis medium 44.
• the waste products contained in the blood within the blood chamber 40 are transferred through the medium 44 by osmosis, ionic transfer or flow transfer to the dialysate in the dialysate chamber 42. Desirable components of the dialysate in the dialysate chamber 42 may also be transferred to the blood in the blood chamber 40 by the same mechanisms. In this manner, the waste products are removed from the patient's blood, and the cleansed blood is returned to the patient 32.
• the used dialysate flowing from the dialysate chamber 42 discharges the waste products into the drain 38 which may be a public sewer.
• the elements of the extracorporeal flow path include at least one blood pump 46 which controls the flow of blood from the patient 32.
• An arterial line or tubing 48 extends through an arterial clamp 50 to a blood handling cartridge 52.
• the blood handling cartridge 52 is normally retained behind a door 54 of the machine 30 when used.
• the blood handling cartridge 52 is not shown in Fig. 1.
• the blood pump 46 also is located behind the door 54 and adjacent to the cartridge 52.
• the blood pump 46 is typically a peristaltic pump in dialysis machines. Blood flows through the arterial line 48 and into an arterial chamber 56 of the cartridge 52.
• the blood pump 46 draws blood from the arterial chamber 56 through a pump tubing 58 which is squeezed or pinched by a rotating rotor 60 against a stationary raceway 62, in the typical manner of peristaltic pumps.
• the blood within the pump tubing 58 which is trapped rotationally in front of the point where the rotor 60 pinches the pump tubing is propelled through the pump tubing 58 and into a manifold 64 of the cartridge 52.
• a tubing 66 conducts the blood from the manifold 64 of the cartridge 52 into a blood inlet of the dialyzer 34.
• the cleansed blood flowing from an outlet of the dialyzer 34 is transferred through a tubing 67 back to a venous chamber 68 of the cartridge 52. Blood from the venous chamber 68 is removed from the cartridge 52 through a venous tubing or line 70.
• a venous blood pump similar to the arterial blood pump 46 may be located in the venous line to assist in forcing the blood back into the patient 32 or to regulate the flow of blood through the extracorporeal flow path. If employed, the venous blood pump is positioned behind a second door 72 of the dialyzer machine 30 shown in Fig. 1. After leaving the venous chamber 68 the blood flows through the venous line 70 to an air detector 74.
• the air detector 74 derives signals related to any air in the venous line 70. If an excessive or dangerous amount of air is present, a venous line clamp 76 will immediately close to terminate the flow of blood through the venous line 70 before the air reaches the patient 32.
• a blood anticoagulant such as heparin is injected into the extracorporeal flow path.
• the anticoagulant is slowly delivered from a syringe 78 as a result of a linear driver mechanism (not shown) moving a plunger 80 into the syringe 78.
• Anticoagulant from the syringe 78 is introduced into the arterial chamber 56 of the cartridge 52 through a tubing 82.
• the syringe 78 and the linear driver mechanism are typically referred to as an anticoagulant pump.
• the elements of the hydraulics flow path include a number of different valves (some of which are not shown) and a dialysate pump 84 which draws dialysate from the supply 36.
• the supply 36 is typically a mixture of chemicals and water which the dialysis machine prepares as the dialysate is used, or a previously prepared quantity of dialysate which is delivered to the dialysis machine 30.
• the dialysate pump 84 draws the dialysate from the supply 36 and delivers it through a dialysate supply tubing or line 86 to an inlet of the dialysate chamber 42 of the dialyzer 34.
• the dialysate flows past the medium 44 where it absorbs the waste products from the blood in the blood chamber 40. Any beneficial components within the dialysate which are desired to be transferred to the blood pass through the medium 44 and into the blood in the blood chamber 40.
• the dialysate Prior to entering the dialyzer 34, the dialysate is heated in a heater 88 to the normal human body temperature.
• the temperature of the dialysate entering the dialyzer 34 should be at body temperature to avoid removing or transferring heat to or from the patient. Excessively warm dialysate will harm blood cells. Excessively cool dialysate will chill the patient.
• Temperature sensors (not shown) are located in the dialysate supply line 86 to monitor the temperature of the dialysate.
• Conductivity sensors are present in the dialysate supply line 86 to measure the conductivity of the dialysate.
• the desired level of ionic transfer between the blood and the dialysate is achieved by predetermined conductivity characteristics of the dialysate.
• the used dialysate containing the waste products is removed from the dialysate chamber 42 through a dialysate waste tubing or line 90 by operation of a drain pump 94.
• the dialysate containing the waste products is delivered by the drain pump 94 to the waste drain 38.
• the waste drain 38 may be a separate container which accumulates the used dialysate and accumulated waste products, or it may simply be a public sewer.
• bypass valves 96 and 98 are positioned at the inlet and the outlet of the dialysate chamber 42, respectively.
• the bypass valves 96 and 98 are connected by a bypass line 100.
• the bypass valve 96 directs the inflow of dialysate into the dialysate chamber 42
• the bypass valve 98 directs the outflow of dialysate into the dialysate waste line 90. If a safety condition is detected, the bypass valves 96 and 98 are operated to their alternative states, thereby directing the flow of dialysate through the bypass line 100, and bypassing the flow of dialysate around the dialyzer 34.
• the elements of the extracorporeal flow path which have generally been described above, are shown and referenced generally at 110 in Fig. 3.
• the extracorporeal flow path elements 110 are controlled by an extracorporeal microcontroller 112 or other similar processing device, as shown in Fig. 3.
• the extracorporeal microcontroller 112 executes a program recorded in a memory 114 to control the extracorporeal flow path elements 110.
• the elements of the hydraulics flow path, which have generally been described above, are also shown and referenced generally at 116 in Fig. 3.
• the hydraulics flow path elements 116 are controlled by a hydraulics microcontroller 118 or other similar processing device.
• the hydraulics microcontroller 118 executes a program recorded in memory 120 to control the hydraulics flow path elements 116.
• An operator/machine interface (OMI) and safety microcontroller 122 is also connected to the extracorporeal flow path elements 110 and the hydraulic flow path elements 116.
• the OMI and safety microcontroller 122 monitors the operating conditions in the extracorporeal and hydraulics flow paths, and upon detecting a potentially risky condition for the patient, assumes control over the extracorporeal and hydraulics flow path elements 110 and 116 to place them into a safe patient state.
• the safety microcontroller 122 executes a program recorded in its memory 124 to monitor the operating conditions of the dialyzer machine 30 and the patient 32 during dialysis treatment, to determine potentially hazardous conditions, and to place the dialyzer machine in a safe patient state upon the detection of a hazardous condition.
• the three microcontrollers 112, 118 and 122 communicate with one another to exchange information and confirm proper functionality, among other things, by use of a bus or network 126.
• the extracorporeal microcontroller 112 and the hydraulic microcontroller 118 are generally responsible for the control functions of the dialysis machine.
• the safety microcontroller 122 is responsible for the safety functions of the dialysis machine.
• the safety system microcontroller is capable of placing the dialysis machine in the safe patient state.
• the safety microcontroller 122 can assume control over the hydraulics flow path elements 114 to achieve the safe patient state.
• the extracorporeal microcontroller 112 should the extracorporeal microcontroller 112 fail, the safety microcontroller 118 will assume control over the extracorporeal flow path elements 110 to achieve a safe patient state. If the safety microcontroller 122 fails, the extracorporeal and hydraulics microcontrollers are capable of placing the dialysis machine in a safe patient state.
• the safety standards also govern the entry of information into the dialysis machine.
• those standards are concerned with confirming to the operator that the information entered into the machine is what the operator intends. It is also important that the operator know that the information entered is the information accurately stored in the memories 114, 120 and 124.
• the other general safety concern regarding information entry is that the safety microcontroller 122 and the control system microcontrollers 112 and 118 commence operations using the same entered information. If the safety and the control systems do not start with the same information, it will be extremely difficult or impossible to detect a difference in operation of the two systems, and such a difference could give rise to a safety situation.
• the present invention achieves a more convenient and natural approach to entering and validating information into a dialysis machine, without compromising the safety standards and while simultaneously supplying better information to the operator concerning the safety and operating conditions of the dialysis machine.
• the operator-machine interface is the means by which information is entered into the dialysis machine and by which the entered information is validated back to the operator.
• the OMI functionality is incorporated with that of the safety microcontroller 122 shown in Fig. 3, or could be performed by its own microcontroller. By entering all information through the safety microcontroller 122, it is assured that the control system microcontrollers 112 and 118 will start with the same values or information which is initially recorded in the safety microcontroller 122.
• the preferred means for entering and for displaying the entered information back to the operator is a conventional touch screen 130 attached to a front viewing surface of a conventional cathode ray tube (CRT) 132.
• the touch screen 130 and the CRT 132 are incorporated in a monitor 134 of the machine 30 shown in Fig. 1.
• the touch screen 130 is a thin transparent sheet assembly which physically overlays a front viewing surface of the CRT 132.
• the overlaying relationship is generally illustrated in Fig. 3.
• the images displayed on the viewing surface of the CRT 132 define locations which the operator may select by applying finger pressure to the touch screen 130 at the location of the images.
• the touch screen 130 generates signals which describe the X-Y coordinates of the position where the finger pressure is applied.
• Those signals are supplied to a conventional touch screen converter 136 which converts the X-Y signals from the touch screen 130 into corresponding signals which are supplied to the safety microcontroller 122.
• the programmed functionality of the safety microcontroller 122 correlates the signals from the touch screen converter 136 with the location of the images displayed on the viewing surface of the CRT 132. The correlation is possible because signals are supplied by the safety microcontroller 122 to a video driver 138 to control the position and details of the images displayed on the viewing screen of the CRT 132.
• the microcontroller 122 is able to recognize those selections made by the operator touching the touch screen 130. This functionality is typical and well known for touch screen input and output (I/O) devices.
• an audio alarm 140 and a visual alarm 142 are used in the dialysis machine 30.
• the audio and visual alarms 140 and 142 are controlled by a driver 144.
• the driver 144 responds to control signals supplied by the safety microcontroller 122 to create a visual alarm or signal or an audio alarm or signal when necessary.
• FIG. 4 An example of a visual display created by the safety microcontroller 122 and the video driver 138 is shown in Fig. 4.
• the visual display is shown as it appears on the viewing screen of the CRT 132, and it will therefore be referred to as a display screen 150.
• the display screen 150 is divided into different areas which present information concerning the functions and status of the dialysis machine.
• a relatively large main window area 152 shows a number of setup parameters for controlling the dialysis machine during treatment, in this example.
• a title bar 154 indicates that setup parameters shown in the main window 152.
• the eight setup parameters shown in the main window 152 are the patient identification number at 156, the type of dialysis treatment at 158, the time for the dialysis treatment at 160, the heparin infusion rate during the treatment at 162, the dialysate flow rate during treatment at 164, the profile for delivering sodium in the dialysate during the treatment at 166, the profile for delivering bicarbonate in the dialysate during the treatment at 168, and the target loss or volume of waste products to the removed from the patient's blood during the treatment at 170.
• Other types of setup parameters could be displayed.
• the patent application described above for a Graphical Operator Machine Interface and Method for Information Entry and Selection in a Dialysis Machine describes an advantageous technique of selecting parameters and programming the dialysis machine.
• the right hand border (as shown) or some other selected area of the display screen 150 is occupied by images which allow the operator to select functional features of the display for purposes of entering information or monitoring the performance of the machine for the treatment.
• Touching a screen image 172 allows the operator to index among various displays and, for example, select the setup parameters, as is shown of at 172 and 154. Touching the touch screen above a last screen image 174 allows the operator to toggle between the present display screen 150 and the previously presented display screen.
• Touching a treatment setup image 176 allows the operator to select from a list a dialysis functions that are expected to occur in conjunction with each treatment.
• a quick OPS image 178 allows the operator to select from a list of easy access functions that are not necessarily expected in each treatment.
• the on and off operation of the blood pump 46 (Fig. 2) is controlled by touching the blood pump icon or image 180.
• the blood pump is turned on and off with each touch.
• the rate of blood pump operation may be adjusted incrementally upward or incrementally downward by touching an up arrow image 182 or a down arrow image 184, respectively. Continual finger pressure on either of the arrow images 182 or 184 causes repeated incrementation.
• the blood pumping rate is displayed in the location where the word "off" appears in the blood pump image 180.
• the bottom border or other designated area of the display screen 150 also includes a number of images or icons which represent control and monitoring conditions associated with the patient and the dialysis machine.
• the image at 186 which states "resume” is selected to resume treatment if the blood pump operation has been stopped.
• the image at 188 which states "UF” accompanied by a downward pointing arrow is selected when it is desired to reduce the amount of ultrafiltration which may be occurring during a treatment.
• Ultrafiltration is a well- known aspect of some types of dialysis treatments which involves the direct introduction of an ultrafiltration solution into the blood.
• the ultrafiltrate may be introduced into the extracorporeal flow path prior to the blood reaching the dialyzer 34 (Fig. 2) or after the blood has passed through the dialyzer.
• the dialyzer 34 Fig. 2
• no functionality will be achieved by touching the ultrafiltration image 188.
• the image displayed at 190 is an icon representative of the dialyzer 34 (Fig. 2) . Touching the dialyzer image 190 results in bypassing the dialysate flow around the dialyzer.
• the image or icon of a heart at 192 allows the operator to obtain information concerning the patient's blood pressure, if a blood pressure monitoring functionality is a part of the dialysis machine and a blood pressure cuff is connected to the patient.
• the display screen 150 in this manner allows a more convenient, time-conserving, reliable and safety-promoting approach to setting up the dialysis machine and operating the machine during the treatment, as is described more completely in the above referenced application for a Graphical Operator Machine Interface and Method for Information Entry and Selection in a Dialysis Machine.
• One of important safety-promoting aspects of the display screen 150 is its interaction with the operator and with the functionality of the OMI/safety microcontroller 122 (Fig. 3) in validating information, particularly numeric values, entered by the operator during the setup of the machine for dialysis treatments and during modification of the operating parameters of the machine while the dialysis treatment is progressing.
• the aspects of the information validation technique according to the present invention are .represented in the flow chart shown in Figs. 9A and 9B, and are illustrated in the screen displays shown in Figs. 4-8.
• the steps of the technique shown in the flow chart of Figs. 9A and 9B are executed by the OMI/safety microcontroller 122 in conjunction with the memory 124 connected to the microcontroller 122.
• Each of the steps shown in the flow chart of Figs. 9A and 9B are separately identified by reference numbers for convenience of description.
• the operator In order to employ the information validation technique of the present invention, the operator must first select a parameter to be modified or established. The selection of the parameter is shown in Fig. 9A at step 200. The selection is also shown in Fig. 4 where the touch screen is touched in the area above the screen image 172. The screen image 172 is highlighted and the word "setup" appears. The fact that the setup parameters have been selected appears in the title bar 154. The setup parameters which are available to the established or modified are shown in the main window 152.
• a keypad 202 (Fig. 5) is displayed on the display screen 150.
• the signals which define the keypad display 202 are created by the microcontroller 122 and the video driver 138 (Fig. 3), and the CRT 132 (Fig. 3) creates the keypad 202.
• the keypad 202 is presented in place of some of the images which otherwise occupy the right hand and bottom border areas of the display screen 150, as can be seen by comparing Figs. 4 and 5.
• the keypad 202 includes areas which define numeric buttons 204, a selected parameter display area 206 which presents a title corresponding to the parameter selected at 170, a decimal point button 208, an escape button 210, a clear button 212, and an enter button 214.
• an up arrow 216 and a down arrow 218 are located adjacent to the display area 206 to be used for incrementing the value of the parameter shown in the display area 206, either upwardly or downwardly.
• the logical and sensible display of the keypad 202 provides the very important information that the safety microcontroller 122 and a font table 220 (Fig. 3) of the memory 124 are correct and operating properly.
• the font table 220 contains information from which the signals for creating the numbers in the keypad 202 are derived. If the numbers on the keypad 202 are not properly formed, or if the numbers are not located in the positions where the operator expects them to be located, a malfunction can be immediately detected. The operator will recognize the malfunction as making the dialysis machine unreliable.
• the use of the font table 220 to create the keypad 202 is an important aspect of information supplied to the operator concerning the validation and proper functionality of the dialysis machine. Assuming that the information presented in the keypad 202 is correct, the operator will continue with the information validation technique of the present invention and use of the dialysis machine.
• the described functionality which presents the keypad 202 is shown at step 222 in Fig. 9A.
• the program flow ceases until an entry or selection made by touching the screen is detected at 224.
• the purpose of the enter button 214 is to represent the final acceptance of all of the information or numeric values which have just been entered. Until the operator finally accepts the selected information by touching the enter button 214 (Fig. 5), the program flow will continue at the step 228.
• the step 228 involves converting the X-Y signals from the touch screen 130 into an entry value obtained by touching the numeric buttons 204 (Fig. 5) , by use of the touch screen converter 136 (Fig. 3) and the correlation of the signals from the converter 136 with the signals generated by the microcontroller 122 to display the numeric values in the keypad 202 (Fig. 3) .
• the entry value derived at step 228 is thereafter converted at step 230 into an ASCII value.
• the entry value determined at step 228 is directly memory mapped to an ASCII value.
• ASCII values are employed for the purpose of displaying all of the numbers and characters.
• the information entry validation technique of the present invention employs additional important steps to confirm the accuracy and acceptability of the entered value to the operator while simultaneously confirming the proper operation and acceptance of the value by the safety microcontroller.
• the ASCII value is stored at step 232 in a temporary array 234 (Fig. 3) of the memory 124.
• the temporary memory array 234 is a collection of memory locations or cells in which the ASCII value for each entry is separately stored. The individual locations or cells of the array 234 to which the ASCII values derived from each entry are separately stored are shown individually at 236a, 236b, 236c, ... 236n in Fig. 10.
• the microcontroller 122 (Fig. 3) immediately converts the stored ASCII value into a different representation of the same information or value represented by the ASCII value, such as a numeric value, preferably a floating point numeric value.
• the conversion to the different form is shown at step 238 in Figs. 9A and 10.
• the numeric value derived at 238 is stored at 240 in a temporary numeric memory location 242 (Fig. 3) of the memory 124.
• the temporary numeric memory location 242 is a segment or location within the memory 124 which the microcontroller 122 designates for receiving the numeric value.
• the numeric value stored in the temporary memory location at step 240 is immediately converted back into an ASCII value at step 244.
• the font table 220 (Fig. 3) may be used in this conversion if the inherent functionality associated with the conversion does not immediately convert the floating point numeric value into an ASCII value.
• the ASCII value thus derived is thereafter applied to the video driver 138 (Fig. 3) , and in response, the video characters corresponding to the ASCII value are generated, as shown at 246 in Fig. 9A.
• the CRT 132 (Fig. 3) displays the character to the operator as shown at 248 in Fig. 9A.
• the display of the value appears in the display area 206 of the keypad 202 as shown in Fig. 6. Fig.
• FIG. 6 illustrates the circumstance where the numeric "6" button 204 has been selected by finger pressure, resulting in the number "6" being presented in the display area 206 (Fig. 6) .
• the entered value of "6" is the first value of 3 values to be entered.
• the first ASCII entry (the numeric value "6") is stored in the cell 236a; the second ASCII entry (the decimal point) is stored in cell 236b; and the third ASCII entry (the numeric value "3") is stored in cell 236c. If the entered information included additional selected values, all of the additional entries would be stored to subsequent memory cells and the last or nth ASCII entry would be stored in the last cell 236n.
• a numeric value is derived at step 238, all of the values which have previously been recorded in the cells 236a, 236b, 236c, ... 236n are used in the ASCII-to-numeric conversion, as is shown in Fig. 10. In this manner, the value displayed at step 248 (Fig.
• 9A constitutes a measure of the collective accuracy of each value previously and presently entered. Since the collective information of all of the previous values is used in the last ASCII to numeric conversion, rather than simply updating the information previously displayed with each new conversion, any mistake in the selected values is likely to be recognized by the operator.
• the entry and conversion technique provides the operator with an effective indication of whether the stored information may have become corrupted. Should the operator receive the display of a value which the operator did not enter, or if a previously entered value suddenly changes with a subsequent entry, corruption of the entered information is suggested. A circumstance of a computational malfunction in the two conversions (ASCII to numeric, and numeric back to ASCII) might also be suggested. In either circumstance, the operator is alerted to a potential malfunction within the dialysis machine, and the operator should recognize that the machine should not the used for the dialysis treatment.
• the use of the font table to display the values also provides a continuing indication of the functionality of the system. Preferably the font table is the only font table employed in the safety system for the display of information to the operator.
• the display of the entered information also creates certain inherent protections against operator induced errors.
• the repetitive display of the information previously entered constitutes a requirement that the operator continually accept the previous values as well as the present values entered.
• Each subsequent step of entering additional values inherently causes the operator to re-evaluate the previous information presented on the display area 206 of the keypad 202 (Fig. 5) . Consequently the entry process inherently creates a naturally-appearing requirement for reconsideration and re-validation of the previously entered information.
• this form of re-validation occurs inherently in conjunction with the natural process of entering each new value, not as an artificial and time-consuming requirement to specifically enter data twice or to look at data appearing in two different locations on the dialysis machine.
• the operator To make an entered value available for use by the control and safety system of the dialysis machine, the operator must select the enter button 214 as shown in Fig. 7. Selection of the enter button 214 initiates the program flow shown in Fig. 9B to assure that the information which has been validated by the operator will be recorded in a permanent memory segment 250 (Fig. 3) of the safety system memory 124. Once the value is recorded in the permanent memory segment 250, the control system microcontrollers 122 and 118 gain access to the information by reading the values in the permanent memory from the network 126. Touching the enter button causes the temporary ASCII memory array 236a, 236b, 236c, etc. to become available for reuse during the same process with the next selected information.
• Detection of the enter button at step 226 causes the microcontroller 122 to calculate a cyclic redundancy check (CRC) value based on the information contained in the temporary memory location 242.
• CRC cyclic redundancy check
• the calculation of the CRC occurs at step 252 as shown in Figs. 9B and 11.
• a CRC is a value derived from the bit structure of the particular value contained in the temporary memory location 242, and the CRC is used to detect errors that may occur from corruption of the value occurring after the CRC has been calculated. Errors of this nature may sometimes arise from failures of memory or due to corruption occurring when information is transferred to or obtained from memory within the computer system.
• the CRC may be calculated by using any number of well known CRC calculation algorithms.
• the calculated CRC is associated with the numeric value from which it was calculated, and the numeric value and its corresponding CRC are stored in the permanent memory location 250 (Fig. 3), as shown at the step 254.
• the values stored in the permanent memory location 250 are in a form acceptable for use and transfer between the safety system and the control system microcontrollers of the dialysis machine.
• a further validation of the values recorded in the permanent memory 250 is performed.
• the numeric value stored in the temporary numeric memory location 242 is compared at step 256 to the numeric value stored in the permanent memory location
• step 258 all previously entered values in the temporary memory locations 234 and 242 and in the permanent memory 250 are erased at step 258 and the program flow reverts back to step 224 (Fig. 9A) . Erasing the values causes the operator to commence again the information entry and validation procedure shown in Fig. 9A.
• the keypad display 202 is erased from the display screen 150 by the step shown at 260 in Fig. 9B. The absence of the keypad 202 from the display screen is shown in Fig.8. Thereafter, the value in the permanent memory 250 is converted to an ASCII value, as shown at 262. Again, the font table 220 may be employed to make the conversion if it is not inherent in the program which establishes the numeric value.
• the microcontroller 122 supplies the ASCII value derived from the conversion at step 262 to the video driver 138, as shown at step 264, and the signals from the video driver 138 are used by the CRT 132 to display the final value, as shown at step 266.
• the final value displayed at 266 is the same value which was accepted by the operator by touching the enter button 214 of the keypad 202. However, since the keypad 202 has been erased at step 260, the final value is displayed on the setup parameter button 170 (Fig. 8) which was initially selected at step 200 to initiate the information entry and validation technique of the present invention.
• the value in the permanent memory 250 is available to be transferred to and used by the management system extracorporeal and- hydraulics microcontrollers 112 and 118, respectively. Transfer of the value to the microcontrollers 112 and 118 results in that value being stored in their memories 114 and 120, respectively, as is shown at step 268.
• the use of permanent memory 250 (Fig. 3) for storing the values used by the safety microcontroller 122 assures that those values will be available to the safety system after start-up following a power loss to the dialysis machine.
• the information entry validation technique of the present invention achieves a number of significant improvements for the operators of dialysis machines.
• the information entered by the operator is inherently validated in a convenient and time-conserving manner, as a natural adjunct to the entry of information itself.
• the entire value displayed is re-presented to the operator with each subsequent entry.
• Each subsequent entry therefore confirms all of the previous entries and presents the result to the operator. Should the operator have failed to recognize an error occurring from a previous entry, each subsequent entry of information presents another opportunity for the operator to recognize a previous error.
• the final entered value must be accepted by the operator by selecting the enter button to re-affirm the final acceptance of the entered information.
• the information entry validation technique of the present invention also offers significant improvements in the functional operations associated with the information entry and validation.
• the use of two separate conversions, such as ASCII to floating point numeric, serves as a double-check on the functionality of the machine.
• the use of a single font table by which to achieve the conversions eliminates the possibility that errors could occur in one font table that were not present in another font table.
• the use of multiple memory locations to store values obtained from the two conversions, and to store the permanent value substantially reduces the possibility that an error in the memory might allow a corrupted value to be used by the dialysis machine.
• the comparison of the temporary and permanent values before the final value is accepted for use by the control and safety systems of the machine constitutes a further check on the validity of the accepted information.

Landscapes

• Health & Medical Sciences (AREA)
• Heart & Thoracic Surgery (AREA)
• Vascular Medicine (AREA)
• General Health & Medical Sciences (AREA)
• Engineering & Computer Science (AREA)
• Public Health (AREA)
• Hematology (AREA)
• Anesthesiology (AREA)
• Veterinary Medicine (AREA)
• Animal Behavior & Ethology (AREA)
• Cardiology (AREA)
• Life Sciences & Earth Sciences (AREA)
• Biomedical Technology (AREA)
• Medical Informatics (AREA)
• Surgery (AREA)
• Nuclear Medicine, Radiotherapy & Molecular Imaging (AREA)
• Urology & Nephrology (AREA)
• Epidemiology (AREA)
• Primary Health Care (AREA)
• External Artificial Organs (AREA)

Priority Applications (4)

Applications Claiming Priority (2)

Publications (1)

Family

ID=23922386

Family Applications (1)

Country Status (7)

Cited By (7)

Families Citing this family (102)

Citations (11)

Family Cites Families (12)

• 1995
  • 1995-06-07 US US08/484,015 patent/US5620608A/en not_active Expired - Lifetime
• 1996
  • 1996-06-06 ES ES96918183T patent/ES2140102T3/es not_active Expired - Lifetime
  • 1996-06-06 CA CA002218551A patent/CA2218551C/en not_active Expired - Fee Related
  • 1996-06-06 WO PCT/US1996/009110 patent/WO1996041292A1/en not_active Ceased
  • 1996-06-06 EP EP99109228A patent/EP0952541A1/en not_active Withdrawn
  • 1996-06-06 EP EP99109227A patent/EP0952540A1/en not_active Withdrawn
  • 1996-06-06 JP JP50151097A patent/JP3917656B2/ja not_active Expired - Fee Related
  • 1996-06-06 EP EP96918183A patent/EP0835493B1/en not_active Expired - Lifetime
  • 1996-06-06 DE DE69605919T patent/DE69605919T2/de not_active Expired - Fee Related

Patent Citations (11)

Also Published As

Similar Documents

Legal Events