The PCA Interlock App in AADL!

Transcription

1 The PCA Interlock App in AADL! Sam Procter, John Hatcliff, Stephen Barret, and Robby SAnToS Lab Kansas State University Support: This work is supported in part by the US National Science Foundation (NSF) (# ), the NSF US Food and Drug Administration Scholarin-Residence Program (# ) and the National Institutes of Health / NIBIB Quantum Program.

2 Health Care Involves A Variety of System Components Sensor Data Displays Clinical Protocols Clinicians Actuators Information Systems Patient! Sensors

3 Motivation n What are the types of things we could do with device integration? n Information forwarding n Automation of clinical workflows n Closed loop control between devices n Unlike personal computing, medical devices are not designed to work together n Integrating medical devices would bring myriad benefits n how can we do so safely?

4 Outline n Background n PCA Interlock Scenario n Medical Application Platforms n Language

5 PCA Interlock Scenario n Patients are commonly given patient-controlled analgesics after surgery n Crucial to care, but numerous issues related to safety n Data for disabling the pump exists now (just a system invariant) -- we just need to integrate it

6 Clinically Supported Motivating Clinical Problem: PCA Overdose n n A particularly attractive feature may be the ability to automatically terminate or reduce PCA (or PCEA) infusions when monitoring technology suggests the presence of opioidinduced respiratory depression. To facilitate such capabilities, we strongly endorse the efforts to develop international standards for device interoperability and device-device communication. It is critical that any monitoring system be linked to a reliable process to summon a competent health care professional to the patient's bedside in a timely manner.

7 PCA Pump Safety Interlock Fully leverage device data streams and the ability to control devices Devices PCA Pump Clinician / Monitoring Capnograph Enable Pump for safe time window Monitoring Data + Alarm Information Enable bolus dose only when ticket present Device Task controller PCA Bolus Enable Ticket Combined PCA Vitals Monitoring Aggregated Monitoring Status Status Display for PCA Monitoring Application Pulse Oximeter Monitoring Data + Alarm Information

8 Medical Application Platforms Devices Displays Clinician Console Apps B u s EMR Databases Computational Platform n A Medical Application Platform is a safety- and securitycritical real-time computing platform for n n Integrating heterogeneous devices, medical IT systems, and information displays via communications infrastructure, and Hosting applications ( apps ) that provide medical utility via the ability to acquire information from and update/control integrated devices, IT systems, and displays

9 Background PCA Pump Interlock Architecture SUI App Display View Display Medical Application Platform Data for Display App Start / Stop Commands Sensor + Alarm Data Data should arrive once per second Clinician (App Administrator) Pulse Oximeter, Capnograph, and Patient Controlled Analgesia Pump PCA PR SPO 2 ETCO 2 RR View Display Configuration, Alarm Clear Patient Attach Sensors

10 Outline n Background n Language

11 Language Model AADL System Output rate: 1 sec.. 5 sec Device1 Device2 AADL Process: Logic Thread1 Thread3 Thread2 AADL Process: Display Thread1 Thread2 Channel Delay: 50ms Period: 50ms WCET: 5ms

12 Language System Medical Devices Software Components Communication links between components and properties of those links!

13 Language System Medical Devices Software Components Communication links between Components and properties of those links!

14 Language Device Interface Specification Ports Properties of those ports Device API Only -- Presents the app s view of the required device capabilities, not the full device capabilities

15 Language Device Interface Specification Device API Only -- Presents the app s view of the required device capabilities, not the full device capabilities Ports Properties on those ports

16 Language Process Specification External ports Tasks (Threads) Connections between external ports and threads

17 Language Process Specification External ports Tasks (Threads) Connections between external ports and threads

18 Language Thread Specification External ports Properties

19 Language Thread Specification External ports Properties Any necessary architectural annotations can be created!

20 Language Subset AADL Constructs Used AADL Construct System Device Process Thread System-level port connection Process-level port connection Process implementation-level port connection Components MAP Concept Layout Medical Device API for App Software Component Task Connections Channel Task Trigger Task-Port Communication