The log file of the affected evita v800 was made available and analyzed for the investigation.Based on the log file analysis, it was possible to understand that an unexpected failure of the screen display occurred on 21.12.2021, at 07:58 system time.Contrary to what was reported, this failure did not occur during ventilation.The unit had been switched to standby mode shortly before and settings for o2 therapy were being made.Further, log entries indicated that an internal software process could not be completed by the device in the expected time, whereupon the security software performed a restart of the entire device as a specified response, resolving the problem.In an automated continuous run under ventilation with customer settings, no failure of the software process for the screen display could be traced with an identical ventilator.As a safety feature of the system, the safety software analyzes and verifies the proper functioning of the device.In the event of a detected deviation of an internal software process for the screen display, the device initiates a restart of this software process.Ventilation is not affected and continues with unchanged settings.Meanwhile, the user can follow the continuous ventilation via the oled display of the ventilation unit and read safety-relevant parameters such as fio2 concentration, minute volume and airway pressure.If the restart of the internal software process cannot be successfully completed in the expected time, the safety software initiates a synchronous restart of the ventilation unit and the control unit.During the restart sequence, the safety valve is opened to the environment to allow the patient to breathe spontaneously.The deviation is indicated by an activated auxiliary acoustic alarm (piezo loudspeaker of the ventilator).The ventilator restart sequence lasts approximately 8 seconds until ventilation is automatically resumed with the last settings.Finally, the alarm message "ventilator restarted" with accompanying acoustic alarm is displayed on the screen and the additional acoustic alarm goes off automatically.The device reacted to a detected timeout in the software as prescribed and triggered synchronized restarts of the ventilator and the control unit.The user was alerted to the situation by an audible and visual alarm.There was no patient injury reported.
|