The log file was available for investigation.The log file analysis confirmed that the affected device performed two independent restarts during ventilation on (b)(6) 2023.The investigation revealed that both restarts occurred in response to a transmitted command from the co2-sensor.Communication between the co2-sensor and the ventilation units takes place via a serial data transmission protocol.The command transmitted by the co2-sensor in this case is not provided for and not implemented in the current firmware of the co2-sensor.According to specifications, the ventilator responds to unknown commands by performing a restart of the system.The co2-sensor used at the time of failure was made available for further investigation.The specific command that caused the reboot at the customer site could not be reproduced during these investigations.The investigation revealed that the co2-sensor's insulation was locally damaged.Neither mechanical stress on the sensor cable nor immersion in a water bath could reproduce a malfunction.Data transmission via the serial data transmission protocol is digital and check sum checked, so potential emc interference and potential involvement of the defective insulation in the restart events was judged unlikely.In addition, the coupling process between co2-sensor and the ventilator was investigated as a possible cause for the command leading to the restarts.1200 initialization cycles on an independent ventilator using a test script were performed without error.Also 100 manual coupling cycles on an independent ventilator did not reveal any deviations.The cause of the unknown command in the communication path between the co2-sensor and the ventilator could not be conclusively determined.During a restart, ventilation is temporarily interrupted, and the secondary audible alarm signal of the ventilator unit is posted.Meanwhile, the inspiration valve is open against the environment to allow the patient to breathe spontaneously.After 8 seconds at the latest, evita v800 automatically continues ventilation with the former settings.Restart of the control unit is completed after one minute at the latest.Meanwhile, the user can follow the resumed ventilation on the oled display of the ventilation unit and read safety-relevant parameters.The restart is finally indicated by the alarm message "ventilation unit restarted" on the control unit with acoustic alarm tone sequence and the secondary acoustic alarm signal of the ventilation unit is terminated.The ventilator alarmed the restarts as intended and resumed ventilation after the restarts with the former settings.No patient harm was reported in this case.To date, no other comparable restart events for the product family (consisting of evita v800, evita v600, baby log vn800, baby log vn600) have come to dräger's attention from the field.Based on current knowledge, the results of this complaint investigation have not identified any new or additional risks that have not yet been addressed in the ventilator's risk management file.
|