Potential fix and timing: the elmo motion controller configuration was modified to require hall sensors to agree with the motor encoder before allowing motion.This adds a level of redundancy by requiring 5 signals to be in agreement.This change should allow the elmo motion controller to detect an encoder signal fault and put the system in a "safe" (non-moving) state if the tilt drive motor encoder malfunctions; effectively eliminating the chance of harm occurring from unintended motion of the gantry.Mobius imaging is currently working on the update to the motion controller configuration settings.The new version of the tilt-drive motion controller configuration settings should be available for airo systems by the end of september 2017.Brainlab will actively contact affected customers immediately to schedule the installation of the update.Mobius imaging believes, due to an issue with the configuration settings of the tilt-drive motion controller, if a tilt-drive motor has an intermittent connection or broken encoder or sensor wire there is a risk of unintended tilt motion of gantry while airo system is homing the axis at startup or preparing for a scan.Since the airo is not currently monitoring for intermittent connections or broken tilt-drive motor wires, if a wire breaks or the signal becomes intermittent the tilt-drive motor would not get the correct feedback and the motor could behave unpredictably.If a tilt-drive motor wire breaks or the signal becomes intermittent the following behaviors could be seen in the airo: when pushing the green button to home/tilt the gantry, the gantry may tilt in either direction, and at a higher than normal speed.A test fixture was added to a system in-house to introduce an intermittent failure of the different motor and encoder wires, and the unintended motion of the gantry was replicated.The elmo motion controller configuration was modified to require hall sensors to agree with the motor encoder before allowing motion.This adds a level of redundancy by requiring 5 signals to be in agreement.This change should allow the elmo motion controller to detect an encoder signal fault and put the system in a "safe" (non-moving) state if the tilt drive motor encoder malfunctions.Verification testing was performed and the update worked as intended.The firmware update mitigates the risks associated with this failure mode.Investigation of the exact root cause is still on-going.The ct technician/operator running the system will know if the gantry tilts, however the operator may not be able to respond (by releasing green button or pressing the emergency stop button) in time to prevent harm.There have been no injuries reported related to this issue.Conclusion: this issue was determined to be a class i recall, requiring immediate notification to all customers/users, fda, and row authorities.
|