The provided log file of the affected device was analysed regarding the reported event.Based on the analysis of the log file the reported event could be confirmed.The log file revealed two restarts of the ventilation unit for unknown reason.Since the internal communication could not be reset within expected time in the course of the restart sequence, the alarm message device failure (3) was posted.As a safety feature of the system, the safety software analyses and verifies proper function of the device.If the safety software detects an internal failure concerning the ventilator, a restart of the ventilation unit will be triggered with accompanying alarm.The restart sequence lasts for a maximum of 8 seconds.During that time the emergency-breathing valve remains open to ambient allowing for spontaneous breathing.After successful restart the ventilation will be automatically resumed and continued with the latest settings.If the internal communication between the cockpit and the ventilation unit cannot be reset within expected time, the alarm message "device failure (3)" will be posted.The display of monitoring parameters on the cockpit screen might be restricted in case of present "device failure (3)".Safety relevant parameters as fio2, minute volume, or airway pressure are displayed in the supplemental oled-display wherein the user can track the on-going ventilation.The device reacted as specified to the detected deviation.The number of similar cases, related to the same root cause, is within the expected range of the respective risk assessment and thus accepted.
|