The customer reported that when the ct couch is commanded by the gantry control panel to go "up", the couch moves "down".The philips field service engineer (fse) confirmed there was no harm to a patient, operator or bystander.The fse determined by the logs that the "unload" button on the right ct gantry control panel was intermittently sticking causing the couch to move in the opposite direction than requested.The fse replaced the right ct gantry control panel to resolve the issue.
|
On 30-jul-2015, the customer (b)(6) reported that when the patient support was commanded to go upwards, it moved downwards.A philips field service engineer (fse) stated that the device was not in clinical use when the issue occurred and there was no harm to a patient, operator or bystander as a result of this issue.The fse stated that the patient support motion stopped when the button was pressed again.The customer contacted the philips help desk to inform them about the event.The customer support specialist (css) found an error indicating that the home button (unload) on the gantry right-side panel was stuck.The fse was then dispatched to the site.The fse evaluated the system and found that the unload button on the front right gantry control panels were stuck engaged.The fse replaced front right gantry control panel assembly to resolve the issue.The fse provided the defective panel and log files for engineering evaluation.Engineering evaluated this issue and the following observations were made: occurrences of stuck button error messages were documented in the on the system log files; small amounts of dried white substance were present in the openings surrounding all the buttons; misalignment was found and is more pronounced on the patient unload button, requiring more force to push and slowing its return; the patient unload button became stuck for two minutes after depressing it several times; the bench test was repeated with the cover removed.None of the buttons became stuck or failed with the cover removed.Therefore, it concludes that stuck patient unload button was caused by misalignment after sometime use and dried white substance around the button.Ct engineering determined this issue to have acceptable risk with the following mitigations: the system implements multiple means to prevent un-commanded motion and single point of failure.These means include watchdog timer for drive tasks, redundant switches in the control panel buttons, collision envelope avoidance software, providing emergency stop buttons and emergency power-off (epo) for the user in case of failure of other design mitigations.A failure during motion could be caused either by a software defect in the embedded operating system used or a defect in the control logic implementation, and the system was unable to detect that.The failure could only occur during the time where the operator initiated motion via the control panel.In this case the operator is in contact with the patient and visually watching the motion and would see the couch continue to move after the button was released.The trained operator would use the emergency stop control to stop the motion.Also, design mitigations for prevention of the hazardous situations: stopping horizontal motion in the presence of resistance force (not applicable for vertical); table collision envelope.Single fault safe against uncontrolled motion: motion tasks watchdog timer.If maximum time of control response is exceeded, e-stop will be activated; double switches on control buttons provides redundancy such that 2 switches must be activated before a motion is executed.Design mitigations enabling human response: continuous activation for manual motion; emergency stop controls enable termination of motion in hazardous condition; emergency power off switch supplied with system or site installation enables the operator to shut off power to the entire system; speed of motorized non-programmed motion is limited.
|