The evaluation and assessment of this case was based on log file analysis.It can be confirmed that the device performed a reboot on the reported date of event at 20:04:19 system time.Other than reported, operation was resumed a few seconds later at 20:04:30.It is furthermore evident that the device was placed into standby mode at 20:06:11 with switchover to test mode three seconds later.The device is designed to perform a system reboot whenever a significant deviation is recognized by the supervisor functions that cannot be removed by other means.If a reboot occurs during an active ventilation mode, operation will be restored after a successful completion of the reboot sequence in the same mode with the latest valid settings.As confirmed for the particular case, a reboot will not last longer than 15 seconds when the error condition can be cleared-off.The second aspect of unintended autonomous mode change - reportedly to test mode - can be denied.A mode change requires a two-step input sequence: selecting the new mode via input at the display soft keys and confirming the input command by pressing the rotary knob within a specified period of time; if the second step of confirmation is not recognized within a specified time period, the change sequence will be aborted.This means that the mode change is carried out and supervised by two independent channels.There is no indication that these safety mechanisms failed in this case.The reboot in the particular situation was triggered by a sporadic deviation found with a microprocessor on the board that controls the therapy functions.The device was used for two more days without recurrence of the deviation.The local service organization has however replaced the therapy control board as a precautionary measure.
|