Double-CPU (central processing unit) framework alarm control device and system for extracorporeal ventricular assist system

Abstract

The utility model provides a double-CPU framework alarm control device and a double-CPU framework alarm control system for an extracorporeal ventricular auxiliary system. The double-CPU framework alarm control device comprises a master control CPU, a motor driving module, a main alarm module, a backup CPU, a backup alarm module and / or a control unit, the main control CPU and the backup CPU are respectively connected and communicated with the motor driving module through communication ports; the main control CPU is electrically connected with the main alarm module, and the backup CPU is electrically connected with the backup alarm module; and the OR control unit is used for performing OR operation on an output signal of the blood pump control end of the master control CPU and an output signal of the blood pump control end of the backup CPU, and controlling the motor driving module to start or stop according to an OR operation result. The utility model further discloses an in-vitro ventricle auxiliary system. According to the utility model, the complete dual-backup driving blood pump can work normally, and the safety of an in-vitro ventricular auxiliary system is improved.

Description

Technical Field

[0001] The utility model relates to the technical field of medical devices, and in particular to a dual-CPU architecture alarm control device and system for an extracorporeal ventricular assist system. Background Art

[0002] An extracorporeal ventricular assist system (EVAS) is a medical device that uses an external device to assist or replace the heart's pumping function. It utilizes advanced pumping and blood processing technologies to draw a portion of the patient's venous blood from the body, oxygenate it, and pressurize it before returning it to the body, thereby enhancing circulation and improving heart function. The EVAS generates blood circulation through the blood pump motor, making it crucial to ensure continuous operation of the blood pump. Blood pump failure, communication anomalies, power supply anomalies, or main chip failure can all cause the blood pump to malfunction. Therefore, real-time monitoring of all EVAS components to provide timely alarms when anomalies occur and ensure the proper functioning of the blood pump is crucial.

[0003] In the prior art, Chinese patent publication number CN220874439U discloses a dual-backup drive control circuit for a blood pump, comprising a main control MCU, a pre-driver chip, and a driver circuit. The driver circuit is electrically connected to the pre-driver chip and the blood pump motor. The main control MCU is electrically connected to the pre-driver chip. The pre-driver chip is controlled by the main control MCU to drive the motor according to set parameters through the driver circuit. When the main control MCU fails, the pre-driver chip can operate independently and drive the motor according to set parameters through the driver circuit. An alarm circuit is also provided, and the alarm circuit is controlled by the main control MCU to issue an alarm. Although this patent implements a dual-backup design for the blood pump drive control circuit by providing a main control MCU and a pre-driver chip, ensuring normal operation of the blood pump in the event of a main control MCU failure, the main control MCU and the pre-driver chip in this patent control the operation of the blood pump motor in a cascaded manner. When the pre-driver chip fails, the blood pump will not operate normally regardless of whether the main control MCU fails. This fails to achieve full dual-backup drive blood pump operation, and the system security is insufficient. In addition, an alarm cannot be issued when the alarm circuit is abnormal. Utility Model Content

[0004] The utility model aims to solve the technical problems that the existing blood pump control technology cannot achieve complete dual backup to drive the normal operation of the blood pump and the system safety is not high enough, and provides a dual-CPU architecture alarm control device and system for an extracorporeal ventricular assist system.

[0005] In order to achieve the above-mentioned purpose of the present invention, according to the first aspect of the present invention, the present invention provides a dual-CPU architecture alarm control device for an extracorporeal ventricular assist system, including a main control CPU, a motor drive module, a main alarm module, a backup CPU, a backup alarm module and an OR control unit; the main control CPU and the backup CPU are respectively connected to the motor drive module for communication through communication ports; the main control CPU is electrically connected to the main alarm module, and the backup CPU is electrically connected to the backup alarm module; the blood pump control end of the main control CPU is electrically connected to the first input end of the OR control unit, and the blood pump control end of the backup CPU is electrically connected to the second input end of the OR control unit, and the OR control unit is used to perform an OR operation on the output signal of the blood pump control end of the main control CPU and the output signal of the blood pump control end of the backup CPU, and control the motor drive module to start or shut down according to the OR operation result.

[0006] The above technical solution: the main control CPU is the control CPU in the main control circuit of the extracorporeal ventricular assist system. The main control CPU and the backup CPU are respectively connected to the drive motor circuit through the communication port to communicate and obtain the blood pump working information, and send the blood pump working parameters to the drive motor circuit. The blood pump control signals output by the main control CPU and the backup CPU are controlled to start or shut down the motor drive module after OR operation through the control unit, and then control the blood pump motor to work or stop, ensuring that when any of the main control CPU or the backup CPU fails or is reset, it will not affect the power supply of the blood pump motor and enable it to work normally; in addition, the alarm module is also backed up. When the main control CPU fails and fails to control the main alarm module to issue an alarm, the backup CPU drives the backup alarm module to issue an alarm, ensuring that the alarm can be issued in time in case of abnormality, realizing the normal operation of the blood pump with full dual backup drive, and improving the safety of the extracorporeal ventricular assist system.

[0007] In a preferred embodiment of the present invention, the backup CPU is a power management CPU of an extracorporeal ventricular assist system, and the main control CPU and the backup CPU are connected and communicated via a communication port.

[0008] The above technical solution: directly borrows the power management CPU of the extracorporeal ventricular assist system as the backup CPU, does not change the number of CPUs of the original extracorporeal ventricular assist system, reduces costs, and the main control CPU and the backup CPU are connected and communicated through the communication port, which makes it convenient for the main control CPU to obtain power management information. At the same time, it is convenient for the main control CPU or the backup CPU to send and receive data regularly through the communication bus to detect whether the communication link is abnormal or whether other modules are in abnormal status.

[0009] In a preferred embodiment of the present invention, the communication port is a serial communication interface.

[0010] The above technical solution adopts a serial communication interface for communication, which can save the number of CPU pins and is simple, reliable and easy to implement.

[0011] In a preferred embodiment of the present invention, the pulse output end of the main control CPU sends a first pulse signal to the pulse interruption monitoring end of the backup CPU, and the pulse output end of the backup CPU sends a second pulse signal to the pulse interruption monitoring end of the main control CPU.

[0012] In the above technical solution, the backup CPU can determine whether the main CPU is abnormal or faulty by monitoring the first pulse signal, and the main CPU can determine whether the backup CPU is abnormal or faulty by monitoring the second pulse signal, which is convenient for locating the cause of the system failure.

[0013] In a preferred embodiment of the present invention, a display module is further included, and the display module is electrically connected to the main control CPU.

[0014] The above technical solution makes it easy for relevant personnel to read abnormal information.

[0015] In a preferred embodiment of the present invention, the OR control unit includes an OR gate and a switching circuit; the blood pump control end of the main control CPU is electrically connected to the first input end of the OR gate, the blood pump control end of the backup CPU is electrically connected to the second input end of the OR gate, the output end of the OR gate is connected to the on-off control end of the switching circuit, the first end of the switching circuit is connected to the starting end of the motor drive module, and the second end of the switching circuit is connected to the power supply end.

[0016] The above technical solution is simple, reliable and low-cost.

[0017] In order to achieve the above-mentioned purpose of the present invention, according to the second aspect of the present invention, the present invention provides an extracorporeal ventricular assist system, including a power management module, a blood pump, a motor for driving the blood pump and the dual-CPU architecture alarm control device described in the first aspect of the present invention; the control end of the motor is connected to the control signal output end of the motor drive module, the liquid inlet of the pump body is connected to the inlet blood vessel, and the liquid outlet of the pump body is connected to the outlet blood vessel; the power management module is used to provide a power signal for the dual-CPU architecture alarm control device and the motor.

[0018] The above technical solution: The extracorporeal ventricular assist system provided ensures that when either the main control CPU or the backup CPU fails or is reset, the power supply of the blood pump motor will not be affected, so that it can work normally; in addition, the alarm module is also backed up. When the main control CPU fails and cannot control the main alarm module to issue an alarm, the backup CPU drives the backup alarm module to issue an alarm, ensuring that an alarm can be issued in time in the event of an abnormality, realizing the normal operation of the blood pump with full dual backup drive, and improving the safety of the extracorporeal ventricular assist system.

[0019] In a preferred embodiment of the present invention, it further includes one or more displacement sensors installed on the side of the motor rotor for monitoring the movement of the rotor, and the output end of the displacement sensor is connected to the signal input end of the motor drive module.

[0020] The above technical solution: monitors the rotor movement through a displacement sensor to improve system reliability.

[0021] In a preferred embodiment of the present invention, the power management module includes an AC-DC conversion circuit, an inverter circuit, a battery, a charging circuit and a power management CPU; the AC-DC conversion circuit is used to convert the mains power into a DC power signal; the inverter circuit converts the DC power signal or the battery voltage into an AC power signal, and outputs the AC power signal to the winding power supply end of the motor; the charging circuit uses the DC power signal to charge the battery; the power management CPU is used to control the operation of the AC-DC conversion circuit, the inverter circuit and the charging circuit.

[0022] The above technical solution realizes autonomous power supply and battery charging, and can use batteries for backup power supply when there is no mains power, thus expanding the application scenarios of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 This is a structural block diagram of a dual-CPU architecture alarm control device in a preferred embodiment of the present invention;

[0024] Figure 2 This is a structural block diagram of a dual-CPU architecture alarm control device in another preferred embodiment of the present invention;

[0025] Figure 3 It is a structural block diagram of an extracorporeal ventricular assist system in a preferred embodiment of the present invention. DETAILED DESCRIPTION

[0026] The following describes embodiments of the present invention in detail. Examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended only to explain the present invention and are not to be construed as limiting the present invention.

[0027] In the description of the present invention, it should be understood that the terms "longitudinal", "transverse", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", etc., indicating the orientation or position relationship, are based on the orientation or position relationship shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention.

[0028] In the description of the present utility model, unless otherwise specified and limited, it should be noted that the terms "installation", "connection" and "connection" should be understood in a broad sense. For example, it can be a mechanical connection or an electrical connection, or it can be the internal connection between two components. It can be a direct connection or an indirect connection through an intermediate medium. For ordinary technicians in this field, the specific meanings of the above terms can be understood according to the specific circumstances.

[0029] The utility model discloses a dual CPU architecture alarm control device for an extracorporeal ventricular assist system. Figure 1 As shown, in a preferred embodiment, the dual-CPU architecture alarm control device includes a main CPU, a motor drive module, a main alarm module, a backup CPU, a backup alarm module and an OR control unit; the main CPU and the backup CPU are connected to the motor drive module for communication through communication ports respectively; the main CPU is electrically connected to the main alarm module, and the backup CPU is electrically connected to the backup alarm module; the blood pump control end of the main CPU is electrically connected to the first input end of the OR control unit, and the blood pump control end of the backup CPU is electrically connected to the second input end of the OR control unit, and the OR control unit is used to perform an OR operation on the output signal of the blood pump control end of the main CPU and the output signal of the blood pump control end of the backup CPU, and control the motor drive module to start or shut down according to the OR operation result.

[0030] In this embodiment, the main control CPU is the control CPU in the main control circuit of the extracorporeal ventricular assist system. The main control CPU is responsible for the user interaction control, data processing and storage, and main alarm functions of the extracorporeal ventricular assist system. The main control CPU is preferably, but not limited to, a microprocessor such as ARM or 51 single-chip microcomputer, such as STM32F1. The main control circuit includes the main control CPU and its peripheral circuits. The specific circuit structure can refer to the technical manual of the main control CPU selection chip, which will not be repeated here. The backup CPU can be a microprocessor such as 51 single-chip microcomputer, such as STM32F1. The motor drive module includes a microcontroller and a motor drive circuit. The microcontroller outputs a motor control signal to the motor drive circuit. The motor drive circuit is controlled by the motor control signal and outputs a drive signal to the blood pump motor to drive the blood pump motor to work. Among them, the microprocessor is preferably a DSP device, such as a DSP with the model DSPTMS320. The motor drive circuit adopts an existing design, such as the full-bridge power drive circuit disclosed in the paper "Design of External Magnetic Driven Blood Pump Control System Based on DSP" published by Wu Shixu et al. in the journal "Micromotors", Vol. 40, No. 12, pp. 35-37, 2007; or the three-phase bridge drive circuit disclosed in Chinese Patent Publication No. CN220874439U, or the motor drive circuit disclosed in Chinese Patent Publication No. CN102004160A, which will not be repeated here.

[0031] In this embodiment, the master CPU and backup CPU each communicate with the motor driver module via a communication port. Specifically, the master CPU's first communication port is connected to the motor driver module's first communication port, while the backup CPU's first communication port is connected to the motor driver module's second communication port. The communication port can be a parallel or serial communication interface, preferably a serial communication interface such as RS485, RS232, or UART. The master CPU and backup CPU establish a communication link with the motor driver module via their respective communication ports, acquiring real-time operating data from the blood pump motor and controlling the blood pump motor's operation according to predefined motor parameters.

[0032] In this embodiment, the main alarm module is preferably not limited to an existing buzzer or voice alarm, and its activation end is connected to the alarm control pin of the main control CPU. The backup alarm module is preferably not limited to an existing buzzer or voice alarm, and its activation end is connected to the alarm control pin of the backup CPU. When the main control CPU fails and cannot drive the main alarm module to issue an alarm, the backup CPU drives the alarm to issue an alarm, thereby ensuring that the system can issue an alarm in a timely manner when an abnormality or failure occurs.

[0033] In this embodiment, the OR control unit includes an OR gate. The blood pump control terminal of the master CPU is electrically connected to the first input terminal of the OR gate, and the blood pump control terminal of the backup CPU is electrically connected to the second input terminal of the OR gate. The blood pump control terminal of the master CPU and the blood pump control terminal of the backup CPU can be GPIO pins of the master CPU and the backup CPU, respectively, for inputting high and low level signals. A high level signal indicates starting the blood pump motor, while a low level signal indicates shutting down the blood pump motor. The OR gate performs an OR operation on the output signals of the blood pump control terminal of the master CPU and the blood pump control terminal of the backup CPU. If a high level signal is obtained after the OR operation, the motor driver module is controlled to start the blood pump motor. Conversely, if a low level signal is obtained after the OR operation, the motor driver module is controlled to shut down the blood pump motor. The OR gate is preferably, but not limited to, CD4071 or SN74LS32.

[0034] After the dual-CPU architecture alarm control device provided by the present invention is turned on and powered on, the blood pump control end of the main CPU and the blood pump control end of the backup CPU are always controlled to output high-level signals, or the control unit outputs a high-level signal to enable the blood pump motor to continue working. When the main CPU or the backup CPU has an abnormality or failure and cannot output a high-level signal normally, the control unit can still output a high-level signal to enable the blood pump motor to continue working, thereby realizing complete dual backup driving of the blood pump motor and improving safety.

[0035] In a preferred embodiment, the backup CPU serves as the power management CPU for the extracorporeal ventricular assist system. The main control CPU and the backup CPU communicate via a communication port. Specifically, the second communication port of the main control CPU is connected to the second communication port of the backup CPU. The communication port can be a parallel communication interface or a serial communication interface. Preferably, a serial communication interface such as RS485, RS232, or UART is selected. The communication port connection between the main control CPU and the backup CPU facilitates the main control CPU to obtain operating data from the power management module of the extracorporeal ventricular assist system, determine whether the power management module is operating abnormally, and generate an alarm if abnormal.

[0036] In this embodiment, for any two of the three, the main CPU, the backup CPU, and the motor drive module, data can be sent and received regularly through the communication link between them to detect whether the communication partner or the communication link between them (such as poor contact of the wires) is abnormal. When the main CPU is normal, the backup CPU does not control the blood pump motor and only receives the blood pump motor operating data. When the main CPU is abnormal or fails, the backup CPU not only receives the blood pump motor operating data but also controls the blood pump motor according to the set motor parameters. In addition, after receiving the blood pump motor operating data, the main CPU and the backup CPU will analyze it and issue an alarm or even stop the blood pump motor if the blood pump motor is operating abnormally. When the main CPU is normal, the main alarm module can issue an alarm. When the main CPU is abnormal, the backup alarm module can issue an alarm. It should be noted that the methods involved in the above process are all existing technologies and are not within the scope of protection of this utility model.

[0037] In a preferred embodiment, Figure 1 and Figure 3 As shown, it also includes a display module, which is electrically connected to the main control CPU. The display module is preferably but not limited to an LCD display or an LED display or a warning light. When an alarm occurs, the alarm information can be displayed in text through the LCD display or the LED display.

[0038] In a preferred embodiment, Figure 1 and Figure 3 As shown, the pulse output end of the main control CPU sends a first pulse signal System tick1 to the pulse interruption monitoring end of the backup CPU, and the pulse output end of the backup CPU sends a second pulse signal System tick2 to the pulse interruption monitoring end of the main control CPU.

[0039] In this embodiment, the first pulse signal System tick1 and the second pulse signal System tick2 are square wave signals. The pulse output terminal of the main CPU and the pulse output terminal of the backup CPU can be a PWM signal output pin or a DAC output pin. The pulse interrupt monitoring terminal of the backup CPU and the pulse interrupt monitoring terminal of the main CPU can be the interrupt pins of the backup CPU and the main CPU respectively. The backup CPU / main CPU is configured to receive signals based on the interrupt pins and perform interrupt counting. If the first pulse signal System tick1 / the second pulse signal System tick2 is not received within the specified time, it is considered that the main CPU / backup CPU is abnormal. In this way, the abnormality of the main CPU and the backup CPU is more accurately identified and located. The main alarm module and the backup alarm module are switched to work according to the judgment result. When the backup CPU confirms that the main control chip is abnormal, the backup alarm module is switched to work.

[0040] In order to better illustrate the beneficial effects brought about by the technical features provided by this embodiment, in an application scenario, if the main control CPU / backup CPU does not monitor the second pulse signal System tick2 / the first pulse signal System tick1 within the specified time, and combined with the timed RS485 communication status between the main control CPU and the backup CPU (power management CPU), when it is detected that both the RS485 communication status and System T i ck are in abnormal status, an alarm signal is issued. It should be noted that the algorithm involved in the above process is not within the protection scope of this utility model.

[0041] In a preferred embodiment, in order to more stably and reliably control the operation of the blood pump motor, refer to Figure 2 The control unit includes an OR gate and a switch circuit; the blood pump control end of the main control CPU is electrically connected to the first input end of the OR gate, the blood pump control end of the backup CPU is electrically connected to the second input end of the OR gate, the output end of the OR gate is connected to the on-off control end of the switch circuit, the first end of the switch circuit is connected to the starting end of the motor drive module, and the second end of the switch circuit is connected to the power supply end.

[0042] In this embodiment, when the blood pump control terminal of the main CPU and / or the blood pump control terminal of the backup CPU outputs a high-level signal, the OR gate outputs a high-level signal to the switch circuit control terminal, controlling the switch circuit to conduct, connecting the start terminal of the motor drive module to the power terminal, and enabling the motor drive module. When the blood pump control terminal of the main CPU and the blood pump control terminal of the backup CPU output a low-level signal, the OR gate outputs a low-level signal to the switch circuit control terminal, controlling the switch circuit to disconnect, disconnecting the start terminal of the motor drive module from the power terminal, and disabling the motor drive module. The start terminal of the motor drive module is preferably, but not limited to, the power supply terminal or enable terminal of the microprocessor of the motor drive module, or the power supply terminal of the motor winding.

[0043] In this embodiment, the switch circuit is preferably, but not limited to, an existing MOS tube switch circuit, a triode switch circuit, a relay switch circuit, or a light-controlled isolation switch circuit. Figure 2 A relay switching circuit is presented. The relay switching circuit includes an NPN transistor Q, a relay, and a current-limiting resistor R. The output of an OR gate is connected to the base of transistor Q, the emitter of transistor Q is connected to ground via current-limiting resistor R, the collector of transistor Q is connected to a first power supply terminal (this DC power signal terminal) via a relay coil L, and the start terminal of a motor drive module is connected to a second power supply terminal (DC power signal terminal or AC power signal terminal) via a relay normally open switch K. When the OR gate outputs a high level, the collector and emitter of transistor Q are conductive, coil L is energized, and the pull-in switch K is closed, enabling power supply to the motor drive module or the motor.

[0044] The present invention also discloses an extracorporeal ventricular assist system. In a preferred embodiment, Figure 3 As shown, it includes a power management module, a blood pump, a motor for driving the blood pump and the above-mentioned dual-CPU architecture alarm control device; the control end of the motor is connected to the control signal output end of the motor drive module, the liquid inlet of the pump body is connected to the inlet blood vessel, and the liquid outlet of the pump body is connected to the outlet blood vessel; the power management module is used to provide power signals for the dual-CPU architecture alarm control device and the motor.

[0045] In this embodiment, the motor is preferably, but not limited to, a fully magnetically levitated extracorporeal blood pump motor having six windings powered by 24V AC at 50Hz. The power management module is used to convert the mains power into 24V AC at 50Hz and the low-voltage DC power signals required by DC components such as the CPU. The inlet blood vessels draw blood from the body's veins, and the outlet blood vessels pump oxygenated and pressurized blood back into the body.

[0046] In a preferred embodiment, Figure 3 As shown, it also includes one or more displacement sensors installed on the side of the motor rotor for monitoring the movement of the rotor, and the output end of the displacement sensor is connected to the signal input end of the motor drive module. The displacement sensor is used to monitor whether the rotor hits the wall or is at risk of hitting the wall during rotation. The displacement sensor is used to measure the distance between the rotor and the location of the displacement sensor. If the distance is too small, it is considered to have hit the wall or is at risk of hitting the wall. The displacement sensor can be a magnetic sensor, such as TMR3016. Preferably, multiple displacement sensors, such as 6, can be arranged at intervals on the outer side wall of the rotor to achieve distributed measurement of rotor movement. The displacement sensor outputs a signal to the microprocessor of the motor drive module, and the microprocessor identifies whether the rotor has hit the wall or is at risk of hitting the wall.

[0047] In a preferred embodiment, Figure 3 As shown, the power management module includes an AC-DC conversion circuit, an inverter circuit, a battery, a charging circuit and a power management CPU; the AC-DC conversion circuit is used to convert the mains power into a DC power signal; the inverter circuit converts the DC power signal or the battery voltage into an AC power signal, and outputs the AC power signal to the winding power supply end of the motor; the charging circuit uses the DC power signal to charge the battery; the power management CPU is used to control the operation of the AC-DC conversion circuit, the inverter circuit and the charging circuit.

[0048] In this embodiment, the output end of the AC-DC conversion circuit is respectively connected to the input end of the inverter circuit and the input end of the charging circuit, as well as the DC power supply end of the backup CPU, the main control CPU, and the motor drive module. The output end of the charging circuit is connected to the battery, and the battery is also connected to the input end of the inverter circuit. The output end of the inverter circuit is connected to the winding power supply end of the motor.

[0049] In this embodiment, the AC-DC conversion circuit includes a rectifier circuit, a switching power supply conversion circuit (such as the existing CN1611 switching power supply chip circuit), and a low-pass filter circuit connected in sequence. The low-pass filter circuit outputs a DC power signal. The inverter circuit and charging circuit can both use existing circuits and will not be described in detail here.

[0050] Throughout this specification, reference to terms such as "one embodiment," "some embodiments," "examples," "specific examples," or "some examples" means that the specific features, structures, materials, or characteristics described in conjunction with that embodiment or example are included in at least one embodiment or example of the present invention. In this specification, schematic representations of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

[0051] Although the embodiments of the present invention have been shown and described, those skilled in the art will appreciate that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and purpose of the present invention, and that the scope of the present invention is defined by the claims and their equivalents.

Claims

1. A dual-CPU architecture alarm control device for an extracorporeal ventricular assist system, characterized in that: Including main control CPU, motor drive module, main alarm module, backup CPU, backup alarm module and / or control unit; The main control CPU and the backup CPU are connected to the motor drive module for communication through the communication ports respectively; The main control CPU is electrically connected to the main alarm module, and the backup CPU is electrically connected to the backup alarm module; The blood pump control terminal of the main CPU is electrically connected to the first input terminal of the OR control unit, and the blood pump control terminal of the backup CPU is electrically connected to the second input terminal of the OR control unit. The OR control unit is used to perform an OR operation on the output signal of the blood pump control terminal of the main CPU and the output signal of the blood pump control terminal of the backup CPU, and control the motor drive module to start or shut down according to the OR operation result.

2. The dual-CPU architecture alarm control device for an extracorporeal ventricular assist system according to claim 1, characterized in that: The backup CPU is a power management CPU of the extracorporeal ventricular assist system, and the main control CPU and the backup CPU are connected and communicated via a communication port.

3. The dual-CPU architecture alarm control device for an extracorporeal ventricular assist system according to claim 1 or 2, characterized in that: The communication port is a serial communication interface.

4. The dual-CPU architecture alarm control device for an extracorporeal ventricular assist system according to claim 3, characterized in that: The pulse output terminal of the main control CPU sends a first pulse signal to the pulse interruption monitoring terminal of the backup CPU, and the pulse output terminal of the backup CPU sends a second pulse signal to the pulse interruption monitoring terminal of the main control CPU.

5. The dual-CPU architecture alarm control device for an extracorporeal ventricular assist system according to claim 1 or 2, characterized in that: The pulse output terminal of the main control CPU sends a first pulse signal to the pulse interruption monitoring terminal of the backup CPU, and the pulse output terminal of the backup CPU sends a second pulse signal to the pulse interruption monitoring terminal of the main control CPU.

6. The dual-CPU architecture alarm control device for an extracorporeal ventricular assist system according to claim 5, characterized in that: It also includes a display module, which is electrically connected to the main control CPU.

7. The dual-CPU architecture alarm control device for an extracorporeal ventricular assist system according to claim 1, 2, 3, or 6, characterized in that: The OR control unit includes an OR gate and a switch circuit; The blood pump control end of the main control CPU is electrically connected to the first input end of the OR gate, the blood pump control end of the backup CPU is electrically connected to the second input end of the OR gate, the output end of the OR gate is connected to the on-off control end of the switch circuit, the first end of the switch circuit is connected to the start end of the motor drive module, and the second end of the switch circuit is connected to the power supply end.

8. An extracorporeal ventricular assist system, characterized in that: It comprises a power management module, a blood pump, a motor for driving the blood pump, and the dual-CPU architecture alarm control device according to any one of claims 1 to 7; The control end of the motor is connected to the control signal output end of the motor drive module, the liquid inlet of the pump body is connected to the blood inlet, and the liquid outlet of the pump body is connected to the blood outlet; The power management module is used to provide power signals for the dual-CPU architecture alarm control device and the motor.

9. The extracorporeal ventricular assist system according to claim 8, characterized in that: It also includes one or more displacement sensors installed on the side of the motor rotor for monitoring the movement of the rotor, and the output end of the displacement sensor is connected to the signal input end of the motor drive module.

10. An extracorporeal ventricular assist system according to claim 8 or 9, characterized in that: The power management module includes an AC-DC conversion circuit, an inverter circuit, a battery, a charging circuit and a power management CPU; The AC-DC conversion circuit is used to convert the mains power into a DC power signal; The inverter circuit converts the DC power signal or battery voltage into an AC power signal, and outputs the AC power signal to the winding power supply end of the motor; The charging circuit uses a DC power signal to charge the battery; The power management CPU is used to control the operation of the AC-DC conversion circuit, inverter circuit and charging circuit.

Images