Control unit for controlling an alarm output

Abstract

Control unit (CU) for controlling an alarm output, comprising - a data network interface (DS), - a signaling interface (SIS) for outputting a control signal (STS) which indicates a request for the output of an acoustic and / or visual alarm signal, - at least one storage unit (MEM), - at least one processor (P) - as well as an alarm signal output unit (WSA) for issuing a visual and / or audible warning, wherein the data network interface (DS) is configured to receive a group message (BC, BC11) which indicates a sender identity (PMID) of a sender (PM) of the group message (BC, BC11) and which further indicates the existence of an alert state, wherein the storage unit (MEM) provides a first data record (DA1) which indexes a list (AL) of potential sender identities, and furthermore a second data record (DA2) which indexes one or more time periods during which the acoustic and / or visual alarm signal is to be emitted, wherein the processor (P) is configured to operate a timing function (T), and the control signal (STS) is sent via the signaling interface (SIS) to the alarm signal output unit (WSA) - depending on whether the sender identity (PMID) indexed in the group message (BC, BC11) matches one of the potential sender identities - and furthermore depending on a comparison of one or more time periods, which results from a value of the timing function (T) upon receipt of the group message (BC, BC11) and a current value (TV) of the timing function (T), with data from the second data set (DA2) to spend characterized in that the processor (P) is further configured to - to check, based on a status information (SIN), whether the control signal (STS) can reach the alarm signal output unit (WSA) or not, - and furthermore, if the check is successful and the control signal (STS) is being output, a status message (ACK1_1), which indicates successful activation of the alarm signal output unit (WSA), is sent to the sender (PM) of the group message (BC, BC11) via the data network interface (DS).

Description

[0001] A known scenario involves a medical device monitoring physiological patient data and triggering an alarm signal by comparing this data with reference values. The alarm signal can be generated by the medical device itself, or a request message can be sent from the device to another device to trigger the alarm. Alternatively, instead of monitoring physiological patient data, status data can be monitored, indicating the operating state of other technical devices or sub-devices on or within the medical device. For example, the detachment of an electrode or a pressure increase in a tube can be detected and signaled. An alarm condition can also be detected by comparing this status data with corresponding reference values.

[0002] US patent 2005 / 0271 186 A1 discloses a system in which a central unit is used to determine, through a user configuration, at what times, in the event of which occurrences, which telephone should be reached via a network, so that the telephone then outputs a signal or alarm signal.

[0003] US Patent 2007 / 0229249A1 discloses a system in which coordinated alarm output is achieved through an alarm messenger, where alarm signals are sent to different receiving units based on database data. Thus, both prior art documents propose a concept in which a central unit is configured to send different alarm signals to different output units at different times.

[0004] US 2015 / 0187202A1 discloses a secondary patient monitoring alarm system comprising a plurality of devices configured to generate alarm data and a central station. The central station includes a processor configured to receive alarm data from the plurality of devices and to monitor a plurality of dynamic conditions. The processor is further configured to evaluate the alarm data and the dynamic conditions to determine whether an alarm message is triggered.

[0005] US 2006 / 0049936A1 discloses a system that monitors various conditions of numerous hospital beds located in different rooms of a healthcare facility. The system receives data from the hospital beds and / or other equipment and, in response to received data indicating an alarm condition, initiates communication with a wireless communication device belonging to at least one designated healthcare worker.

[0006] DE 103 40 396 A1 discloses a hazard detector with a battery charge monitoring device and a fault signaling device which generates a fault signal when the battery voltage falls below a predetermined voltage threshold. This fault signal is delayed by a time-of-day sensor whenever it occurs during a defined period of inactivity, particularly at night. In this case, the fault signal is only forwarded to an acoustic signal generator when the ambient brightness exceeds a predetermined value or when a predetermined time is reached.

[0007] The object of the present invention is to carry out the output of alarm signals in a clinical environment by means of several devices in a coordinated manner and preferably to enable a minimization of alarm signals to be output by the different devices while simultaneously ensuring a basic alarm function.

[0008] The problem according to the invention is solved by a control unit for controlling an alarm output according to claim 1.

[0009] Advantageous embodiments of the invention are the subject of the dependent claims and are explained in more detail in the following description with partial reference to the figures.

[0010] The invention relates to a control unit for controlling an alarm output, comprising a data network interface, a signaling interface for outputting a control signal indicating a request for the output of an acoustic and / or optical alarm signal, at least one storage unit, at least one processor, and an alarm output unit for outputting an optical and / or acoustic warning. The data network interface is configured to receive a group message that indicates the sender identity of a sender of the group message and further indicates the existence of an alarm state, wherein the storage unit provides a first data record that indexes a list of potential sender identities, and further a second data record that indexes one or more time periods during which the acoustic and / or optical alarm signal is to be output.The processor is designed to operate a timing function and to output the control signal via the signaling interface to the alarm signal output unit depending on a match between the sender identity indexed in the group message and one of the potential sender identities, and further depending on a comparison of one or more time periods, which results from a value of the timing function upon receipt of the group message and a current value of the timing function, with data from the second data set.

[0011] The control unit has an input interface for receiving an input signal indicating user confirmation of the alarm signal. The processor is further configured to suppress the output of the control signal upon receipt of the input signal and to send a status message, indicating user confirmation of the alarm signal, to the sender of the group message via the data network interface. The invention is advantageous because it makes it possible to suppress the output of the control signal completely or at least temporarily after the alarm signal has been confirmed by the user at an input unit, thus avoiding further unnecessary impairment of the clinical staff's acoustic and / or visual awareness.Furthermore, by sending the status message, the sender of the group message is informed that a user has confirmed the alarm by entering information on the control unit.

[0012] The control unit itself has an alarm signal output unit which outputs a visual and / or audible alarm signal depending on the control signal. Preferably, the control signal is transmitted as a data signal from the control unit to another device, which in turn can output a visual and / or audible alarm signal via its own alarm signal output unit, depending on the control signal. The second data set indicates respective time intervals with a respective start and end time. The control unit preferably prevents the output of the control signal at the latest when this is indicated by the time intervals of the second data set.

[0013] For the purposes of this application, a group message is a data network message. Such a group message, as a data network message, is sent to one or more network units within a group of network units. The group of network units is preferably defined by group identification data, such as a multicast address or a set of several respective data network addresses of the respective network units. Therefore, for the purposes of this application, a group message is a data network message of the type of a broadcast message, an anycast message, a multicast message, or one or more unicast messages.

[0014] The group message can be sent, for example, by a patient monitor or a medical device for evaluating physiological patient data or for evaluating operating states within a data network, in order to inform the control unit according to the invention that an alarm should be issued or triggered by the control unit. The alarm can be issued at the control unit itself or, preferably, at a device in communication with it, and therefore does not have to be issued at the medical device itself, which may be located directly at the patient's bedside. Thus, the patient is not unnecessarily disturbed or alarmed by the alarm. The control unit could, for example, be a pager for a clinician, a doctor's smartphone, or an alarm unit in a room for nursing staff.

[0015] The control unit according to the invention for controlling an alarm output is advantageous because the output of the control signal, as a request for the output of an acoustic and / or visual alarm signal, does not generally occur upon indexing or the presence of the alarm state, but also depending on the time intervals indexed in the second data set. Therefore, an actual alarm is only triggered when a time interval exists for which the control unit is actually supposed to issue the alarm; this is achieved by comparing the current value of the timing function with the time intervals indexed in the second data set. The control unit can thus be easily configured via the second data set so that it does not generate or trigger an alarm signal output for all times or time intervals. This allows the control unit, for example, to...The second data record is assigned to a class of alarm devices, since, for example, different control units can provide different second data records to index different time periods for a given alarm activity. If the output of the control signal is preferably suppressed at the latest when this is indicated by the time periods of the second data record, this ensures that a first control unit of a first alarm class or device group suppresses the output of the alarm signal even if no user input has been made to the control unit. An alarm output can then be automatically triggered at another control unit of a different alarm class or device group, whereby suppressing the alarm output at the first control unit reduces the total number of alarm signals issued.

[0016] Preferably, the group message further indicates a type of alarm state by means of a data element, wherein the second data record further indicates an assignment of time intervals to types of alarm states, and wherein the processor is configured to take into account the type of alarm state indexed in the group message during the comparison. This embodiment of the invention is advantageous because the output of the alarm can be controlled depending on an alarm type, so that different time intervals for the output of the alarm signal can be provided for different alarm types.

[0017] Furthermore, according to the invention, the processor is also configured to check, based on status information, whether the control signal can reach an alarm signal output unit or not, and furthermore, if the check is successful and the control signal output has begun, to send a status message indicating successful activation of the alarm signal output unit to the sender of the group message via the data network interface. This embodiment of the invention is advantageous because the control unit can check, based on the status information, whether an alarm output via an alarm signal output unit is possible at all, and furthermore, if the check is successful, it can send a status message to the sender of the group message informing them that an alarm signal is being output at an alarm signal output unit.

[0018] Preferably, the data network interface is further configured to receive a status message indicating whether another control unit is currently successfully controlling an assigned alarm signal output unit, and the processor is further configured to output the control signal via the signaling interface depending on the presence of the status message. This embodiment of the invention is advantageous because it allows different control units of different alarm classes to be provided, each of which can issue its own alarm at different time intervals. Furthermore, a control unit will not issue the control signal to request an alarm signal output if the alarm output is already being issued by another control unit; this is indicated by the status message. This makes it possible, for example, to...Two different control units of different alarm classes can share overlapping alarm periods. However, in the case of overlapping periods, both control units do not trigger an alarm simultaneously. Instead, only one of these two control units triggers an alarm, while the other suppresses its alarm output during the overlapping period. This minimizes the actual number of control units of different alarm classes that trigger an alarm output for shared, overlapping periods, while simultaneously ensuring that at least one control unit of an alarm class triggers an alarm output during this overlapping period.

[0019] Preferably, the data network interface is further configured to receive a status message indicating that another control unit has detected user acknowledgment of an alarm signal, and the processor is further configured to suppress the output of the control signal when the status message is present. This embodiment of the invention is advantageous because the control unit can rely on the fact that a user has already acknowledged an alarm signal output by another control unit, so that by suppressing the output of the control signal at the control unit, the number of acoustic and / or visual alarm signals can be minimized.

[0020] Preferably, the data network interface is a first data network interface to a first data network, wherein the signaling interface is a second data network interface to a second data network, and wherein the control signal is a data signal. This embodiment of the invention is advantageous because the control unit can assume a so-called gateway functionality, whereby the control signal, in the form of a data signal, can be transmitted via the second data network interface to another unit or another network participant, preferably a pager, through the second data network. The alarm signal output unit can then be provided at this further unit or this further network participant of the second data network for outputting the alarm signal.This makes it possible to coordinate the output of alarms as described above, even if the control unit itself does not have an alarm signal output unit for outputting the alarm signal, but rather if the alarm signal output unit is provided on the other unit or network participant.

[0021] Preferably, the storage unit further provides a third data set which indexes a list of network participants of the second data network. This embodiment of the invention is advantageous because the control unit can access the provided list of network participants of the second data network to decide to which network participant of the second data network it transmits the control signal in the form of a data signal.

[0022] Furthermore, a method for controlling an alarm output is proposed, comprising: receiving a group message which indicates a sender identity of a sender of the group message and furthermore the existence of an alarm state, providing a data record which indicates a list of potential sender identities, as well as a second data record which indicates time periods during which an alarm signal is to be issued, operating a timing function, outputting a control signal which indicates a request for the output of an acoustic and / or visual alarm signal, depending on a match between the sender identity indexed in the group message and one of the potential sender identities, as well as depending on a comparison of a current value of the timing function with data from the second data record.The second data set indexes respective time periods with a corresponding start and end point. Preferably, the output of the control signal is suppressed at the latest when this is indicated by the time periods in the second data set.

[0023] Furthermore, it is proposed to execute the inventive method using computer programming tools on at least one processor.

[0024] Furthermore, a program with program code for carrying out the method according to the invention is proposed if the program code is executed on a computer, a processor or a programmable hardware component.

[0025] Furthermore, a processor for a control unit for controlling an alarm output is proposed, wherein the processor is configured to receive a group message which indicates a sender identity of a sender of the group message and furthermore the existence of an alarm state, furthermore a data record which indicates a list of potential sender identities, as well as a second data record which indicates time periods during which an alarm signal is to be issued, as well as to operate a timing function, and furthermore a control signal which indicates a request for the output of an acoustic and / or optical alarm signal, depending on a match between the sender identity indexed in the group message and one of the potential sender identities and depending on a comparison of a current value of the timing function with data from the second data record.The second data set indexes respective time intervals with a corresponding start and end point. The processor preferably suppresses the output of the control signal at the latest when this is indicated by the time intervals of the second data set.

[0026] The advantages of the proposed control unit also apply to the proposed procedure. Likewise, these advantages apply to the proposed processor.

[0027] A medical device for evaluating physiological patient data or for monitoring a technical device is further proposed, comprising an alarm signal output unit, an input unit for manual operation by a user, at least one interface for receiving at least one signal indicating physiological measurements of a patient or at least one operating state of a device, at least one storage unit for providing a first data record indicating reference values ​​and a second data record indicating a time interval after which an alarm should, in principle, be issued at the alarm signal output unit, at least one data network interface, and at least one processor, wherein the processor is configured to detect the presence of an alarm state by comparing the physiological measurements or the operating state with the reference value.and, upon detection of an alarm state, to output a group message via the data network interface indicating the presence of an alarm state, and is further configured to provide a timing function, wherein the processor is further configured to receive a status message via the data network interface indicating confirmation of the alarm state by user input, and, after sending the group message, to output an alarm signal via the alarm signal output unit depending on a current value of the timing function, the second data record which indexes the time period, the presence of the status message, and the presence of an input at the input unit.

[0028] The operating state is preferably an operating state of a sub-device on or within the medical device. For example, the medical device is a so-called patient monitor, where the signal indicates the current operating state of an ECG electrode connected to the patient monitor; e.g., whether the ECG electrode is positioned on a human body or whether the electrode is no longer positioned on a human body. Alternatively, the medical device could be an infusion pump device that uses a pressure sensor to monitor the pressure in the associated tubing system and derives an operating state from this measurement.

[0029] The operating state is preferably an operating state of a different device, distinct from the medical device. For example, the signal to a patient monitor indicates an operating state of an infusion pump device separate from the patient monitor.

[0030] The invention will now be explained in more detail with reference to specific embodiments, without limiting the general concept of the invention, and with reference to the figures. These figures show: Fig. 1. A scenario in a clinical setting, Fig. 2 a medical device and a control unit according to the invention in a first embodiment, Fig. 3 a control unit according to a second embodiment according to the invention and a network participant of a second data network, Fig. 4 a medical device, Fig. 5 steps of a procedure for assigning a control unit to a medical device, Fig. 6 steps to carry out the procedure, Fig. 7a - 7d Lists of time periods and graphical representations of time periods, Fig. 8 procedural steps within the framework of a check to see if a control signal can reach an alarm signal output unit, Fig. 9a Procedure steps by which the control signal is output depending on the presence of a status message, Fig. 9b a representation of time periods in connection with the procedural steps from Fig. 9a, Fig. 10a Procedure steps within the framework of a check to see whether an alarm signal has been confirmed by an input from a clinician at a control unit, preferably by preventing the output of the control signal. Fig. 10b corresponding time periods in connection with the procedural steps from Fig. 10a. Fig. 11a a first period of time, Fig. 11b a second time period

[0031] Fig. Figure 1 shows a scenario in a clinical setting. A patient PT, preferably lying on a patient positioning device in the form of a bed B, is monitored for physiological data by a medical device PM1, which is preferably a patient monitor. In addition to or alternatively to monitoring physiological data, the device PM1 monitors an operating state of another technical device AV, which is, for example, another medical device. Preferably, the device PM1 monitors an operating state of its own sub-device TV. The operating state is preferably an operating state of the sub-device TV on or in the medical device PM1.For example, the medical device PM1 is a so-called patient monitor, where a signal BZ1 indicates the current operating state of an ECG electrode connected to the patient monitor PM1 via an interface TV1; e.g., whether the ECG electrode is positioned on a human body or whether the electrode is no longer positioned on a human body. For example, the medical device PM1 is an infusion pump device that uses a pressure sensor TV1 to monitor the pressure in the associated tubing system of the infusion pump device PM1 and derives an operating state from this.

[0032] The operating state is preferably an operating state of a different device AV, which differs from the medical device PM1. Here, the signal BZ2, for example, indicates to the patient monitor PM1 an operating state of the infusion pump device AV, which is separate from the patient monitor PM1.

[0033] When monitoring physiological data, a signal SES is preferably provided by means of at least one sensor SEN, which indicates physiological measurements related to the patient PT. The device PM1 receives the signal SES via a corresponding interface.

[0034] During monitoring of the operating status, device PM1 receives a data signal BZ1, BZ2 from device AV or sub-device TV, which indicates an operating status of device AV or sub-device TV. Such an operating status is, for example, "Ready", "Not Ready", "Standy", "ON", "OFF", or "ERROR".

[0035] A processor P1 monitors physiological measurements or the operating status and detects, by comparison with at least one predefined reference value, a condition in which an alarm should be triggered to alert a clinician or other hospital staff. For this purpose, the device PM1 can preferably output the alarm directly at the device PM1 via an alarm signal output unit WSA1. Such output in close proximity to the patient PT is potentially disadvantageous, as it may disturb and / or alarm the patient PT. Furthermore, in a so-called closed-door scenario, the patient's room door may be closed, meaning that an alarm signal output directly at the device PM1 via the unit WSA1 might not be noticed by the clinician or hospital staff.Therefore, in a clinical setting, a patient's room door is sometimes left open, which may impair the patient's rest and / or potentially worsen the hygiene situation.

[0036] It is known that the medical device PM1 does not itself initiate the alarm via its alarm output unit WSA1, but rather that the medical device PM1 sends a request message ANN via a data network interface DS1 and a data network NW to a data network interface DSX of an alarm device AG, which is located outside the patient's room. The message ANN represents a request to the alarm device AG to issue an alarm signal via its own alarm output unit WSAX.

[0037] Furthermore, it is a possible scenario that more than one alarm device (AG) is present in the clinical environment. For example, there are pagers for doctors, as well as alarm output devices positioned in hallways or corridors, and also alarm output devices located in a central ward room. If the PM1 device were to send the same request message (ANN) to several such alarm devices simultaneously, an alarm signal might be issued to all of them at the same time. This could lead to the output of the alarm signals, in acoustic and / or visual form, overwhelming or overstimulating the clinical staff. Therefore, one objective of the invention is to ensure coordinated alarm output to alarm devices, thereby minimizing the number of alarm outputs.One possible solution would be for a medical device PM1 to transmit a detected alarm state to a central coordination unit in the network, which would then coordinate the distribution of alarm signal requests to different alarm devices.

[0038] Fig. Figure 2 shows the control unit SG according to the invention together with a medical device PM.

[0039] The medical device PM is essentially designed like the one referred to in relation to Fig. 1. Previously described medical device PM1.

[0040] Further specialized training on the medical device PM will now be discussed in more detail with reference to the Fig. 4 explained in more detail.

[0041] The device PM has an alarm signal output unit WSA2. The device PM also has an input unit ES2 for generating an input signal EGS2 when the input unit ES2 is activated by a user. The input unit ES2 is preferably a button, a push button, or a touchscreen.

[0042] Furthermore, the PM device has an SEC interface for receiving a sensor signal SES, which indicates physiological measurements of a patient. A physiological measurement is, for example, a patient's heart rate, blood pressure, or blood oxygen level.

[0043] A data record DA11, which indexes at least one reference value R, is present or provided in a storage unit MEMP. Furthermore, a second data record DA22 is provided, which indexes a first time span TM1 and a second time span TM2.

[0044] The PM device also has a DSP data network interface and a PR processor. The processor is configured to operate or provide a timing function TP. The timing function TP corresponds to a timing function T of the control unit SG. Fig. 2, which will be explained in more detail later.

[0045] The device PM preferably has a data interface DAS, via which the device PM receives the signal BZ2, which, as a data signal, indicates an operating state of the other device AV. The device PM further preferably has a sub-device TV, which provides a signal BZ1, which indicates an operating state of the sub-device TV, as previously mentioned. By comparing the operating state indicated in one of the signals BZ1 or BZ2 with a reference value R, the presence of an alarm state can then be detected. For example, the reference value R is a list that indicates operating states, the presence of which should trigger or detect an alarm state.

[0046] By comparing the physiological measurements recorded at the SES interface with a corresponding reference value R, the PR processor can detect whether an alarm condition exists. For example, if the reference value R is a threshold and a recorded physiological measurement exceeds the reference value or threshold, the PR processor will detect the presence of an alarm condition. An alarm condition exists, for instance, when the physiological measurements indicate a patient's pulse and when a maximum pulse, defined as the reference value R, is exceeded. Further configurations for detecting alarm conditions by comparing physiological measurements with corresponding reference values ​​are conceivable and understandable to those skilled in the art.

[0047] Detection of an alarm condition based on one of the signals BZ1, BZ2, which each indicate an operating state, can be carried out as described above.

[0048] The processor PR is further configured to issue a first group message BC to other network participants via the data network interface DSP when an alarm state is present or detected, indicating the presence of the alarm state. The group message BC is preferably a broadcast message BC, as in this example. The group message BC contains at least the network identity PMID of the sender PM sending the message BC, as well as a data element ALST that indicates the alarm state. Preferably, the group message BC contains identification data PMIDENT, which identifies the device PM sending the message BC. The group message BC is transmitted into a network NW. The data network interface DSP is further configured to send or receive additional messages, as will be explained in more detail later. The identity PMID can be a network address or...Network identity, such as the IP address of the device PM, can be used. Alternatively, the PMID identity is a data element that uniquely identifies the device PM.

[0049] The group message BC, as defined in this application, is a data network message. Such a group message is a data network message sent to one or more network units within a group of network units. The group of network units is preferably defined by group identification data, such as a multicast address or a set of several respective data network addresses of the respective network units. Therefore, a group message, as defined in this application, is a data network message of the type of a broadcast message, an anycast message, a multicast message, or one or more unicast messages.

[0050] Preferably, the group message BC is sent to those network units that are indexed by group identification data SGID of the data record DA3.

[0051] The device PM preferably has its own alarm output unit WSA2, which can be controlled by the processor PR by means of a control signal STSP to output an alarm signal.

[0052] Preferably, the storage unit MP provides a data record DA3, which indexes a list of network participant identities SGID, or network identities of control units that can, in principle, receive the group message BC. If data record DA3 is empty, the processor PR can conclude that no control unit has previously registered with the device PM via a registration process and that, therefore, no control unit is triggering or generating an alarm output. Consequently, the processor PR triggers an alarm output on the device PM itself. For this purpose, the processor PR outputs a control signal STSP to the alarm output unit WSA2 of the device PM.

[0053] The Fig. Figure 2 also shows the medical device PM with the group message BC, which is transmitted via the network NW to a data interface DS of the control unit SG.

[0054] According to the invention, as shown here in Fig. As shown in Figure 2, the control unit SG has its own alarm signal output unit WSA, which can output a visual and / or audible alarm signal. As further explained later with reference to the Fig. As explained in section 3, it is alternatively possible that in a second embodiment the control unit SG11 shown there does not itself have the alarm signal output unit, but that another network participant MO of another network NW2 has an alarm signal output unit WSAM. This will be explained later with reference to the Fig. 3 explained in more detail in the context of the second embodiment.

[0055] An alarm signal output unit, as defined in the patent application, is an output unit for emitting a visual and / or acoustic warning. An alarm signal output unit can therefore be, for example, a visual indicator element and / or an acoustic output element, such as a loudspeaker, a buzzer, or a horn.

[0056] The control unit SG from the Fig. 2 has a signaling interface SIS for outputting a control signal STS, which indicates a request for the output of an acoustic and / or visual alarm signal. Preferably, the control signal STS contains the boolean value 1 to indicate the request.

[0057] For the purposes of this application, a control signal can be an electrical signal such as a current or a voltage. Preferably, the control signal is a data signal for transmission via a wired or wireless network.

[0058] The control unit SG has at least one memory unit MEM. Furthermore, the device SG has a processor P, which is designed to operate or provide a timing function T. The timing function T can be a stopwatch or, for example, a standard timer function. The timing function provides time values ​​TV.

[0059] The control unit receives the group message BC via the DS data interface. The message BC indicates the network identity or network address PMID of the sender PM as the sender address. This network identity is one possible sender identity. Preferably, the message BC also or alternatively indicates identification data PMIDENT as a sender identity.

[0060] The message BC therefore indicates a sender identity PMID, PMIDENT of the sender PM as well as the presence of the alarm state by means of the status data element ALST.

[0061] The storage unit MEM provides a data record DA1, which indexes a list AL containing potential sender identities PMID and PMIDENT. These potential sender identities can be network addresses or PMID network identities of senders and / or PMIDENT identification data of senders. The storage unit MEM also includes a data record DA2, which indexes time periods during which an alarm signal may be issued. These time periods are preferably indexed by a list TL. The indexed time periods each have at least an implicit beginning and end.

[0062] Processor P outputs the control signal STS depending on whether the sender identity PMID indexed in the group message BC matches a sender identity PMID indexed in the first data record DA1. Furthermore, processor P outputs the control signal STS depending on a comparison of a current value TV of the timing function T and the time intervals indexed in the second data record DA2. This will be discussed later with reference to the Fig. Sections 7a to 7b are explained in more detail.

[0063] The control unit also includes an input unit ES for generating an input signal EGS when the input unit ES is activated by a user. The input unit ES is preferably a button, a push button, or a touchscreen.

[0064] The processor P is further equipped to receive status information SIN, which indicates whether an alarm output unit WSA can be reached by a control signal STS.

[0065] The control unit SG according to the invention, which is a device in the sense of the alarm device AG, consists of Fig. The procedure allows for coordinated alarm output via multiple alarm devices, thereby minimizing the number of alarm outputs. For coordinated alarm output, no central unit is required in the network between the medical device PM1 and the alarm output devices AG.

[0066] Fig. Figure 7a shows the dataset DA2 in detail, containing a list TL that, for the respective time values ​​TA and TB from the receipt of a group message, and thus implicitly for the respective time periods, indicates whether or not an alarm signal should be issued. This is preferably indexed using Boolean values ​​0 and 1. The respective time values ​​TA and TB therefore indirectly indicate time periods from the receipt of the first group message BC during which an alarm signal should be issued. Fig. Figure 7b illustrates these time intervals TAR and TBR, which can be determined using the time values ​​TA and TB indexed from the list TL. Preferably, upon receipt of the group message BC, a timing function or a stopwatch function is started, and an alarm output is made dependent on a time value of the timing function as well as the time values ​​TA and TB. Alternatively, the timing function is a continuously running timing function, whereby an alarm output is made dependent on a time value of the timing function upon receipt of the group message BC, a current time value of the timing function, and the time values ​​TA and TB.

[0067] The indexed time period TAR begins at the time message BC is received and ends at time TA. The indexed time period TBR begins at time TA and ends at time TB.

[0068] In this example, the alarm signal is to be issued during the time interval TBR, from time TA to time TB. In this example, the alarm is issued during the time interval TBR in such a way that, at the latest when the time interval TBR expires, the output of a control signal for generating or requesting an alarm signal is prevented.

[0069] It is clear to a person skilled in the art that the variant chosen here for indexing the time intervals TAR, TBR using the time values ​​TA, TB and the boolean values ​​0 or 1 is only an example of an implementation of the control unit or the method according to the invention.

[0070] The advantage of the control unit and method according to the invention lies in the fact that the in Fig. The medical device PM shown in Figure 2 only needs to communicate the presence of an alarm status to alarm devices or control units SG via the group message BC. The alarm devices or control units SG are then pre-configured based on their data records DA2 to trigger an audible and / or visual alarm at specific time intervals TBR. This allows a control unit SG to be easily assigned to corresponding alarm classes or device groups by modifying the relevant data record DA2. This ensures that not all control units SG communicating with the medical device PM trigger an alarm at the same time intervals, but rather, for example, can trigger the output of an audible and / or visual alarm signal at staggered intervals TBR.

[0071] Fig. Figure 7c shows an alternative embodiment of the data set DA2 with a list TL1. Here, the list TL1 contains data for a first alarm type ATY1, which index time periods, as previously described with reference to the Fig. 7a and Fig. 7b is explained. Furthermore, list TL1 contains data for a second alarm type ATY2, whereby this data indicates further time periods with regard to an alarm output. The time periods TAC, TAD are in the Fig. Figure 7d illustrates this embodiment of the invention. This embodiment is advantageous because it makes it possible to make the output of an alarm signal at the control unit SG dependent on the type of alarm indicated by a received group message BC. This allows the control unit SG to Fig. 2. Different alarm types exhibit different alarm behavior. In this example, an alarm is issued during the time interval TAC in such a way that, at the latest when the time interval TAC expires, a control signal output for generating or requesting an alarm signal is prevented.

[0072] Preferably, the control unit SG according to the invention uses a data element ATY provided in a group message, see Fig. 6 with the group message BC11, which will be explained in more detail later, to indicate a very specific alarm type. The control unit SG according to the invention preferably has a further provided data set which indicates the respective alarm types for the respective values ​​of the data element ATY, e.g., "high blood pressure alarm", "pulse rate alarm", or similar alarm types.

[0073] Fig. Figure 5 shows the steps of a registration process by which a control unit (SG) is registered. Fig. 2. PM from a medical device Fig. 4. can log in or register in order to then be assigned to the medical device PM.

[0074] First, a request message REQ1 is sent from the control unit SG to the device PM, which has the network identity PMID of the device PM as its destination address, the network identity SGID of the control unit SG as its sender address, certificate data Z1 and a data element FKT, which indicates a functionality of the control unit SG.

[0075] Upon receiving the request message REQ1 at device PM, device PM checks in step SC1 whether the indexed functionality FKT of the sender SG of the request message REQ1 is permitted. If so, it proceeds to step SC2. If not, a rejection message NACK is sent back to the control unit SG.

[0076] In step SC2, the certificate data Z1 is used to check whether logging in or registering the control unit SG with the device PM is permitted. If this is not the case, a rejection message NACK is sent to the control unit SG. If this is permitted, in the next step SC3, the identity SGID of the logging control unit SG is stored in a data record DA3 in the device PM. This allows the device PM to save the data. Fig. 4. Which control units (SG) are registered to it for controlling an alarm output. From this, the device can potentially deduce that, in principle, an alarm output can be triggered by sending a group message (BC).

[0077] In step SC4, upon successful registration of the control unit SG with the device PM, an acknowledgment message ACK is sent to the control unit SG. This ACK message contains the network identity SGID of the control unit as the destination address and the network identity PMID of the device PM as the sender address. The network identity PMID can then be stored as a potential sender identity in the memory MEM of the device PM. Preferably, the ACK message contains identification data PMIDENT, which uniquely identifies the device PM and is then preferably stored as a potential sender identity in the memory MEM of the device PM.

[0078] After receiving the confirmation message ACK, the control unit SG then, in step SC5, either the network identity PMID of the device PM or the identification data PMID of the device PM are entered into the data record DA1, preferably using a list AL as already described in the Fig. As mentioned in point 2, this information is stored. This means that the control unit SG knows which group message BC, which medical device PM, with which sender identity PMID or PMIDENT it must respond to in order to issue an alarm.

[0079] Fig. Figure 6 shows the process steps for carrying out the method and for a more detailed explanation of the functioning of the control unit SG according to the invention. It is understood by a person skilled in the art that the steps referred to in the Fig. The steps described in 6 can be carried out by the respective processors using further, previously mentioned sub-devices.

[0080] In process step SC11, the medical device PM checks whether an alarm condition can be detected based on the physiological measurements SES and the reference values ​​R. In the subsequent step SC12, if an alarm condition is detected, the process branches to process step SC13, in which the medical device PM preferably starts its own timing function TP, the function of which will be explained in more detail later.

[0081] In step SC14, the device PM then sends the group message BC, which indicates the sender's identity, e.g., in the form of the network identity PMID. In the preferred case that the network identity PMID itself is not used as the sender identity, the group message BC also contains sender identity data PMIDENT.

[0082] The group message also contains a data element ALST, which indicates the presence of an alarm state.

[0083] Preferably, the first group message is given in the form of an alternative first group message BC11, which, in comparison to the group message BC, further contains a data element ATY that indexes an alarm type.

[0084] The control unit SG preferably starts its timing function T, which in this example is a stopwatch function, in one step SC15 after receiving the group message BC, BC11.

[0085] In a subsequent step SC16, the device SG checks whether the sender identity PMID, PMIDENT of the first group message BC, BC11 matches a potential sender identity PMID, PMIDENT from the data record DA1, see Fig. 2. It is therefore checked whether the first group message BC, BC11 originates from a medical device PM to which the control unit SG is assigned. This allows the device PM to avoid explicitly addressing control units SG in the message BC, BC11 in order to initiate an alarm output only on those control units SG.

[0086] If the check from step SC16 is positive, then in a subsequent step SC17 it is checked whether the alarm state ALST is given or indicated.

[0087] If this is the case, in a subsequent step SC18, by comparing a value TV of the timing function T and the time periods indexed in the data set DA2, it is determined whether a control signal STS should be output at the moment or not.

[0088] In a subsequent step SC19, if no control signal STS is to be output, the process branches back to step SC18. However, if a control signal STS is to be output, the process branches to a procedure step SC20 in which the control signal STS is output.

[0089] The process then branches back from step SC20 to step SC18 to continuously check whether the control signal STS should be output.

[0090] The Fig. Figure 8 shows further signals and further procedural steps, which, in conjunction with the previously mentioned ones, can be used to determine the following: Fig. The 6 described process steps SC18, SC19 and SC20 bring about further functionalities.

[0091] This makes it possible to check whether the output of the control signal STS can even reach an alarm signal output unit PSA.

[0092] The one in Fig. The status information shown (SIN 2) can be used to check if the alarm output unit WSA is functioning. Fig. 2. whether it is capable of issuing an alarm signal at all.

[0093] The status information SIN preferably indicates an operating state of the WSA unit; alternatively, the status information SIN indicates whether the WSA unit is connected to the SG control unit at all.

[0094] Thus, in process step SC19A, the operating status of the WSA unit is determined using the status information SIN. If the status of the output unit WSA, as indicated by the status information SIN, is such that the control signal can successfully reach the WSA unit, the process continues to process step SC20, in which the output of the control signal STS is initiated. If the control signal STS cannot successfully reach the output unit WSA, the process branches to process step SC19a2, in which the process terminates.

[0095] In process step SC21, a first status message ACK1_1 is sent to the same sender PMID that was the sender PMID of the group message BC. In this example, the index "1_" following "ACK" indicates that it is a first status message, or a status message of a first type. The final index "1" indicates that the message was sent from a first control unit. Preferably, the status message ACK1_1 contains a data element ATY, which was previously defined with reference to message BC11. Fig. As described in section 6, the data element ATY indexes the alarm type for which the status message applies. This allows individual messages, such as the group message BC11 and the status message ACK1_1, to be used separately for specific alarm types, thus enabling differentiation between different alarm types.

[0096] The status message ACK1_1 informs the sender PM of the group message BC that an alarm output unit WSA can be successfully controlled and that an alarm output will therefore occur.

[0097] The Fig. 9a and Fig. Section 9b shows further signals and further procedural steps, which, in conjunction with the previously mentioned ones, can be used to determine the following: Fig. The six described process steps SC18, SC19, and SC20 result in six further functionalities. It is clear to a person skilled in the art that a combination of the process steps of Fig. 9a with those of the Fig. 8 is possible, so that further functionalities can be achieved.

[0098] Shown in Fig. 9a an additional process step SC19B. The control unit SG receives an initial status message via its data network interface, which in this case is a group message BC2 that indicates in a data element STSGX whether another control unit is successfully controlling an alarm signal output unit. A previously mentioned medical device PM can, for example, be activated by evaluating an initial status message ACK1_1 from the Fig. 8. Evaluate that another control unit has successfully activated an alarm signal output unit and then initiate the sending of an initial status message in the form of group message BC2. Preferably, group message BC2 includes a data element ATY for indexing a specific alarm type, as previously described with reference to the Fig. 6 and Fig. 8 explained in more detail.

[0099] As an alternative to an initial status message in the form of the group message BC2, an initial status message ACK1_2 sent directly from another control unit - with a corresponding identity SGID2 - can also be received by the control unit SGID, which also indicates that the control unit with the identity SGID2 is successfully issuing an alarm signal.

[0100] In process step SC19B, the output of the control signal STS can be made dependent on whether the data element STSGX indicates that another control unit is already successfully outputting an alarm signal. If this is the case, no control signal STS is output by the control unit SG itself; thus, the process does not proceed to step SC20. This is advantageous because, if another control unit is already outputting the alarm signal, the control unit SG itself then withdraws its own STS control signal for alarm signal output.

[0101] If the control unit SG receives a second status message at a later time in the form of a group message BC3, which indicates via a data element STSGX that the other control unit is no longer triggering an alarm signal output, then in step SC19B it is decided to branch to step SC20, in which the control signal STS is output. Preferably, the group message BC3 has a data element ATY for indexing a specific alarm type, as previously described with reference to the Fig. 6 and Fig. 8 explained in more detail.

[0102] As an alternative to the second status message in the form of group message BC3, a second status message NACK1_2, sent directly from another control unit with a corresponding identity SGID2, can also be received by the control unit SGID. This second status message also indicates that the other control unit with the corresponding identity SGID2 is no longer outputting an alarm signal. Preferably, the status message NACK1_2 includes a data element ATY for indexing a specific alarm type, as previously described with reference to the Fig. 6 and Fig. 8 explained in more detail.

[0103] These with reference to Fig. The possibilities for control signal output discussed in section 9a are in the Fig. 9b is illustrated in more detail. For a different control unit SG2 of the aforementioned identity SGID2, assumed here, time periods up to the times TA and TB are indicated, at which the control unit SG2 is to issue the alarm signal.

[0104] As soon as the alarm signal is issued, the control unit SG2 sends its first status message ACK1_2, which may be received directly by the control unit SG. Alternatively, the medical device PM receives the status message ACK1_2 and then sends a status message BC2, as previously explained.

[0105] Although the data records stored in the control unit SG indicate that a control signal is to be issued from time TA to time TC to request the output of an alarm signal, this may not be the case in the previously mentioned Fig. As described in section 9a, the control unit SG suppresses its output of the control signal SCS from time TA until time TB, because it is aware that the other control unit SG2 is already issuing an alarm signal due to the first status message ACK1_2, BC2. Therefore, from time TA until time TB, the output of an alarm signal at control unit SG is suppressed.

[0106] Since at time TB the control unit SG2 sends the previously described second status message NACK1_2, and either this second status message NACK1_2 or a second status message in the form of the group message BC3 sent by the medical device PM is received by the control unit SG, the control unit SG then outputs a control signal to request an alarm signal from time TB until time TC. Output of the control signal is prevented at the latest when the time period ends at time TC.

[0107] The Fig. 10a and Fig. Section 10b shows further signals and further procedural steps, which, in conjunction with the previously mentioned ones, can be used to determine the following: Fig. The six described process steps SC18, SC19, and SC20 result in further functionalities. It is clear to a person skilled in the art that a combination of the process steps of Fig. 10a with which the Fig. 8 and / or the Fig. 9a is possible, so that further functionalities can be achieved.

[0108] In the Fig. Section 10a shows additional procedural steps by which it can be determined whether an input signal indicating confirmation of an alarm by a user is present.

[0109] The in Fig. The control unit shown in section 2 has an input interface ES for receiving an input signal EGS, which indicates user confirmation of the alarm signal. Upon receipt of the input signal EGS, the processor P can then proceed through step SC19C. Fig. Step 10a checks whether a user has entered any information. If not, the alarm has not been acknowledged or confirmed by a user, so the control signal STS is output further in step SC20.

[0110] However, if the alarm is acknowledged, so that the input signal EGS is present, step SC19C branches to step SC19D, in which a status message ACK2_1 is sent. This status message ACK2_1 indicates in a data element EGST that an acknowledgement of the alarm by a user input at the control unit SG has been made or detected. Preferably, the status message ACK2_1 includes a data element ATY for indexing a specific alarm type, as previously described with reference to the Fig. 6 and Fig. 8 explained in more detail.

[0111] This information, or the data element EGST, can then be evaluated by the aforementioned medical device PM or its processor PR in order to influence the output of an alarm signal at the medical device PM itself or at other control units.

[0112] The Fig. Figure 10b illustrates the output of a control signal to request an alarm signal from device SG. When the input signal EGS is present, the output of the control signal STS is suppressed until the time interval TB. If no input signal EGS is present, the output of the control signal is suppressed at the latest when the time interval ending at time TB expires. Furthermore, a third status message ACK2_1 is also sent when the input signal EGS is present. This third status message ACK2_1 can be sent to the medical device PM or directly to other control units. Upon receiving the third status message ACK2_1, device PM can then send a third status message in the form of a group message BC4.

[0113] In a preferred embodiment, the control unit SG receives a third status message ACK2_X from another control unit. This message indicates in a data element EGSX that the sender SGXID of the status message ACK2_X has received user input as confirmation of the alarm. Preferably, the device SG receives this information via a group message BC4 from the medical device PM. Preferably, the status message ACK2_X includes a data element ATY for indexing a specific alarm type, as previously described with reference to the Fig. 6 and Fig. 8 explained in more detail.

[0114] The information in the form of the data element EGSX can then be used in step SC19 to prevent the output of the control signal from being sent to the control unit SG based on the user's indexed confirmation and not to branch to the procedure step SC20.

[0115] Fig. Figure 3 shows an alternative control unit SG11, which is essentially the same as the control unit SG of the Fig. 2 is trained. Differences between the control units SG and SG11 are now explained.

[0116] In the SG11 control unit, the control signal interface IS is configured as a second data network interface DS2, so that the control signal STS2 is transmitted as a data signal via a second data network NW2 to a mobile device. This allows the SG11 control unit to act as a gateway between the aforementioned first network NW and the second network NW2. The control signal STS2 is thus transmitted to a mobile device MO, which has its own alarm signal output unit WSAM. Furthermore, the mobile device MO, as an alarm output device, has a data interface DSM to the NW2 network.

[0117] Furthermore, the MO mobile unit has an ESM input interface for receiving an EGSM input signal, which is transmitted via the NW2 network to the SG11 device. The MO handset is also configured to transmit a SINM status signal related to the WSAM alarm output unit via the NW2 network to the DS2 device.

[0118] If the MO handset receives the STS2 control signal, it outputs an alarm signal via its WSAM alarm signal output unit.

[0119] The processor P of the device SG11 controls the output of the control signal STS2, taking into account the signals EGSM, SINM now received via the interface DS2 in the manner previously described in the first embodiment.

[0120] Preferably, the control unit SG11 has a data record DA20 in its memory unit MEM2, in which a list ML containing the identities of network participants of the second data network NW2 is indexed. This allows the control unit SG11 to know to which network participants MO of the second data network NW2 it must transmit the control signal STS2.

[0121] With reference to Fig. Section 4 will now explain further aspects of the medical device PM in more detail. The device PM has a data network interface DSP, which is configured to send the various group messages BC, BC11, BC2, BC3, and BC4. Furthermore, the data network interface DSP can receive the various status messages ACK1_1, ACK1_2, ACK2_1, NACK1_2, and ACK2_X. These various messages BC, BC11, BC2, BC3, BC4, ACK1_1, ACK1_2, ACK2_1, NACK1_2, and ACK2_X were previously explained in more detail with reference to the preceding figures.

[0122] The processor PR evaluates received status messages ACK1_1, ACK1_2, ACK2_1, NACK1_2, ACK2_X in the manner described above and generates the output messages BC2, BC3, BC4 based on this.

[0123] In this process, a status message ACK1_1, ACK1_2, ACK2_1, NACK1_2, ACK2_X is preferably only considered if the sender's address or network identity of the sender of the status message ACK1_1, ACK1_2, ACK2_1, NACK1_2, ACK2_X matches a network identity SGID of the data record DA3.

[0124] In the dataset DA22, a first time period TM1 and a second time period TM2 are indexed.

[0125] These time periods are in the Fig. 11a and the Fig. 11b explained in more detail and in correspondence with the Fig. 2, Fig. 3 and Fig. 4 to consider.

[0126] The Fig. Figure 11a shows a time sequence starting from a point in time TAL, at which an alarm condition is detected by the processor PR of the device PM. At this point in time, the previously described group message BC is sent by the device PM.

[0127] The purpose of the first time interval TM1 is to allow the processor PR of the device PM to decide whether it should itself output the control signal STSP to its own warning signal or alarm output unit WSA2. Therefore, during time interval TM1, the processor PR waits until time tmax_I to see if a previously described first status message ACK1_1 is sent back to the device PM from a control unit. If this first status message ACK1_1 is received by the end of time interval TM1, the processor PR does not output the control signal STSP to the alarm output unit WSA2. However, if no such first status message is received from a control unit at time tmax_I after the end of time interval TM1, it can be concluded that an alarm signal may need to be triggered at the device PM itself.Therefore, the control signal STSP is then output by the processor PR to the alarm output unit WSA2.

[0128] Fig. Figure 11b further shows an alarm behavior in a second variant in the case where, after the alarm time TAL, a third status message ACK2_1, ACK2_X is sent to the device PM by a control unit, wherein this third status message ACK2_1, ACK2_X indicates in a data element, as described above, that a user has acknowledged the alarm at the control unit sending the message. Since an alarm output to other control units or the control unit that received the acknowledgment may be suppressed, but it may be necessary to verify whether the user who acknowledged the alarm and thus contributed to suppressing further alarm signals has actually reached the medical device PM to check the patient's condition, the output of an alarm signal at the device PM itself is controlled depending on the second time period TM2.If, from the time the third status message ACK2_1, ACK2_X is received, the second time interval TM2 elapses until a time tmax_II, such that no input signal EGS2 is present from the input unit ES2 of the device PM, then the control signal STSP is output by the processor PR to the alarm output unit WSA2. This ensures that at least the alarm output unit WSA2 triggers an alarm on the medical device PM.

[0129] However, if, from the receipt of the third status message ACK2_1, ACK2_X during the time interval TM2, user input at the input unit ES2 of the device PM is detected by the processor PR through the presence of the input signal EGS2, then after the expiry of the time interval TM2 at time tmax_II, no output of the control signal STSP to the alarm output unit WSA2 will occur.

[0130] The reference to the Fig.The embodiments SG, SG11 of the control unit according to the invention described in sections 2 and 3 can in turn also be medical devices SG, SG11 with further functionalities.

[0131] Although some aspects have been described in connection with a device, it is understood that these aspects also constitute a description of the corresponding process, so that a block or component of a device is also to be understood as a corresponding process step or as a feature of a process step. Similarly, aspects described in connection with or as a process step also constitute a description of a corresponding block / step or detail or feature of a corresponding device, or that the device or the corresponding computing unit is configured to carry out the process step.

[0132] The proposed processor is to be considered as at least one processing unit. An implementation of the at least one processing unit can also be realized by a combination of several processing units, preferably by using software in conjunction with hardware. Depending on specific implementation requirements, embodiments of the invention can be implemented in hardware and / or in software. The implementation can be carried out using a digital storage medium, for example, a floppy disk, a DVD, a Blu-ray disc, a CD, a ROM, a PROM, an EPROM, an EEPROM, or a FLASH memory, a hard disk, or other magnetic or optical storage media on which electronically readable control signals are stored. These control signals can interact with, or do interact with, a programmable hardware component in such a way that the respective method is carried out.

[0133] A programmable hardware component can be a processor, a computer processor (CPU = Central Processing Unit), a graphics processor (GPU = Graphics Processing Unit), a computer, a computer system, an application-specific integrated circuit (ASIC = Application-Specific Integrated Circuit), an integrated circuit (IC = Integrated Circuit), a system-on-a-chip (SOC = System on Chip), a programmable logic element, or a field-programmable gate array with a microprocessor (FPGA = Field Programmable Gate Array).

[0134] The digital storage medium can therefore be machine-readable or computer-readable. Some embodiments thus include a data carrier containing electronically readable control signals capable of interacting with a programmable computer system or a programmable hardware component to perform one of the methods described herein. An embodiment is therefore a data carrier (or a digital storage medium or a computer-readable medium) on which the program for performing one of the methods described herein is recorded.

[0135] In general, embodiments of the present invention can be implemented as a program, firmware, computer program, or computer program product with program code or as data, wherein the program code or data is / are effective in carrying out one of the methods when the program runs on a processor or a programmable hardware component. The program code or data can, for example, also be stored on a machine-readable medium or data carrier. The program code or data can be in the form of source code, machine code, bytecode, or other intermediate code, among others.

[0136] Another embodiment is a data stream, a signal sequence, or a sequence of signals that represents the program for carrying out one of the methods described herein. The data stream, signal sequence, or sequence of signals can be configured, for example, to be transferred via a data communication link, such as the Internet or another network. Other embodiments include signal sequences representing data that are suitable for transmission via a network or a data communication link, where the data represents the program.

[0137] A program according to one embodiment can implement one of the methods during its execution, for example, by reading memory locations or writing data to them, thereby potentially triggering switching operations or other processes in transistor structures, amplifier structures, or other electrical, optical, magnetic, or otherwise operating components. Similarly, by reading a memory location, a program can acquire, determine, or measure data, values, sensor values, or other information. Therefore, by reading from one or more memory locations, a program can acquire, determine, or measure quantities, values, measured values, and other information, and by writing to one or more memory locations, it can initiate, trigger, or execute an action, as well as control other devices, machines, and components. Reference symbol list ACK, ACK1_1, ACK1_2, ACK2_1, ACK2_X Confirmation message AG Alarm Device AL, TL, ML List ALST status element ANN Request Message Alarm type ATY ATY device B bed BC, BC11, BC2, BC3, BC4 Group Message BZ1, BZ2 operating status signal DA1, DA2, DA3, DA11,DA22, DA20 data set DAS data interface DS, SIS signaling interface DS1, DS2, DSP, DSX, DS Data network interface EGS, EGS2, EGSM input signal ES, ES2, ESM Input Unit FKT data element MEM, MEM2, MEMP storage unit MO Mobile Unit NACK, NACK1_2 Rejection message NW, NW2 data network PT Patient P, P1, PR Processor PM, PM1 Medical Device PMID, PMIDENT Sender Identity R Reference value REQ1 Request message SC1, ... , SC5, SC11, ... SC21 Process step SEC sensor interface SEN Sensor SES sensor signal SG, SG11 control unit SGID, SGID2 network identity SIN, SINM status information STS, STS2, STSP control signal STSGX, EGST, EGSX data element T,TP timing function TA, TB, TC, TAL, tmax_I, tmax_II time point TAR, TBR, TAC, TAD, TM1, TM2 Time period TV current value WSA, WSA1, WSA2, WSAM, WSAX alarm signal output unit Z1 certificate data

Claims

[1] Control unit (CU) for controlling an alarm output, comprising - a data network interface (DS), - a signaling interface (SIS) for outputting a control signal (STS) which indicates a request for the output of an acoustic and / or visual alarm signal, - at least one storage unit (MEM), - at least one processor (P) - as well as an alarm signal output unit (WSA) for issuing a visual and / or audible warning, wherein the data network interface (DS) is configured to receive a group message (BC, BC11) which indicates a sender identity (PMID) of a sender (PM) of the group message (BC, BC11) and which further indicates the existence of an alert state, wherein the storage unit (MEM) provides a first data record (DA1) which indexes a list (AL) of potential sender identities, and furthermore a second data record (DA2) which indexes one or more time periods during which the acoustic and / or visual alarm signal is to be emitted, wherein the processor (P) is configured to operate a timing function (T), and the control signal (STS) is sent via the signaling interface (SIS) to the alarm signal output unit (WSA) - depending on whether the sender identity (PMID) indexed in the group message (BC, BC11) matches one of the potential sender identities - and furthermore depending on a comparison of one or more time periods, which results from a value of the timing function (T) upon receipt of the group message (BC, BC11) and a current value (TV) of the timing function (T), with data from the second data set (DA2) to spend characterized by , that the processor (P) is further designed to, - to check, based on a status information (SIN), whether the control signal (STS) can reach the alarm signal output unit (WSA) or not, - and furthermore, if the check is successful and the control signal (STS) is being output, a status message (ACK1_1), which indicates successful activation of the alarm signal output unit (WSA), is sent to the sender (PM) of the group message (BC, BC11) via the data network interface (DS). [2] Control unit (CU) according to claim 1, characterized by, that the processor (P) is designed to suppress the output of the control signal (STS) at the latest when this is indicated by one or more time periods of the second data set (DA2). [3] Control unit (CU) according to claim 1, characterized by , that the group message (BC, BC11) furthermore contains a data element (ATY) which indicates a type of alert state, that the second data set (DA2) further indicates an assignment of one or more time periods to types of alarm states, and that the processor (P) is trained to take into account the type of alert state indicated in the group message (BC, BC11) during the comparison. [4] Control unit (CU) according to claim 1, characterized by, that the control unit (CU) furthermore has an input interface (I) for receiving an input signal (ISP) which indicates confirmation of the alarm signal by a user, and that the processor (P) is furthermore designed to, when the input signal (ISP) is present - to prevent the output of the control signal (STS) - and furthermore, to send a status message (ACK2_1), which indicates the user's confirmation of the alarm signal, to the sender (PM) of the group message (BC, BC11) via the data network interface (DS). [5] Control unit (CU) according to claim 1, characterized by , that the data network interface (DS) is further configured to receive a status message (ACK1_2, BC2, NACK1_2, BC3) which indicates whether another control unit is currently successfully controlling an associated alarm signal output unit (WSA), wherein the processor (P) is further configured to output the control signal (STS) via the signaling interface (SIS) depending on the presence of the status message (ACK1_2, BC2, NACK1_2, BC3). [6] Control unit (CU) according to claim 1, characterized by , that the data network interface (DS) is further configured to receive a status message (ACK2_X, BC4) indicating that another control unit has detected confirmation of an acoustic and / or optical alarm signal by a user, and that the processor (P) is further designed to suppress the output of the control signal (STS) when the status message (ACK2_X, BC4) is present.

Images