Wearable Defibrillator Boot Switching for Safe Software Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wearable defibrillators face challenges in efficiently managing software updates and ensuring continuous operation during critical medical events, particularly in high-risk scenarios where immediate treatment is necessary.
Innovation Solution
A wearable medical monitoring device with a monitor and update manager that determines the installation time of software updates based on operational states, physiological parameters, and risk scores, while incorporating a supervisory circuit to manage processor booting and alternative drive selection to maintain functionality during critical operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software updates are installed immediately upon availability, then device functionality and security are improved, but critical medical treatments may be disrupted
Solution Approach 1:
The system performs preliminary actions by downloading and staging software updates in advance during periods when the device is not delivering critical therapy. The update manager stores updates in memory and prepares them for installation during safe windows, so that when installation occurs, the device can quickly switch to alternative boot media without interrupting active treatments.
Solution Approach 2:
The system implements beforehand cushioning by maintaining multiple boot media (primary and alternative boot media) with redundant software versions. This redundancy acts as a cushion that allows the system to switch away from the primary boot media during critical operations and return to it safely after updates are installed, preventing treatment disruption.
2Productivity
If software updates are delayed to avoid disrupting critical operations, then treatment continuity is maintained, but device security and functionality may deteriorate
Solution Approach 1:
The system implements periodic action by establishing regular update check cycles where the update manager periodically queries for available updates. Updates are downloaded during safe periods when no critical therapy is active, and installation is scheduled for subsequent safe windows, creating a periodic rhythm that balances security updates with treatment continuity.
Solution Approach 2:
The system uses feedback mechanisms where the update manager continuously monitors both the availability of updates and the operational state of the device. Based on this feedback about device usage patterns and critical operation schedules, the system dynamically adjusts update timing to install during appropriate safe windows, ensuring both security and treatment continuity.
3Reliability
If the device continuously monitors for updates, then device security is improved, but energy consumption increases
Solution Approach 1:
The update manager implements periodic action by checking for software updates at predetermined intervals rather than continuously. The system wakes from low-power state at scheduled times to check for updates, then returns to sleep mode, significantly reducing power consumption while maintaining adequate security monitoring.
Solution Approach 2:
The system employs self-service mechanisms where the update manager intelligently determines optimal update check times based on device operational patterns. It learns when the device is likely to be in safe states and schedules updates accordingly, reducing unnecessary wake-ups and energy consumption while ensuring updates are checked when most beneficial.
4Loss of time
If the device installs updates during active monitoring, then update timeliness is improved, but risk of disrupting critical detection increases
Solution Approach 1:
The system performs preliminary actions by downloading and validating update packages during safe windows before they are needed. Updates are staged in memory and prepared for installation in advance, so that when installation time arrives during another safe window, the process can proceed quickly without extending into periods when critical monitoring is active.
Solution Approach 2:
The system implements beforehand cushioning by maintaining alternative boot media with previous stable software versions. This cushion allows the system to switch away from active monitoring software during update installation and guarantee a safe fallback state, preventing any potential disruption to detection accuracy.
Data Source
AI summary
A wearable medical monitoring device is configured to manage drive booting. The wearable medical monitoring device includes a plurality of ECG electrodes configured to sense ECG signals from a patient, a plurality of therapy pads configured to deliver one or more therapeutic shocks, and a monitor operably connected to the plurality of ECG electrodes and the plurality of therapy pads. The monitor includes at least one processor and a supervisory circuit configured to monitor a state of the at least one processor when the at least one processor is configured to boot from a current drive. The supervisory circuit is configured to control the at least one processor to boot from an alternative drive different from the current drive based on the state of the at least one processor.