Safety Relating to a Machine and to a Person Fitted with a Medial Device

Abstract

The safety process covering a vehicle having driving apparatus and a station designed for a person and a person fitted with a medical device, in which: the medical device is designed to work in response to the physiological data of the person with a device and trigger an alarm signal in case of malfunctioning of the medical device per se and alarm signal for any actual or inferred problem regarding the medical condition of the person fitted with a device. A safety module is designed to be associated to the vehicle, to receive data generated by the medical device and generate information matching data received, while the person with a device is associated to the vehicle and the safety module is associated to the vehicle, encrypted communication is established between the medical device and safety module, so that the medical device triggers an alarm signal in case of malfunctioning and/or alarm signal in case of medical problem and so that the safety module generates an alarm notification in line with an alarm signal, one alarm notification at least is thereby transferred to an operator.

Claims

1. A safety process relating to a vehicle incorporating driving means and at least one station designed for one person, including at least one operating station for one person serving the vehiclein particular the pilot in command, and at least one person fitted with at least one medical device, the vehicle being designed so that at least one person fitted with a device may be associated to it while being at one station in the vehiclein particular the operating station to serve the vehicle, in which: the medical device is designed to work in response to the physiological data of the person fitted with a device and trigger, when the occurrence arises, an alarm signal warning of malfunctioning affecting the medical device per se and an alarm signal warning of an actual or inferred problem relating to the medical status of the person fitted with a device, a safety module designed to be structurally associated to the vehicle, to receive data generated by the medical device as the person fitted with a device is associated to the vehicle, and to generate information matching data received, the medical device and safety module are such that the safety module operates without receiving or storing the physiological data of the person fitted with a medical device making this non-compulsory, as the person fitted with a device is associated to the vehicle and as the vehicle is associated to the safety module, encrypted communication is established between the medical device and the safety module, so that the medical device generateswhere this is justifiedan alarm signal in case of malfunctioning and/or alarm signal in case of actual or inferred medical problem and the safety module generates at least one alarm notification in line with an alarm signal, at least one alarm notification is thereby transferred to an operator.

2. The safety process based on claim 1, wherein the medical device is designed to generate, based on the occurrence, the alarmamong several onessignalling any medical device malfunctioning and/or the alarmamong several onessignalling an actual or inferred problem concerning the medical status of the person fitted with a device, where an alarm level index is associated to an alarm signal among several of them.

3. The safety process based on claim 1, in which the medical device is either implanted or is external to the person fitted with the device, for therapeutic and/or diagnostic purposes.

4. The safety process based on claim 1, where either the person fitted with the device occupies an operating station in the vehicle, or the vehicle comprises at least one station other than the operating station, and where the person fitted with the device occupies a station other than the operating station.

5. The safety process based on claim 1, wherein the medical device and safety module are configured such that the transfer between the medical device and safety module is automatically established merely due to the presence of the person fitted with the device at a station in the vehicle and activation of the safety module as the case may be.

6. The safety process based on claim 1, wherein the medical device and the safety module are configured such that the transfer between the medical device and the safety module is automatically established, as the case may be, without the compulsory and systematic necessity of a matching operation or transfer of a sole identifier, as the case may be, provided that consistency is checked, using, where need be, an artificial intelligence process, between the medical device of the person fitted with the device and the medical device as perceived by the safety module.

7. The safety process based on claim 1, in which the safety module is designed with no memory or with no long-term memory for the physiological data of the person with the device, on the one hand, or for a sole identifier intended for a matching operation on the other, any alarm signal reporting any malfunctioning of the medical device per se or an alarm signal for an actual or inferred problem concerning the medical condition of the person fitted with a device.

8. The safety process based on claim 1, further comprising either a portable safety module, structurally associated to the vehicle in a removable fashion, the safety module being structurally dislocated from the vehicle when the person fitted with the device is not at a station in the vehicle and the safety module is structurally associated to the vehicle on a temporary basis when the person fitted with the device is at a station in the vehicle or a safety module is structurally associated to the vehicle in a fixed, permanent way.

9. The safety process based on claim 1, wherein at least one alarm notification is transferred to an operator selected as one or more from the following list: a control unit for the operation of the vehicle driving means, a person at a station in the station of the vehicle, remote alarm system for the vehicle.

10. The safety process according to claim 9, further comprising a vehicle comprising a control unit for the operation of the driving means functionally associated to the safety module, at least one alarm notification is transferred to the control unit, and we program the control unit is programmed so that the control unit controls the driving means based on the occurrence of an alarm signal for any malfunctioning of the medical device and/or alarm signal for an actual or inferred medical problem and the alarm level index in the case of an alarm signal among several ones.

11. The safety process based on claim 10, in which the control unit is either programmableand the control unit is previously programmed based on one or more scenario(s) according to the alarm signal, or is pre-programmed according to one or more scenario(s) according to the alarm signal.

12. The safety process based on claim 10, in which a sensory alarm system, functionally associated to the safety module, is designed to generate an alarm signal which can be perceived by a person at a station in the vehicle, such as a visual, sound, vibration or comparable system.

13. The safety process based on claim 10, further comprising a remote alarm system in the vehicle; at least one alarm notification being remotely transferred to the alarm system, geo-location data being generated for the vehicle and the geo-location data are remotely transferred to the alarm system.

14. The safety process based on claim 1, in which the presence of a person is detected at a station in the vehicle.

15. The safety unit concerning a vehicle incorporating driving means and at least one station for one person, including at least one operating station for a person serving the vehiclein particular the pilot in command, and at least one person fitted with at least one medical device, the vehicle being designed so that at least one person with a device may be associated to it at a station in the vehiclein particular at the operating station to serve the vehicle, for the implementation of the process according to claim 1, so that: the medical device is designed to work in response to physiological data relating to the person with a device and to generate, when the occurrence occurs, an alarm signal warning of any malfunctioning of the medical device per se and an alarm signal warning of any actual or inferred problem with respect to the medical status of the person with a device, it includes a safety module designed to be structurally associated to the vehicle, receive data generated by the medical device while the person with a device is associated to the vehicle, and to generate information in line with data received so that the medical device may generatewhere this is justifiedan alarm signal in case of malfunctioning and/or an alarm signal for any actual or inferred medical problem and so that the safety module generates at least one alarm notification matching an alarm signal, it comprises means to encrypt communications between the medical device and the safety module, it comprises means to transfer from there at least one alarm notification to an operator, the medical device and safety module are such that the safety module works without receiving or storing the physiological data of the driver fitted with the medical device, which makes this non-compulsory.

16. The safety unit based on claim 15, in which the medical device is designed to generate, depending on the occurrence, the alarm signalamong several of themwarning of any malfunctioning of the medical device and/or the alarm signalamong several of themwarning of an actual or inferred problem concerning the medical status of the person fitted with a device, in which an alarm level index is associated to an alarm signal among several ones of them.

17. The safety unit based on claim 15, in which the safety module is designed with no memory or no long-term memory for, on the one hand, the physiological data of the person fitted with a device, on the other hand any alarm signal in case of malfunctioning of the medical device per se or an alarm signal for any actual or inferred problem regarding the medical condition of the person with a device.

18. The safety unit based on claim 15, in which the safety module is designed with no memory or with no long-term memory for a single identifier and/or designed with a system to ensure that the medical device of the person fitted with a device is consistent with the medical device as perceived by the safety module.

19. The safety unit based on claim 15, in which the safety module is either portable, structurally associated to the vehicle in a removable fashion, or structurally associated to the vehicle in a fixed permanent way.

20. The safety unit based on claim 15, comprising an operator selected as: control unit for the operation of the driving means of the vehicle, and/or a person at a station in the vehicle, and/or remote alarm system for the vehicle.

21. The safety unit based on claim 20, in which the vehicle incorporates a control unit for the operation of its driving means functionally associated to the safety module, and this control unit is either programmable or pre-programmed.

22. The safety unit based on claim 20, comprising a sensory alarm system, functionally associated to the safety module, designed to generate an alarm signal perceptible by a person at a station in the vehicle, such as a visual, sound, vibration or comparable system.

23. The safety unit based on claim 20, comprising a remote alarm system for the vehicle and a vehicle geo-location system.

24. The safety unit based on claim 15, in which communication means between the medical device, safety module, transfer means to an operator are wireless or wired systems.

25. The safety unit based on claim 15, further including means for detecting the presence of a person at a station in the vehicle, functionally associated to the safety module.

26. The safety unit based on claim 15, in which the vehicle is a land vehiclesuch as a motor car, a train, tractor, handling vehicle, sea vehiclesuch as a boat, air vehiclesuch as an aircraft, or space craft.

27. A medical device specially designed for the implementation of the safety process according to claim 1, designed to work in response to the physiological data of the person fitted with a device and trigger, when the occurrence arises, an alarm signal for any malfunctioning of the medical device per se and an alarm signal for any actual or inferred problem with respect to the medical condition of the person with a device, as the case may be, among several alarm signals, and the medical device is intended to be either implanted or to be external, and be used for therapeutic and/or diagnostic purposes.

28. A safety module specially designed for the implementation of the safety process based on claim 1, designed to receive data generated by a medical device (2) and to generate information in line with the data received.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

[0088] FIG. 1, which is unique, is a strictly diagrammatical view illustrating the invention.

DETAILED DESCRIPTION ON THE PREFERRED EMBODIMENTS

[0089] We are now describing a possible particular version of the invention as an example.

[0090] This built unit does not exclude others, as the man in the trade can transpose and adapt conclusions drawn from the description of the particular built unit described to other built units.

[0091] The invention relies upon a safety process, a safety unit specially designed for the implementation of the process, a medical device and a safety module both specially designed for the implementation of the process and, thereby for being part of the safety unit. Later, the description, to the extent where it relates to the safety process, is valid for the safety unit as well as the medical device and safety module, and conversely, the description, to the extent where it relates to the safety unit, medical device and safety module, is valid for the safety process.

[0092] As stated, safety means a situation as objective as possible, relying on medical conditions, resulting in the absence or minimization of hazards or threats with respect both to the person fitted with a medical device, the medical device proper, the vehicle or persons or physical features which can be impacted by the vehicle.

[0093] It is agreed that the invention relies on any means mentioned as operating stage or physical feature as well as any functionally equivalent means.

[0094] It is agreed that it is not required to describe in detail such or such means mentioned, to the extent where the indication of its relevance or role or of the effect generated or implementation is enough for the man in the trade to be able to achieve it.

[0095] In general, the purpose of the invention is to ensure the safety of a vehicle incorporating driving means and at least one station for a person, including at least one operating station for a person serving the vehicleincluding the pilot in command, and at least one person fitted with at least one medical device, the vehicle being designed so that at least one person with a device may be associated to the same while being at a station in the vehiclein particular at the operating station to serve the vehicle.

[0096] Such a vehicle may be a land vehiclesuch as a motor car, train, tractor, handling vehicle, sea vehiclesuch as a ship, air vehiclesuch as an aircraft, or spacecraft, or a crane for example.

[0097] The person fitted with a device may equally be the pilot of the vehicle or a passenger, based on the definitions given to these two words.

[0098] The vehicle will not necessarily be dedicated to the person fitted with a device, and such person may use different vehicles, at varying intervals, or have no dedicated vehicle.

[0099] The safety considered may be related to one or more personsa person may be fitted with one or more medical devices.

[0100] Medical devices may be implanted or located externally, have therapeutic and/or diagnostic purposes.

[0101] The hazards or threats targeted by the safety on which the invention is focused relate both to the person fitted with a medical device, the medical device proper, the vehicle or persons or physical features which may be impacted by the vehicle.

[0102] The problem causing any hazard or threat may be actual and undeniable or just be likely and potential.

[0103] The particular built unit described refers to the specific case of a land vehicle such as a motor car (1), the driver (C) fitted with a medical device (2).

[0104] The motor car (1) has driving means (3) such as an engine (3a) to which ordinary means such as wheels (3b) and transmission are associated. The motor car (1) also includes a control unit (4) to operate its driving means (3).

[0105] The motor car (1) has at least one station (5) for one person (P), including at least one operating station (5a), i.e., in this case, a driver station (5a), for the person serving the motor car, namely the driver (C).

[0106] A station (5) typically includes a seat (6) and related ordinary means. So, the driving station (5a) incorporates such a seat (6) and steering means (7) such as a remote control, steering wheel, levers, buttons, pedals, etc.

[0107] For any period of driving of the motor car (1), the driver (C) will be associated to the motor car to the extent where he will sit down and remain seated on the seat (6) of the driver station (5a), to be able to manoeuvre steering units (7). Between driving periods, when the motor car (1) is stationary and is not used, the driver (C) will leave the motor car (1) to be involved in other activities. He will then no longer be associated to the motor car (1), in line with the meaning given in this case to the word associated. The driver (C) may still be associated to the motor car (1) later.

[0108] The medical device (2) has been designed to operate in response to the physiological data of the driver (C) and generate, when the occurrence arises, a signal warning of malfunctioning affecting the medical device (2) per se and a signal warning of an actual or inferred problem concerning the medical condition of the driver (C).

[0109] Such a medical device (2) is either implanted or is external to the driver (C). It is for therapeutic and/or diagnostic purposes. Such medical devices (2) include, without limitation: a pacemaker, prosthesis, pump, artificial heart, exoskeleton.

[0110] Based on a built unit, the medical device (2) is designed to generate a single signal warning of any malfunctioning affecting the medical device and/or single signal warning of a problem relating to the medical condition of the driver (C).

[0111] Based on another built unit, the medical device (2) is designed to generate, depending on the occurrence, one signalamong several oneswarning of malfunctioning affecting the medical device and/or one signalamong several oneswarning of a problem relating to the medical condition of the driver (C). In such a built unit, an alarm level index will be associated to an alarm signal among several ones.

[0112] Based on a built unit, the signal warning of a problem affecting the medical status of the driver (C) is an actual, undeniable problem. Based on another built unit, there is a possibility that it is only likely and potentialthen it is usually preceded by warning signs.

[0113] In a built unit, there are means (8) to detect the presence of the driver (C) at the driver station (4a). For example, such presence detection means (8) are associated to the driver's seat (C).

[0114] In that way, the safety process has a system for detecting the presence of the driver (C) at the driver station (5a).

[0115] The process implements and the safety system also includes a safety module (9).

[0116] The safety module (9) has been designed to be structurally associated to the motor car (1).

[0117] In the case where there are means (8) used to detect the presence of the driver (C) at the driver station (5a), there is a transfer (10) between detection means (8) and the safety module (9). It is thereby possible to automatically activate the safety module (9) in another way than by activating the medical device (2).

[0118] Based on a built unit, the safety module (9) is portable and structurally associated to the motor car (1) in a removable fashion. The safety module (9) will then be structurally dissociated from the motor car (1) when the driver (C) is not at the driver station (5a). Conversely, the safety module (9) is structurally associated to the motor car (1) on a temporary basis when the driver (C) is at the driver station (5a).

[0119] Based on another built unit, the safety module (9) is structurally associated to the motor car (1) in a fixed and permanent way.

[0120] The safety module (9) has been designed to receive data generated by the medical device (2), when the driver (C) is at the driver station (5a).

[0121] The safety module (9) has also been designed to generate information matching the data received from the medical device (2).

[0122] There are also transfer means (11) between the medical device (2) and safety module (9), so the safety process incorporates a transfer between the medical device (2) and the safety module (.sup.9).

[0123] The safety unit too has means for encrypting communications between the medical device (2) and safety module (9). This building arrangement makes it possible to avoid the hacking of data transferred and guarantees data confidentiality.

[0124] With means previously described, the medical device (2) generateswhen this is justifieda signal warning of any malfunctioning and/or signal warning of a problem. And the safety module (9) functionally associated to the medical device (2), as stated, will in its turn generate at least one alarm notification in line with an alarm signal.

[0125] The safety process is such that at least one alarm notification is thereby transferred to an operator, as the safety unit has means for transferring said alarm notification to the operator.

[0126] The relevant operator will be selected as one or more from the list below: the control unit (4) for the operation of the driving means (3) of the motor car (1), the driver (C) is at the driver station (5a) or a passenger in the motor car (1), or remote alarm system (12) for the motor car (1). And the safety unit incorporates one or more operators (4, C & 12).

[0127] In the case where the operator is the control unit (4), the control unit (4) will be functionally associated to the safety module (9) by transfer means (13). The alarm notification will later be transferred to the control unit (4).

[0128] In a built system, such control unit (4) is programmable and we program it before based on one or more scenario(s) depending on the triggering of a signal warning of malfunctioning affecting the medical device (2) and/or a signal warning of a medical problem suffered by the driver (C), as the case may be, taking into account the alarm level index in the event of an alarm signal among several alarm signals.

[0129] In another built system, this control unit (4) is pre-programmed according to such scenario(s).

[0130] In the case where the operator is the driver (C) sitting at the driver station (5a) or a passenger in the motor car (1), the unit incorporates a sensory alarm system (14), functionally associated to the safety module (9) by transmission means 15. Such a sensory alarm system (14) is designed to generate an alarm signal which may be perceived by a person at a station (4) in the motor car (1), including the driver (C). This may be, for example, a visual, sound, vibration means or generally any other comparable means. Then the safety process is such that via the sensory alarm system (14), an alarm signal perceptible by the relevant person is triggered.

[0131] In the case where the operator is the driver, there is a distant alarm system (12) separate from the motor car, the safety unit incorporates such an alarm system (12).

[0132] Such an alarm system (12) is functionally associated to the safety module (9) via transfer systems (16). Such alarm system (12) is designed in such a way that the alarm notification is remotely transferred to the same. In addition, the safety module is arranged in such a way as to be able to directly generate geo-location data for the motor car (1) and remotely transfer them to the alarm system (12).

[0133] Such an alarm system (12) may be more or less distant from the motor car (1), e.g., several kilometres or dozens of kilometres away.

[0134] Such an alarm system (12) may, for example, be an emergency centre with maps, diagnosis tools and, as the case may be, emergency staff. So, in case of any hazard or threat corresponding to an alarm signal, such an emergency centre may act and find the motor and rescue the driver (C).

[0135] In a built system, the medical device (2) and safety module (9) are such that the transfer between the medical device (2) and safety module (9) is automatically established due to the mere presence of the driver on the driver station seat (6), thanks to detection means (8).

[0136] The safety module (9) may also be activated following the receipt of a signal from the medical device (2).

[0137] So, with the standard system, the process and system are such that it is not necessary to plan a matching operation or the transfer of a sole identifier.

[0138] However, as the case may be, we will check the consistency between the medical device (2) of the driver (C) and the medical device as perceived by the safety module (9), as the safety module (9) is designed with a device to check on such consistency.

[0139] The medical device (2) and safety module (9) are such that the safety module (9) works without receiving or storing the physiological data of the driver (C) fitted with the medical device (2), which guarantees the confidentiality of such data. Similarly, the process used for the operation does not require in any way the compulsory dispatch of physiological data to the safety module.

[0140] So, the safety module (9) is designed with no memory or no long-term memory for the physiological data of the driver (C), or for a sole identifier intended for a matching operation, any alarm signal warning of any malfunctioning of the medical device per se on the one hand or an alarm signal for a problem relating to the medical status of the driver (C) on the other hand.

[0141] Based on built systems, transfer systems (10, 11, 13 & 15) are wireless or wired.

[0142] These transfer means are compatible with a protocol or standard concerning transfers in the medical area as the case may be.