CN-121971761-A - Time sequence scheduling and safety interlocking method for noninvasive ventilation and thermal stimulation cooperation

CN121971761ACN 121971761 ACN121971761 ACN 121971761ACN-121971761-A

Abstract

The invention relates to a time sequence scheduling and safety interlocking method of noninvasive ventilation and thermal stimulation, which is used for closing thermal stimulation output, setting a forbidden mark and invalidating a control right token when a system is powered on or reset. And collecting and updating the ventilation state according to a preset period, wherein the state information at least comprises a stable sign and an alarm sign. The thermal stimulus output state may be altered only when the token is valid. And when the stable mark is true, the alarm mark is false and the forbidden mark is not set, executing token handover, namely initiating application, receiving grant and feeding back confirmation, and validating the token after the completion of the confirmation. If the alarm flag is true or the stable flag is false, the prohibition flag is set immediately, the token is disabled, and the heat stimulus output is turned off. And after the stable mark is true and the alarm mark is false, clearing the forbidden mark, and allowing the re-execution of the token handing-over process to realize cooperative control and safety protection.

Inventors

YE WEIJIE
Mo Dieyi

Assignees

广州市番禺区妇幼保健院(广州市番禺区何贤纪念医院)

Dates

Publication Date: 20260505
Application Date: 20260317

Claims (10)

1. The time sequence scheduling and safety interlocking method for the cooperation of noninvasive ventilation and thermal stimulation is characterized by comprising the following steps of: a) When the power-on or reset is performed, the heat stimulation output is closed, the forbidden mark is set, and the control right token is in a failure state; b) Acquiring and refreshing ventilation state information according to a preset time interval, wherein the ventilation state information at least comprises a stable sign and an alarm sign; c) Allowing the execution of a thermal stimulus output state change only when the token is in an active state; d) When the stable mark is true and the alarm mark is false and the forbidden mark is not set, executing a token handing-over process, namely initiating a token application, receiving a token grant and sending a grant confirmation, and validating the token after the grant confirmation is completed; e) Setting a forbidden mark and disabling the token when the alarm mark is true or the stable mark is false, and simultaneously closing the heat stimulation output; f) And prohibiting execution of the thermal stimulation output state change during the setting of the prohibition flag until the prohibition flag is cleared and the token handing-over process is allowed to be reentered after the preset release condition is met, wherein the preset release condition at least comprises that the stable flag is true and the alarm flag is false.
2. The method for scheduling and safety interlocking of noninvasive ventilation and thermal stimulation cooperation is characterized in that token lease is adopted in the token handover process, lease validity is recorded when a token is effective, ventilation state information is refreshed each time, a stable sign is true, an alarm sign is false, lease renewal is conducted, and when lease expiration or continuous preset times of refreshing do not meet renewal conditions, the token is invalidated, a forbidden sign is located, and thermal stimulation output is closed.
3. The method for scheduling and safety interlocking by using the noninvasive ventilation and thermal stimulation cooperation according to claim 1, wherein the token handover process comprises anti-replay consistency check, the token application carries an incremental serial number or a one-time random challenge value, the token grant returns check information corresponding to the token application, the grant confirmation carries the same corresponding relation, and when the corresponding relation is not established or the serial number is not incremental, the token is invalidated, the position prohibition mark is placed, and the thermal stimulation output is closed.
4. The method for scheduling and safety interlocking of noninvasive ventilation and thermal stimulation coordination according to claim 1, wherein the change of the thermal stimulation output state is restrained by the change rate interlocking, and the change times exceed the upper limit in the same ventilation state refreshing period, setting a forbidden mark, disabling a token and closing the thermal stimulation output, and simultaneously latching the interlocking state, wherein the interlocking state is released after the stable mark is continuously true and the alarm mark is continuously false for a preset times, and clearing the forbidden mark and allowing the token to reenter the token handing-over procedure.
5. The method for scheduling and safety interlocking of noninvasive ventilation and thermal stimulation coordination according to claim 3, wherein the one-time random challenge value is updated along with the ventilation status information refresh, the verification information comprises a session identifier bound with the challenge value, and when the session identifier is inconsistent with the current challenge value, the corresponding relationship is judged not to be established, and the token is invalidated, a prohibition flag is set, and the thermal stimulation output is turned off.
6. The method for scheduling and safety interlocking of noninvasive ventilation and thermal stimulation according to claim 3, wherein the increment sequence number allows limited jump in a preset window, and when the refresh is not incremented for a preset number of times of wrapping, repetition or continuous, the sequence number is judged to be not incremented, the token is invalidated, a prohibition flag is set, and the thermal stimulation output is turned off.
7. The method according to claim 4, wherein the number of changes is increased once when the thermal stimulus output state is switched from a first state to a different second state, wherein the number of changes is not increased for repeated change requests of the same second state during the same vent state refresh period, wherein the number of changes is kept unchanged during the interlock state latch, and wherein the number of changes is set to zero at the beginning of a next vent state refresh period after the interlock state release.
8. The method for scheduling and safety interlocking of noninvasive ventilation and thermal stimulation coordination according to claim 4, wherein an early warning count threshold is set smaller than the upper limit, when the number of changes reaches the early warning count threshold and does not exceed the upper limit, a thermal stimulation output state change request received in a current ventilation state refresh period is postponed to a next ventilation state refresh period to be executed, and when the number of changes exceeds the upper limit, the setting prohibition flag is executed, a token is invalidated, thermal stimulation output is turned off, and an interlocking state is latched.
9. The method for scheduling and safety interlocking of noninvasive ventilation and thermal stimulation coordination according to claim 4 is characterized in that a thermal stimulation output state before interlocking triggering is recorded when the interlocking state is latched, the thermal stimulation output is kept closed for a preset holding time after the interlocking state is released and before a forbidden mark is cleared and the token handing-over process is reentered, the preset holding time is ended and the token handing-over process is completed, the first thermal stimulation output state change after the token is validated only allows switching from a closed state to a single target state, and the second change is forbidden in the same ventilation state refreshing period.
10. The method for scheduling and safety interlocking of noninvasive ventilation and thermal stimulation coordination according to claim 9, wherein the token state before interlock triggering and the ventilation state refresh cycle number are recorded when the interlock state is latched, the preset holding time length is represented by a preset number of ventilation state refresh cycles after the interlock state is released, the first thermal stimulation output state change is only allowed to be executed in a first ventilation state refresh cycle after the refresh cycle number is increased, and the thermal stimulation output is kept closed and a prohibition flag is kept set when the interlock state is not satisfied so as to prohibit entering the token handover procedure.

Description

Time sequence scheduling and safety interlocking method for noninvasive ventilation and thermal stimulation cooperation Technical Field The invention relates to the technical field of medical instrument control, in particular to a time sequence scheduling and safety interlocking method for cooperation of noninvasive ventilation and thermal stimulation. Background The current prior art systems and methods for non-invasive ventilation, such as publication number CN111954551a, focus primarily on gas flow regulation, pressure control, and gas delivery efficiency optimization during patient breathing, while timing scheduling and safety interlock control when operated in concert for multiple therapeutic approaches still lack a systematic design. The system achieves respiratory gas delivery through a gas source, a control assembly, a patient interface, and a respiratory circuit, and through switching of primary and flushing flow paths, gas flow and pressure are dynamically regulated as the patient inhales or exhales to improve ventilation efficiency and flush the dead space. The control logic mainly expands around pressure feedback and airflow regulation, and lacks design of a unified control mechanism when a plurality of treatment modules co-operate, and particularly lacks systematic scheduling for time sequence relation and physiological suitability among different treatment outputs. When the noninvasive ventilation device needs to work together with other treatment means, such as a thermal stimulation treatment module, the existing method generally only adds a control interface or a control instruction in device control software, and does not establish strict operation state constraint and safety interlocking mechanism, so that the situations of asynchronous control logic, disordered execution time sequence and even mutual interference can occur among different functional modules. When the ventilation system is not stable or the respiratory state of the patient is not yet in a safe condition, the thermal stimulation module may be started, so that the patient is simultaneously subjected to thermal stimulation when the respiratory pressure is not yet stable, which may not only affect the respiratory treatment effect, but also may cause biomedical risks such as increased physiological burden, reduced tissue tolerance and the like. In addition, in the prior art, only the airflow system itself is usually initialized and controlled in the system initialization or reset stage, and a unified safety strategy for the output state of other treatment modules is lacking, so that during the restarting or abnormal recovery process of the system, additional treatment modules such as thermal stimulation may be output in advance when the control logic is not completely established, thereby bringing potential risks. Most of the methods rely on a single control logic to judge whether the equipment is in a normal running state, and only judges the breathing state through pressure feedback or flow feedback, and a comprehensive judging mechanism for the overall treatment state, the physiological parameter stability and the alarm state of a patient is lacked, so that whether the equipment is in a truly safe and controllable state is difficult to accurately judge in a complex running environment. Further, the prior art generally does not introduce an authorization control mechanism like a control right token to manage control rights among different modules, any module may directly trigger an output operation when a local condition is met, and control conflict or abnormal execution is easily caused in a multi-module system. In terms of communication or control instruction interaction, the existing medical device control system also generally lacks a protection mechanism for replay attack or instruction repeated execution, and when a control instruction is repeatedly sent or abnormally cached, the system may repeatedly execute a control operation, so that the output state is repeatedly switched or a treatment module is repeatedly started, thereby influencing the stability of the device and the treatment continuity. Meanwhile, the prior art lacks a limiting strategy aiming at frequent change of the output state, and the treatment module is frequently started and closed or the output mode is switched in a short time, so that not only is the stability of equipment affected, but also discomfort of a patient is possibly increased, and physiological response in the treatment process is disturbed. When the system detects an abnormal state, the prior art generally only adopts a simple alarm or a mode of closing a single module to process, and lacks a complete interlocking protection mechanism, namely, lacks unified state latching after the abnormality, recovery condition judgment and recovery time sequence control flow. This can lead to immediate resumption of the output of the system after the exception has been removed, without going through t