INTELLIGENT LOCK BOX FOR INFUSION DEVICE

An infusion pump is secured within a lockbox configured to enclose and prevent access to the infusion pump and a medication receptacle of the infusion pump, the lockbox including a lockbox control interface configured to obtain authorization for access to the lockbox from a pump communication interface of the infusion pump and enclosed within the lockbox. The lockbox control interface is electronically coupled with the pump communication interface. Transmission of a wireless credential is made to the pump communication interface by way of being received at the lockbox control interface or at the pump interface through the lockbox. The lockbox control interface receives the authorization from the pump communication interface for access based on the wireless credential and performs an action according to the received authorization for access. Action includes unlocking the lockbox or the lockbox control interface extending the pump's interface to the authorized user.

BACKGROUND

This application relates generally to securable enclosures for infusion pumps.

A substance is a “controlled substance” when it is determined to be abusable, has shown a pattern of abuse leading to dependency, and that abuse has been shown to create a risk to public health and safety. In many instances, controlled substances have legitimate medical therapeutic uses, and so may be purchased, stored, dispensed and administered to patients during the treatment of injury or disease. Healthcare institutions may be required to maintain stores of controlled substances for these uses, and those stores may attract individuals who wish to use them for other purposes, leading to abuse. Those individuals may be employees of the healthcare institution itself. Thus, any organization that routinely uses controlled substances for valid therapeutic purposes can become a target for diversion.

Moreover, drug seeking behavior is highly adaptive and diverters will constantly challenge any control system looking for a way to defeat it and acquire the drugs they seek. While diverters may include patients or visitors of patients, diverters may also include healthcare professionals. Indeed, diversion of controlled substances by healthcare professionals can occur within any profession that has routine and appropriate access to these substances. The healthcare professionals with the most frequent access include physicians, nurses, pharmacists and pharmacy technicians. In general, when healthcare workers divert drugs, it is for personal use and is symptomatic of addiction. Also, drug diverters attempt to disguise their diversion as apparently legitimate use of controlled substances.

Current automated control systems have tightened security around controlled substances, but diversion still exists. While control systems limit the opportunity for diversion, they cannot entirely prevent it. Medical cabinets are routinely secured with locks and monitored. Lock boxes have been constructed and utilized for preventing access to the infusion pumps that deliver controlled substances. Lock boxes are designed to completely encompass, and prevent access to, both the infusion device and the medication container connected to the infusion pump. Lock boxes provide a good deterrent to diversion activities; however, a lock box must be manually removed, often with a physical key, before any adjustment can be made to the infusion pump, a time consuming process that imposes a significant impediment to critical care needs.

SUMMARY

The subject technology provides a method for securing a pump, comprising: securing at least a portion of an infusion pump within a lockbox, the lockbox configured to enclose and prevent access to at least a user interface of the infusion pump and a medication receptacle of the infusion pump, the lockbox comprising a lockbox control interface configured to obtain authorization for access to the lockbox from a pump communication interface of the infusion pump and enclosed within the lockbox; electronically coupling the lockbox control interface with the pump communication interface; facilitating transmission of a wireless credential to the pump communication interface for authorization to the lockbox; receiving, by the lockbox control interface from the pump communication interface, the authorization for access based on the wireless credential; and performing, by the lockbox control interface, an action according to the received authorization for access. Other aspects include corresponding devices and computer program products for implementation of the corresponding method and its features.

According to various aspects, a system for securing a pump, comprises: a lockbox configured to enclose and prevent access to at least a user interface of an infusion pump and a medication receptacle of the infusion pump; and a lockbox control interface associated with the lockbox configured to obtain authorization for access to the lockbox from a pump communication interface of the infusion pump and enclosed within the lockbox, the lockbox control interface comprising a processor configured to: electronically couple the lockbox control interface with the pump communication interface; facilitate transmission of a wireless credential to the pump communication interface for authorization to the lockbox; receive, from the pump communication interface, the authorization for access based on the wireless credential; and cause performance of an action according to the received authorization for access. Other aspects include corresponding devices, methods, and computer program products for implementation of the corresponding system and its features.

DESCRIPTION

The subject technology provides an intelligent system for securing an infusion device. As will be described further, the infusion device is secured within a lockbox, with the lockbox configured to enclose and prevent access to at least a user interface of the infusion pump and a medication receptacle of the infusion pump. The lockbox includes a communication interface configured to receive a credential and to pass that credential to the infusion device within the lockbox to obtain authorization for access to the lockbox from the infusion device.

According to various implementations, the lockbox comprises retractable multi-folding doors each configured to enclose respective portions of the infusion pump. Opening of the lockbox is motor controlled, and the lockbox includes a top configured to automatically open, and opposing sides of the housing that are configured to automatically slide in a rearward direction, to provide greater access to the infusion pump. When closed, the top, sides, and folding doors are integral to each other to seal the lockbox and prevent access to the infusion pump within the lockbox.

The lockbox of the subject technology may be communicatively connectable (e.g., using BLUETOOTH) to the infusion pump and/or a mobile device for receiving signals to open the lockbox. There is no need for a hard key, and clinicians may scan a badge to open the lockbox. On authentication, the mechanical parts of the lockbox (e.g., doors, top, sides) may open, with the doors folding and the sides sliding backwards to reveal the pump.

FIG.1Adepicts a first example patient care unit10that includes a syringe pump30mounted to a control unit14, according to various aspects of the subject technology. According to various implementations, the control unit14may provide control and monitoring functionality for the syringe pump30. In this regard, the control unit may include a display4for visually communicating various information, such as the operating parameters of a connected pump and alert indications and alert messages, and control keys6for selecting and/or setting control parameters and/or options for controlling connected modules such as syringe pump30. The control unit14may also include a speaker to provide audible alerts. In some implementations, the display4may be implemented as a touchscreen display. In such implementations, the control keys6may be omitted or reduced in number by providing corresponding interactive elements via a graphical user interface presented via the display4. In some implementations, each control key6may select a corresponding option displayed in display4.

The syringe pump30can include a control panel36providing multiple buttons32for control of the pump26as well as a display34used to present pump-specific information to the operator (see alsoFIG.2). The buttons32can allow the operator to program the pump26for the flow rate, the volume to be infused, and other pump parameters. The display34can present the programmed flow rate, the amount of fluid remaining to be infused, as well as alarms and other information.

The control unit14may include a communications system (not shown) with which the control unit14may communicate with external equipment such as a medical facility server or other computer and with a portable processor, such as a handheld communication device or a laptop-type of computer, or other information device that a clinician may have to transfer information as well as to download drug libraries to a control unit (such as pump30or, e.g., modules ofFIG.1B). The communication module may be used to transfer access and interaction information for clinicians encountering the control unit or device coupled therewith (e.g., pump30or bar code scanner). The communications system may include one or more of a radio frequency (RF) system, an optical system such as infrared, a BLUETOOTH™ system, or other wired or wireless system. The bar code scanner and communications system may alternatively be included integrally with the infusion pump30, such as in cases where a control unit is not used, or in addition to one with the control unit14. Further, information input devices need not be hard-wired to medical instruments, information may be transferred through a wireless connection as well. Additionally, other types of modules may be connected to the pump modules or to the control unit such as a syringe pump module, patient controlled analgesic module, End Tidal CO2monitoring module, oximeter monitoring module, or the like.

In some embodiments, the pressure measurements from the upstream and/or downstream pressure sensors are transmitted to a server or other coordination device, and the methods disclosed herein are implemented on the server or other coordination device. For example, a pressure sensor may be used to determine a pressure or force within the infusion line downstream of the pump (e.g., between the patient and the pump). More sophisticated and computationally intensive approaches like machine-learning can be implemented on a server (or on a control unit with a larger memory and/or CPU resources). In some embodiments, machine learning is used to identify empty conditions based on pressure signals received from the pump.

FIG.1Bdepicts a second example of a patient care unit10with connected functional modules, according to aspects of the subject technology. The patient care unit (or “PCU”) may include various ancillary medical devices such as an infusion pump, a vital signs monitor, a medication dispensing device (e.g., cabinet, tote), a medication preparation device, an automated dispensing device, a module coupled with one of the aforementioned (e.g., a syringe pump module configured to attach to an infusion pump), or other similar devices.

In the depicted example, patient care unit12comprises a control module14, also referred to as main frame infusion controller14, connected to one or more functional modules16,18,20,22. Main frame infusion controller14includes a central processing unit (CPU)50connected to a memory, for example, random access memory (RAM)58, and one or more interface devices such as user interface device54, a coded data input device60, a network connection52, and an auxiliary interface62for communicating with additional modules or devices. Main frame infusion controller14also, although not necessarily, includes a main non-volatile storage unit56, such as a hard disk drive or non-volatile flash memory, for storing software and data and one or more internal buses64for interconnecting the aforementioned elements. Patient care unit12may include or incorporate pumps, physiological monitors (e.g., heart rate, blood pressure, ECG, EEG, pulse oximeter, and other patient monitors), therapy devices, and other drug delivery devices may be utilized according to the teachings set forth herein.

In various implementations, user interface device54is a touch screen for displaying information to a user and allowing a user to input information by touching defined areas of the screen. Additionally, or in the alternative, user interface device54could include any means for displaying and inputting information, such as a monitor, a printer, a keyboard, softkeys, a mouse, a track ball and/or a light pen. Data input device60may be a bar code reader capable of scanning and interpreting data printed in bar coded format. Additionally or in the alternative, data input device60can be any device for entering coded data into a computer, such as a device(s) for reading a magnetic strips, wireless communication (e.g., radio frequency or Bluetooth), radio-frequency identification (RFID) devices whereby digital data encoded in RFID tags or smart labels (defined below) are captured by the reader60via radio waves, PCMCIA smart cards, radio frequency cards, memory sticks, CDs, DVDs, or any other analog or digital storage media. Other examples of data input device60include a voice activation or recognition device or a portable personal data assistant (PDA). Depending upon the types of interface devices used, user interface device54and data input device60may be the same device. Although data input device60is shown as being disposed within main frame infusion controller14, it is recognized that data input device60may be integral within pharmacy system or located externally and communicating with pharmacy system through an RS-232 serial interface or any other appropriate communication means. Auxiliary interface62may be an RS-232 communications interface, however any other means for communicating with a peripheral device such as a printer, patient monitor, infusion pump or other medical device may be used without departing from the subject technology. Additionally, data input device60may be a separate functional module, such as modules16,18,20and22, and configured to communicate with a main frame infusion (controller) device14, or any other system on the network, using suitable programming and communication protocols.

Network connection52may be a wired or wireless connection, such as by Ethernet, WiFi, BLUETOOTH, an integrated services digital network (ISDN) connection, a digital subscriber line (DSL) modem or a cable modem. Any direct or indirect network connection may be used, including, but not limited to a telephone modem, an MIB system, an RS232 interface, an auxiliary interface, an optical link, an infrared link, a radio frequency link, a microwave link or a WLANS connection or other wireless connection.

Functional modules16,18,20,22are any devices for providing care to a patient or for monitoring patient condition. At least one of functional modules16,18,20,22may be an infusion pump module such as an intravenous infusion pump for delivering medication or other fluid to a patient. For the purposes of this discussion, functional module16is an infusion pump module. Each of functional modules16,18,20,22may be any patient treatment or monitoring device including, but not limited to, an infusion pump, a syringe pump, a PCA pump, an epidural pump, an enteral pump, a blood pressure monitor, a pulse oximeter, an EKG monitor, an EEG monitor, a heart rate monitor, an intracranial pressure monitor, or the like. Functional module16,18,20and/or22may be a printer, scanner, bar code reader, near-field communication reader, RFID reader, radio frequency (RF) transmission, BLUETOOTH, or any other peripheral input, output or input/output device.

Data to and from the various data sources can be converted into network-compatible data with existing technology, and movement of the information between the medical device and network can be accomplished by a variety of means. For example, patient care unit12and network10may communicate via automated interaction, manual interaction or a combination of both automated and manual interaction. Automated interaction may be continuous or intermittent and may occur through direct network connection52(as shown inFIG.1A), or through RS232 links, MIB systems, RF links such as BLUETOOTH, IR links, WLANS, digital cable systems, telephone modems or other wired or wireless communication means. Manual interaction between patient care unit10and a network may involve physically transferring, intermittently or periodically, data between systems using, for example, user interface device54, coded data input device60, bar codes, computer disks, portable data assistants, memory cards, or any other media for storing data.

FIGS.2A through2Gdepict an example intelligent lockbox200for securing a patient care unit10, according to various aspects of the subject technology.FIG.2Adepicts a perspective view of the example lockbox200enclosing the patient care unit. According to various implementations, the lockbox200includes a housing that completely encompasses the patient care unit10, including any attached modules16,18,20,22and associated medication, and secures the unit and modules from physical manipulation by a person who does not have access to the lockbox. In the depicted example, one module encompassed and secured by lockbox200includes syringe pump30. In this example, the medication within the syringe pump is secured by way of being enclosed within the lockbox. In some implementations, the lockbox may be extended to house and secure a medication bag for use with different types of pumps (e.g., peristaltic pumps).

A rear side of the housing of lockbox200(seeFIGS.2B,2E,2F) is positioned between the patient care unit10and a pole2or other structure to which the patient care unit is mounted. As will be described further, the rear side of the lockbox is configured to form around and secure to a mounting structure. The lockbox includes at least one access door202. In the depicted example, the lockbox200includes left and right bifold access doors202aand202bthat, as will be described further, open to the side to reveal a front face of the patient control unit10.

FIG.2Bdepicts a perspective view of an unlocking and opening of the lockbox ofFIG.2A, according to various aspects of the subject technology. According to various implementations, the housing of lockbox200includes an electronically controlled lock and a series of sliding doors that may be actuated by a corresponding series of motors and mechanical gears (not shown) to move the doors upon the lockbox200being opened. In the depicted example, the doors include a retractable multi-folding door202on each side of the housing that, when closed, form a front face of the lockbox housing, and a top face204(or lid) that closes to form a top of the lockbox housing. When closed, the top face204is integrally coupled with the front face of the housing, made up by the doors202a,202b.

As shown, when the lockbox200receives an authorized signal to trigger opening of the lockbox, the motors and gears operate to retract the multi-folding doors in opposing left and right directions206a,206bto expose the respective portions of the front face of the patient care unit10within the housing. Each door is physically and hingedly coupled to a respective left or right side wall208a,208bof the lockbox housing. Contemporaneous with the retraction of the multi-folding doors, the walls208a,208bare moved backwards in a direction210to expose and provide access to at least a portion of the sides of the patient care unit10. Contemporaneous with the retraction of the doors and sides, the top face204may swing open according to an upward directional arc212to reveal and provide access to at least a portion of the top of the patient care unit10. In some implementations, the lockbox may open without motors. In such implementations, the gears may be interlinked so that, when the door and/or top of the lockbox is manually opened (e.g., after a user is granted access), the doors, top, and or sides move collectively together to open the lockbox.

According to various implementations, the lockbox200includes a lockbox control interface device214that is integral with the housing (e.g., embedded within the housing or securely attached to the housing). In the depicted example, control interface device214is embedded in a door. The control interface device214may be electronically or communicatively coupled to the various motors and gears within the lockbox housing and configured to operate the motors to control opening and closing of the various doors, sides, and lid of the housing.

In some implementations, the control interface214is configured to receive a user credential and/or other user input. In some implementations, control interface214may include a touch-screen for receiving the input. Additionally or in the alternative, control interface214may include a traditional keypad. In some implementations, the lockbox control interface214includes a wireless communication module (e.g., radio-frequency identification (RFID)) scanner to receive the credential from a (e.g., RFID or BLUETOOTH) transmitting device. As will be described further, the control interface214may be communicatively connected to the control unit14or other processing device of the patient control unit10to authenticate/validate credentials received via the interface214or to receive a signal from the patient care device10to open the lockbox200. Upon receiving an authorized credential, the control interface214may automatically retract the doors202, lid204, and/or sides208to provide user access to the patient care device. In some implementations, on receiving the authorized credential, the control interface214may provide (e.g., via the touch screen display) an extension of the various displays4and inputs6of the patient care device10(seeFIG.1A).

FIG.2Cdepicts a front view of the lockbox in a closed and secure state, according to various aspects of the subject technology.FIG.2Ddepicts a font view of the lockbox in an open and unsecured state, according to various aspects of the subject technology.FIG.2Edepicts a side view of the lockbox in a closed and secure state, according to various aspects of the subject technology.FIG.2Fdepicts a side view of the lockbox in an open and unsecured state, according to various aspects of the subject technology. In the depicted example, the patient care device10is mounted to pole2by a horizontal mount4. It is understood that other known mounting hardware may be utilized to secure the patient care device10to the pole2or other structure.

FIG.2Gdepicts an exploded view of the lockbox200, according to various aspects of the subject technology. The rear face216of the lockbox housing includes a elongated horizontal channel or slot218that, when a side220aof the housing is removed, is open on one end. In this regard, the slot218may be positioned at the same height within the face216relative to the mount4on the patient care device10, so that the slot218may be guided over the mount4to secure the lockbox to the patient care device10. Accordingly, the lockbox can be secured by the rear face216being locked in place around the mount4between the patient care device10and the pole2(or other mounting surface). The only way to remove the lockbox from the patient care device10is to access the lockbox and to disconnect and remove the side220afrom the rear face216as shown.

FIG.3depicts a system for securing an infusion device by authenticating a user to the infusion device via an intelligent lockbox, according to various aspects of the subject technology. In the depicted example, a lockbox200securably encloses a patient care unit10, as previously described. The lockbox200includes a control interface302configured to receive user credentials. According to various implementations, the control interface302includes wireless circuitry and processing that is configured to be paired with a communication interface52of the PCU10, for example, prior to the lockbox being secured around the PCU10. In some implementations, the communication between the lockbox control interface302and the communication interface52of the PCU10may be in the form of a wired connection (within the lockbox).

According to various implementations, the lockbox is self powered, and includes a power supply304within the lockbox (e.g., inaccessible to a person outside the lockbox when the lockbox is secured). In some implementations, power for the lockbox doors and/or control interface302may be provided or supplemented by the infusion device (e.g., PCU10). In such implementations, lockbox power interface304may include a wired connection configured to connect to and/or plug into a power charger306(e.g., outlet) provided by the infusion device10(e.g., on the main frame control unit14). In some implementations, the lockbox200may be powered with PoE (power over ethernet). In some implementations, the lockbox power interface304may include wireless charging capabilities, and may be positioned adjacent a wireless power charger306attached to or integrated in the infusion device such as to receive charging and/or power from the infusion device when the lockbox is secured to the infusion device. InFIG.3, supply304is positioned on the bottom internal side of the lockbox200, adjacent to power charger306. In some implementations, power supply304may be positioned directly below charger306for efficient wireless charging.

In some implementations, the lockbox control interface302includes an input device such as a touch screen device. In this regard, the touchscreen device may display a lockbox user interface that prompts for and/or receives credentials. For example, the touchscreen may prompt for a username and password and then provide a virtual keypad for entry of the credentials. In some implementations, the interface302may include a biometric scanner such as a fingerprint reader. In some implementations, the lockbox control interface302includes a wireless scanner (e.g., RFID or BLUETOOTH receiver) configured to receive the user credential wirelessly from a transmitting device308associated with a user. For example, a user may scan his or her badge308at the interface302to provide a credential stored within an RFID device within the badge to the interface302.

Accordingly, the lockbox interface302facilitates transmission of a authentication/authorization credential to the infusion device for authorization to the lockbox, for example, by receiving the credential wirelessly from a transmitting device308and retransmitting it (or a representation of it) to a control processor50within the infusion device10. The processor50may then authenticate the user associated with the credential and, upon authentication, the processor may authorize the user to the lockbox. The processor50may signal the lockbox interface to indicate that the user is authorized to perform an action with regard to the lockbox. As will be described further, the action may include causing the lockbox to open (as shown inFIG.2) or activate the lockbox user interface302to function as an extension of the control unit14interface (e.g., display4and/or control keys6).

FIG.4depicts an example process400for securing an infusion device using an intelligent lockbox, according to aspects of the subject technology. For explanatory purposes, the various blocks of example process400are described herein with reference toFIGS.1-3, and the associated components and/or processes described herein. The one or more of the blocks of process400may be implemented, for example, by one or more computing devices including, for example, infusion control module14, PCU10, or one or more of modules16,18,20,22, and30. In some implementations, one or more of the blocks may be implemented based on one or more machine learning algorithms. In some implementations, one or more of the blocks may be implemented apart from other blocks, and by one or more different processors or devices. Further, for explanatory purposes, to the extent that the blocks of example process400are described as occurring in serial, or linearly, in some implementations, multiple blocks of example process400may occur in parallel. In addition, the blocks of example process400need not be performed in the order shown and/or one or more of the blocks of example process400need not be performed.

In the depicted process400, an infusion device (e.g., a pump) is secured within a lockbox (402). According to various implementations, the lockbox is configured to enclose and prevent access to at least a control interface of the infusion pump and a medication receptacle of the infusion pump (e.g., an infusion bag). As described with regard toFIG.3, the lockbox includes a lockbox control interface302configured to obtain authorization for access to the lockbox from a pump communication interface52of the infusion pump. In some implementations, the lockbox control interface includes a scanner configured to receive the user credential wirelessly from a transmitting device (e.g., a RFID or BLUETOOTH transmitter) associated with a user.

In some implementations, securing the infusion device may include locking the lockbox doors202and/or activating the control interface302to require authorized credentials to unlock the doors.

The lockbox control interface302is electronically coupled with the pump communication interface52(404). In some implementations, electronically coupling the lockbox control interface with the pump communication interface includes wirelessly pairing the lockbox control interface with the pump communication interface, for example, using a BLUETOOTH connection. In some implementation, the coupling includes a wired connection within the lockbox200(secured from outside tampering).

The lockbox200facilitates transmission of a credential to the infusion pump communication interface for authorization to the lockbox. Accordingly, in some implementations, a credential received by the lockbox control interface302and transmitted to the infusion pump communication interface52for authorization of the user to the lockbox (406). In some implementations, the credential may be entered via a lockbox user interface displayed or provided at the control interface302. In some implementations, the credential is received from a badge scanned by the RFID scanner at the control interface302. In some implementations, facilitating transmission by the lockbox includes the RFID credential being scanned by the pump communication interface52through a housing of the lockbox.

The process500continues with the lockbox control interface302receiving, from the pump communication interface52, an authorization for access for the user to access the lockbox (408). Accordingly, the authorization for access may be received by the lockbox control interface302from the pump communication interface52responsive to transmitting the user credential to the pump communication interface52(and the pump authorizing the credential).

The lockbox control interface302performs an action according to the received authorization for access (410). According to some implementations, performing the action includes automatically (without further user intervention) unlocking the lockbox to allow user access to a user interface of the infusion pump and the medication receptacle. In some implementations, performing the action includes activating the pump user interface to receive user input while the lockbox remains locked. For example, contemporaneous with opening the lockbox, the pump's display(s) may switch from an off state (e.g., power off and/or unable to receive input) to an activated state (e.g., power and lights switch on and ready to receive input). In this regard, the lockbox user interface may extend (e.g., virtually) the pump's user interface such as the display4or control keys6. The authorized user may then provide input for controlling the pump via the lockbox user interface302while the lockbox remains locked. The lockbox control interface302receives the user input via the activated lockbox user interface, and transmits the user input to the pump communication interface52(and processor50) for operation for the infusion pump in accordance with the authorization for access (e.g., as if the input had been received directly by the pump user interface).

FIG.4continues with an optional sub-process for the action performed according to the authorization access, according to aspects of the subject technology. According to various implementations, as described previously, the lockbox includes retracting multi-folding doors and a series of motors and gears (not shown) to move and/or retract and/or lock or unlock the doors.

According to the depicted examples, responsive to unlocking the lockbox the lockbox control interface causes the lockbox to automatically open at least one access door to expose the user interface or the medication receptacle (412). As described previously, the lockbox includes a housing enclosing the patient care unit and/or infusion pump10. The retractable multi-folding doors are configured to form the front face of the housing when the lockbox is closed. The multi-folding doors may include a left bifold door202aand a right bifold door202bthat open like folding closet doors, with each half of the bifold doors folding over the other as the door opens. In this regard, the process continues with the lockbox (by way of motors and/or gears) automatically retracting, responsive to unlocking the lockbox, the retracting multi-folding doors to expose the respective portions of the front face of the housing and the respective portions of opposing sides of the housing, thereby providing user access to the infusion pump (414).

According to some implementations, once the doors202a,202bare completely open, the respective left and right sides of the lockbox200are configured to move in a direction210away from the front face of the housing when the lockbox is unlocked. In this regard, the process of unlocking the lockbox further includes automatically moving, responsive to unlocking the lockbox, the respective left and right sides, thereby providing user access to at least a portion of a left and right side of the infusion pump (416).

As shown inFIGS.2B and2D, the lockbox200further may further include a retractable top that, when closed, is integral to the front face. In this regard, the process of unlocking the lockbox further includes automatically opening, responsive to unlocking the lockbox, the retractable top, thereby providing user access to the infusion pump (418). In some implementations, the lockbox200communicates opening and closing actions to the infusion pump, and may receive information from the pump regarding interactions with the pump by the user. In some implementations, the lockbox200may automatically close after a predetermined period of time (e.g., after two minutes of being open with no interaction with the pump).

Many of the above-described example process400and related features and applications, may also be implemented as software processes that are specified as a set of instructions recorded on a computer readable storage medium (also referred to as computer readable medium), and may be executed automatically (e.g., without user intervention). When these instructions are executed by one or more processing unit(s) (e.g., one or more processors, cores of processors, or other processing units), they cause the processing unit(s) to perform the actions indicated in the instructions. Examples of computer readable media include, but are not limited to, CD-ROMs, flash drives, RAM chips, hard drives, EPROMs, etc. The computer readable media does not include carrier waves and electronic signals passing wirelessly or over wired connections.

FIG.5is a conceptual diagram illustrating an example electronic system500for securing an infusion device using an intelligent lockbox, according to aspects of the subject technology. Electronic system500may be a computing device for execution of software associated with one or more portions or steps of process500, or components and methods provided byFIGS.1-4, including but not limited to computing hardware within the PCU10, main frame infusion controller14, control module14, functional modules16,18,20,22,30, and/or any computing devices or associated modules or terminals disclosed herein. Electronic system500may be a personal computer or a mobile device such as a smartphone, tablet computer, laptop, PDA, an augmented reality device, a wearable such as a watch or band or glasses, or combination thereof, or other touch screen or television with one or more processors embedded therein or coupled thereto, or any other sort of computer-related electronic device having network connectivity.

Electronic system500may include various types of computer readable media and interfaces for various other types of computer readable media. In the depicted example, electronic system500includes a bus508, processing unit(s)512, a system memory504, a read-only memory (ROM)510, a permanent storage device502, an input device interface514, an output device interface506, and one or more network interfaces516. In some implementations, electronic system500may include or be integrated with other computing devices or circuitry for operation of the various components and methods previously described.

Bus508collectively represents all system, peripheral, and chipset buses that communicatively connect the numerous internal devices of electronic system500. For instance, bus508communicatively connects processing unit(s)512with ROM510, system memory504, and permanent storage device502.

ROM510stores static data and instructions that are needed by processing unit(s)512and other modules of the electronic system. Permanent storage device502, on the other hand, is a read-and-write memory device. This device is a non-volatile memory unit that stores instructions and data even when electronic system500is off. Some implementations of the subject disclosure use a mass-storage device (such as a magnetic or optical disk and its corresponding disk drive) as permanent storage device502.

Other implementations use a removable storage device (such as a floppy disk, flash drive, and its corresponding disk drive) as permanent storage device502. Like permanent storage device502, system memory504is a read-and-write memory device. However, unlike storage device502, system memory504is a volatile read-and-write memory, such as, random access memory. System memory504stores some of the instructions and data that the processor needs at runtime. In some implementations, the processes of the subject disclosure are stored in system memory504, permanent storage device502, and/or ROM510. From these various memory units, processing unit(s)512retrieves instructions to execute and data to process in order to execute the processes of some implementations.

Bus508also connects to input and output device interfaces514and506. Input device interface514enables the user to communicate information and select commands to the electronic system. Input devices used with input device interface514include, e.g., alphanumeric keyboards and pointing devices (also called “cursor control devices”). Output device interfaces506enables, e.g., the display of images generated by the electronic system500. Output devices used with output device interface506include, e.g., printers and display devices, such as cathode ray tubes (CRT) or liquid crystal displays (LCD). Some implementations include devices such as a touchscreen that functions as both input and output devices.

Also, as shown inFIG.5, bus508also couples electronic system500to a network (not shown) through network interfaces516. Network interfaces516may include, e.g., a wireless access point (e.g., Bluetooth or WiFi) or radio circuitry for connecting to a wireless access point. Network interfaces516may also include hardware (e.g., Ethernet hardware) for connecting the computer to a part of a network of computers such as a local area network (“LAN”), a wide area network (“WAN”), wireless LAN, or an Intranet, or a network of networks, such as the Internet. Any or all components of electronic system500can be used in conjunction with the subject disclosure.

Illustration of Subject Technology as Clauses:

Various examples of aspects of the disclosure are described as numbered clauses (1, 2, 3, etc.) for convenience. These are provided as examples, and do not limit the subject technology. Identifications of the figures and reference numbers are provided below merely as examples and for illustrative purposes, and the clauses are not limited by those identification.

Clause 1: A system for securing a pump, comprising: a lockbox configured to enclose and prevent access to at least a user interface of an infusion pump and a medication receptacle of the infusion pump; and a lockbox control interface associated with the lockbox configured to obtain authorization for access to the lockbox from a pump communication interface of the infusion pump and enclosed within the lockbox, the lockbox control interface comprising a processor configured to: electronically couple the lockbox control interface with the pump communication interface; facilitate transmission of a wireless credential to the pump communication interface for authorization to the lockbox; receive, from the pump communication interface, the authorization for access based on the wireless credential; and cause performance of an action according to the received authorization for access.

Clause 2. The system of Clause 1, wherein the processor is further configured to: receive a user credential via the lockbox control interface; and transmit, via the lockbox control interface, the received user credential to the pump communication interface, wherein the authorization for access is received by the lockbox control interface from the pump communication interface responsive to transmitting the user credential to the pump communication interface.

Clause 3. The system of Clause 2, wherein the lockbox control interface comprises a scanner configured to receive the user credential wirelessly from a transmitting device associated with a user, the processor being further configured to: receive the user credential from a badge scanned by the scanner.

Clause 4. The system of any one of Clauses 1-3, wherein electronically coupling the lockbox control interface with the pump communication interface comprises: wirelessly pairing the lockbox control interface with the pump communication interface.

Clause 5. The system of any one of Clauses 1-4, wherein performing the action comprises: unlocking the lockbox to allow user access to the user interface and the medication receptacle.

Clause 6. The system of Clause 5, wherein the lockbox comprises at least one access door, the action further comprising: automatically opening, responsive to unlocking the lockbox, the at least one access door to expose the user interface or the medication receptacle; and automatically switching, responsive to opening the at least one access door, the user interface of the infusion pump from an off state to an activated state.

Clause 7. The system of Clause 6, wherein the lockbox comprises a housing enclosing the infusion pump and comprises a retractable multi-folding door on each side of a front face of the housing that, when closed, form a front face of the housing, the action further comprising: automatically retracting, responsive to unlocking the lockbox, the retracting multi-folding doors to expose at least a portion of a front face of the infusion pump.

Clause 8. The system of Clause 7, wherein the lockbox further comprises a retractable top that, when closed, is integrally coupled to the front face, the action further comprising: automatically opening, responsive to unlocking the lockbox, the retractable top, thereby providing user access to at least a portion of a top surface of the infusion pump.

Clause 9. The system of Clause 7, wherein the lockbox further comprises respective left and right sides configured to move in a direction away from the front face of the housing when the lockbox is unlocked, the action further comprising: automatically moving, responsive to unlocking the lockbox, the respective left and right sides, thereby providing user access to at least a portion of a left and right side of the infusion pump.

Clause 10. The system of any one of Clauses 1-9, wherein the lockbox control interface is configured to receive user input, wherein performing the action comprises activating the lockbox control interface to receive user input, and wherein the processor is further configured to: receive the user input via the activated lockbox control interface; and transmit, after the authorization for access, the user input to the pump communication interface for operation of the infusion pump in accordance with the authorization for access.

Clause 11. The system of any one of Clauses 1-10, wherein the pump communication interface comprises a scanner and is configured to receive the user credential wirelessly via the scanner from a transmitting device associated with a user, and to transmit the authorization for access based on the wireless credential to the lockbox control interface.

Clause 12. A method for securing a pump, comprising: securing at least a portion of an infusion pump within a lockbox, the lockbox configured to enclose and prevent access to at least a user interface of the infusion pump and a medication receptacle of the infusion pump, the lockbox comprising a lockbox control interface configured to obtain authorization for access to the lockbox from a pump communication interface of the infusion pump and enclosed within the lockbox; electronically coupling the lockbox control interface with the pump communication interface; facilitating transmission of a wireless credential to the pump communication interface for authorization to the lockbox; receiving, by the lockbox control interface from the pump communication interface, the authorization for access based on the wireless credential; and performing, by the lockbox control interface, an action according to the received authorization for access.

Clause 13. The method of Clause 12, further comprising: receiving a user credential via the lockbox control interface; and transmitting, by the lockbox control interface, the received user credential to the pump communication interface, wherein the authorization for access is received by the lockbox control interface from the pump communication interface responsive to transmitting the user credential to the pump communication interface.

Clause 14. The method of Clause 12, wherein the pump communication interface comprising comprises a scanner configured to receive the user credential through the lockbox wirelessly from a transmitting device associated with a user outside the lockbox, wherein the authorization for access is received by the lockbox control interface from the pump communication interface responsive to the user credential being scanned at the pump communication interface.

Clause 15. The method of any one of Clauses 12-14, wherein electronically coupling the lockbox control interface with the pump communication interface comprises: wirelessly pairing the lockbox control interface with the pump communication interface.

Clause 16. The method of any one of Clauses 12-15, wherein performing the action comprises: unlocking the lockbox to allow user access to the user interface and the medication receptacle.

Clause 17. The method of Clause 16, wherein the lockbox comprises at least one access door, the action further comprising: automatically opening, responsive to unlocking the lockbox, the at least one access door to expose the user interface or the medication receptacle; and automatically switching, responsive to opening the at least one access door, the user interface of the infusion pump from an off state to an activated state.

Clause 18. The method of Clause 17, wherein the lockbox comprises a housing enclosing the infusion pump and comprises a retractable multi-folding door on each side of a front face of the housing that, when closed, form a front face of the housing, the action further comprising: automatically retracting, responsive to unlocking the lockbox, the retracting multi-folding doors to expose at least a portion of a front face of the infusion pump.

Clause 19. The method of Clause 18, wherein the lockbox further comprises a retractable top that, when closed, is integrally coupled to the front face, the action further comprising: automatically opening, responsive to unlocking the lockbox, the retractable top, thereby providing user access to at least a portion of a top surface of the infusion pump.

Clause 20. The method of Clause 18, wherein the lockbox further comprises respective left and right sides configured to move in a direction away from the front face of the housing when the lockbox is unlocked, the action further comprising: automatically moving, responsive to unlocking the lockbox, the respective left and right sides, thereby providing user access to at least a portion of a left and right side of the infusion pump.

Clause 21. The method of any one of Clauses 12-20, wherein the lockbox control interface is configured to receive user input, wherein performing the action comprises activating the lockbox control interface to receive user input, and wherein the method further comprises: receiving the user input via the activated lockbox control interface; and transmitting, after the authorization for access, the user input to the pump communication interface for operation of the infusion pump in accordance with the authorization for access.

The term automatic, as used herein, may include performance by a computer or machine without user intervention; for example, by instructions responsive to a predicate action by the computer or machine or other initiation mechanism. The word “example” is used herein to mean “serving as an example or illustration.” Any aspect or design described herein as “example” is not necessarily to be construed as preferred or advantageous over other aspects or designs.

As used herein a “user interface” (also referred to as an interactive user interface, a graphical user interface or a UI) may refer to a network based interface including data fields and/or other control elements for receiving input signals or providing electronic information and/or for providing information to the user in response to any received input signals. Control elements may include dials, buttons, icons, selectable areas, or other perceivable indicia presented via the UI that, when interacted with (e.g., clicked, touched, selected, etc.), initiates an exchange of data for the device presenting the UI. A UI may be implemented in whole or in part using technologies such as hyper-text mark-up language (HTML), FLASH™, JAVA™, .NET™, C, C++, web services, or rich site summary (RSS). In some embodiments, a UI may be included in a stand-alone client (for example, thick client, fat client) configured to communicate (e.g., send or receive data) in accordance with one or more of the aspects described. The communication may be to or from a medical device or server in communication therewith.

As used herein, the terms “provide” or “providing” encompass a wide variety of actions. For example, “providing” may include storing a value in a location of a storage device for subsequent retrieval, transmitting a value directly to the recipient via at least one wired or wireless communication medium, transmitting or storing a reference to a value, and the like. “Providing” may also include encoding, decoding, encrypting, decrypting, validating, verifying, and the like via a hardware element.

As used herein, the term “message” encompasses a wide variety of formats for communicating (e.g., transmitting or receiving) information. A message may include a machine readable aggregation of information such as an XML document, fixed field message, comma separated message, JSON, a custom protocol, or the like. A message may, in some implementations, include a signal utilized to transmit one or more representations of the information. While recited in the singular, it will be understood that a message may be composed, transmitted, stored, received, etc. in multiple parts.

As used herein, the term “selectively” or “selective” may encompass a wide variety of actions. For example, a “selective” process may include determining one option from multiple options. A “selective” process may include one or more of: dynamically determined inputs, preconfigured inputs, or user-initiated inputs for making the determination. In some implementations, an n-input switch may be included to provide selective functionality where n is the number of inputs used to make the selection.

As user herein, the terms “correspond” or “corresponding” encompasses a structural, functional, quantitative and/or qualitative correlation or relationship between two or more objects, data sets, information and/or the like, preferably where the correspondence or relationship may be used to translate one or more of the two or more objects, data sets, information and/or the like so to appear to be the same or equal. Correspondence may be assessed using one or more of a threshold, a value range, fuzzy logic, pattern matching, a machine learning assessment model, or combinations thereof.

In any embodiment, data generated or detected can be forwarded to a “remote” device or location, where “remote,” means a location or device other than the location or device at which the program is executed. For example, a remote location could be another location (e.g., office, lab, etc.) in the same city, another location in a different city, another location in a different state, another location in a different country, etc. As such, when one item is indicated as being “remote” from another, what is meant is that the two items can be in the same room but separated, or at least in different rooms or different buildings, and can be at least one mile, ten miles, or at least one hundred miles apart. “Communicating” information references transmitting the data representing that information as electrical signals over a suitable communication channel (e.g., a private or public network). “Forwarding” an item refers to any means of getting that item from one location to the next, whether by physically transporting that item or otherwise (where that is possible) and includes, at least in the case of data, physically transporting a medium carrying the data or communicating the data. Examples of communicating media include radio or infra-red transmission channels as well as a network connection to another computer or networked device, and the internet or including email transmissions and information recorded on websites and the like.