A control apparatus

Abstract: A control apparatus is described comprising: a plurality of microprocessors (44,50); a plurality of storage registers (46,52), the number of storage registers being at least equal to the number of said microprocessors, one of said storage registers being associated with each of said microprocessors, each of said microprocessors being arranged to control and/or monitor the same common parameters (xxx,yyy), each of said microprocessors applying values of control constants stored in the associated storage register in monitoring and/or controlling said parameters; manually controllable input means (6) for supplying new values of said control constants. The control apparatus according to the invention is intended primarily for the control of hemodialysis, that is to say the purification of the blood of patients with diminished renal function or wholly lacking such function. The control apparatus according to the invention is characterized by digital duplication means (48) for digitally duplicating the new values of the said control constants supplied by said input means (6) and entering said duplicated values into all of said storage registers (46,52), whereby identical values for said control constants are entered into all of said storage registers; and display means (9,10) for displaying said new values of said control constants as entered into at least one of said storage registers.

Description: FIELD OF INVENTION The present invention relates to a method of adjusting a control apparatus and a control apparatus, which are particularly suitable for the control of complex equipment and processes such as hemodialysis or blood purification procedures utilized for treating patients with diminished or nil renal function. BACKGROUND OF THE INVENTION Equipment for hemodialysis has become commonly available in recent years. Particularly reference is made to the systems disclosed in United States Patent Nos. 4 122 010, 4 158 034, 4 293 409, 4 194 974, 4 191 359 and 4 536 201. Additional aspects of hemodialysis equipment and methods are described in British Patent No 2 003 274, and United States Patent No 4 585 552. Although the hemodialysis equipment and methods disclosed in the aforementioned patents and applications provide effective treatment modalities, there is a need for still further improvement. Hemodialysis processes typically comprises the control of numerous operating parameters, such as, e.g., various fluid temperatures, ultrafiltration rates, ultrafiltrate volumes, transmembrane pressures or pressure differentials across the dialysis membrane itself, and various parameters of fluid flows, such as blood flow to and from the machine, venous pressure, arterial pressure and blood temperature. Each of these parameters may be regulated according to one or more control constants. In the simplest form of said regulation, the system may merely monitor deviations of the actual value of the parameter from a set point or desired value and undertake corrective action. Typically, however, upper and lower limits are also provided for some or all of these parameters as an additional safety factor. Thus, the system may monitor the actual value of the parameter in question and generate an alarm signal, where the actual value is outside the range between the upper and lower alarm limits. Accordingly, three different values of the three different control constants - lower limit, set point and upper limit - must be supplied to the control system for each parameter where this scheme is employed. The machine operator must therefore enter a large number of different values of different control constants into a computer system to set or adapt the system for desired modes of operation. In apparatuses of this nature which has been utilized heretofore, the control panel typically has incorporated a separate, continuously movable maneuvering element such as a control knob or slide for each different control constant to be entered. Arrangements of this nature require a great number of knobs and the like on the control panel, and hence make the control panel confusing and difficult to use. The operator may encounter difficulties in determining which knob or maneuvering element should be adjusted to alter a given function of the system. These difficulties are compounded where the knobs or other control elements are dispersed on the panel, so that a given knob may be remote from the gauge or indicator for the parameter associated with that knob. Such confusion can be inconvenient for the operator and can also present a safety hazard if the wrong control constant is adjusted by mistake. Moreover, a further safety hazard can be created if the operator enters the wrong value for a control constant. The operator may mistakenly set a value for an upper alarm limit on a parameter which is orders of magnitude too high, and hence may effectively disable the alarm function of the system. Manifestly, such an error can create a safety hazard, inasmuch as the alarm would not operate even though a potentially dangerous condition exists. Where the system incorporates digital microprocessors for comparing the actual values of the various parameters with the associated control constants and initiating appropriate control or alarm action, it is most desirable to use at least two microprocessors including a supervisory microprocessor and a control microprocessor, each microprocessor having a storage register associated therewith. The control constants are stored in the registers associated with each of the microprocessors. The control microprocessor may adjust operation of the system based on a comparison of actual measured values for the various parameters with the appropriate set input value, whereas the supervisory microprocessor compares the actual measured values with the upper and lower limit values and generates an alarm if any parameter varies beyond the essential upper or lower limit. The two microprocessors provide redundancy and hence increased safety. US Patent No. 4 153 554 discloses such a system incorporating a control circuit for adjusting the operation of the system based on control transducer values and according to constants provided by front panel controls, such as several potentiometers. The operation of the system is monitored by a monitor circuit based on monitor transducer values of the system. An alarm circuit compares constants provided by said front panel controls with values from the monitor circuit and gives an alarm at fault conditions. Moreover, the publication "Sicherheitstechnik bei einem mikroprozessorgesteuerten Hämodialysegerät" by R. Heitmeier et al, in "Medizintechnik " No. 105, year 4/85, discloses a multiprocessor system having a control processor (F-µP) and a supervisory processor (K-µP). A keyboard enters parameter values in parallel to storage registers of the two processor systems. There has been a problem heretofore in the operation of redundant microprocessor systems of this nature, where such systems are associated with a control panel having analog devices such as knobs or other movable maneuvering elements for setting the values of the control constants. Typically, the maneuvering elements are associated with analog electrical devices such as potentiometers, so that the setting of each knob or other maneuvering element must be interpreted and converted into a digital value of the associated control constant by devices such as analog-to-digital converters. Such analog devices and converters typically suffer from certain inaccuracies. These inaccuracies may result in the storage of different values for various control constants in the storage registers associated with the two microprocessors. For example, the set point values supplied to the storage register associated with the control microprocessor by the analog-to-digital converter may be above the upper limit value supplied to the storage register associated with the supervisory microprocessor even though the operator has attempted to select a set point value between the upper and lower limit values. If such a mismatch occurs, adjustment of the system by the control microprocessor will cause the actual value of the operating parameter to rise above the upper limit applied by the supervisory microprocessor, which in turn will cause the supervisory microprocessor to continually signal an alarm condition. DISCLOSURE OF THE INVENTION In order to overcome the above-mentioned drawbacks, there is provided a method of adjusting a control apparatus comprising: at least two microprocessors; a first of said microprocessors being adapted to control certain parameters in relation to first control constants stored in a first storage register associated with said first microprocessor and a second of said microprocessors being adapted to monitor said parameters in relation to second control constants stored in a second storage registers associated with said second microprocessor substantially for supervision of said parameters. Moreover, the control apparatus comprises manually controllable input means for supplying values of said control constants to the respective storage registers. According to the invention, the method comprises the steps of operating said input means by an operator for supplying new values for said control constants to be entered into one of said first or second storage register as new control constants; subsequently digitally duplicating said new control constants as entered in said one storage register from this register and entering said duplicated new control constants into another of said storage registers, whereby identical values for said new control constants are entered into all of said storage registers; and finally displaying said duplicated new control constants for providing a feedback to the operator. Preferably, the method further comprises the steps of checking and possibly amending said new values supplied by said input means to be within predetermined limit values before being approved and entered into said one storage register as new control constants. Moreover, there is provided a control apparatus comprising at least two microprocessors, whereby a first of said microprocessors being adapted to control certain parameters in relation to first control constants stored in a first storage register associated with said first microprocessor, and a second of said microprocessors being adapted to monitor said parameters in relation to second control constants stored in a second storage registers associated with said second microprocessor substantially for supervision of said parameters, and further comprising manually controllable input means for supplying values of said control constants to the respective storage registers. According to the invention, said input means is adapted to be operated by an operator for supplying new values for said control constants to be entered into one of said first or second storage register, as new control constants; and the control apparatus further comprising digital duplication means for subsequently digitally duplicating said new control constants as entered in said one storage register from this register and entering said duplicated new control constants into another of said storage registers, whereby identical values for said new control constants are entered into all of said storage registers; and display means for finally displaying said duplicated new control constants for providing a feed back to the operator. According to a preferred embodiment, the control apparatus includes means for checking and possibly amending said new values supplied by said input means to be within predetermined limit values before being approved and entered into said one storage register as new control constants. Because each new value is duplicated digitally from the input register and then duplicated to the other register rather than read separately from an analog element of the input means for entry into each storage register, identical values are always entered into all of the registers. Thus, errors in the analog-to-digital conversion apparatus and other elements associated with the input means cannot result in storage of different values for the control constants in the storage registers associated with the various microprocessors. As the operator adjusts the value of each parameter, he naturally observes the display means to determine the value which he has set. Because the displayed value will be the value actually stored in the storage register, after introduction of any errors by the input means, the operator's natural action in observing the displayed values and continuing the adjustment until the desired value is displayed, will automatically compensate for any errors introduced by the input means. Thus, errors caused by the input means will not result in storage of incompatible values for the different control constants, such as incompatible set points and limits. The digital duplication means may be arranged to copy the new values from the storage register associated with the supervisory microprocessor into the storage register associated with the control microprocessor. These and other objects, features, and advantages of the present invention will be more readily apparent from the detailed description of the preferred embodiment set forth below, taken in conjunction with the accompanying drawings. BRIEF DESCRIPTION OF DRAWINGS Fig. 1 is a schematic front view of a control panel for a system controlling two parameters or variables. Figs. 2-4 are views similar to Fig. 1, depicting the same panel in different operating states. Fig 5. is a view similar to Fig. 1 but depicting a larger panel according to the present invention for control of a plurality of different parameters in a dialysis system. Fig 6. is a schematic functional diagram of the elements in a system incorporating the control panel of Figs. 1-4. DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS Figs. 1-4 show a control panel which is arranged for the control of two variables or parameters in a dialysis system which includes a dialyzer, a dialysis fluid inlet line, a dialysis fluid outlet line and a dialysis fluid bypass line for directly connecting the inlet line to the outlet line, and hence bypassing the dialyzer. The control panel, as illustrated in Figs. 1-4, includes a pictorial representation of the actual fluid flow path in the system, and hence includes a pictorial element 1 representing the dialyzer, pictorial elements 2 and 2a representing the fluid inlet lines to the dialyzer, and pictorial elements 3 and 3a representing the fluid outlet lines. Also, a pictorial representation 4 depicts a bypass line. A bypass alarm signal light 5 is provided between the pictorial representation 4 of the bypass line and the pictorial representation 1 of the dialyzer itself. A single manually rotatable knob or maneuvering element 6 is disposed on the front surface of the panel. Two graphic displays 9 and 10 are also provided, with each such display being associated with one operating parameter of the system. Display 9 is thus associated with a parameter denominated "xxx", which pertains to the conditions prevailing at the inlet conduit 2, and graphic display 10 is associated with a parameter denominated "yyy," which pertains to the conditions prevailing at the outlet conduit 3. Graphic display 9 is disposed adjacent inlet conduit 2 and includes a common linear scale 9a with associated numerals. The display also includes illuminated indicia 7a, 7c and 7d, representing the values of control constants for parameter xxx, in this case the set point represented by indicia 7a, the lower limit represented by indicia 7c, and the upper limit represented by indicia 7d. The positions of these indicia along scale 9a represent the values of these control constants. Graphic display 9 also includes a bar display 7b for displaying the actual measured value of parameter xxx. The length of bar 7b, and hence the position of the right hand edge of the bar along scale 9a represents the actual value of parameter xxx. A manually operable actuator or button 7, marked with the name of the parameter or "xxx", is disposed adjacent display 9. In a similar fashion, the display 10 for parameter yyy, pertaining to the outlet conduit of the system, is disposed adjacent the pictorial representation 3 of the outlet conduit. Display 10 is generally similar to display 9, and includes a scale lOa, illuminated indicators 8a, 8c and 8d for displaying the set point, lower limit and upper limit for parameter yyy, and a bar graph 8b for indicating the actual value of parameter yyy. An actuator 8 is disposed adjacent display 10 and is labeled with the name of the associated parameter yyy. Also arranged on the front of the control panel are control constant selector buttons 12, which include an upper limit selector button 12' and a lower limit selector button 12", both disposed adjacent manually rotatable knob or maneuvering element 6. An alphanumeric display 11 is disposed on the panel face immediately above knob 6. As illustrated in Fig. 6, actuators 7 and 8 are linked to parameter selection means 31, which in turn is connected to interpretation means 32. Maneuvering element knob 6 is linked to a potentiometer 34, which in turn is connected to an analog-to-digital converter 36. Converter 36 is also connected to interpretation apparatus 32. Control constant selector buttons 12' and 12" are linked to control constant selection means 38 which is also linked to interpretation means 32. Interpretation means 32 is in turn connected to a comparison and substitution apparatus 40, which is linked to a bounding value storage register 42. As explained below, these components provide new values of the control constants to the control system. The control system includes a supervisory microprocessor 44 incorporating a storage register 46 and duplication means 48. The control system also includes a control microprocessor 50 incorporating a further storage register 52. Both of the microprocessors are linked to transducers 54 arranged to measure the actual values of the various operating parameters of the actual system. Supervisory microprocessor 44 is arranged to control graphic displays 9 and 10 and bypass alarm 5. The supervisory microprocessor is also arranged to control pictorial illumination unit 56 so as to selectively illuminate each segment of the pictorial representation 1, 2, 2a, 3, 3a and 4 with red light or with green light, as instructed by the supervisory micro-processor, or to leave each segment unilluminated. The supervisory microprocessor is also connected, via appropriate drivers (not shown) to illuminators 58 and 60 disposed physically within actuator buttons 7 and 8. The control microprocessor 50 is linked to alphanumeric display 11, and is also to linked to the adjustable element 62 of the dialyzer and associated flow conduits. These adjustable elements typically include valves, variable electric resistance heaters, and the like. Although parameter selection means 31, interpretation means 32, control constant selection means 38, analog-to-digital converter 36, bounding value storage means 42, and comparison and substitution means 40 are illustrated in Figs. 6 as being separate from the microprocessors, it should be clearly understood that such depiction is solely for the sake of clarity of illustration. In actual practice, some or all of these elements can actually be incorporated in one or both of the microprocessors. Figure 1 illustrates the condition of the panel face during normal operation, without adjustment of any of the control constants. In this condition, illuminators 58 and 60 (Fig. 6) are inactive, so that actuator buttons 7 and 8 are not illuminated. Pictorial illumination means 36 (Fig. 6) illuminates the pictorial representations of the dialyzer 1, the inlet conduits 2 and 2a, and the outlet conduits 3 and 3a with green light, and leaves the pictorial representation 4 of the bypass conduit unilluminated. The bypass alarm light 5 is likewise unilluminated. Alphanumeric display 11 is blank, and graphic display 9 is actuated to display the values of set point, lower limit and upper limit for parameter xxx stored in the storage register 46 of the supervisory microprocessor 44, and also to display the actual value of parameter xxx as measured by the transducers 54. Likewise, graphic display 10 displays the set point, lower limit and upper limit for parameter yyy, also as stored in register 46, and also displays the actual value of parameter yyy. During normal operation, the actual value of each parameter is close to its set point and within the range defined by the upper and lower limits for this parameter. Inasmuch as the set point, actual value and limits for each parameter are clearly displayed along a common scale on a single graphic display, normal operation of the system is readily verifiable and the system condition as a whole can be readily determined by mere visual inspection of the panel. Figure 2 illustrates the condition of the panel during adjustment by the operator of the set point for parameter yyy. Upon manual actuation by the operator of actuator or button 8 associated with parameter yyy, parameter selection means 31 selects parameter yyy. This selection is conveyed to supervisory microprocessor 44, which in turn instructs graphic display to flash the illuminated indicia 8a, 8c and 8d, for the control constants associated with parameter yyy. In the condition illustrated, the operator has not depressed either upper limit selector button 12' or lower limit selector button 12". Accordingly, control constant selection means 38 selects the set point for parameter yyy, rather than the upper limit or lower limit for that parameter as the particular control constant to be adjusted, and signals interpretation means accordingly. The interpretation means thus interprets the manually variable signal generated by manual adjustment of maneuvering element or knob 6 and operation of analog-to-digital converter 36 as a new value for the set point for parameter yyy. The new value of parameter yyy is passed to comparison and substitution means 40. The comparison and substitution means compares the new value with preset, invariant upper and lower bounding values for the set point of parameter yyy stored in bounding value storage means 42. If the new value of the set point generated by interpretation means 32 is outside the range defined by these bounding values, then the comparison and substitution means 40 would substitute a value within such a range for the new value generated by the interpretation means. In the situation illustrated in Figure 2, however, the new value generated by the interpretation means is within this range, so that the new value passes unaltered from the interpretation means to the supervisory microprocessor 44. Microprocessor 44 is arranged so that the new values are entered into register 46 and then copied from that register by duplication means 48 into register 52. Control microprocessor 50 drives alphanumeric display 11 to show both the actual measured value of parameter yyy, as obtained from transducers 54, and also to show the value of the set point for this parameter last entered into register 52. Because the values of the set point are duplicated digitally, the exact same value will be stored in register 46 and in register 52. Moreover, because the value as stored in register 52 is fed back to the operator via alphanumeric display 11, as illustrated in Fig. 2, the operator will control his actuation of knob 6 according to the set point values as actually input into the storage registers. Accordingly, inaccuracies in potentiometer 34 or analog-to-digital converter 36 are of little consequence. Such errors will not result either in the storage of divergent values in the two storage registers 46 and 52, or in the storage of incorrect values. Also, if the operator attempts to set an incorrect value such that the comparison and substitution means replaces the manually set value with one of the preset bounding means, the bounding limit rather than the manually set value will be displayed on display 11. Accordingly, the displayed value will not change as the operator adjusts the knob further in the wrong direction, thus warning the operator of his error. Additional indications of such an error can also be provided. During the setting process, the supervisory microprocessor adjusts the position of the indicia 8a for the set point along the scale 10a of display 10, so as to reflect the new set point value. As the set point is thus adjusted, and thereafter, the control microprocessor 50 will compare the actual value of parameter yyy from the transducers from the new set point and will adjust the system adjuster components 62 to drive the actual value of this parameter towards the set point value. When upper alarm limit selector button 12' is depressed, the control constant selection means 38 selects the upper limit control constant for adjustment. Thus, if the upper limit selection button 12' is actuated in conjunction with parameter selection button 8, the interpretation means will interpret these signals derived from manually adjustable maneuvering element or knob 8 via potentiometer 34 and converter 36 as a new value for the upper limit of parameter yyy. In that event, the comparison and substitution means will compare the new value with bounding values appropriate to the upper limit, rather than to the set point for parameter yyy and control microprocessor 50 will cause alphanumeric display 11 to display both the actual value of parameter yyy and the new upper limit value input into and stored in register 52. Likewise, with combined actuation of parameter selection button 8 and lower limit selection button 12", the variable signal derived from operation of knob 6 will be interpreted as a new value for the lower limit of parameter yyy. As will be appreciated, the same action pertains to the setting of those parameters which requires actuation of button 7, rather than button 8. In each case, the signal derived from operation of knob 6 is interpreted as a new value for the particular control constant selected by the control constant selection means for the particular parameter selected by the parameter selection means. The identity of the parameter and of the control constant being set is displayed, along with the value of the constant as set, on alphanumeric display 11. Figure 3 illustrates the appearance of the front panel when parameter yyy falls outside the upper and lower limits associated with that parameter, and the control microprocessor adjusts the system to bypass the dialyzer. The bar graph 8b reflecting the actual measured value of parameter yyy shows the out-of-limit value. Thus, the right hand edge of the bar graph is at a low level on the scale lOa and is outside the range encompassed by indicia 8a and 8d, corresponding to the lower and upper limits, respectively. To provide a conspicuous alarm signal indicating that parameter yyy is outside of the limits, supervisory microprocessor 44 (Fig. 6) causes illuminator 60 to illuminate actuator 8 with a red light. At the same time, the supervisory microprocessor illuminates bypass alarm indicator 5. The supervisory microprocessor also adjusts pictorial illumination means 56 to illuminate the pictorial representation 2 of the inlet conduit, the pictorial representation 4 of the bypass conduit, and the pictorial representation 3 of the outlet conduit with a red light. The pictorial representations 2a and 3a of the branch conduits leading to and from the dialyzer are left unilluminated. These pictorial representations thus instantly inform the operator that the system is in a bypass condition. The red color of the illuminated representation provides a further signal that the bypass condition is the result of an abnormal, out-of-limit condition. These signals are supplemented by the bypass alarm light 5. The alarm indication provided by illuminated actuator 8 guides the operator to instant identification of the particular parameter which is out-of limits, and which has caused the abnormal condition. Because all of the actual values and control constants for the various parameters are continually displayed on the associated graphic displays, the operator can promptly diagnose the nature of the malfunction. As is illustrated in Figure 4, the system may be deliberately switched into a bypass mode, for example as part of a predetermined schedule of operation, and this can be done even where none of the parameters is in an out-of-limit condition. In this case, the illuminators associated with actuators 7 and 8 are left unilluminated, so that no alarm signal is given. Also, although the pictorial representation means is adjusted by the supervisory microprocessor to illuminate pictorial representations 2, 3 and 4 to show the bypass flow, and to leave representations 2a and 3a unilluminated to show that no flow is going through the dialyzer, the pictorial representation is illuminated in green light, rather than red light. Thus, whether or not there is an alarm condition, the pictorial representation can be employed to show the actual flow path in use within the system. Typically, the systems controlled by the apparatus in accordance with the present invention require control of more than two parameters, as is employed in the system of Figs. 1-4. Figure 5 thus depicts the front face of a control panel, as can be used in controlling dialysis fluid flow in a hemodialysis system. The panel of Fig. 5 incorporates the same elements as mentioned above in connection with Figs. 1-4 and 6. Elements common to both embodiments are denoted in Fig. 5 by the same reference numerals as those employed in Figs. 1-4 and 6. However, display 9 is associated in Fig. 5 with the real parameter of fluid conductivity, and the associated adjacent actuator 7 is marked with the legend "COND", rather than with the nominal legend "xxx" appearing on the corresponding actuator appearing in Fig. 2. Likewise, the graphic display 10 is associated with the real parameter transmembrane pressure, and the associated adjacent actuator 8 is marked with the legend "TMP", rather than with the nominal legend "yyy," as in the other figures. The pictorial representation on the front face of the panel in Fig. 5 includes the same elements as the pictorial representation of Figs. 1-4, but also includes a pictorial representation 13 of an additional branch conduit carrying an ultrafiltrate flow. Additional graphic representations 22 and 23 associated with ultrafiltrate volume and ultrafiltration rate parameters, both of which pertain to the flow in the ultrafiltrate conduit represented by branch 13, are disposed on the panel front face adjacent this branch of the pictorial representation. Actuators 18 and 19 which are associated, respectively, with ultrafiltrate volume and ultrafiltration rate, are disposed adjacent to graphic displays 22 and 23, respectively. Furthermore, additional graphic displays 20 and 21 for incoming dialysis fluid temperature in the inlet represented by pictorial representation 2, and fluid flow in the inlet 2, respectively, are disposed adjacent to the pictorial representation of the inlet conduit. Actuators 14 and 15 relating to these parameters are disposed adjacent to these additional displays. The panel of Fig. 5 incorporates additional buttons 26 for setting the system to operate in different modes. Thus, each of these buttons may be linked to the control and supervisory microprocessors of the system, so that these microprocessors, and hence the system as a whole, can operate according to different programs, depending upon which of the buttons is actuated. For example, depression of the button 26 marked "TMP Mode" sets the system to operate so as to maintain the transmembrane pressure constant, whereas operation of the button 26 marked "Auto UF Mode" sets the system to perform a dialysis procedure with accurately controlled ultrafiltration. Operation of the button marked "Isolated UF Mode" sets the system to perform a pure ultrafiltration procedure without any dialysis fluid flow. Likewise, the buttons marked "HEAT DISNF", "CHEM DISNF", "RINSE" and "DRAIN" sets the system to perform the corresponding heat sterilization, chemical sterilization, rinsing or emptying of functions. The panel of Fig. 5 also includes a clock display 27. This clock display is associated with and adjacent to an actuator 16 marked "TIME". Operation of this actuator combined with adjustment of the knob or maneuvering element 6 sets the time of internal clocks within the microprocessors of the system. The panel of Fig. 5 also includes additional displays for showing information other than the values and control constants for the parameters set from the panel. Thus, digital display 28 marked "WATER LEV" indicates the fluid level in a vessel for containing dialysis fluid. The panel of Fig. 5 also includes a start button 24 and a button 25 marked "CONFIRM" disposed adjacent maneuvering element or knob 6. Operation of the panel shown in Fig. 5 is substantially the same as operation of the panel described above with reference to Figs. 1-4 and 6. Thus, to set the upper limit for transmembrane pressure, the operator actuates actuator 8 adjacent display 10 for transmembrane pressure, and also actuates the high limit button 12' adjacent to maneuvering element or knob 6. The variable signal produced upon actuation of this element is interpreted as a new value for the transmembrane pressure upper limit, which is displayed on alphanumeric display 11. However, in operation of the panel according to Fig. 5, the control system does not begin to apply the new value so set until the operator signals that he is satisfied with the new value displayed on display 11 by pressing CONFIRM button 25. To permit this function, each of the storage registers associated with the microprocessors may be provided with a temporary storage location, distinct from the storage locations for the parameters actually in use, and each microprocessor may be arranged to shift the newly set value from the temporary storage location to the storage location assigned to the parameter when the CONFIRM button is depressed. Numerous variations and combinations of the features described above can be employed in accordance with the present invention. Thus, in one variant of the invention, the upper and lower limits are not set directly. Instead, the system is arranged to calculate upper and lower limits for each parameter from the set point selected by the operator for such parameter. The upper and lower limits may be calculated from the set point according to a predetermined formula or algorithm. In this case, the control constant selection means may be omitted and the high limit and low limit selector buttons 12' and 12" may likewise be omitted. Also, the layout of the fluid flow path and the control panel face may make it impossible to dispose each graphic display and the associated actuator immediately adjacent the pictorial representation of the pertinent portion of the fluid flow path. Thus, some of the graphic displays may be disposed adjacent related pictorial representations, whereas other graphic displays may be disposed at more remote locations. In less preferred embodiments, the pictorial representation may be omitted entirely, and the graphic displays may be replaced by other forms of display. In another less preferred embodiment, alphanumeric display 11 may be omitted entirely, and the supervisory microprocessor may be arranged to display the new value set for each control constant only on the related graphic display. As will be readily appreciated, the layout of the panel face, and the particular parameters and actual constants employed, will vary with the nature of the system to be controlled. Typically, in control of the dialysis fluid portion of a hemodialysis system, the control panel should be arranged to set control constants for one or more of the following functions: conductivity, temperature, fluid flow, transmembrane pressure, ultrafiltrate volume, ultrafiltration rate, time, chemical composition, pH and blood leakage monitoring. In control of the bloodhandling portion of a hemodialysis system, control constants for one or more of the following parameters should be set by use of a control panel in accordance with the present invention: temperature, blood flow, transmembrane pressure, venous pressure, arterial pressure, chemical composition and the presence of air. In a particularly preferred arrangement, the control panel according to the present invention is configured to control both blood handling portion and the hemodialysis fluid flow portion of the system. A control panel for such use would typically incorporate pictorial representations of the flow paths for both blood and dialysis fluid. As the present invention provides important improvements in monitoring and control of operating parameters in hemodialysis fluid flow and/or blood flow in hemodialysis operations, the invention provides improved methods of controlling these functions. In the improved methods, control panels and systems in accordance with the present invention are employed and operated as described above. In the apparatus described above, the comparison and substitution means checks the new value for every control constant. However, the apparatus can be arranged so that the less significant or noncritical control constants are not so checked.

Claims: A method of adjusting a control apparatus comprising: at least two microprocessors; a first of said microprocessors being adapted to control certain parameters in relation to first control constants stored in a first storage register associated with said first microprocessor; a second of said microprocessors being adapted to monitor said parameters in relation to second control constants stored in a second storage registers associated with said second microprocessor substantially for supervision of said parameters; manually controllable input means for supplying values of said control constants to the respective storage registers; characterized in operating said input means by an operator for supplying new values for said control constants to be entered into one of said first or second storage register as new control constants; subsequently digitally duplicating said new control constants as entered in said one storage register from this register and entering said duplicated new control constants into another of said storage registers, whereby identical values for said new control constants are entered into all of said storage registers; and finally displaying said duplicated new control constants for providing a feedback to the operator. Method according to claim 1, characterized in checking and possibly amending said new values supplied by said input means to be within predetermined limit values before being approved and entered into said one storage register as new control constants. Method according to claim 1 or 2, characterized in measuring said parameters by first transducers associated with said first microprocessor and by second transducers associated with said second microprocessor, and independently comparing said measured parameter values with said control constants stored in the associated storage register. Method according to claim 3, wherein said parameters are influenced upon by adjustable elements, characterized in comparing a sample of one parameter taken by the associated first transducer, with said control constants stored in said storage register, and providing a control signal to said adjustment elements for adjusting said parameter to a value given by said control constants and/or to be within certain limit values given by said control constants and in that said second microprocessor is adapted to compare a sample taken by the associated second transducer with said control constants stored in said second storage register, for providing an alarm signal when said sample is outside said limit values given by said control constants. Control apparatus intended for performing the method according to anyone of claims 1 - 4, comprising: at least two microprocessors (44,50); a first of said microprocessors (50) being adapted to control certain parameters (xxx,yyy) in relation to first control constants stored in a first storage register (52) associated with said first microprocessor; a second of said microprocessors (44) being adapted to monitor said parameters in relation to second control constants stored in a second storage registers (46) associated with said second microprocessor substantially for supervision of said parameters; manually controllable input means (6) for supplying values of said control constants to the respective storage registers; characterized in that said input means (6) is adapted to be operated by an operator for supplying new values for said control constants to be entered into one of said first or second storage register (46,52), as new control constants; digital duplication means (48) for subsequently digitally duplicating said new control constants as entered in said one storage register from this register and entering said duplicated new control constants into another of said storage registers (46,52), whereby identical values for said new control constants are entered into all of said storage registers; and display means (11) for finally displaying said duplicated new control constants for providing a feed back to the operator. Control apparatus according to claim 5, characterized by means (40,42) for checking and possibly amending said new values supplied by said input means to be within predetermined limit values before being approved and entered into said one storage register as new control constants. Control apparatus according to claim 5 or 6, characterized in that said parameters are measured by first transducers (54) associated with said first microprocessor and by second transducers (54) associated with said second microprocessor, said microprocessors being adapted to independently compare said measured parameter values with said control constants stored in the associated storage register. Control apparatus according to claim 6 or 7, wherein said parameters are influenced upon by adjustable elements (62), characterized in that said first microprocessor is adapted to compare a sample of one parameter taken by the associated first transducer, with said control constants stored in said storage register, and providing a control signal to said actuation means for adjusting said parameter to a value given by said control constants and/or to be within certain limit values given by said control constants and in that said second microprocessor is adapted to compare a sample taken by the associated second sensor with said control constants stored in said second storage register, for providing an alarm signal (5) when said sample is outside said limit values given by said control constants. Control apparatus according to anyone of claims 5 - 8, characterized in that said digital duplication means (48) is incorporated into one (44) of said microprocessors (44,50). Control apparatus according to anyone of claims 5-9, characterized in that said parameter is selected from the group consisting of conductivity, temperature, fluid flow, transmembrane pressure, ultrafiltrate volume, ultrafiltration rate, time, chemical composition, pH, and blood leakage.

Inventors: BJAERE BJOERN AKE, ECKERBOM ANDERS GUSTAV, GUMMESSON BENGT-AKE GOERAN, STERNBY JAN PETER, BJAERE, BJOERN AKE, ECKERBOM, ANDERS GUSTAV, GUMMESSON, BENGT-AKE GOERAN, STERNBY, JAN PETER, Bjäre, Björn Ake, Gummesson, Bengt-Ake Göran
Applicants: GAMBRO LUNDIA AB
Application year: 1986
Main classification: G05B19
IPC codes: G05B19