Abstract: An implantable infusion pump possesses operational functionality that is, at least in part, controlled by software operating in two processor ICs which are configured to perform some different and some duplicate functions. The pump exchanges messages with an external device via telemetry. Each processor controls a different part of the drug infusion mechanism such that both processors must agree on the appropriateness of drug delivery for infusion to occur. Delivery accumulators are incremented and decremented with delivery requests and with deliveries made. When accumulated amounts reach or exceed, quantized deliverable amounts, infusion is made to occur. The accumulators are capable of being incremented by two or more independent types of delivery requests. Operational modes of the infusion device are changed automatically in view of various system errors that are trapped, various system alarm conditions that are detected, and when excess periods of time lapse between pump and external device interactions.

Abstract: An implantable infusion pump possesses operational functionality that is, at least in part, controlled by software operating in two processor ICs which are configured to perform some different and some duplicate functions. The pump exchanges messages with an external device via telemetry. Each processor controls a different part of the drug infusion mechanism such that both processors must agree on the appropriateness of drug delivery for infusion to occur. Delivery accumulators are incremented and decremented with delivery requests and with deliveries made. When accumulated amounts reach or exceed, quantized deliverable amounts, infusion is made to occur. The accumulators are capable of being incremented by two or more independent types of delivery requests. Operational modes of the infusion device are changed automatically in view of various system errors that are trapped, various system alarm conditions that are detected, and when excess periods of time lapse between pump and external device interactions.

Abstract: An implantable infusion pump possesses operational functionality that is, at least in part, controlled by software operating in two processor ICs which are configured to perform some different and some duplicate functions. The pump exchanges messages with an external device via telemetry. Each processor controls a different part of the drug infusion mechanism such that both processors must agree on the appropriateness of drug delivery for infusion to occur. Delivery accumulators are incremented and decremented with delivery requests and with deliveries made. When accumulated amounts reach or exceed, quantized deliverable amounts, infusion is made to occur. The accumulators are capable of being incremented by two or more independent types of delivery requests. Operational modes of the infusion device are changed automatically in view of various system errors that are trapped, various system alarm conditions that are detected, and when excess periods of time lapse between pump and external device interactions.

Abstract: An implanted medical device (e.g. infusion pump) and handheld communication device wherein the implantable device is capable of operating under control of different software programs, wherein a first program operates after resetting the implantable device and is not capable of providing significant medical functionality but is capable of selected telemetry operations including telemetry operations that allow replacement software to be downloaded, and wherein a second program may be caused to take control of the device and is capable of significant medical functionality and selected telemetry operations but is incapable of receiving replacement software. A software image may be received in multiple messages where each message is provided with its own validation code and wherein a validation code for the whole image is provided and wherein each provided validation code must compared to a derived validation code prior to accepting the validity of the replacement software.

Abstract: An implanted medical device (e.g. infusion pump) and handheld communication device wherein the implantable device is capable of operating under control of different software programs, wherein a first program operates after resetting the implantable device and is not capable of providing significant medical functionality but is capable of selected telemetry operations including telemetry operations that allow replacement software to be downloaded, and wherein a second program may be caused to take control of the device and is capable of significant medical functionality and selected telemetry operations but is incapable of receiving replacement software. A software image may be received in multiple messages where each message is provided with its own validation code and wherein a validation code for the whole image is provided and wherein each provided validation code must compared to a derived validation code prior to accepting the validity of the replacement software.