Nothing Special   »   [go: up one dir, main page]

WO2022140204A1 - Pompes à médicament et leurs systèmes de commande - Google Patents

Pompes à médicament et leurs systèmes de commande Download PDF

Info

Publication number
WO2022140204A1
WO2022140204A1 PCT/US2021/064228 US2021064228W WO2022140204A1 WO 2022140204 A1 WO2022140204 A1 WO 2022140204A1 US 2021064228 W US2021064228 W US 2021064228W WO 2022140204 A1 WO2022140204 A1 WO 2022140204A1
Authority
WO
WIPO (PCT)
Prior art keywords
medicament device
ambulatory medicament
ambulatory
alarm
user
Prior art date
Application number
PCT/US2021/064228
Other languages
English (en)
Inventor
David Chi-Wai LIM
Firas H. EL-KHATIB
Himanshu Patel
Michael J. Rosinko
David Matthew HENDERSON
Justin P. BROWN
Original Assignee
Beta Bionics, Inc.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from PCT/US2021/072742 external-priority patent/WO2022126080A1/fr
Application filed by Beta Bionics, Inc. filed Critical Beta Bionics, Inc.
Priority to AU2021410650A priority Critical patent/AU2021410650A1/en
Priority to EP21911945.0A priority patent/EP4262924A1/fr
Priority to CA3205669A priority patent/CA3205669A1/fr
Priority to US18/258,241 priority patent/US20240062867A1/en
Priority to PCT/US2022/017368 priority patent/WO2022178447A1/fr
Priority to US17/683,830 priority patent/US20220265143A1/en
Priority to US17/685,292 priority patent/US11497852B2/en
Priority to US17/685,149 priority patent/US11534546B2/en
Priority to US17/685,144 priority patent/US11497849B2/en
Priority to US17/685,297 priority patent/US20220184300A1/en
Priority to US17/685,170 priority patent/US11565041B2/en
Priority to US17/685,235 priority patent/US11925788B2/en
Priority to US17/654,776 priority patent/US20220199218A1/en
Priority to US17/654,913 priority patent/US20220208331A1/en
Priority to US17/655,122 priority patent/US20220208370A1/en
Priority to PCT/US2022/071308 priority patent/WO2022204705A1/fr
Priority to US17/656,345 priority patent/US20220223251A1/en
Priority to US17/656,356 priority patent/US11515027B2/en
Priority to US17/656,849 priority patent/US20220222734A1/en
Priority to US17/657,086 priority patent/US11529466B2/en
Priority to US17/657,105 priority patent/US20220218904A1/en
Priority to US17/657,263 priority patent/US20220223273A1/en
Priority to US17/657,547 priority patent/US20220223252A1/en
Priority to US17/657,612 priority patent/US11581080B2/en
Priority to US17/657,607 priority patent/US20220218905A1/en
Publication of WO2022140204A1 publication Critical patent/WO2022140204A1/fr
Priority to US17/882,469 priority patent/US20230166035A1/en
Priority to US18/431,002 priority patent/US20240173475A1/en

Links

Classifications

    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M5/00—Devices for bringing media into the body in a subcutaneous, intra-vascular or intramuscular way; Accessories therefor, e.g. filling or cleaning devices, arm-rests
    • A61M5/14—Infusion devices, e.g. infusing by gravity; Blood infusion; Accessories therefor
    • A61M5/142—Pressure infusion, e.g. using pumps
    • A61M5/14244—Pressure infusion, e.g. using pumps adapted to be carried by the patient, e.g. portable on the body
    • A61M5/14248—Pressure infusion, e.g. using pumps adapted to be carried by the patient, e.g. portable on the body of the skin patch type
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/0002—Remote monitoring of patients using telemetry, e.g. transmission of vital signals via a communication network
    • A61B5/0015—Remote monitoring of patients using telemetry, e.g. transmission of vital signals via a communication network characterised by features of the telemetry system
    • A61B5/0022—Monitoring a patient using a global network, e.g. telephone networks, internet
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/74—Details of notification to user or communication with user or patient ; user input means
    • A61B5/742—Details of notification to user or communication with user or patient ; user input means using visual displays
    • A61B5/7435—Displaying user selection data, e.g. icons in a graphical user interface
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M5/00—Devices for bringing media into the body in a subcutaneous, intra-vascular or intramuscular way; Accessories therefor, e.g. filling or cleaning devices, arm-rests
    • A61M5/14—Infusion devices, e.g. infusing by gravity; Blood infusion; Accessories therefor
    • A61M5/142—Pressure infusion, e.g. using pumps
    • A61M5/14244—Pressure infusion, e.g. using pumps adapted to be carried by the patient, e.g. portable on the body
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M5/00—Devices for bringing media into the body in a subcutaneous, intra-vascular or intramuscular way; Accessories therefor, e.g. filling or cleaning devices, arm-rests
    • A61M5/14—Infusion devices, e.g. infusing by gravity; Blood infusion; Accessories therefor
    • A61M5/168—Means for controlling media flow to the body or for metering media to the body, e.g. drip meters, counters ; Monitoring media flow to the body
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M5/00—Devices for bringing media into the body in a subcutaneous, intra-vascular or intramuscular way; Accessories therefor, e.g. filling or cleaning devices, arm-rests
    • A61M5/14—Infusion devices, e.g. infusing by gravity; Blood infusion; Accessories therefor
    • A61M5/168—Means for controlling media flow to the body or for metering media to the body, e.g. drip meters, counters ; Monitoring media flow to the body
    • A61M5/172—Means for controlling media flow to the body or for metering media to the body, e.g. drip meters, counters ; Monitoring media flow to the body electrical or electronic
    • A61M5/1723—Means for controlling media flow to the body or for metering media to the body, e.g. drip meters, counters ; Monitoring media flow to the body electrical or electronic using feedback of body parameters, e.g. blood-sugar, pressure
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B21/00—Alarms responsive to a single specified undesired or abnormal condition and not otherwise provided for
    • G08B21/18—Status alarms
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B5/00—Visible signalling systems, e.g. personal calling systems, remote indication of seats occupied
    • G08B5/22—Visible signalling systems, e.g. personal calling systems, remote indication of seats occupied using electric transmission; using electromagnetic transmission
    • G08B5/222—Personal calling arrangements or devices, i.e. paging systems
    • G08B5/223—Personal calling arrangements or devices, i.e. paging systems using wireless transmission
    • G08B5/224—Paging receivers with visible signalling details
    • G08B5/227—Paging receivers with visible signalling details with call or message storage means
    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
    • G16H20/00—ICT specially adapted for therapies or health-improving plans, e.g. for handling prescriptions, for steering therapy or for monitoring patient compliance
    • G16H20/10—ICT specially adapted for therapies or health-improving plans, e.g. for handling prescriptions, for steering therapy or for monitoring patient compliance relating to drugs or medications, e.g. for ensuring correct administration to patients
    • G16H20/17—ICT specially adapted for therapies or health-improving plans, e.g. for handling prescriptions, for steering therapy or for monitoring patient compliance relating to drugs or medications, e.g. for ensuring correct administration to patients delivered via infusion or injection
    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
    • G16H40/00—ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or operation of medical equipment or devices
    • G16H40/60—ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or operation of medical equipment or devices for the operation of medical equipment or devices
    • G16H40/63—ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or operation of medical equipment or devices for the operation of medical equipment or devices for local operation
    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
    • G16H40/00—ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or operation of medical equipment or devices
    • G16H40/60—ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or operation of medical equipment or devices for the operation of medical equipment or devices
    • G16H40/67—ICT specially adapted for the management or administration of healthcare resources or facilities; ICT specially adapted for the management or operation of medical equipment or devices for the operation of medical equipment or devices for remote operation
    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
    • G16H50/00—ICT specially adapted for medical diagnosis, medical simulation or medical data mining; ICT specially adapted for detecting, monitoring or modelling epidemics or pandemics
    • G16H50/20—ICT specially adapted for medical diagnosis, medical simulation or medical data mining; ICT specially adapted for detecting, monitoring or modelling epidemics or pandemics for computer-aided diagnosis, e.g. based on medical expert systems
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/145—Measuring characteristics of blood in vivo, e.g. gas concentration, pH value; Measuring characteristics of body fluids or tissues, e.g. interstitial fluid, cerebral tissue
    • A61B5/14532—Measuring characteristics of blood in vivo, e.g. gas concentration, pH value; Measuring characteristics of body fluids or tissues, e.g. interstitial fluid, cerebral tissue for measuring glucose, e.g. by tissue impedance measurement
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/48—Other medical applications
    • A61B5/4836—Diagnosis combined with treatment in closed-loop systems or methods
    • A61B5/4839—Diagnosis combined with treatment in closed-loop systems or methods combined with drug delivery
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/74—Details of notification to user or communication with user or patient ; user input means
    • A61B5/7475—User input or interface means, e.g. keyboard, pointing device, joystick
    • A61B5/7495—User input or interface means, e.g. keyboard, pointing device, joystick using a reader or scanner device, e.g. barcode scanner
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M5/00—Devices for bringing media into the body in a subcutaneous, intra-vascular or intramuscular way; Accessories therefor, e.g. filling or cleaning devices, arm-rests
    • A61M5/14—Infusion devices, e.g. infusing by gravity; Blood infusion; Accessories therefor
    • A61M5/142—Pressure infusion, e.g. using pumps
    • A61M2005/14208—Pressure infusion, e.g. using pumps with a programmable infusion control system, characterised by the infusion program
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M5/00—Devices for bringing media into the body in a subcutaneous, intra-vascular or intramuscular way; Accessories therefor, e.g. filling or cleaning devices, arm-rests
    • A61M5/14—Infusion devices, e.g. infusing by gravity; Blood infusion; Accessories therefor
    • A61M5/168—Means for controlling media flow to the body or for metering media to the body, e.g. drip meters, counters ; Monitoring media flow to the body
    • A61M5/16831—Monitoring, detecting, signalling or eliminating infusion flow anomalies
    • A61M2005/16863—Occlusion detection
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/18—General characteristics of the apparatus with alarm
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/33—Controlling, regulating or measuring
    • A61M2205/3303—Using a biosensor
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/35—Communication
    • A61M2205/3546—Range
    • A61M2205/3553—Range remote, e.g. between patient's home and doctor's office
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/35—Communication
    • A61M2205/3546—Range
    • A61M2205/3561—Range local, e.g. within room or hospital
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/35—Communication
    • A61M2205/3576—Communication with non implanted data transmission devices, e.g. using external transmitter or receiver
    • A61M2205/3584—Communication with non implanted data transmission devices, e.g. using external transmitter or receiver using modem, internet or bluetooth
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/35—Communication
    • A61M2205/3576—Communication with non implanted data transmission devices, e.g. using external transmitter or receiver
    • A61M2205/3592—Communication with non implanted data transmission devices, e.g. using external transmitter or receiver using telemetric means, e.g. radio or optical transmission
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/50—General characteristics of the apparatus with microprocessors or computers
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/50—General characteristics of the apparatus with microprocessors or computers
    • A61M2205/502—User interfaces, e.g. screens or keyboards
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/50—General characteristics of the apparatus with microprocessors or computers
    • A61M2205/502—User interfaces, e.g. screens or keyboards
    • A61M2205/505—Touch-screens; Virtual keyboard or keypads; Virtual buttons; Soft keys; Mouse touches
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2205/00—General characteristics of the apparatus
    • A61M2205/50—General characteristics of the apparatus with microprocessors or computers
    • A61M2205/52—General characteristics of the apparatus with microprocessors or computers with memories providing a history of measured variating parameters of apparatus or patient
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61M—DEVICES FOR INTRODUCING MEDIA INTO, OR ONTO, THE BODY; DEVICES FOR TRANSDUCING BODY MEDIA OR FOR TAKING MEDIA FROM THE BODY; DEVICES FOR PRODUCING OR ENDING SLEEP OR STUPOR
    • A61M2230/00—Measuring parameters of the user
    • A61M2230/20—Blood composition characteristics
    • A61M2230/201—Glucose concentration
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B21/00—Alarms responsive to a single specified undesired or abnormal condition and not otherwise provided for
    • G08B21/02—Alarms for ensuring the safety of persons
    • G—PHYSICS
    • G08—SIGNALLING
    • G08B—SIGNALLING OR CALLING SYSTEMS; ORDER TELEGRAPHS; ALARM SYSTEMS
    • G08B29/00—Checking or monitoring of signalling or alarm systems; Prevention or correction of operating errors, e.g. preventing unauthorised operation
    • G08B29/18—Prevention or correction of operating errors
    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
    • G16H15/00—ICT specially adapted for medical reports, e.g. generation or transmission thereof
    • G—PHYSICS
    • G16—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR SPECIFIC APPLICATION FIELDS
    • G16H—HEALTHCARE INFORMATICS, i.e. INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR THE HANDLING OR PROCESSING OF MEDICAL OR HEALTHCARE DATA
    • G16H50/00—ICT specially adapted for medical diagnosis, medical simulation or medical data mining; ICT specially adapted for detecting, monitoring or modelling epidemics or pandemics
    • G16H50/30—ICT specially adapted for medical diagnosis, medical simulation or medical data mining; ICT specially adapted for detecting, monitoring or modelling epidemics or pandemics for calculating health indices; for individual health risk assessment

Definitions

  • This disclosure relates to glucose control systems, including medical devices that provide glucose control therapy to a subject, glucose level control systems, and ambulatory medicament pumps that deliver medicament to the subject to control blood glucose level in the subject.
  • Sustained delivery, pump driven medicament injection devices generally include a delivery cannula mounted in a subcutaneous manner through the skin of the subject at an infusion site.
  • the pump draws medicine from a reservoir and delivers it to the subject via the cannula.
  • the injection device typically includes a channel that transmits a medicament from an inlet port to the delivery cannula which results in delivery to the subcutaneous tissue layer where the delivery cannula terminates.
  • Some infusion devices are configured to deliver one medicament to a subject while others are configured to deliver multiple medicaments to a subject.
  • Blood glucose control systems and ambulatory medical devices that provide therapy to a subject, such as blood glucose control, are disclosed.
  • Disclosed systems and devices can implement one or more features that improve the user experience, such as software update techniques that avoid interrupting delivery of therapy, gesture-based control of therapy delivery, automatic resumption of therapy after a user-initiated pause, improved alarm management, display of autonomously calculated dosing recommendations, wide area network connectivity, and security features.
  • FIG. 1A illustrates an example blood glucose control system that provides blood glucose control via an ambulatory medicament pump.
  • FIG. IB illustrates another example blood glucose control system that provides blood glucose control via an ambulatory medicament pump.
  • FIG. 1 C illustrates a further example blood glucose control system that provides blood glucose control via an ambulatory medicament pump.
  • FIG. 2A show's a block diagram of an example blood glucose control system.
  • FIG. 2B shows a block diagram of another example blood glucose control system.
  • FIG. 2C shows a block diagram of another example blood glucose control system.
  • FIG. 2D show's a block diagram of another example blood glucose control system.
  • FIG. 3 is a schematic of an example glucose control system that includes an electronic communications interface.
  • FIG. 4 A shows a block diagram of an example blood glucose control system in online operation mode.
  • FIG. 4B shows a block diagram of an example blood glucose control system in offline operation mode.
  • FIG. 5 A illustrates a perspective view of an example ambulatory medical device.
  • FIG. 5B illustrates a cross sectional view of the ambulatory medical device shown in FIG. 5 A.
  • FIG. 6 illustrates different modules that may be included in an example ambulatory medical device.
  • FIG. 7 illustrates various methods and links that AMD may establish a connection with a host computing system.
  • FIG. 8 is a flow diagram showing an example of a computer-implemented method that may be used by an AMD in order to detect and download an application update.
  • FIG. 9 is a flow diagram showing an example of a computer-implemented method that may be used by an AMD to install a down-loaded application update without interrupting the therapy provided to a subject.
  • FIG. 10 is a flow diagram showing an example of a computer-implemented method that may be used by an .AMD to install a second update downloaded from a host computing system and switch control of the AMD from a first application to the second application without interrupting the therapy provided to a subject.
  • FIG. 11 is a flow diagram showing an example of a computer-implemented method that may be used by an AMD to install a second application downloaded from a host computing system, verify and swatch control of the AMD from a first application to the second application without interrupting the therapy provided to a subject, when the second application satisfies a minimum set of operation conditions.
  • FIG. 12 is a flow diagram showing an example of a computer-implemented method that may be used to respond to detection of an application fault during the execution of a first version of an application and switching control of the AMD to a second version an application installed on the AMD.
  • FIG. 13 is a flow diagram showing an example of a computer-implemented method that may be used to respond to detection of an application fault during the execution of a first version of an application and switching control of the AMD to a second version an application installed on the AMD and/or downloading a third version of the application.
  • FIG. 14. is a block diagram, illustrating an example network configuration wherein the AMD is directly connected to a computing system and the computing system shares the therapy reports with one or more display systems and the AMD.
  • FIG. 15 is a flow' diagram illustrating an example method that may be used by a computing system, to generate and share a therapy report based on encrypted therapy data received from an AMD.
  • FIG. 16. is a block diagram, illustrating an example network and data flow configuration wherein the AMD is directly connected to a computing system and the computing system generates and sends alerts to one or more display systems and the AMD.
  • FIG. 17 is a flow diagram illustrating an example method that may be used by a computing system, to generate and send an alert to one or more authorized devices.
  • FIG. 18 illustrates the interconnection among modules and procedures in AMD involved in receiving, accepting and/or canceling therapy change request.
  • FIG. 19 is a flow diagram illustrating an example method that may be used by an AMD to allow' a user to change the configuration of the ambulatory medicament device using a touch screen user interface.
  • FIG. 20A is an illustration of the touchscreen display of an example AMD after the touch screen is waked/unlocked by a wake action of a user and before the first user gesture is received.
  • FIG. 20B is an illustration of an example touchscreen display that may prompt the user to enter a predetermined series of inputs for the first gesture or second gesture.
  • FIG. 20C is an illustration of an example therapy change user interface.
  • FIG. 20D is an illustration of another therapy change user interface on a touchscreen display.
  • FIG. 21 is a flow diagram illustrating an example method that may be used by an AMD to generate an alarm status indicator.
  • FIG. 22 is a flow diagram illustrating an example method that may be used to cancel a therapy change using a touchscreen interface.
  • FIG. 23 A is an illustration of a touchscreen display alerting the user that the delivery of one or more medicaments will occur.
  • FIG. 23B is an illustration of a touchscreen display showing that a medicament is being delivered to the user.
  • FIG. 24 is a block diagram illustrating the interconnection among modules and procedures in AMD involved in receiving, accepting and/or canceling a therapy suspension request.
  • FIG. 25 is a flow diagram illustrating an example method for receiving and implementing a suspension request, which may be implemented by an AMD
  • FIG. 26 illustrates a plurality of screens that the ambulatory medical device may display when a user pauses therapy.
  • FIG. 27 is a flow diagram illustrating an example method of resuming a suspended therapy that may be implemented by an AMD.
  • FIG. 28 illustrates a plurality of screens that the ambulatory medical device may display when a user resumes therapy.
  • FIG. 29 is a block diagram illustrating the interconnection among modules and procedures in AMD involved in changing the settings of the .AMD,
  • FIG. 30 is a flow diagram illustrating an example method that may be used by an AMD to allow a user to change a setting of the AMD using a user generated passcode or an override passcode.
  • FIG. 31 is a flow diagram illustrating an example method that may be used by an AMD to allow a user to change a setting of the AMD using a user generated passcode or an override passcode.
  • FIG. 32 is a schematic diagram illustrating the interconnection among modules and procedures in an AMD involved in monitoring the status of the AMD and/or the subject and generating alarms when an alarm condition is met.
  • FIG. 33 is a flow diagram illustrating an example procedure that may be used by the alarm system of an AMD to annunciate an alarm condition upon receiving a status information that satisfies an alarm condition.
  • FIG. 34 is a block diagram illustrating the interconnection among modules and procedures m AMD involved in monitoring the condition of the AMD and generating alerts when a device malfunction is detected.
  • FIG. 35 is a flow diagram illustrating an example procedure that may be used by the alert system of an AMD to monitor the operation of an AMD and generate alerts when a device malfunction is detected.
  • FIG. 36 is a schematic diagram illustrating an ambulatory medical device that provides the user with various options for providing medicament.
  • FIG. 37 is a flow diagram of a process for providing options for meal dosage selection on an ambulatory device.
  • FIG. 38 is another flow diagram of a process for providing options for meal dosage selection on an ambulatory device.
  • FIG. 39 is a series of screen displays showing a user initiating the activation of meal dosage on an ambulatory device.
  • FIG. 40 is a series of screen displays showing a user activating meal dosage on an ambulatory device.
  • FIG. 41 is a series of screen displays showing a user activating meal announcement on an ambulatory device.
  • FIG. 42 is a series of screen displays showing a user inputting the total number of units on an ambulatory device.
  • FIG. 43 is a senes of screen displays showing an ambulatory medical device delivering the units and cancelling the delivery of the units.
  • FIG. 44 is a schematic illustrating a computer system that can be implemented in various embodiments of the described subject matter.
  • FIG. 45A is a schematic illustrating an example ambulatory medicament pump that is configured to maintain delivery of therapy to a subject after determining that a possible occlusion exists in a medicament delivery system.
  • FIG. 45B is a schematic illustrating an example occlusion detection system.
  • FIG. 46A is a flow 7 chart flow diagram illustrating an example method that may be used by an AMD to maintain delivery of therapy to a subject after determining that a possible occlusion exists in a medicament delivery system.
  • FIG. 46B is a flow chart flow diagram illustrating an example method that that may be used by an occlusion detection system to maintain delivery of therapy to a subject after determining that a possible occlusion exists in a medicament delivery system.
  • FIG. 47 is a flow diagram illustrating an example procedure to activate a Do Not Disturb mode in an AMD.
  • FIG. 48 is a flow diagram illustrating another example procedure to activate a Do Not Disturb mode in an AMD.
  • FIG. 49 is a flow diagram illustrating an example procedure that may be used by the alarm system of an AMD to escalate non-urgent alarms.
  • FIG. 50 illustrates a plurality of screens that may be displayed on a touch screen display of an AMD for activating Do Not Disturb mode on the AMD.
  • FIG. 51 illustrates a plurality of screens that may be displayed on a touch screen display of an AMD for deactivating Do Not Disturb mode on the AMD.
  • FIG. 52 is an illustration of a user interface provided on a touch screen display for viewing alarm notification details.
  • FIG. 53A and FIG. 53B are illustrations of a user interface provided on a touch screen display for accessing an alarm notifications screen when Do Not Disturb mode is activated and when the touch screen display is locked.
  • FIG. 54A and FIG. 54B illustrations of a user interface provided on a touch screen display for accessing an alarm notifications screen when Do Not Disturb mode is activated and when the touch screen display is unlocked.
  • FIG. 55 illustrates a user interface that may be displayed by an ambulatory medical device in a power saving mode.
  • FIG. 56 is a flow diagram illustrating an example procedure to activate a power saving mode of an ambulatory medical device.
  • FIG. 57 is a flow diagram illustrating an example procedure for tap interaction in a power saving mode of an ambulatory medical device.
  • FIG. 58 is a flow diagram illustrating another example procedure for tap interaction in a power saving mode of an ambulatory medical device.
  • FIG. 59 is a flow' diagram illustrating another example procedure for tap interaction in a power saving mode of an ambulatory medical device.
  • FIG. 60 is a flow diagram illustrating another example procedure for tap interaction in a power saving mode of an ambulatory medical device.
  • FIG. 61 is a flow diagram illustrating another example procedure for tap interaction with an ambulatory medical device.
  • FIG. 62 is a flow diagram illustrating an example procedure to control an operation of an ambulatory medical device pump based on motion detection.
  • FIG. 63 is a flow diagram illustrating an example procedure to control an operation of an ambulatory medical device pump after freefall motion has ended.
  • FIG. 64 is a flow diagram illustrating an example procedure to receive an alarm acknowledgement from a user.
  • FIG. 65 is a flow diagram illustrating an example procedure to unlock a touchscreen of an ambulatory medical device by motion.
  • FIG. 66 is a flow diagram illustrating an example procedure to enter a gesture password to unlock a touchscreen of an ambulatory medical device by motion.
  • FIG. 67 is a flow diagram illustrating an example procedure to deliver medicament to a subject by motion control.
  • Some embodiments described herein pertain to medicament infusion systems for one or more medicaments and the components of such systems (e.g., infusion pumps, medicament cartridges, cartridge connectors, lumen assemblies, infusion connectors, infusion sets, etc.). Some embodiments pertain to methods of manufacturing infusion systems and components thereof. Some embodiments pertain to methods of using any of the foregoing systems or components for infusing one or more medicaments (e.g., pharmaceutical, hormone, etc.) to a subject.
  • an infusion system may include an infusion pump, which can include one or more medicament cartridges or can have an integrated reservoir of medicament.
  • An infusion system may include medicament cartridges and cartridge connectors, but not a pump.
  • An infusion system may include cartridge connectors and an infusion pump, but not medicament cartridges.
  • An infusion system may include infusion connectors, a lumen assembly, cartridge connectors, an infusion pump, but not medicament cartridges or an infusion set.
  • a blood glucose control system can operate in conjunction with an infusion system to infuse one or more medicaments, including at least one blood glucose control agent, into a subject.
  • Any feature, structure, component, material, step, or method that is described and/or illustrated in any embodiment in this specification can be used with or instead of any feature, structure, component, material, step, or method that is described and/or illustrated in any other embodiment in this specification. Additionally, any feature, structure, component, material, step, or method that is described and/or illustrated in one embodiment may be absent from another embodiment.
  • Some embodiments described herein pertain to medicament infusion systems for one or more medicaments and the components of such systems (e.g., infusion pumps, medicament cartridges, cartridge connectors, lumen assemblies, infusion connectors, infusion sets, etc.). Some embodiments pertain to methods of manufacturing infusion systems and components thereof Some embodiments pertain to methods of using any of the foregoing systems or components for infusing one or more medicaments (e.g., pharmaceutical, hormone, etc.) to a subject.
  • an infusion system may include an infusion pump, which can include one or more medicament cartridges or can have an integrated reservoir of medicament.
  • An infusion system may include medicament cartridges and cartridge connectors, but not a pump.
  • An infusion system may include cartridge connectors and an infusion pump, but not medicament cartridges.
  • An infusion system may include infusion connectors, a lumen assembly, cartridge connectors, an infusion pump, but not medicament cartridges or an infusion set.
  • a blood glucose control system can operate in conjunction with an infusion system to infuse one or more medicaments, including at least one blood glucose control agent, into a subject.
  • Any feature, structure, component, material, step, or method that is described and/or illustrated in any embodiment in this specification can be used with or instead of any feature, structure, component, material, step, or method that is described and/or illustrated in any other embodiment in this specification. Additionally, any feature, structure, component, material, step, or method that is described and/or illustrated in one embodiment may be absent from another embodiment.
  • Some embodiments described herein pertain to medicament infusion systems for one or more medicaments and the components of such systems (e.g., infusion pumps, medicament cartridges, cartridge connectors, lumen assemblies, infusion connectors, infusion sets, etc.). Some embodiments pertain to methods of manufacturing infusion systems and components thereof. Some embodiments pertain to methods of using any of the foregoing systems or components for infusing one or more medicaments (e.g., pharmaceutical, hormone, etc.) to a patient.
  • an infusion system may include an infusion pump, which can include one or more medicament cartridges or can have an integrated reservoir of medicament.
  • An infusion system may include medicament cartridges and cartridge connectors, but not a pump.
  • An infusion system may include cartridge connectors and an infusion pump, but not medicament cartridges.
  • An infusion system may include infusion connectors, a lumen assembly, cartridge connectors, an infusion pump, but not medicament cartridges or an infusion set.
  • a glucose level control system can operate in conjunction with an infusion system to infuse one or more medicaments, including at least one glucose control agent, into a subject.
  • Any feature, structure, component, material, step, or method that is described and/or illustrated in any embodiment in this specification can be used with or instead of any feature, structure, component, material, step, or method that is described and/or illustrated in any other embodiment in this specification. Additionally, any feature, structure, component, material, step, or method that is described and/or illustrated in one embodiment may be absent from another embodiment.
  • certain embodiments disclosed herein relate to a glucose level control system that is capable of supporting different operating modes associated with different adaptation ranges used to generate dose control signals for delivering medicament to a subject.
  • the different adaptation ranges may be associated with a value or a change in value of one or more control parameters used by a control algorithm that controls the administering of medicament to a subject.
  • control parameter may be associated with the quantity of medicament, a delivery rate of medicament, a step-size or graduation used to modify the quantity of medicament between administrations of the medicament, a timing of supplying medicament to the subject, a glucose absorption rate, a time until the concentration of insulin in blood plasma for a subject reaches half of the maximum concentration, a time until the concentration of insulin in blood plasma for a subject reaches a maximum concentration, or any other control parameter that can impact a timing or quantity of medicament (e.g., insulin or counter-regulatory agent) supplied or administered to a subject.
  • a timing or quantity of medicament e.g., insulin or counter-regulatory agent
  • supporting different operating modes enables a user (e.g., a healthcare provider, parent, guardian, the subject receiving treatment, etc.) to modify the operating mode of an ambulatory medicament device.
  • the operating mode may be modified automatically.
  • modifying the operating mode enables different dosing modes to be supported.
  • supporting different dosing modes enables an ambulatory medicament device to be used by different types of subjects, and/or a subject under different conditions (e.g., when exercising, before, during, or after puberty, under different health conditions, etc.).
  • Some embodiments described herein pertain to medicament infusion systems for one or more medicaments and the components of such systems (e.g., infusion pumps, medicament cartridges, cartridge connectors, lumen assemblies, infusion connectors, infusion sets, etc.). Some embodiments pertain to methods of manufacturing infusion systems and components thereof. Some embodiments pertain to methods of using any of the foregoing systems or components for infusing one or more medicaments (e.g., pharmaceutical, hormone, etc.) to a subject.
  • an infusion system may include an infusion pump, which can include one or more medicament cartridges or can have an integrated reservoir of medicament.
  • An infusion system may include medicament cartridges and cartridge connectors, but not a pump.
  • An infusion system may include cartridge connectors and an infusion pump, but not medicament cartridges.
  • An infusion system may include infusion connectors, a lumen assembly, cartridge connectors, an infusion pump, but not medicament, cartridges or an infusion set.
  • a blood glucose control system can operate in conjunction with an infusion system to infuse one or more medicaments, including at least one blood glucose control agent, into a subject.
  • Any feature, structure, component, material, step, or method that is described and/or illustrated in any embodiment in this specification can be used with or instead of any feature, structure, component, material, step, or method that is described and/or illustrated in any other embodiment in this specification. Additionally, any feature, structure, component, material, step, or method that is described and/or illustrated in one embodiment may be absent from another embodiment.
  • an infusion system may include an infusion pump, which can include one or more medicament cartridges or can have an integrated reservoir of medicament.
  • An infusion system may include medicament cartridges and cartridge connectors, but not a pump.
  • An infusion system may include cartridge connectors and an infusion pump, but not medicament cartridges.
  • An infusion system may include infusion connectors, a lumen assembly, cartridge connectors, an infusion pump, but not medicament cartridges or an infusion set.
  • a blood glucose control system can operate in conjunction with an infusion system to infuse one or more medicaments, including at least one blood glucose control agent, into a subject.
  • An infusion system may include a user interface that allow modifying one or more control parameters that control medicament delivery to a subject.
  • An infusion system may include a wireless transceiver that allows data communication between the infusion system and one or more electronic devices.
  • any feature, structure, component, material, step, or method that is described and/or illustrated in any embodiment in this specification can be used with or instead of any feature, structure, component, material, step, or method that is described and/or illustrated in any other embodiment in this specification. Additionally, any feature, structure, component, material, step, or method that is described and/or illustrated in one embodiment may be absent from another embodiment.
  • a blood glucose control system is used to control blood glucose level in a subject.
  • Blood glucose control systems can include a controller configured to generate dose control signals for one or more glucose control agents that can be infused into the subject.
  • Glucose control agents include regulatory agents that tend to decrease blood glucose level, such as insulin and insulin analogs, and counter-regulatory agents that tend to increase blood glucose level, such as glucagon or dextrose.
  • a blood glucose control system configured to be used with two or more glucose control agents can generate a dose control signal for each of the agents.
  • a blood glucose control system can generate a dose control signal for an agent even though the agent may not be available for dosing via a medicament pump connected to the subject.
  • Glucose control agents can be delivered to a subject via subcutaneous injection, via intravenous injection, or via another suitable delivery method.
  • subcutaneous injection is most common.
  • An ambulatory medicament pump 100 is a type of ambulatory medical device, which is sometimes referred to herein as an ambulatory device, an ambulatory medicament device, ambulatory medical device, a mobile ambulatory device, or an AMD.
  • Ambulatory medical devices include ambulatory medicament pumps and other devices configured to be carried by a subject and to deliver therapy to the subject. It should be understood that one or more of the embodiments described herein with respect to one AMD may be applicable to one or more of the other AMDs described herein.
  • the AMD can be a portable or wearable device (e.g., an insulin or bi-hormonal medicament pump) that provides life-saving treatment to a subject by delivering one or more medicaments (e.g., insulin and/or glucagon) to a subject.
  • Some AMDs may continuously monitor the health condition of a subject (e.g., blood glucose level) using a sensor (e.g., a blood glucose level sensor that can measure values corresponding to the blood glucose level) and deliver therapy (e.g., one or more medicaments) to the subject based on the condition of the subject.
  • a sensor e.g., a blood glucose level sensor that can measure values corresponding to the blood glucose level
  • therapy e.g., one or more medicaments
  • Certain ambulatory medicament devices may be worn by subjects constantly (e.g., all day), or for a large portion of the day (e.g., during waking hours, during sleep hours, when not swimming, etc.) to enable continuous monitoring of the health condition of the subject and to deliver medicament as.
  • an AMD may be an ambulatory medicament device such as a medicament delivery pump.
  • an AMD may be a device that provides therapy in the form of electrical stimulation based on a health condition of a subject (e.g., heart rhythm or brain activity) determined using signals received from one or more sensors (e.g., heartbeat monitor or electrodes monitoring activity of the brain).
  • An example of an electrical stimulation device is a cardiac pacemaker.
  • a cardiac pacemaker generates electrical stimulation of the cardiac muscle to control heart rhythms.
  • Another example of an electrical stimulation device is a deep brain stimulator to treat Parkinson’s disease or movement disorders.
  • FIG. lA-FIG. 1C show' examples of blood glucose control systems that provide blood glucose control via an ambulatory medical device or AMD, such as a medicament pump connected to a subject.
  • the AMD 100 (medicament pump) is connected to an infusion site 102. using an infusion set 104.
  • the AMD 100 (medicament pump) has integrated pump controls 106a that permit a user to view' pump data and change therapy settings via user interaction with the pump controls 106a.
  • a glucose level sensor 110 generates a glucose level signal that is received by the blood glucose control system.
  • the medicament pump 100 communicates with an external electronic device 108 (such as, for example, a smartphone or another remote device) via a wireless data connection. At least some of the pump controls 106a and 106b can be manipulated via user interaction with user interface elements of the external electronic device 108.
  • the glucose level sensor 110 can also communicate with the AMD 100 (medicament pump) via a wireless data connection ,
  • the AMD 100 (medicament pump) includes an integrated cannula that inserts into the infusion site 102 without a separate infusion set.
  • At least some of the pump controls 106b can be manipulated via user interaction with user interface elements of an external electronic device 108, In some instances, pump controls can be manipulated via user interaction with user interface elements generated by a remote computing environment (not shown), such as, for example, a cloud computing service, that connects to the AMD 100 (medicament pump) via a direct or indirect electronic data connection.
  • a remote computing environment not shown
  • a cloud computing service that connects to the AMD 100 (medicament pump) via a direct or indirect electronic data connection.
  • Glucose control systems typically include a user interface configured to provide one or more of therapy information, glucose level information, and/or therapy control elements capable of changing therapy settings via user interaction with interface controls.
  • the user can provide an indication of the amount of the manual bolus of medicament from an electronic device remote from the medicament pump.
  • the user interface can be implemented via an electronic device that includes a display and one or more buttons, switches, dials, capacitive touch interfaces, or touchscreen interfaces.
  • at least a portion of the user interface is integrated with an ambulatory medicament pump that can be tethered to a body of a subject via an infusion set configured to facilitate subcutaneous injection of one or more glucose control agents.
  • the user interface is implemented via an electronic device separate from the ambulatory medicament pump, such as a smartphone.
  • the device screen may include a filter configured to have a predetermined viewing angle range such that information cannot be seen on the touchscreen when viewed from an angle outside of the predetermined viewing angle range.
  • FIG. 2A-FIG. 2D illustrate block diagrams showing example configurations of a glucose control system 200a/200b/200c/200d.
  • a glucose control system 200a can include a controller 202a having an electronic processor 204a and a memory 210a that stores instructions 208a executable by the electronic or hardware processor 204a.
  • the controller 202a can include a touchscreen controller.
  • the controller 202a and a pump 212 can be integrated into an ambulatory medical device (AMD) 100.
  • the AMD 100 can have one or more pumps 212.
  • the pump 212 can be a regulatory agent pump and/or counter-regulatory agent pump.
  • the AMD 100 can have one or more pumps 212.
  • the AMD 100 can include a transceiver or wireless electronic communications interface 214a for wireless digital data communications with external electronic devices.
  • the controller 202a can implement at least a portion of a control algorithm that generates dose control signals for one or more glucose control agents based on time-varying glucose levels of the subject (e.g., received from a glucose level sensor 110 that is in communication with the AMD 100, e.g., a medicament pump) and one or more control parameters.
  • the dose control signals when delivered to the pump 212, result in dosing operations that control the blood glucose of a subject.
  • the pump 212 may be controlled by a pump controller.
  • the pump controller receives the dose control signals and controls the operation of the pump 212 based on the received dose control signals. In some embodiments the pump controller may be integrated with the pump.
  • a glucose control system 200b can operate at least partially via execution of instructions 208b by an electronic or hardware processor 204b of an external electronic device 108 separate from the AMD 100.
  • the external electronic device 108 can include a transceiver 214b capable of establishing a wireless digital data connection to the AMD 100, and a controller 202b can implement at least a portion of a control algorithm via execution of instructions 208b stored in memory 210b.
  • the controller 202b can implement at least a portion of a control algorithm that generates dose control signals for one or more glucose control agents based on time- varying glucose levels of the subject and one or more control parameters.
  • the dose control signals when delivered to the pump 2.12 (e.g., pump controller of the pump 212), may result in dosing operations that control the blood glucose of a subject.
  • the dose control signals are transmitted from the device transceiver 214b to the AMD transceiver 214a over a short-range wireless data connection 216.
  • the AMD 100 may receive the dose control signals and pass them to the pump 212 (e.g., pump controller of the pump 212) for dosing operations.
  • a glucose control system 200c can operate at least partially via execution of instructions 208c on an electronic processor or hardware 204c integrated with a remote computer or device 206, such as, for example, a cloud service.
  • the controller 202c can implement at least a portion of a control algorithm that generates dose control signals for one or more glucose control agents based on time-varying glucose levels of the subject and one or more control parameters.
  • the dose control signals when delivered to the pump 212, result in dosing operations that control the blood glucose of a subject.
  • the dose control signals are transmitted from the remote computer WAN connection interface 220c to the AMD WAN connection interface 220a over an end-to-end wireless data connection 218.
  • the AMD 100 receives the dose control signals and passes them to the pump 212 for dosing operations.
  • a glucose control system 200d can have two or more controllers 202a, 202b, 202c that cooperate to generate a dose control signal for dosing operations by the pump 212.
  • controllers 202a, 202b, 202c can include the touchscreen controller.
  • a remote computer 206 can transmit or receive data or instructions passed through a WAN connection interface 220c via an end-to-end wireless data connection 218 to a WAN connection interface 220b of an external electronic device 108.
  • the external electronic device 108 can transmit or receive data or instructions passed through a transceiver 214b via a short-range wireless data connection 216 to a transceiver 214a of an AMD 100.
  • the electronic device can be omitted, and the controllers 202a, 202c of the AMD 100 and the remote computer 206 cooperate to generate dose control signals that are passed to the pump 212.
  • the AMD 100 may have its own WAN connection interface 220a to support a direct end-to-end wireless data connection to the remote computer 206.
  • the glucose control system 200a includes circuitry that implements an electronic communications interface (ECI) 302 configured to send and receive electronic data from one or more electronic devices.
  • ECI includes a sensor interface or glucose sensor interface 304 configured to receive a glucose level signal from a glucose level sensor 110 such as a continuous glucose monitor (CGM). Some CGMs generate the glucose level signal at fixed or periodic measurement intervals, such as five-minute intervals.
  • the glucose level sensor 110 can be operatively connected to a subject in order to generate a glucose level signal that corresponds to a blood glucose estimate or measurement of the subject.
  • the glucose level signal can be used by the controller 2.02a to generate a dose control signal.
  • the dose control signal can be provided to a pump 212 via a delivery device interface or pump interface 306.
  • the sensor interface 304 connects to the glucose level sensor 110 via a short-range wireless connection 308.
  • the pump interface 306 connects to the pump 212 via a short-range wireless connection 310.
  • the pump interface 306 connects to the pump 212 via a local data bus, such as when the controller 202a, the ECI 302, and the pump 212 are integrated into an AMD 100.
  • the pump 212 may be connected to a pump motor 312.
  • the controller can be configured to generate the dose control signal using a control algorithm that generates at least one of a basal dose, a correction dose, and/or a meal dose.
  • control algorithms that can be used to generate these doses are disclosed in U.S. Patent Application Publication Nos, 2008/0208113, 2013/0245547, 2016/0331898, and 2018/0220942 (referenced herein as the “Controller Disclosures”), the entire contents of which are incorporated by reference herein and made a part of this specification.
  • the correction dose can include regulatory or counter-regulatory agent and can be generated using a model- predictive control (MPC) algorithm such as the one disclosed in the Controller Disclosures.
  • MPC model- predictive control
  • the basal dose can include regulatory agent and can be generated using a basal control algorithm such as disclosed in the Controller Disclosures.
  • the meal dose can include regulatory agent and can be generated using a meal control algorithm such as disclosed in the Controller Disclosures. Additional aspects and improvements for at least some of these controllers are disclosed herein.
  • the dose control signal can be transmitted to a pump interface 306 via the ECI 302 or can be transmitted to the pump interface 306 via an electrical conductor when the controller 202a is integrated in the same housing as the pump interface 306.
  • the ambulatory medicament pump 212 can include one or more medicament cartridges or can have an integrated reservoir 408 of medicament.
  • the reservoir 408 may be integrated with the pump 212.
  • a medicament stored in the reservoir 408 can be delivered to the subject by operation of the pump 212.
  • the operation of the pump 212 can be controlled by a controller 400.
  • the controller 400 can be configured to operate in “online mode” during time periods when the controller receives a glucose level signal 402 from a glucose level sensor 110.
  • the control algorithm In online mode, the control algorithm generates a dose control signal 404 that implements regular correction doses based on values of the glucose level signal 402 and control parameters of the control algorithm.
  • the pump 212 is configured to deliver at least correction doses and basal doses to the subject without substantial user intervention while the controller 400 remains in online mode.
  • the controller 400 can be configured to operate in “offline mode” during time periods when the controller does not receive a glucose level signal 402 from a sensor 110, at least during periods when the glucose level signal 402 is expected but not received.
  • the control algorithm In offline mode, the control algorithm generates a dose control signal 404 that implements correction doses in response to isolated glucose measurements 406 (such as, for example, measurements obtained from the subject using glucose test strips) and based on control parameters of the control algorithm.
  • the pump 212 is configured to deliver basal doses to the subject without substantial user intervention and can deliver correction doses to the subject in response to isolated glucose measurements 406 while the controller 400 remains in offline mode.
  • the ambulatory medicament device can be a portable or wearable device (e.g., an insulin or bi-hormonal medicament pump) such as an ambulatory medicament pump (AMP) that provides life-saving treatment to a subject by delivering one or more medicaments (e.g., insulin and/or glucagon) to a subject.
  • a portable or wearable device e.g., an insulin or bi-hormonal medicament pump
  • AMP ambulatory medicament pump
  • Some AMDs may continuously monitor the health condition of a subject (e.g., blood glucose level) using a sensor (e.g., a blood glucose level sensor that can measure values corresponding to the blood glucose level) and deliver therapy such as one or more medicaments to the subject based on the health condition of the subject.
  • an ambulatory medicament pump may monitor the blood glucose level in a subject using a Continuous Glucose Monitor (CGM) and adjust the dose or frequency of the medicament delivery (e.g., insulin or glucagon) accordingly.
  • CGM Continuous Glucose Monitor
  • Certain ambulatory medicament devices may be worn by subjects constantly (e.g., all day), or for a large portion of the day (e.g., during waking hours, during sleep hours, when not swimming, etc.) to enable continuous monitoring of the health condition of the subject and to deliver medicament as desired.
  • the AMD may be an ambulatory medicament device such as a medicament delivery pump.
  • the AMD may be a device that provides therapy in the form of electrical stimulation based on a health condition of a subject (e.g., heart rhythm or brain activity) determined using signals received from one or more sensors (e.g., heartbeat monitor or electrodes monitoring activity of the brain).
  • a health condition of a subject e.g., heart rhythm or brain activity
  • sensors e.g., heartbeat monitor or electrodes monitoring activity of the brain
  • FIG. 5A illustrates a three-dimensional (3D) view' of an example ambulatory medical device 500 (e.g., an ambulatory medicament delivery pump such as an insulin pump) including a housing 502 with a wake button 506 and a touchscreen display 504.
  • FIG. 5B is an illustration of a cross sectional view' of the ambulatory medical device 500 shown in FIG. 5 A.
  • all the electronic modules 508 are included inside the housing 502, for example, as a single integrated electronic board.
  • the wake button 506 may be any type of button (e.g., capacitive, inductive, resistive, mechanical) that registers an input generated by user interaction with the wake button 506 to generate a wake signal.
  • the wake signal is generated by a sensor (e.g., a biometric sensor such as a fingerprint reader or a retinal scanner, an optical or RF proximity sensor, and the like).
  • the wake signal may be generated by user interaction with the touch screen display 504 or with an alphanumeric pad (not shown).
  • the wake button 506 may be located at one edge of the AMD, more specifically, at a lower surface of the AMD for the user to conveniently interact (e.g., touch or tap) while holding or carrying the AMD. In some embodiments, there may be more than one wake button 506.
  • a user may wake the AMD from a sleep state or unlock the AMD by interacting with the touch screen display 504 having via a wake interface.
  • the touchscreen controller may not receive user interaction or user interaction signals corresponding to user interaction (e.g., via an accelerometer or other motion sensors).
  • motion or motion detection may include all types of user gesture control inputs discussed herein, including tapping the AMD (including on the touchscreen), touching or other gesturing on the touchscreen of the AMD, shaking the AMD, moving of the AMD, or motioning proximate the AMD such as handwaving or other body part moving near, proximate, or in front of a motion sensor (e.g., a camera) of the AMD.
  • a single tap such as on the back of the AMD or anywhere on the AMD can correspond to wake touchscreen and/or snooze alarm control inputs as discussed.
  • Other tapping for user gesture control inputs can include multi-tap such as double or triple tapping anywhere on the AMD, including the back of the AMD can correspond to wake AMD, unlock AMD, quick meal announcement (e.g., for bolus administration), confirmation of control inputs (such as when AMD is unlocked), and/or alarm acknowledgement control inputs as discussed herein.
  • multi-location-tap for gesture control inputs can be utilized for additional user gesture control inputs.
  • the AMD can generate a user interface with two dots on touchscreen; the two dots can be tapped or touched simultaneously, sequentially, or multi-tap to provide control inputs for various actions and functions as discussed herein.
  • the AMD can implement specific timing between taps or touches or other gesture controls to register the control inputs as valid. For example, there can be 100 to 600 milliseconds timing between taps. The timing between taps can be adjusted by the user.
  • the user may wake the AMD by touching the wake button 506 as the wake interface.
  • the wake button 506 may be incorporated into the alphanumeric pad.
  • the wake interface 3220 may be any one or more keys of the alphanumeric pad.
  • the wake interface may be a capacitive button that detects a change in capacitance.
  • a wake interface may have a computing component for interpreting and executing instructions from the signal processing component. Thus, the wake interface can follow a program that is dictated by the signal processing component.
  • a wake interface can include one or more additional user interfaces mentioned above that are configured to generate and provide a wake input (or wake signal) to the CCM when detecting a pre-set user interaction.
  • the wake interface can be any type of wake interface element of the AMD that a user can interact with to wake at least a feature (e.g., a touchscreen interface) of the AMD.
  • the wake interface element can be a physical button (e.g., a push button, a slide button, etc.), a capacitive element, a resistive element, or an inductive element.
  • the wake interface element can be or can include a biometric element, such as a fingerprint reader, an iris scanner, a face detection scanner, etc.
  • the AMD may wake in response to detection of a particular movement or motion. In some cases, the AMD may wake in response to detection of a particular movement or motion. For example, a determination that the ambulatory medicament device is being moved with a particular motion or within a line of sight or a visual range of a user may cause the AMD to awaken or cause the AMD to awake the touchscreen interface of the AMD. The AMD may determine that the AMD is being moved within a line of sight of the user based on the type of motion and/or the detection of a user’s eyes via, for example, an iris scanner or a camera.
  • a 'wake signal may be generated based on facial recognition or other biometric indicia.
  • the 'wake signal may be generated by a wireless signal such as a signal generated by an RFID system or Bluetooth signals received from an electronic device or by detection of movement using one or more motion sensors such as an accelerometer.
  • the wake button 506, if touched, pressed, or held for a certain period of time, may generate a wake signal that activates the touchscreen display 504. In some examples, touches on the touchscreen display 504 are not registered until the wake button activates the touchscreen display.
  • the AMD remains locked from accepting at least certain types of user interaction or settings modification until a gesture (such as, for example, any of the gesture interactions described with reference to any of the embodiments disclosed herein) is received after the touchscreen display 504 is activated by the wake button 506,
  • a passcode may be required to unlock the touchscreen display.
  • FIG. 6 illustrates different modules that may be included in an example ambulatory medical device 600.
  • all these modules may be integrated together inside a single housing (as shown in FIG. 5B).
  • one or more modules may be individual modules contained in separate housings that communicate with the mam unit via a wired or wireless communication links (e.g., Bluetooth).
  • the modules included in the AMD may include a communication module 602, signal processing module 604, a therapy delivery module 606, a user interface module 608, and a control and computing module 610.
  • the control and computing module 610 may include one or more processors 614, a main memory 616, a storage 618 that may include one or more non-transitory memories and an interface 612 that enables data and signal communication among the components within the control and computing module 610 as well as communication between the control and computing module and ail other modules of the AMD.
  • the mam memory and the storage each may be divided into two or more memory locations or segments.
  • the mam memory 616 may communicate with the other components of the control and computing module 610 as well as other modules through the interface 612. Instructions may be transmitted to the main memory (e.g., from the storage) and the processor 614 executes instructions that are communicated to the processor through the main memory 616.
  • the storage 618 may store data while the control and computing module 610 is powered or unpo'wered.
  • the storage 618 may exchange data with the main memory directly or through the interface 612.
  • the main memory 616 can be any type of memory that can store instructions and communicate them to the processor 614 and receive executed instructions from the processor 614. Types of mam memory include but are not limited to random access memory (“RAM”) and read-only memory (“ROM”),
  • the processor 614 may be any type of general-purpose central processing unit (“CPU”).
  • the control and computing module may include more than one processor of any type including, but not limited to complex programmable logic devices (“CPLDs”), field programmable gate arrays (“FPGAs”), application-specific integrated circuits (“ASICs”) or the like.
  • CPLDs complex programmable logic devices
  • FPGAs field programmable gate arrays
  • ASICs application-specific integrated circuits
  • the storage 618 can be any type of computer storage that can receive data, store data, and transmit data to the main memory 616 and possibly other modules of AMD.
  • Types of storage 618 that can be used in the control and computing module 610 include, but are not limited to, magnetic disk memory, optical disk memory, flash memory and the like.
  • the interface 612 may include data transfer buses and electronic circuits configured to support data exchange among different components within the control and computing module 610. In some examples, the interface 612 may also support data and signal exchange among other modules as well as data exchange between any of the modules and the control and computing module 610.
  • the signal processing module 604 may include a plurality of interconnected electronic modules for signal conditioning and signal conversion (e.g., A-to-D and D-to-A conversion) configured to support communication and data exchange between different modules.
  • the signal processing module 604 may convert an analog signal received from the communication module 602 and convert it to a digital signal that can be transmitted to the control and computing module 610 (e.g., via the interface 612).
  • the signal processing module may receive a digital control signal from the control and computing module 610 and convert it to an analog signal that can be transmitted to the therapy delivery module 606, for example, to control one or more pumps.
  • the therapy delivery module 606 may include one or more infusion pumps configured to deliver one or more medicaments to a subject.
  • the medicaments may be stored in one or more medicament cartridges housed in the therapy delivery module 606.
  • the therapy delivery module may include electronic and mechanical components configured to control the infusion pumps based on the signals received from control and computing module 610 (e.g., via the signal processing module 604).
  • the user interface module 608 may include a display to show various information about the AMD, medicament type and delivery schedule, software status, and the like. Graphic images and text may be shown by any display technology including, but not limited to OLED, LCD, or e-ink.
  • the AMD may include a user interface (e.g., an alphanumeric pad) that lets a user enter information or interact with the AMD to modify the settings of the AMD, respond to request for certain actions (i.e., installing a software) and the like.
  • the alphanumeric pad may include a multitude of keys with numerical, alphabetical, and symbol characters. Keys of the alphanumeric pad may be capacitive or mechanical.
  • the user may be a subject receiving medicament or therapy, or may be another user, such as a clinician or healthcare provider, or a parent or guardian of the subject.
  • the AMD may include a touchscreen display that produces output and also accepts input enabling a two-way interaction between the user and the AMD.
  • the touchscreen display may be any input surface that shows graphic images and text and also registers the position of touches on the input surface.
  • the touchscreen display may accept input via capacitive touch, resistive touch, or other touch technology.
  • the input surface of the touchscreen display can register the position of touches on the surface.
  • the touchscreen display can register multiple touches at once.
  • the alphanumeric pad is displayed on the touchscreen display.
  • the touchscreen may present one or more user-interface screens to a user enabling the user to modify one or more therapy settings of the ambulatory medicament device.
  • the communication module 602 may include one or more wireless transceivers, one or more antennas and plurality of electronic modules. Each transceiver may be configured to receive or transmit different types of signals based on different wireless standards via the antenna (e.g., an antenna chip).
  • the transceiver may support communication using a low' power wide area network (LPWAN) communication standard.
  • LPWAN low' power wide area network
  • the transceiver may support communication with wide area networks such as a cellular network transceiver that enables 3G, 4G, 4G-LTE, or 5G.
  • the transceiver may support communication via a Narrowband Long-Term Evolution (NB-LTE), a Narrowband Internet-of-Thmgs (NB-IoT), or a Long-Term Evolution Machine Type Communication (LTE-MTC) communication connection with the wireless wide area network.
  • NB-LTE Narrowband Long-Term Evolution
  • NB-IoT Narrowband Internet-of-Thmgs
  • LTE-MTC Long-Term Evolution Machine Type Communication
  • the transceiver may support Wi-Fi® communication.
  • the transceiver may be capable of down- converting and up- converting a baseband or data signal from and to a carrier signal.
  • the communication module may wirelessly exchange data between other components of the ambulatory medical system (e.g., a sensor), a mobile device (e.g., smart phone), a Wi-Fi network, WLAN, a wireless router, a cellular tower, a Bluetooth device, and the like.
  • the antenna chip may be capable of sending and receiving various types of wireless signals including, but not limited to, Bluetooth, LTE, or 3G.
  • the communication module may support direct communication between the AMD and a server or a cloud network.
  • the AMD may communicate with an intermediary device (e.g., a smart phone).
  • the AMD may include an eSIM card that stores all of the information necessary to identify and authenticate a mobile subscriber.
  • the eSIM card may allow the ambulatory device to transmit data on a very inexpensive IOT device basis.
  • the ambulatory medical device may be configured to transmit data in a narrowband communication protocol such as 2G or EDGE.
  • the ambulatory medical device may be paired with the mobile device at inception and permit realtime data access to the ambulatory medical device by a healthcare provider.
  • the ambulatory medical device may include a geolocation receiver or transceiver, such as a global positioning system (GPS) receiver.
  • GPS global positioning system
  • the AMD may continuously, periodically, or intermittently receive information about one or more parameters that are correlated with a health condition of a subject (e.g., glucose level, glucose trend, heart rate, body movement indicia, etc.).
  • a health condition of a subject e.g., glucose level, glucose trend, heart rate, body movement indicia, etc.
  • This information may be encoded to a signal provided to AMD by a subject sensor 620 (e.g., a wearable sensor that measured an analyte in the interstitial fluid) that is connected to the ambulatory medical device 600 main unit via a wired or wireless link (e.g., Bluetooth).
  • a subject sensor 620 e.g., a wearable sensor that measured an analyte in the interstitial fluid
  • a wired or wireless link e.g., Bluetooth
  • the subject sensor 620 can be any sensor that generates a signal or status value associated with one or more physiological indicators (or parameters) of a subject (e.g., heart rate, blood pressure, body temperature, level of blood sugar, serum levels of various hormones or other analytes).
  • the subject sensor can be a continuous glucose monitoring sensor (CGS).
  • CGS continuous glucose monitoring sensor
  • the signal sent by the sensor may be received by the communication module 602 and transmitted to a signal processing module 604 that converts the signal to a machine-readable signal (e.g., a digital signal).
  • the signal processed by the signal processing module 604 may be transmitted to the control and computing module 610 where it is analyzed to determine whether medicament should be delivered to the subject.
  • control and computing module the volume of the medicament may calculate required dosage based on the information received from the subject sensor 620 and send a signal to the therapy module (e.g., via the signal processing module) to initiate the medicament delivery process to the subject.
  • All the procedures within the control and computing module 610 are executed by the processor 614 (or a plurality of processors) based on instructions provided by one or more software applications installed in one of the memories (e.g., the main memory) of control and computing module 610, These procedures include, but are not limited to, determining the need for delivering medicament, determining the type of medicament and the required dose, determining the rate of delivery during a therapy session, providing information (e.g., device status, next delivery time, level of certain analytes in the subject’s blood and the like) via the user interface module 608, processing the information received from a subject sensor 620 via the user interface module 608, and the like.
  • information e.g., device status, next delivery time, level of certain analytes in the subject’s blood and the like
  • a first software application may control the AMD and may be installed on the mam memory 616 while a second software application (e.g., different version) may be stored in the storage 618.
  • the first and second software applications may be both installed in the mam memory 616 but in different locations or segments. In these examples, if needed, the control of the device can be switched from the first software application to the second software application.
  • the ambulatory medical device 600 may deliver multiple types of therapies that are selectable by a user or the control and computing module 610.
  • the ambulatory medical device 600 may deliver the therapy of infusing insulin into a user and may also deliver the therapy of infusing glucagon into a user.
  • the user interface may include an option for the user to select an infusion of insulin, glucagon, or both insulin and glucagon.
  • other hormones, liquids, or therapies may be delivered.
  • the software application executed by the control and computing module 610 may determine the type of hormone that needs to be delivered, at least partly- based on the information received from the subject sensor 620.
  • FIG. 7 illustrates various methods and links that an ambulatory medical device (e.g., the AMD 702) may use to establish a connection with a host computing system 704 in order to obtain an application update.
  • the host computing system 704 may be a server 706 or a computing system within a cloud-based computing system 708 or other networked computing environment.
  • the host computing system 704 may be part of a data center (e.g., the data center of a health care provider).
  • the AN® 702 may establish a connection (e.g., using its communication module) with the host computing system through an intermediary device 710, such as a desktop computer, a mobile device (e.g., a smart phone, a laptop, and the like).
  • the intermediary device 710 can be an electronic device of a user or the subject (e.g., a computer in a clinic, a subject’s home computer, a smartphone, etc.) that has obtained a copy of the application update from the host computing system directly or via internet 714.
  • the AMD 702 may communicate with the host computing system 704 through a local area network 712 through a Wi-Fi connection.
  • the AMD 702 may establish a connection to the host computing system 704 via a wide area network 716.
  • the communication connection established between the AMD 702 and the cloud computing service may be encrypted,
  • the AMD 702 may establish a direct end-to-end connection over a wide area network 716 (e.g., a cellular network) with the host computing system 704.
  • the method may include receiving a public key from the AMD 702.
  • the public key and a private key stored in the host computing system 704 can be used to permit the host computing system 704 to decrypt data communications transmitted by the AMD 702.
  • establishing the direct end-to-end data connection includes receiving a device identifier associated with the AMD 702,
  • the device identifier may be a unique identifier specific to the AMD 702,
  • establishing the direct end-to-end data connection may include determining that the AMD 702 is permitted to communicate with the computing system based at least in part on the device identifier.
  • the device identifier may be initially provided to the networked-computing environment prior to provisioning of the AMD 702 to the subject. For example, the device identifier may be initially provided to the networked-computing environment as part of a manufacturing process for manufacturing the AMD 702.
  • the device identifier may include or may be based on one or more of an Internet Protocol (IP) address, a Media Access Control (MAC) address, a serial number, or a subject identifier of a subject that receives therapy from the AMD 702.
  • IP Internet Protocol
  • MAC Media Access Control
  • the subject or a user establishes or initiates establishing the direct end-to-end data connection with the computing system.
  • the direct end-to-end data connection may be initiated or established without action by the subject or the user.
  • the direct end-to-end data connection may occur automatically at particular times or when the AMD 702. is in particular locations. This automatic connection may occur using information supplied to the AMD 702. at a time of manufacture, shipment, sale, or prescription to the subject.
  • the wide area network may include, or may communicate with, the internet 714.
  • the ambulatory medical device may be configured to communicate via the wide local area network 712 during manufacture or prior to being provisioned to the subject.
  • a manufacturer can register the ambulatory medical device with a wireless wide-area network provider (e.g., T-Mobile or Verizon) and provide an International Mobile Equipment Identity (IMEI) number or serial number for the ambulatory medical device to the network provider.
  • IMEI International Mobile Equipment Identity
  • any fees can be negotiated or paid between the manufacturer and the network provider or between the subject’s health insurance and the network provider.
  • the subject’s ambulatory medical device may be configured to communicate via the network of the network provider without any action by the subject.
  • the ambulatory medical device may be pre-registered or authenticated with a computing network of the cloud services provider as part of the manufacturing process or before the ambulatory medical device is provided to the subject. This enables the ambulatory medical device to communicate over the wide area network with the computing system of the cloud services provider from day one without any or with minimal configuration by the subject.
  • a user such as a healthcare provider may register or associate the ambulatory medical device with the subject at the computing network of the cloud services provider.
  • the ambulatory medical device may use a whitelist that identifies via a unique identifier (e.g., via an IP address, a MAC address, or a URL) permitted cloud servers or computing system of the cloud computing system.
  • a unique identifier e.g., via an IP address, a MAC address, or a URL
  • the cloud computing service may have a whitelist that uses unique identifiers to specify ambulatory medical devices and/or other computing systems (e.g., remote display systems) that are permitted to communicate with the cloud computing system.
  • the ambulatory medical device may use a whitelist that identifies via a unique identifier (e.g., via an IP address, a MAC address, or a URL) permitted cloud servers or computing system of the cloud computing system.
  • the cloud computing service may have a whitelist that uses unique identifiers to specify ambulatory medical devices and/or other computing systems (e.g., remote display systems) that are permitted to communicate with the cloud computing system.
  • the whitelist may be stored in a memory of the ambulatory medical device.
  • the whitelist may be configured during manufacture of the ambulatory medical device.
  • the whitelist may be configured with connection information to establish communication with one or more computing systems of a networked- computmg environment.
  • the ambulatory medical device may be configured to execute the specific computer-executable instructions to at least obtain an address of the computing system from the whitelist and to establish a direct end-to-end data connection to the computing system of the networked -computing environment via a wireless wide area network using the address.
  • the ambulatory medical device may be configured to execute the specific computer-executable instructions to at least receive a public key from the computing system of the networked-computing environment.
  • the user may not receive a necessary insulin bolus from the ambulatory medical device.
  • an ambulatory medical device includes a computer- implemented method of updating an application executing on the ambulatory medical device without interrupting, or while causing minimal interruption, to therapy provided by the ambulatory medical device to a subject or subject.
  • the method may generally be performed by a hardware processor, (e.g., a controller, and the like), included in an ambulatory medical device and based on a set of instructions that may be stored, for example, in a non-transitory memory of the AMD.
  • the application update may be a new version of the application, a replacement or substitute application, or an application patch.
  • the application may be an older version of the application that has been used by instances of the ambulatory medical device for more than a threshold period of time and has experienced less than a threshold number of faults.
  • the application update may be stored in one or more host computing systems.
  • the application update may be pushed to the host computing systems by a company that manages or manufactured the ambulatory medical device or other software company that is authorized by the manufacturer or licensee of the device.
  • FIG. 8 is a flow diagram showing an example of a computer-implemented method that may be used by the AMD in order to detect and download an application update from a host computing system or other computer readable media in which a copy of the application update is stored.
  • an ambulatory medical device such as a medicament delivery device or a medicament pump may receive an indication that an update is available for an application (block 802), such as control software or other software that controls or facilitates the operation of the ambulatory medical device.
  • the software update may include a binary executable file for various processors of the ambulatory medical device.
  • the indication may be a determination made by a software or hardware module included in an ambulatory medical device of AMD.
  • the AMD may access a particular host computing system (e.g., using its communication module) to determine whether an update is available, based on set of update trigger conditions stored in a memory of AMD.
  • the set of update trigger conditions may be defined/changed by a user and/or received by AMD from a host computing system.
  • a trigger condition may push the AMD to periodically search for an update at time intervals set by the user or received from a host computing system.
  • the ambulatory medical device may access a particular host computing system to determine whether an update is available to an application installed on the AMD.
  • the software to be updated on the AMD may be currently executing on the ambulatory medical device or may be executed in future.
  • the indication may a query received from the host computing system that may access the AMD to read and compare the software versions and the hardware configuration (and warranty) to determine the eligibility of the ambulatory medical device for a software upgrade.
  • the serial number, the model number, and/or the software version may be used to determine software upgrade eligibility.
  • the eligibility may be determined based on the geoposition of the device and/or whether the device is connected to a local area network (such as for example, a Wi-Fi network) or a wide area network (such as, for example, a cellular network).
  • the ambulatory medical device may- have an antenna that provides the device with GPS, text or picture messaging, telephone calling, and data transfer capabilities.
  • Software update may be provided on a limited release with test groups of varying sizes, e.g., 1-100 or l-l 000 or 1-10000. There may be a phase rollout of the software updates.
  • the AMD may respond to an upgrade eligibility request with a version of the first software or a model identification information of the ambulatory medical device or a manufacturing date of the ambulatory medical device.
  • the ambulatory medical device may establish a connection 804 to a host computing system that hosts the update to the application.
  • Such connection may be established via one or more links or methods discussed above with reference to FIG. 7.
  • the ambulatory medical device may download the application update or application update from the host computing system over the connection.
  • the ambulatory medical device may download an image of the application update from the host computing system. While the application update is being downloaded, an existing version of the application on the ambulatory medical device may continue to execute. Thus, there is little or no interruption to therapy provided by the ambulatory medical device while the application update is being obtained by the ambulatorymedical device.
  • the ambulatory medical device may perform one or more operations to confirm that the application update was successfully downloaded from the application host system and that the download was not corrupted 808. For example, the ambulatory medical device may calculate a hash or checksum value from the downloaded application update. This hash or checksum value may be compared with one received from the application host system. If the calculated hash or checksum value matches the received hash or checksum value, then it may be determined that the download is both complete and not corrupt. Further, the ambulatory medical device may use the checksum, a tag, a payload size, or any other method to confirm that the download of the application update is complete and not corrupt.
  • the AMD discards the corrupt copy and downloads another copy of the update 806. If it is determined that the download is complete and not corrupt, the AMD may proceed to the installation step 810 wherein the application update may be installed on the AMD without interrupting the ongoing or upcoming therapy sessions.
  • FIG. 9-FIG. 11 are flow diagrams illustrating examples of computer-implemented methods that may be used by the AMD to install a downloaded application update without disrupting the therapy provided to a subject.
  • the control and computing module 610 (CCM 610) of the AMD may determine the amount of time required to install the application update 904 and wait for a trigger signal 906 to initiate installation process.
  • the CCM may notify to the user 908 through a user interface (e.g., a touchscreen display), that an update is ready for installation. The notification may include the installation time and information about the update.
  • CCM may send one or more notifications to the user indicating that a new update is ready for installation.
  • the trigger may be the confirmation that the application was successfully downloaded.
  • the trigger may be a user command received based on an interaction by a user or subject with a user interface that is part of or that communicates with the ambulatory medical device.
  • the installation time may be determined by the CCM based on data or metadata provided with the downloaded application update.
  • the application update may include a file (e.g., a text file or configuration file) that includes the install time.
  • the installation time may be determined by the manufacturer of the ambulatory medical device or the publisher of the application update. For example, the developer of the software update may average the install time across several test devices to determine the install time metadata that is provided with the software update.
  • General purpose computers have a wide variety of configurations and the performance of a general-purpose computer may vary depending on the applications executing at a particular time. Thus, the determination of install time for an application based on the measurement of install time on a test device is typically unreliable.
  • an install time determined during testing by a manufacturer may in many cases be a reliable determination of install time on an ambulatory medical device of a subject.
  • the install time of an application update may be determined or estimated based on a size of the application update.
  • the provided or estimated install time may include a buffer. In other words, an additional amount of time may be added to the install time to account for variances in operating condition of the ambulatory medical device or inaccuracies in the estimated install time.
  • the CCM may check for any ongoing therapy session 910. If the no therapy is currently being administered, the CCM determines the next therapy time 914 (or the time left until the next therapy session). If therapy is currently being administered the installation will be delayed 912 until the therapy session is compete. Once the current therapy session is complete, the CCM may determine the time remaining until next therapy session 914 (e.g., during which medicament, such as insulin is delivered to a subject).
  • the determination of the next time that therapy is to be delivered may be an estimate based on historical delivery of therapy, a present condition of the subject (e.g., when a glucose level is of a subject is at the center of a desired range, the next therapy deliverytime may be estimated to be further off than when the glucose level is at the edge of the desired range), and/or an indication provided by a user or subject (e.g., an indication that the user is planning to have a meal, to exercise, or to go to sleep).
  • the determination of the next time that therapy is to be delivered may be based on a scheduled delivery of therapy (e.g., every 5 minutes or every hour).
  • the estimated install time may be compared 916 to the determined or estimated next therapy delivery time to determine whether the installation of the application update can be completed before the next therapy delivery to the subject. If it is determined that the time left until the next therapy session is sufficiently longer than the determined time for completing the installation, installation of the application updated may be initiated 918. In some examples, the determined time to the next therapy session has to be longer than the determined installation time by a threshold value. Such threshold value may be different for different application updates and/or the type of next therapy session.
  • the installation of the application may be delayed, regardless of receipt of the trigger.
  • the CCM may wait for the next therapy to be completed and then determine a new therapy time 914. This process may be repeated until CCM determines that the update can be installed without interrupting an expected or scheduled therapy by the ambulatory medical device.
  • a new determination may be made before completion of the next therapy, to determine whether installation may be completed prior to a subsequent therapy time after the next therapy time.
  • a time when the application can be installed without interrupting therapy may not be identified.
  • a user e.g., a clinician or other medical provider, or a subject
  • the user may be provided with an option as to whether to permit the update and/or when to install the application update.
  • the option may include presenting the user with the estimated install time enabling the user to schedule the application update at a time when interruptions to therapy may be minimal or when an alternative source of therapy (e.g., injection therapy) can be utilized.
  • an alternative source of therapy e.g., injection therapy
  • the AMD’s control and computing module may notify the user and wait for a trigger signal before determining the installation time. Once the trigger has been received, the CCM initiates the installation process of the downloaded copy of the application update without interrupting therapy provided by the ambulatory medical device to the subject.
  • the application update may be installed in a different memory location than the memory location where the original application is installed and executed.
  • FIG. 10 is flow diagram illustrating an example of a computer-implemented method that may be used by the AMD in order to install a second application that is an update to a first application executing on the ambulatory medical device, without disrupting the therapy provided to a subject.
  • the control and computing module 610 (CCM 610) of the AMD verifies that an uncorrupted copy of the second application is successfully downloaded 1002 (e.g., using the procedure described above with reference to FIG. 8)
  • the CCM may initiate the installation process of the second application 1004 without interrupting the execution of the first application.
  • the CCM may confirm 1006 the successful installation of the second application and wait for a trigger signal 1010 to initiate the execution of the second application in place of the first application.
  • the installation of the second application may be confirmed by sending a notification the user 1008 via a user interface of the AMD.
  • the CCM may determine the amount of time required for switching the control of AMD to from the first application to the second application.
  • the notification may include information about the update and the time required for switching between the applications.
  • the trigger may be a user command received based on an interaction by a user or subject with a user interface that is part of or that communicates with the ambulatory medical device. In such examples, if a trigger is not received the AMD may send one or more notifications to the user indicating that a new update is ready for installation. If a trigger is received, the CCM may check for any ongoing therapy session 1012.
  • the CCM determines the next therapy time 1016 (or the time left until the next therapy session). If therapy is currently being administered the installation will be delayed 1014 until the therapy session is compete. Once the current therapysession is complete, the CCM may determine the time remaining until next therapy session 1016. The estimated next therapy delivery time may be compared to a set threshold time to determine whether the switching from the first application to the second application can be performed without interfering with the next therapy session. If it is determined that the time left until the next therapy session is longer than the set threshold time 1018, the execution of the second application will be initiated and the execution of the first application will be halted 1020. In some examples, the set threshold time may be determined by the CCM at least partly- based on the time required to execute of the second application and halt the first application. In some other examples, the set threshold time may be received from a host computing system.
  • the performance of an application update may be tested before switching control of the AMD to the application update.
  • FIG. 11 illustrate an example method that may be used by such embodiment.
  • the AMD verifies that an uncorrupted copy of the update for a first application is successfully downloaded 1 102 (e.g., using the procedure described above with reference to FIG. 8).
  • the AMD may install 1104 and execute 1 106 the downloaded copy of the second application without interrupting the execution of the first application and therefore the therapy that might be provided by the ambulatory medical device to the subject.
  • the second application update may be installed to a separate portion (e.g., a separate execution space or separate memory) from the portion where the first application is installed and is being executed.
  • the Control and computing module 610 (CCM 610) of the AMD may determine a minimum set of operating conditions 1108 and then determine whether the minimum set of operating conditions are satisfied by the second application 1110.
  • the minimum set of operating conditions may relate to maintaining therapy provided by the ambulatory medical device to the subject. If at block 1110 it is determined that the minimum set of operating conditions are not satisfied by the second application, the AMD may wait for an indication that a third application is available 11 12 and repeat the procedure described above to evaluate the performance of the third application. If it is determined that the minimum set of operating conditions are satisfied by the second application, the AMD may check for an ongoing therapy session 1 1 14.
  • CCM may switch the control of the ambulatory medical device from the first application to the second application 1118. If currently therapy is provided to a subject, the CCM may wait until the therapy session is competed 1116 and then switch the control of the AMD from the first application to the second application.
  • the ambulatory medical device may be updated (or downgraded) to add (or remove) features from the ambulatory medical device.
  • the ambulatory medical device may initially provide only insulin therapy.
  • the ambulatory medical device may be upgraded to include bi-hormonal control (e.g., to provide both insulin therapy and counter-regulatory agent (e.g., Glucagon) therapy).
  • the upgrade may be based on newly available features and/or based on a decision by a user to purchase or otherwise obtain additional features.
  • a user may opt to downgrade therapy from bi-hormonal to insulin-only therapy.
  • the upgrade or downgrade may be made based on the availability of medicament.
  • a first update can be a first application version including a first feature set (e.g., providing insulin therapy) and a second update can be a second application version including a second feature set (e.g., provide both insulin therapy and Glucagon therapy).
  • the first feature set may include a subset, of the second feature set.
  • the first, feature set may include a partially overlapping set of features with the second feature set,
  • a computer-implemented method that, may be used by the AMD in order to detect, download and install an update to an application executing on the ambulatory medical device wherein the application includes one of a first application version including a first feature set or a second application version including a second feature set.
  • the first feature set may include partially overlapping set of features with the second feature set.
  • the first feature set may include partially overlapping set of features with the second feature set.
  • the AMD may receive an indication of availability of the application update, download the application update and verify that an uncorrupted image of the application update is successfully downloaded (e.g., using the procedure described above with reference to FIG. 8).
  • control and computing module (CCM 610) of the AMD may initiate the installation process of the application update image without interrupting the execution of the application.
  • the indication received by the AMD 802 may include information about application update being an update to the first application version or to the second application version.
  • the CCM 610 may determine the version of the application update and download the application update image based on the determined version.
  • any downloaded application update may be installed to a separate portion (e.g., a separate execution space or separate memory) from a currently executing version of the application.
  • the active version of the application can be switched. For example, control of the ambulatory medical device can be provided to the updated application, the previously executing application can be ceased or halted. The old application can then be removed or kept as backup. Determining when to switch which version of the application is active may follow a similar process as previously described for identifying a next therapy delivery time and selecting a time to switch active versions of the application when there will not be an interruption to the therapy provided by the ambulatory medical device.
  • the ambulatory medical device may be configured to store multiple instances of an application (e.g., ambulatory medical device control software).
  • the ambulatory medical device may have a current, or first, version of the application that it is installed in a first memory location (e.g., in the main memory 616) and is executing to, for example, control therapy provided by a subject.
  • the ambulatory medical device may include an updated, or second version of the application installed in a second memorylocation (e.g., in the mam memory 616). The update of the second version may have been downloaded and installed (e.g., in a prior to detection of the fault).
  • the ambulatory medical device may initiate the execution of the second version of the application and then switch control of the AMD to the second version of the application to maintain therapy to the subject.
  • the second version of the application installed on the AMD may be a version older than the first version, or version that may not have track a record of stability and reliability.
  • FIG. 12 is a flow diagram for such examples.
  • the control and computing module 610 (CCM) of the AMD may switch the control of the AMD to the second version of the application 1204 while establishing a connection with a host computing system configured to host a third update and download the third update 1206.
  • the third version of the application may be a new version, a version prior to the first version, an update to the first application that addresses the detected application-fault or an older version that satisfies the conditions to be classified as a “safe version” (e.g., less than a threshold number or rate of faults over a minimum period of time).
  • the second version (installed in the device) may control the AMD while the third version is being downloaded and installed 1208 without interrupting the therapy.
  • the CCM may initiate the installation process of the downloaded copy of the third application and switch control of the ambulatory medical device form the second application to the third application 1210 without interrupting therapy provided by the ambulatory medical device to the subject
  • a “safe version” of the application may have been installed on the ambulatory medical device prior to detection of a fault.
  • the safe version of the application may include a version of the application that has been used by instances of the ambulatory medical device for more than a threshold period of time and has experienced less than a threshold number of faults.
  • the safe version of the application may be a two-year old version of the application that has demonstrably had less than a threshold number of faults occur over the period of two years. This safe version of the application may have less features than the first or second version of the application.
  • the ambulatory medical device may switch control of the device to the safe version of the application to maintain therapy to the subject.
  • the ambulatory medical device may revert to the current version or a safe version installed on the
  • the AMD may be triggered to establish a connection with the host computing system and search for the second version once a fault is detected during execution of the first version.
  • the ambulatory medical device may revert to the safe version (installed in the device) while downloading and installing the second version without interrupting the therapy.
  • FIG. 13 is a flow' diagram illustrating yet another example of a method of responding to a fault detection by the AMD.
  • the control and computing module 610 (CCM 610) of the AMD may look for a second version of the application 1304 in the main memory or the storage. If it is determined that, the second version has been already downloaded, the CCM will determine 1306 whether the second version of the application is installed in a memory location and is ready to be executed. If it is determined that the second version of the application is installed, the control of the AMD will be switched to the second version of the application 1308.
  • CCM determines that the second version exists in the memory, but it is not installed, it will switch the control of the AMD to a safe version that may be already installed 1316 and then initiates the installation 1318 of the second version.
  • the CCM may switch control of the AMD from the safe version of the application to the second version of the application.
  • the CCM may search for a third version of the application 1310 that may be an update to the previously downloaded second version. If a third version is found, the CCM may download and install the third version 1312. and switch the control of the AMD to the third version 1314.
  • the CCM may switch the control of the AMD to a safe version of the application 1320 that may be installed in a memory location (e.g., in the main memory or in the storage) and then search for a third version of the application 1310. If a third version is found, the system may download and install the third version 1312 and switch the control of the device to the third version 1314.
  • the AMD may transmit an indication of the applicationfault to the host computing system of a manufacturer or maintenance service of the ambulatory medical device.
  • the AMD may notify the user when an application -fault occurs through a user interface of the AMD or user interface communicating with the AMD,
  • An ambulatory medical device such as an ambulatory medicament device (e.g., blood glucose control system (e.g., an insulin pump or a bi-hormonal pump that includes insulin and a counter-regulatory agent), a pacemaker, or any type of medical device that may be connected to a subject to provide therapy to the subject, can generate a significant amount of data related to therapy provided to a subject (therapy data).
  • This therapy data may be useful for the subject, a healthcare provider, or other users (e.g., parent or guardian) to actively manage the subject’s health condition.
  • the therapy data may be useful to determine whether a modification to therapy may be desirable or to confirm that intended therapy is being delivered at the right time.
  • the data may be used to generate an alerts about the health condition of the subject when therapy data indicates that immediate attention is needed with regards to subject’ health condition.
  • Various aspects of accessing the therapy data or other types of data stored in a memory of the AMD needs proper management in order to provide uninterrupted, secure, and easy access to authorized users.
  • the procedures and task performed by an AMD may be associated with certain computer-executable instructions stored and executed by the control and computing module 610 of the AMD 600.
  • different AMD configurations used for various data transfer management tasks may be configurations of the control and computing module 610 of the AMD 600.
  • Accessing the data in the ambulatory medical device can be problematic in some cases. For example, accessing the data may require a user to connect the ambulatory medical device to a computer to upload the data. This places a burden on the user to remember to connect the ambulatory medical device. Further, during the period when the device is connected to the computer, the subject may not be receiving therapy from the ambulatory medical device. In some cases, the subject may not be capable of connecting the device to the computer (e.g., when the AMD is not within range of the local device) and may not have someone available to assist the subject. Thus, a direct end-to-end connection to a computing system that (e.g., computing system of a healthcare provider) can safely share data (e.g., therapy data) with authorized users may facilitate data management and access.
  • a computing system e.g., computing system of a healthcare provider
  • data e.g., therapy data
  • FIG. 14 is a block diagram illustrating an example network configuration wherein the AMD 1402 is directly connected to a computing system 1406,
  • the AMD 1402 may receive data from one or more environmental sensors 1404 and/or one or more medical sensors 1408 (e.g., a glucose sensor operatively connected to a subject.
  • the computing system 1406 may be part of networked computing environment 1412 (e.g., a data center, networked computing system), or cloud network 1410 or cloud computing system of a cloud service provider.
  • the computing system may include one or more non- transitional memories and one or more hardware processors configured to execute the computer-executable instructions stored in one or more non-transitional memories.
  • the procedures performed by the computing system may be associated with the execution of certain computer-executable instructions stored in a memory of the computing system by a hardware processor of the computing system.
  • the direct end-to-end data connection may be supported by one or more transceivers in AMD’s communication module 602.
  • a direct connection may be established between the AMD 1402 and the computing system 1406 over a wide area network (e.g., a cellular network) without using an intermediary system using various wireless standards and technologies (e.g., 4G, 5G and the like).
  • the transceiver may support communication via communication standards, including but not limited to, low power wide area network (LPWAN), Narrowband Long-Term Evolution (NB-LTE), Narrowband Internet-of-Things (NB-IoT), or Long-Term Evolution Machine Type Communication (LTE- MTC).
  • LPWAN low power wide area network
  • NB-LTE Narrowband Long-Term Evolution
  • NB-IoT Narrowband Internet-of-Things
  • LTE- MTC Long-Term Evolution Machine Type Communication
  • the transceiver is always on, and in other cases, the transceiver may be activated when a data transfer is scheduled, requested, or activated. In some cases, the capability of the ambulatory medical device 1402 to communicate with the computing system may be activated during manufacture or before providing the device to a subject.
  • the subject or a user establishes or initiates establishing the direct end- to-end data connection with the computing system.
  • the subject may interact with a user interface to cause the ambulatory medical device to communicate with the cloud computing service.
  • the direct end-to-end data connection may be initiated or established without action by the subject or the user.
  • the direct end-to-end data connection may occur automatically at particular times or when the ambulatory medical device is in particular locations. This automatic connection may occur using information supplied to the ambulatory medical device at a time of manufacture, shipment, sale, or prescription to the subject.
  • the ambulatory medical device can communicate with the computing system without having access to a Wi-Fi network or a local area network (LAN).
  • LAN local area network
  • the ambulatory medical device may communicate using a cellular or other wide area network.
  • the interaction by the user with the ambulatory medical device may be relatively minimal or simple compared to traditional network communication.
  • a user may push a single button (e.g., an “upload” button) to trigger establishing of a connection with the cloud computing service and causing data to be provided from the ambulatory medical device to the cloud computing service.
  • the ambulatory medical device may be turned on and paired with the wireless wide area network (e.g., a cellular network) at the time of manufacture, or prior to being provided to a subject. Further, the ambulatory medical device may be authenticated with the networked-computing environment as part of the manufacturing process
  • establishing the direct end-to-end data connection may include determining that the ambulatory medical device is permitted to communicate with the computing system based at least in part on the device identifier.
  • establishing the direct end-to-end data connection may include determining that the ambulatory medical device is permitted to communicate with the computing system based at least in part on a device identifier associated with the ambulatory medical device.
  • the device identifier may be a unique identifier specific to the ambulatory medical device.
  • the device identifier may include or may be based on one or more of an Internet Protocol (IP) address, a Media Access Control (MAC) address, a serial number, or a subject identifier of a subject that receives therapy from the ambulatory medical device.
  • IP Internet Protocol
  • MAC Media Access Control
  • establishing the direct end-to-end data connection may include determining that the ambulatory medical device is permitted to communicate with the computing system based at least in part on the device identifier.
  • the device identifier may be initially provided to the networked-computing environment prior to provisioning of the ambulatory medical device to the subject.
  • the device identifier may be initially provided to the networked- computing environment as part of a manufacturing process for manufacturing the ambulatory medical device.
  • the request may include a device identifier associated with the ambulatory medical device.
  • the ambulatory medical device may be configured to at least identify a computing system 1406 of a networked computing environment 1412 based on a whitelist of one or more approved computing systems.
  • the whitelist may be stored in a memory of the AMD 1402 (e.g., a memory in the control and computing module of the AMD). Further, the whitelist may be configured during manufacture of the ambulatory medical device. For example, the whitelist may be configured with connection information to establish communication with one or more computing systems of a networked-computing environment.
  • the ambulatory medical device may be configured to at least obtain an address of the computing system from the whitelist and to establish a direct end-to-end data connection to the computing system of the networked-computing environment via a wireless wide area network using the address.
  • the whitelist may include unique identifiers, such as MAC addresses or static IP addresses that are associated with computing systems of the cloud services provider.
  • the ambulatory medical device may use a whitelist that identifies via a unique identifier (e.g., via an IP address, a MAC address, or a URL) permitted cloud servers or computing systems in networked computing environment.
  • a unique identifier e.g., via an IP address, a MAC address, or a URL
  • the cloud computing service may have a whitelist that uses unique identifiers to specify ambulatory medical devices and/or other computing systems (e.g., remote display systems) that are permitted to communicate with the cloud computing system.
  • all communication between the ambulatory medical device and the computing may be based on a secure data transmission method.
  • the ambulatory medical device may encrypt all data using an asymmetric key.
  • the therapy data may be encrypted before being transferred to the computing system.
  • AMD may have a public key and a private key stored in one of its memories permitting the AMD to encrypt data communications transmitted by the ambulatory medical device to the computing system.
  • AMD may transmit the public key along with the therapy data to the computing system.
  • the public key provided by the AMD and a private key stored on the computing system may permit the computing system to decrypt the data received from the ambulatory medical device.
  • the public key may timeout and a new public key may be obtained from the ambulatory medical device to facilitate decrypting subsequent communications from the ambulatory medical device.
  • the public key may be associated with a time-to-live (TTL) value.
  • TTL time-to-live
  • the public key may timeout and a new public key may be obtained from the ambulatory medical device to facilitate decrypting subsequent communications from the ambulatory medical device.
  • the secure data transmission may include generating a shared secret based at least in part on the public key and the private key.
  • decrypting the encrypted data includes using the shared secret to decrypt the encrypted data.
  • shared secret may be established using public key exchange algorithm (e.g., Diffie-Hellman key exchange algorithm).
  • the computing system may be configured to transfer the data after receiving a request to transfer data stored on the ambulatory medical device to the computing system over the direct end-to-end data connection via the wireless wide area network. Responsive to receiving the request to transfer data stored on the ambulatory medical device to the computing system, the computing system may be configured to receive, via the direct end- to-end data connection.
  • the computing system may analyze the therapy data received from the ambulatory medical device and generate a therapy report. Further, the computing system may detect an alarm condition, based on therapy data analysis, and generate an alarm that may be provided to the subject, authorized user (e.g., healthcare provider). In some cases, the therapy data maytrigger an automatic response by the computing system. For example, the AMD may determine that a medicament or another disposable is running low' based on the received data and may automatically reorder the medicament or the disposable.
  • the computing system may periodically- receive data from the ambulatory medical device based on a regular schedule. Alternatively, or in addition, the data may be received in response to a command or when the ambulatory medical device determines it is wuthin a certain location. For example, when the ambulatory medical device determines it is within a subject’s home or at a healthcare provider’s office based on a local area network connection or based on a geolocation system (e.g., a global positioning system (GPS)).
  • GPS global positioning system
  • additional encrypted data is received from the ambulatory- medical device on an intermittent basis. Alternatively, or in addition, additional encrypted data is received from the ambulatory medical device on a continuous basis for at least a time period.
  • the ambulatory medical device may be configured to transmit data as it is generated, or shortly thereafter, (e.g,, in real or near real-time (e.g., within a few millisecond, seconds, or minutes of the data being generated)), or in bulk at specified periods of time. Transmitting the data in bulk at particular time periods may extend battery life, but may provide for less up-to-date analysis. Data can be made available on-demand by keeping the transceiver always on, but this may consume more power. Thus, the scheduling of data transfer may be balanced based on different considerations, such as: (1) power consumption and (2) need to share information with authorized users or systems.
  • the computing system may be used as a backup for the ambulatory medical device.
  • the ambulatory medical device can backup data to the computing system every night, when it is charging, or when it is in proximity to home or a physician’s office (e.g., when subject is in waiting room, the device may upload data that the physician can then access).
  • the ambulatory medical device is replaced (e.g., for a new model or to replace a damaged device), the device can automatically synchronize with the computing system to obtain subject-specific configuration or therapy control data.
  • the therapy data may include dose or dosage data corresponding to one or more doses of medicament provided by the ambulatory medical device to the subject. Further, the therapy data may include subject data corresponding to a medical or physiological state of the subject as determined by the ambulatory medical device.
  • the data provided to computing system may include any type of data that may be measured or obtained by the ambulatory medical device and may include a record of therapy provided by the ambulatory medical device.
  • the data may include a time that therapy was provided, an amount of medicament provided as part of the therapy, a measure of one or more vital signs of the subject, a measure of blood glucose levels at different times for the subject, a location of the subject, and the like.
  • the therapy data may be used to track the use of disposables, such as insulin or other medicament, or insulin pump site kits.
  • the computing system may automatically order or reorder disposables at a particular time based on tracking the use of the disposable.
  • the reordering of the disposables may be initiated or performed from the ambulatory medical device (e.g., via a wireless wide area network or via a local connection through a separate electronic device).
  • the data transferred to the computing systems may include operation data corresponding to operation of the ambulatory medical device.
  • the data may further include error data corresponding to an error in operation of the ambulatory medical device.
  • the data, therapy data and/or the therapy report may be stored in a memory of the computing system and/or at a storage of the networked- computing environment.
  • the method may include converting the therapy data from one format to another format.
  • the method may include converting the therapy data from a format used to store and/or present data on ambulatory medical device to a format that can be stored or processed on the computing system.
  • the therapy data is converted from a machine-readable format to a human-readable format.
  • the data may be stored in a more easily interpreted format that can be understood by different types of users.
  • the data may be presented in one format for a healthcare provider (e.g., sensor readings), a simplified format for a subject or parent of a subject, other data formats for displaying data to different types of users.
  • the therapy data collected from different .AMDs associated with plurality of subjects may be aggregated for a group of subjects based on their association with an institution or organization (e.g., a clinic, an insurance company, and the like)
  • an institution or organization e.g., a clinic, an insurance company, and the like
  • a therapy report based at least in part on the therapy data maybe generated by the computing system.
  • the therapy report may include time-series therapy data relating to the therapy delivered by the ambulatory medical device over a particular time period.
  • the therapy report may be sent to AMD wherein the subject can see the report via a user interface (e.g., a touchscreen display).
  • a user interface e.g., a touchscreen display
  • the ambulatory device data and/or data generated by the computing system based on the ambulatory- device data can be viewed on a secondary display system from the computing system.
  • a clinician or parent can access the data from their personal device.
  • the communication between the computing systems and the viewing device may be encrypted.
  • permission for sharing of end user data with a 'follower' (e.g., family member) or clinician may be granted or controlled by the end user (e.g., the subject or a guardian).
  • An association between a subject, a clinic, and/or an ambulatory medical device maybe performed by association of a device serial number of the ambulatory medical device with the subject and/or clinic.
  • a user e.g., a subject, clinician, or parent
  • the computing system may be configured to at least receive a request from one or more display systems 1414 that are separate from the networked computing environment to access the therapy report, therapy data or other data received by or stored in the AMD.
  • the display system may be a computing system of a medical practitioner 1418 (e.g., such as a doctor, nurse,... ), a guardian of the subject 1420 (e.g., subject’s parents), a health care service provider 1424 an authorized user 1422 (e.g., a user authorized by the subject such as spouse, relative, friend, and the like) , or a device of the subject 1416 (e.g., cell phone, personal computer, tablet and the like).
  • a medical practitioner 1418 e.g., such as a doctor, nurse,...
  • a guardian of the subject 1420 e.g., subject’s parents
  • a health care service provider 1424 an authorized user 1422 (e.g., a user authorized by the subject such as spouse, relative, friend, and
  • the display system can be a therapy data management system that analyses a therapy data associated with a specific type health problem (e.g., data associated with managing diabetes) and provides useful information to the subject or an authorized user to monitor and manage the corresponding ailment.
  • a therapy data management system that analyses a therapy data associated with a specific type health problem (e.g., data associated with managing diabetes) and provides useful information to the subject or an authorized user to monitor and manage the corresponding ailment.
  • the request may include an account identifier associated with a user that generated the request.
  • the account identifier may include a unique identifier associated with the subject.
  • the account identifier includes a unique identifier associated with a user that is authorized to access the therapy report.
  • the user may or may not be the subject.
  • the method may further include associating the therapy data with the account identifier at a storage of the networked-computing environment.
  • the computing system may be configured to determine whether an account associated with the account identifier is permitted to view the therapy report. In some examples, account permissions may be granted and/or modified by the subject.
  • the subject can access an account at a networked computing environment 1412, for example, a cloud service provider associated with the subject, and provide one or more identifiers associated with one or more other users to give them permission to access the subject’s therapydata or report stored on the computing system.
  • a networked computing environment 1412 for example, a cloud service provider associated with the subject
  • the hardware processor may be configured to transmit the therapy report to the display system over an encrypted communication channel.
  • the method may include receiving an identity or identification information of one or more users that are authorized to access therapy data stored at the networked-computing environment.
  • a user or subject may authorize a clinician or other healthcare provider, a parent or guardian, or other users that the subject desires to have access to the therapy data.
  • the identity information of the one or more users may include any type of information that may identify the user or enable the user to be authenticated.
  • the identity information may include a name, unique identifier (e.g., social security number), an email, an address, a phone number, account information for the user at the networked-computing environment, or any other identifying information.
  • FIG. 15 is a flow diagram that illustrates an example method that may be used by computing system 1406, to generate and share a therapy report based on encrypted therapy data received from an AMD 1402.
  • the AMD 1402 may generate the encrypted therapy data using a public key and a private key.
  • the method may include establishing a direct end-to-end data connection 1502 to an ambulatory medical device, for example, via a wireless wide area network (WAN) using a Narrowband Long-Term Evolution (NB-LTE) transceiver included in the AMD 1402.
  • WAN wireless wide area network
  • NB-LTE Narrowband Long-Term Evolution
  • the computing system may receive a public key 1504 (e.g., associated with encrypted data), from the AMD 1402 over the established connection.
  • the computing system may receive a request from the AMD 1506 to transfer data (e.g., therapy data) stored on the AMD 1402 to the computing system 1406 over the direct end-to-end data connection.
  • the computing system 1406 may use the device ID associated with the AMD 1402 to determine wh ether the AMD 1402 is authorized to transfer data to the computing system 1508. If, based on the device ID, it is determined that the AMD 1402 is authorized to transfer data to the computing system, the encrypted therapy data may be transferred 1512 to the computing system.
  • the request may be denied 1510.
  • the computing system may decrypt the encrypted therapy data 1514 using a private key (e.g., stored in a memory of the computing system) and a public key received from the AMD 1402.
  • the therapy data may be used to generate a therapy report 1516.
  • the decrypted therapy data and/or therapy report may be stored in a memory of the computing system 1406.
  • the example method may further include receiving a request from a display system 1414 that is separate from the networked computing environment, to access the therapy report 1518.
  • the request may include an account identifier associated with a user that generated the request.
  • the method may include determining using the account identifier to determine whether the account associated with the account identifier is permitted to view the therapy report 1520. In the computing system determines that the account associated with the received account identifier does not have the required permission, the request will be denied 1524. Responsive to determining that the account is permitted to view the therapy report, the method may include transmitting the therapy report to the display system 1522 over an encrypted communication channel.
  • the method may further include determining that the therapy data or other data received from the AMD satisfy an alert threshold condition.
  • the computing system may send an alert to one or more display systems designated to receive alerts from the computing system.
  • alert threshold condition may be associated with the health condition of the subject.
  • alert threshold condition may include subject’s blood sugar level is above or below' a set value (hyperglycemia or hypoglycemia).
  • alert threshold condition may be associated with the operation of the AMD.
  • alert threshold condition may include the rate of therapy (e.g., the rate at which insulin is provided to a subject) being above or below a set value.
  • alert threshold condition may be associated with the temporal behavior of therapy data over a period of time.
  • the alert threshold condition may include the fluctuations or variations of the subject’s blood sugar level being above a set value.
  • the alert threshold condition may be defined or set by health provider.
  • the health provider may change one or more alert threshold conditions based on the health condition of the subject.
  • FIG. 16 is block diagram, illustrating an example network and data flow configuration where an AMD 1602, which is directly connected to a computing system 1606 (e.g., computing system within a cloud network 1610), may generate and send alerts 1616 (e.g., alert messages, alert signals, and the like) upon determining that data 1612 received from the AMD satisfies a threshold condition.
  • the computing system 1606 may be part of networked computing environment 1614 (e.g., a data center, networked computing system), or cloud network 1610 or cloud computing system of a cloud service provider.
  • the computing system may include one or more non-transitional memories and one or more hardware processors configured to execute the computer-executable instructions stored in one or more non-transitional memories.
  • the AMD may receive data from one or more medical sensors 1608 (e.g., analyte sensor, temperature sensor, heartbeat sensor, and the like) and/or one or more environmental sensors (e.g., geolocation receiver, motions sensor, accelerometer, and the like.). These sensors may be included in the AMD unit or may be connected to the AMD via a wired or wireless link.
  • medical sensors 1608 e.g., analyte sensor, temperature sensor, heartbeat sensor, and the like
  • environmental sensors e.g., geolocation receiver, motions sensor, accelerometer, and the like.
  • the display systems receiving the alert 1620 may be display systems that have already received therapy reports from the computing system 1606.
  • a group of display systems may be selected and authorized by the subject, who is receiving therapy from the AMD, to receive alerts 1620.
  • the display systems that may receive alerts 1620 from the AMD may include: a medical practitioner 1624 (e.g., such as a doctor, nurse, etc.), a guardian of the subject 1626 (e.g., subject’s parents), an emergency service provider 1628, an authorized user 1630 (e.g., a user authorized by the subject such as spouse, relative, friend, and the like), a health care healthcare provider 1632, or a device of a subject 1622 (e.g., cell phone, personal computer, tablet and the like).
  • the computing system 1606 may send an alert 1616 to the AMD 1602.
  • the AMD 1602 may be configured to establish a connection to support continuous data transfer to the computing system 1606 for a given period of time (e.g., provided to the AMD by the subject), in order to capture any data that is generated over that period and satisfies an alert threshold condition.
  • the subject may request a continuous connection between AMD and the computing system when going for hike alone to make sure that if his/her health condition deteriorate during the hike, an alert is sent to authorized display systems.
  • a geolocation sensor e.g., a Global Positioning System (GPS) receiver
  • GPS Global Positioning System
  • the ambulatory medical device may include or be connected to an accelerometer or a geolocation system. This velocity of the ambulatory medical device may be determined based at least in part on the accelerometer or geolocation system.
  • the computing system 1606 can provide intelligent alerts.
  • the computing system may automatically alert emergency service provider 1628 that a subject is at risk of hypoglycemia and may be driving. Further, the computing system can provide a location of the subject to the emergency service provider 1628.
  • the computing system can generate alerts based on a trend of the aggregated therapy data or based on therapy data that is an outlier to the aggregate therapy data or an outlier to a time-based average of the therapy data.
  • the geolocation sensor and/or a motion sensor can be used to detect velocity of a subject to enable intelligent motion-sensitive alerts. For example, if the subject is moving at 60 mph and experiences low blood glucose, the system may enable a set of driving alerts and schedule possibly therapy in the future. The driving alerts may inform the subject to pull over immediately due to a risk of a hypoglycemic event. Further, an emergency responder may be informed of a subject location using based on information obtained from the geolocation sensor. If the subject is moving at 6-7 mph, exercise alerts maybe enabled to, for example, alert the user to pause exercising and attend to low blood sugar.
  • a motion sensor e.g., an accelerometer
  • the system can enable automatic notification to and emergency service provider 1628. Further, a determination of the subject’s motion can be used to automatically adjust setpoint (e.g., raise setpoint during exercise). The activity- level of the subject can be sensed and use to improve alerts and therapy.
  • setpoint e.g., raise setpoint during exercise
  • the cloud server can send a text message or call to a follower’s and/or end user’s phone or smart device in case the therapy- data satisfies an alert threshold. These messages may be provided from the cloud computing system to a third-party- device in case roaming or disabling of the data plan on the ambulatory medical device occurs (e.g., no TCP/IP available). Further, the cloud computing service may send a text message or call 911 in case of a detected emergency.
  • the cloud server can track, for example, via GPS, the end user’s most recent location and share that information with a follower and/or emergency personnel. Moreover, the cloud computing system may enable an end user to order and re-order medical supplies directly from the viewing device.
  • the computing system can generate notifications (e.g., generate a message when there is a risk of hypoglycemia). Further, more detailed processing in the cloud can result in improved recommendations (e.g., Tmax, setpoint, or other control parameters)
  • FIG. 17 is a flow diagram illustrating an example method that may be used by computing system 1606, to generate and send alerts (e.g., alert messages, alert signals, and the like) to one or more authorized devices and to the AMD.
  • the method may include establishing a direct end-to-end data connection 1702 to an ambulatory medical device, for example, via a wireless wide area network (WAN) using a Narrowband Long-Term Evolution (NB-LTE) transceiver included in the AMD 1602.
  • WAN wireless wide area network
  • NB-LTE Narrowband Long-Term Evolution
  • the direct end-to-end connection may be established for a given period of time set by the subject or an authorized user (e.g., a guardian of the subject).
  • the computing system may receive a public key 1704, from the AMD 1602 over the established connection.
  • the computing system may receive a request from the AMD 1602 to transfer data (e.g., therapy data, medical sensor data or environmental sensor data) generated by the AMD 1602 to the computing system 1606 over the direct end-to-end data connection.
  • the request may include a time period during which AMD continuously transmits any data generated by the AMD 1602 or obtained from one or more sensors (e.g., environmental sensors 1604 or medical sensors 1608), to the computing system 1606.
  • the time period for continuous data transfer from the AMD 1602 to the computing system 1606, may be provided by the subject or a guardian of the subject to the AMD.
  • the computing system 1606 may use the device ID associated with the AMD 1602 to determine whether the AMD 1602 is authorized to transfer data to the computing system 1606. If the computing system 1606 determines that the AMD 1602 is authorized to transfer data to the computing system 1606 (e.g., based on the device ID), at block 1712, the encrypted therapy data may be transferred to the computing system 1606. If, at the decision block 1708 the computing system 1606 determines that the AMD 1602 is not authorized to transfer data to the computing system, the process may move to block 1710 and the request may be denied.
  • the computing system 1606 may decrypt the received data using a private key (e.g., stored in a memory of the computing system 1606) and a public key received from the AMD 1602.
  • the computing system 1606 may determine whether the received data (e.g., therapy data, medical sensor data or the environmental sensor data), satisfies a threshold condition.
  • the threshold condition may be provided to the AMD by the subject or an authorized user (e.g., a guardian of the subject).
  • the threshold condition may be provided by a healthcare provider.
  • the threshold condition may be stored in a memory of the AMD.
  • an alert may be generated and sent 1718 to one or more display systems 1618 that are authorized (e.g., by the subject or a guardian of the subject) to receive alerts.
  • the subject or the guardian may authorize one or more display systems 1618 to receive alerts by providing the account IDs of the one or more displays systems to the computing system 1606 or the networked computing env i ronment 1614.
  • the ambulatory medicament device may include a user interface (e.g., touchscreen interface or a non-touchscreen interface) that may present one or more userinterface screens to a user enabling the user to modify one or more therapy settings of the ambulatory medicament device, such as a quantity of medicament delivered when a condition is met or the condition that triggers the delivery of medicament to a subject.
  • the user may be a subject receiving medicament or therapy, or may be another user, such as a clinician or healthcare provider, or a parent or guardian.
  • ambulatory medicament devices that include a user interface
  • a setting is accidentally modified or is modified (intentionally or unintentionally) by a user that does not fully comprehend his or her action (e.g., a child or a user with a reduced mental capacity).
  • ambulatory medicament devices may accidentally have settings modified by inadvertent interactions with a user interface, such as may occur when an ambulatory medicament device is worn against the body of a subject.
  • This section relates to an ambulatory medicament device (AMD) to prevent an inadvertent modification in medicament deliver, for example, in the event of a setting of the AMD being accidentally modified by a user or inadvertent interactions with a user interface.
  • AMD ambulatory medicament device
  • the user may modify the control or configuration the AMD using a user interface.
  • the control or configuration of the AMD is accidentally modified through the user interface.
  • the user may transport the ambulatory medical device, there is a danger that the user will inadvertently activate input in the ambulatory medical device that initiates a therapy change input (e.g., by applying pressure on the ambulatory medical device that may be placed in the jacket pocket of the user).
  • the control and computing module (CCM) of the AMD may include a set of therapy change procedures 1818 implemented to prevent therapy change inputs 1820 that are inadvertent.
  • the therapy change procedures 1818 may be implemented as instructions stored in a memory of CCM (e.g., the main memory 616) and executed by the processor 614.
  • the therapy change input 1820, received from a user 1816, may be verified by the therapy change procedures 1818 before the ambulatory medical device 600 provides the therapy change delivery 1804. All the user interactions with the user interface module 1806 may be controlled and analyzed by the control and computing module 610 (CCM) via one or more therapy change procedures 1818.
  • the user 1816 may wake or unlock the AMD by interacting with a wake interface 1810.
  • the wake interface 1810 can be any of the additional user interfaces mentioned above, configured to generate a wake input to the CCM when detecting a pre-set user interaction.
  • the therapy change input 1820 can be an input provided by the user 1816 to change a therapy that is currently being delivered to the user 1816.
  • the therapy change input 1820 may cause the insulin or glucagon infusion pump to start infusing an amount of insulin or glucagon into the user 1816.
  • the therapy change input 1820 may modify the rate of insulin or glucagon infusion into the user 1816.
  • the therapy change input 1820 may also cancel insulin or glucagon infusion into the user 1816 from the insulin or glucagon infusion pump.
  • a wake input is sent to the control and computing module 610 wherein it imitates a wake control procedure 1826 that generates a wake signal to wake/unlock the user interface (e.g., a touch screen display).
  • a wake control procedure 1826 that generates a wake signal to wake/unlock the user interface (e.g., a touch screen display).
  • a user When in the wake and/or unlocked state, a user may interact with the touchscreen display 1812, alphanumeric pad 1814 or other types of user interfaces that may be included in the user interface module 1806, to obtain access to therapy change user interface.
  • the therapy change user interface may be activated by a first user interaction with the user interface (e.g., touchscreen display 1812).
  • the user interface module user interface module 1806 sends an input signal to the control and computing module 610 wherein it is analyzed by a therapy change control procedure 1828. If it is determined that the first user interaction satisfies a set of predefined conditions, the therapychange control procedure 1828 generates a signal to the user interface module user interface module 1806 to activate the therapy change user interface.
  • the therapy change user interface may be limited based on the first user interaction.
  • the therapy change control procedure 1828 may send one of two signals to the user interface module user interface module 1806.
  • the therapy change user interface may then unlock one of two different therapy change user interfaces that result in different options of therapy change selections for the user 1816.
  • a therapy change selection to make a significant therapy change such as dramatically increase the rate of insulin or glucagon infusion rate, requires a first user interaction that is different from the first user interaction that, would be required for an insulin or glucagon infusion at a normal or prescribed rate.
  • the first user interaction may be a simple interaction (e.g., a simple gesture) that unlocks a therapy change user interface with therapy change selections that, are limited.
  • Another first user interaction may be a complicated interaction (e.g., a series of complex gestures) that unlocks a therapy change user interface with therapy change selections that have no limits.
  • An example of this implementation may be useful for child users. The child user may perform the first gesture that is made up of a series of simple inputs to unlock therapy change selections that are limited. An adult user may perform the first gesture that is made up of a series of complex inputs to unlock the therapy change user interface with therapy change selections that have no limits.
  • the therapy change user interface may provide one or more control or configuration elements that enable the user to modify- the control or configuration of the ambulatory? medicament device.
  • the control or configuration element may include any? type of user interface screen on the touchscreen, or other type of user interface in the non-touchscreen context, that enables or permits a user to change a configuration of the ambulatory medicament device.
  • This change in configuration of the ambulatory? medicament device may relate to a change in the therapy? provided or in the detection of a triggering event that causes therapy (e.g., medicament) to be provided to a subject.
  • the change in configuration may include a selection between one or more hormones that regulate blood sugar level (e.g., insulin or glucagon) of a user, an amount of the one or more hormones that regulate blood sugar level of the user.
  • a change to the configuration of the ambulatory medicament device is automatically and/or instantly recognized or implemented by the ambulatory medicament device, and/or transmitted to the ambulatory medicament device.
  • a confirmation of the change may be required before the change is implemented by or transmitted to the ambulatory medicament device.
  • This confirmation may be entered based on a second user interaction with a user interface (e.g., touchscreen display 1812).
  • a user interface e.g., touchscreen display 1812
  • the user interface module user interface module 1806 sends an input signal to the control and computing module 610 wherein it is analyzed by a therapy change control procedure 1828. If it is determined that the second user interaction satisfies a set of predefined conditions, the therapy change control procedure 1828 implements the change to the configuration of the AMD.
  • the first and/or second user interactions may include the selection of an icon, a series of taps or inputs, one or more gestures (e.g., a linear swipe, an arcuate swipe, a circular swipe, or other simple or complex movement across the touchscreen), performing a pattern or sequence on the touchscreen (e.g., drawing an image), a multi-touch or multi-input interaction, a combination of the foregoing, or any other type of interaction with a touchscreen, or portion thereof.
  • the series of inputs may be any combination of touch movements, touch points, numerical characters, alphabetical characters, and other symbols.
  • Gesture interactions can be guided by visual indicia displayed or printed on the AMD.
  • the visual indicia can include animations that suggest or guide user interactions with a touchscreen.
  • the first user interaction can include an arcuate swipe around at least a portion of a generally circular icon or logo.
  • the first and/or second user interactions may include a predetermined sequence of numerical or alphabetical inputs.
  • a series of multiple inputs the range of parameters for an input may be dependent on other inputs in the series. For example, required start position of a touch movement may be dependent on the position of the previous touch movement.
  • the time that the senes of inputs are entered may also be a part of the range of parameters. For example, a series of inputs may need to be entered in no less than 3 seconds or more than 3 seconds, and no more than 15 seconds or less than 15 seconds.
  • one or more of the interactions may include interacting with a sensor as an optical sensor (e.g., visible light or IR sensor), biometric sensor (e.g., a fingerprint or retinal scanner), a proximity sensor, a gyroscope, or a combination of accelerometer and gyroscope, and the like.
  • a sensor as an optical sensor (e.g., visible light or IR sensor), biometric sensor (e.g., a fingerprint or retinal scanner), a proximity sensor, a gyroscope, or a combination of accelerometer and gyroscope, and the like.
  • the second user interaction may be made through a wireless signal such as RFID or Bluetooth.
  • the second user interaction may include receiving a selection of an indicator box that correspond to either insulin or glucagon and receiving a predetermined sequence of numerical inputs in order to deliver the therapy change selection,
  • the type of user interaction that unlocks the touchscreen, provides access to a configuration screen, and/or confirms a change to the configuration of the ambulatory medicament device may be the same or may differ.
  • the system may have a time-out such that if no interaction occurs for a set period of time, the user interface will turn off and the therapy change request process has to start again. In one implementation of the time-out, if no interaction occurs for more than 30 seconds after the system is waked/ unlocked before the second user interaction is received by the user interface, the user interface will be deactivated.
  • the ambulatory medicament device may begin operating with the changed configuration.
  • This operation may include triggering therapy based on the new configuration or providing therapy based on the new configuration.
  • the ambulatory medicament device may generate a dose control signal based at least in part on the modified configuration or control parameter or may detect a trigger based at least in part on the modified configuration or control parameter that leads to the provisioning of therapy.
  • the changes made through the therapy change user interface are sent to CCM wherein the therapy change control procedure 1828 in CCM transfers the changes to the device and subject monitoring procedure 1824.
  • the device and subject monitoring procedure 1824 may be implemented in the CCM 610 to monitor the status of the AMD (e.g., therapy delivery configuration) and the health condition of the user 1816 (or a subject).
  • the subject monitoring procedure 1824 may receive information about a therapy change requested by a user 1816 through a user interface (a touchscreen display 1812 or alphanumeric pad 1814) or information about glucose level in subject’s blood from the subject sensor 1808.
  • the device and subject monitoring procedure 182.4 may transmit the information pertaining a health condition of the subject and/or the AMD configuration, to the medicament dose control procedure 1822,
  • the parameters in the medicament dose control procedure 1822 may be adjusted based on the changes and/or information captured by the device and subject monitoring procedure 1824.
  • the medicament dose control procedure 1822 controls the medicament delivery interface 1802 by providing a medicament dose signal.
  • the medicament does control may be generated based on detected conditions or physiological characteristics of the subject (e.g,, provided by the readings of the subject sensor 1808) and according to parameter values received from the therapy change control procedure 1828.
  • the medicament delivery interface 1802 may provide a therapy change delivery to the user according to the information received by device and subject monitoring procedure 1824.
  • the dose control signals may be produced based on time (e.g., medicament may be delivered on a periodic basis), one or more a command, indication that the subject is planning to engage or is engaging in a particular activity (e.g., eating a meal, exercising, sleeping, fasting, etc.), or any other factor that may relate to or cause the triggering of therapy (e.g., medicament delivery).
  • FIG. 19 is a flow diagram illustrating an example method that may be used by an AMD to allow a user to change the configuration of the ambulatory medicament device using a touch screen user interface.
  • the user may initiate the configuration change process by waking/unlocking the touch screen using a wake action.
  • the wake interface sends a wake input to CCM (block 1904).
  • the wake procedure generates a wake signal and at block 1908 that unlocks the touch screen (block 1908).
  • the therapy change user interface is unlocked (block 1912).
  • the user may change the therapy configuration (block 1914).
  • the user may confirm the changes made, by providing a second gesture on the touch screen 1916. Once the confirmation is received (block 1916) the requested changes wall be implemented (block 1918), and the ambulatory medicament device may begin operating with the changed configuration. In some examples, once the user confirms the changes made, a dose control signal may be sent to the medicament, delivery interface 1802 that triggers a therapy change delivery to the subject.
  • the ambulatory medicament device may have a timeout feature.
  • the timeout, feature may cause the ambulatory medicament device or the control device to enter a sleep or locked state after a period of time of inactivity by the user.
  • the timeout feature may cause the ambulatory medicament device or the control device to enter a sleep or locked state after a particular period of time regardless of whether the user is interacting with the ambulatory medicament device or control device.
  • a user may have a limited period of time to modify he configuration of the ambulatory medicament device.
  • the therapy change made by a user may trigger the delivery of a medicament according to the therapy change received and confirmed by a user. This therapy change delivery may occur after a set time from period from receiving the confirmation.
  • an alarm status indicator may be presented to the user via the user interface.
  • the alarm status indicator can be an alert message or an alert symbol.
  • the alarm status indicator may be related to a configuration change made by a user, a change in the status of the AMD not related to a user input, or the condition of the subject (e.g., detected by the subject sensor).
  • FIG. 20A is an illustration of the touchscreen display 2000 of an example AMD after the touch screen is waked/unlocked by a wake action of a user and before the first user gesture is received. Even while the touchscreen display is locked, the touchscreen display 2000 may display any images, animations, text, or other graphics.
  • the first gesture prompt 2006 displays to the user 1816 the input required to unlock the therapy change user interface.
  • the first gesture prompt 2006 shows the user 1816 that a touch movement that begins at the greater -than symbol and moves right across the “Unlock” text is the acceptable first gesture.
  • the refill status of the ambulatory medical device 600 is shown in a graphic representation 2010.
  • the graphic representation 2010 shows that the insulin cartridge in the ambulatory medical device 600 is almost full.
  • a current blood sugar level 2016 is shown at the top of the touchscreen display 2000, which can inform the user 1816 of the need for a hormone that regulates blood sugar levels.
  • the touchscreen display 2000 also shows a graphic representation of a cartridge of glucagon 2024.
  • the graphic representation of an alarm 2030 in the touchscreen display 2000 show's that an alert is set on the ambulatory medical device 600.
  • FIG. 2.0B is an illustration of an example touchscreen display 2.038 that may prompt the user to enter a predetermined series of inputs for the first gesture or second gesture.
  • the touchscreen display 2038 may display touchable number keys 2040.
  • the touchscreen display 2038 prompts the user 1816 to enter the series of inputs that complete the first gesture or second gesture.
  • the text Enter Code 2042 prompts the user 1816 to enter a predetermined or preselected numerical sequence as part of the first gesture or second gesture.
  • the numerical sequence being typed by the user 1816 is displayed in field 2044 as it is entered as an aid to the user 1816.
  • the input 2046 of the touchscreen display 2038 shows that a touch movement of a swipe right across the bottom of the screen is required to complete the predetermined series of inputs for the first gesture or second gesture.
  • a Bluetooth connection symbol 2048 shows that the ambulatory medical device 600 is paired or can be paired to another electronic device.
  • FIG. 20C is an illustration of an example therapy change user interface (in this case a touchscreen display 2002).
  • the touch screen display may the user 1816 prompt to select a hormone that regulates blood sugar level.
  • the touchscreen display 2002 presents the user 1816 with an option to select between two hormones.
  • the touchscreen display 2002 aids the user 1816 by showing the selected hormone 2008 for the user 1816.
  • the selected hormone 2008 is “insulin Only”.
  • the user 1816 is also given the options of selecting the hormone Glucagon Only button 2012 or both Insulin & Glucagon button 2004 to regulate blood sugar level. Once the user 1816 selects between the one or more hormones that regulate blood sugar level.
  • the Next button 2014 may be selected to complete the therapy change selection or select more options.
  • the therapy change user interface prompts the user 1816 to select an amount of the one or more hormones that regulate blood sugar level of the user 1816.
  • the user 1816 may be prompted to select a blood sugar level and the ambulatory medical device may choose the hormone and the amount of the hormone.
  • FIG. 20D is an illustration of another therapy change user interface on a touchscreen display 2018.
  • the user 1816 is given a multitude of options.
  • One or more options in the therapy change user interface allow the user 1816 to make a therapy change selection.
  • Other options are related to the therapy change selection.
  • a Deliver Hormone button 2.036 allows the user 1816 to select a therapy change that delivers a hormone that regulates blood sugar to the user 1816.
  • a Test Blood Sugar button 2020 allows the user 1816 to test the blood sugar level of the user 1816.
  • a Generate Report button 2022 generates a document that reports the therapy changes that have been delivered to the user 1816.
  • a Refill Cartridge button 2026 allows the user 1816 to fill a cartridge in the ambulatory medical device 600 with medicament.
  • An Upload to Cloud button 2032 allows the user 1816 to transmit therapy change information to a cloud- based server.
  • a Sound Control button 2028 allows the user 1816 to control the sounds emitted by the ambulatory medical device 600.
  • a Settings button 2034 allows the user 1816 to manipulate other settings of the ambulatory medical device 600,
  • an alarm status indicator may be presented to the user via the user interface to alert the user about a change made or occurred in the AMD configuration.
  • the user 1816 may provide a therapy change input 1820 using the user interface and based on the procedure illustrated in FIG. 19.
  • therapy change control procedure 1828 implements the therapy change
  • the AMD may alert the user that a therapy change is implemented.
  • the alert message or symbol may be presented on a user interface (e.g., touch screen display) before and/or during the therapy change delivery 1804.
  • alarm indicator may inform the user 1816 that a therapy change is about to occur. Any number of details of the therapy change may be displayed as part of the alert message or symbol.
  • the alarm status indicator may appear after the user unlocks or wakes the user interface using a wake action.
  • FIG. 21 is a flow diagram illustrating an example method that may be used by an AMD to generate an alarm status indicator.
  • the device and subject monitoring procedure (excused within CCM), may continuously monitor the status of the AMD (e.g., the user interface, different modules of the AMD and the like) as well as the health condition of a subject (e.g., using various subject sensors such as analyte sensors) 2102.
  • the device and subject monitoring procedure may determine whether the received status information satisfies an alarm condition 2106. If the received status information does not satisfy an alarm condition, no cation will be taken and device and subject monitoring procedure continuous monitoring the AMD and the subject.
  • the system search for a wake signal 2108. If no wake signal is detected, the systems wait for or determine a wake signal to be received 2110. Once a wake signal is received via one or more user interfaces or sensors, the CCM may generate a display of a touchscreen lock screen interface 2112 and display one or more alarm status indicators 2114, corresponding to the detected alarm condition, on the lock screen.
  • the AMD may allow the user to provide a therapy change and then cancel the therapy change.
  • FIG. 22 is a flow diagram illustrating an example method that may be used to cancel a therapy change using a touchscreen interface.
  • the user may unlock the touchscreen display 2202 using a wake action and get access to a therapy change user interface 2204 (e.g., using a first gesture), where one or more therapy control elements may be displayed.
  • an indication of a modification to a therapy control element may be received 2206 by the user interface followed by a confirmation of the modification made 2208 (e.g., a second gesture).
  • the corresponding control parameter may be changes from a first setting to a second setting 2210.
  • the user may decide to cancel it, for example, after realizing that requested change is erroneous.
  • the user may provide a third gesture 2212 on the touch screen.
  • the therapy change procedure may restore the modified control parameter to the first setting 2214.
  • the third gesture may a restore gesture.
  • the restore gesture may be a swipe gesture.
  • the swipe gesture may be performed near or in a region of the therapy change user interface that is occupied by the therapy control element.
  • An example of a restore swipe gesture may be performed from a starting swipe position to an ending swipe position located closer to a left edge of the touchscreen than the starting swipe position.
  • the restore gesture is received on a different user interface screen than a therapy change user interface wherein one or more therapy control element are provided.
  • the restore gesture is performed in the opposite direction from a therapy change confirmation gesture that confirms the modification to the therapy control element.
  • the restore gesture in order to cancel a therapy change request, has to be provided within a set time period after the confirmation gesture is received by the user interface.
  • one or more dose control signals may be provided to the medicament delivery interface resulting in one or more therapy change deliveries.
  • the system may allow' the user, to modify a therapy change before confirmation.
  • the user may modify a therapy control element for a second time to change the corresponding control parameter from a second setting to a third setting.
  • the third setting may be the same as the first setting.
  • the first setting or the third setting may be a default setting.
  • the first setting or the third setting may be a restore setting.
  • FIG. 23A is an illustration of a touchscreen display 2300 alerting the user that the delivery of one or more medicaments will occur.
  • the alert may be accompanied by sound or vibration effects.
  • the alert informs the user 1816 a delivery of medicament will occur in 2 seconds 2302.
  • the touchscreen display 2300 is further allowing the user 1816 to perform a gesture to cancel the therapy change.
  • the gesture to cancel the delivery is a touch movement that starts at the less-than symbol 2304 and swipes left across the “Cancel” text.
  • a single gesture by the user 1816 may cancel the therapy change.
  • input of the wake signal, the first gesture, the therapy change selection, and the second gesture are all required to cancel a therapy that is being delivered.
  • the user may be able to cancel a therapy change delivery triggered based on therapy change made by the user.
  • the user may get access to the user interface using a wake action and provide a gesture to cancel the ongoing therapy corresponding to a therapy change delivery.
  • FIG. 23B is an illustration of a touchscreen display 2306 showing that a medicament is being delivered to the user 1816.
  • the text Delivering 2308 informs the user 1816 that a medicament is currently being delivered to the user 1816.
  • the progress bar 2310 is a graphic representation of the progress of the delivery. In the example shown in FIG. 23B, the delivery has just started and the progress indicates that no medicament has been delivered yet.
  • the touchscreen display 2306 is allowing the user 1816 to perform a gesture to cancel the delivery, which includes interrupting and discontinuing the delivery if it had already begun but has not yet been completed.
  • the gesture to cancel the delivery is a touch movement that starts at the less-than symbol 2312 and swipes left across the “Cancel” text.
  • the therapy change delivery 1804 may be canceled by an input by the user 1816.
  • the input to cancel a therapy change delivery 1804 may be any input such as a wake signal input or a series of touch inputs such as a gesture.
  • the AMD may support a therapy suspension and resumption procedure allowing a user to suspend all therapies or a subset of therapies for a period of time defined by the user as well as automatic resumption of one or more therapies at the end of the requested suspension period or when a threshold condition is met (e.g., a threshold condition associated with the health condition of the subject).
  • a threshold condition e.g., a threshold condition associated with the health condition of the subject.
  • inadvertent activation and/or resumption of therapy delivery can be dangerous (e.g., when the AMD is an insulin and/or glucagon infusion device).
  • the AMD may be configured to avoid inadvertent suspension or resumption of therapies.
  • inadvertent activations of suspensions of medicament delivery may be prevented by requiring a user to perform gestures to activate suspension on the ambulatory medical device.
  • the gestures may activate a therapy suspension when entered at a particular prompt to.
  • One particular application of the therapy suspension with automatic resumption feature in an AMD can be in the field of diabetes drug delivery.
  • the may need the ability to suspend delivery of insulin during situations such as exercise, which has a blood glucose lowering effect.
  • Suspension of insulin delivery can prevent a subject from entering a hypoglycemic state (extreme low blood glucose), which carries severe complications.
  • a hyperglycemic state high blood glucose that may result in complications such as diabetic ketoacidosis or neurovascular complications
  • the subject may raise above or below a dangerous level during the period of exercise. In these situations, the automatic medicament delivery resumption may improve the health of the subject.
  • the AMD may suspend one or more therapy deliveries when the AMD receives an indication that therapy (e.g., delivery of medicament) is to be suspended.
  • the indication that therapy is to be suspended may be a command from a user.
  • the user is the subject, but the user may also include other users that may have a say or interest in the care of the subject.
  • the user may be a clinician or other healthcare provider, or a parent or guardian.
  • the indication that the therapy or medicament delivery is to be suspended may be a command received via an interface of the ambulatory medicament device or from another device that provides the user with an interface to request that medicament delivery be suspended.
  • the device may be a smartwatch, smartphone, laptop or desktop, or other control device that can communicate via a wired or wireless connection with the ambulatory medical device.
  • the indication that the therapy or medicament delivery is to be suspended may be received from the ambulatory medicament device itself. For example, if the quantity of medicament available to the ambulatory medicament device drops below a threshold (e.g., the cartridge or reservoir is empty or below a minimum dosage amount), a signal may be generated to suspend medicament delivery. In some embodiments, suspension of therapy occurs based on a loss of a sensor signal, such as the loss of a glucose level signal.
  • FIG. 24 illustrates the interconnection among modules and procedures involved in receiving, accepting and/or canceling a therapy suspension request, in an example AMD.
  • a request for suspending one or more therapies can be made by a user 2414 by providing a user input 2418 (e.g., the start and stop time for therapy suspension, selecting the type of therapy that should be suspended, and the like), through a therapy suspension user interface provided by the user interface module 2404.
  • the therapy suspension user interface sends the suspension request along with the corresponding information to CCM wherein the therapy suspension control procedure 2426 implemented in CCM, processes and sends a therapy suspension signal to the device and subject monitoring procedure 2422.
  • the therapy suspension control procedure may include a therapy suspension request verification procedure to verify the therapy suspension request.
  • the device and subject monitoring procedure 2422 may be implemented in the control and computing module 2416 to monitor the status of the AMD (e.g., therapy deliveryconfiguration) and the health condition of the user 2414 (or a subject). For example, when the device and subject monitoring procedure 2422 receives the request for therapy suspension, it may send a signal to the medicament dose control procedure 2420 indicating that no does control signal should be send to the medicament delivery interface 2402 during the period request by the user 2414. In some cases, if during the suspension period, certain pre-set conditions are satisfied, the device and subject monitoring procedure 2422 automatically resumes the therapy delivery by sending a signal to the medicament dose control procedure 2420.
  • the device and subject monitoring procedure 2422 may send a signal to the medicament dose control procedure 2420 indicating that no does control signal should be send to the medicament delivery interface 2402 during the period request by the user 2414. In some cases, if during the suspension period, certain pre-set conditions are satisfied, the device and subject monitoring procedure 2422 automatically resumes the therapy delivery by sending a signal to the medicament dose control procedure
  • the subject sensor 2406 may resume the medicament delivery to the user 2414 by a sending a dose control signal to the medicament delivery interface 2402.
  • the user may initiate a therapy suspension request starting with a wake action (e.g., received by the wake interface 2.408 and processed by the wake control procedure 2424), that activates the user interface module 2404.
  • a wake action e.g., received by the wake interface 2.408 and processed by the wake control procedure 2424
  • the user may unlock a therapy suspension user interface where the information pertaining therapy suspension is provided.
  • the user may confirm the requested therapy suspension using a second interaction with the user interface.
  • the system may allow access to the therapy suspension user interface and accept the suspension request, when the first and second interaction with the user interface are verified by the therapy suspension control procedure 2426.
  • the therapy suspension control procedure 2426 may receive the request for suspension and suspension information from another device connected to the ambulatory medical device 600 (e.g., through the communication module).
  • the suspension information provided by the user may include a set of parameters needed for a suspension.
  • the suspension information may include the dates and/or times for starting and ending the therapy suspension, threshold values needed to define a threshold condition that may trigger an early resumption of the therapy delivery, and the like.
  • suspension information may indicate that the suspension of therapy should happen at a particular time or after a particular event (e.g., after the next dose of medicament is delivered or after the condition of the subject reaches a particular state, such as the middle of a desired blood glucose range).
  • the threshold values may be associated with input provided by the subject sensor 2406 or other types of sensors that may be used to monitor one or more parameters associated with the health condition of the user 2414.
  • the parameters for a suspension may include the start and stop conditions for a suspension.
  • the start condition for a suspension may be a condition that, when met, activates a suspension. In some such examples, the start condition is met when a timer runs out.
  • the stop condition is a condition that, when met, ends the suspension. In one example, the stop condition is met when a timer runs out. In another example, the stop condition is met when a threshold is met.
  • a threshold may be related to a measurement taken by ambulatory medical device (e.g., by a subject sensor 2406), such as a glucose concentration of the blood of a user. The threshold may be met if the glucose concentration goes above, goes below, or matches a set concentration.
  • a time condition and a threshold condition may be set simultaneously.
  • a user may specify that a suspension will end after a set time. However, the suspension may end sooner than the set time if the glucose concentration of the user meets a threshold.
  • the request to suspend therapy may include an indefinite suspension period.
  • the request may not include a time period specified by a user or an identity of a resumption condition.
  • the indication may include a request to temporarily suspend delivery of therapy for a defined period of time or until a further interaction or event occurs.
  • the resumption condition can include an expiration of time or an active event (e.g., a command or a determined condition of a subject).
  • the therapy to be suspended may include any type of therapy.
  • the therapy to be suspended may be the suspension of the delivery of medicament, which may include insulin, counter- regulatory agent (e.g., Glucagon), or both insulin and a counter-regulatory agent.
  • the ambulatory medicament device may be capable of and/or configured to administer multiple medicaments (e.g., both insulin and a counter-regulatory agent).
  • the request to suspend therapy may include a request to suspend one (e.g., insulin or the counter-regulatory agent) or both of the medicaments,
  • the interactions with the user interface may include the selection of an icon, a series of taps or inputs, one or more gestures (e.g., a swipe or other simple or complex movement across the touchscreen), performing a pattern or sequence on the touchscreen (e.g., drawing an image), a multi-touch or multi-input interaction, a combination of the foregoing, or any other type of interaction with a touchscreen, or portion thereof.
  • the series of inputs may be any combination of touch movements, touch points, numerical characters, alphabetical characters, and other symbols.
  • the first, and/or second user interactions may include a predetermined sequence of numerical or alphabetical inputs.
  • a series of multiple inputs the range of parameters for an input may be dependent on other inputs in the series.
  • required start position of a touch movement may be dependent on the position of the previous touch movement.
  • the time that the series of inputs are entered may also be a part of the range of parameters.
  • a senes of inputs may need to be entered in no less than 3 seconds or more than 3 seconds, and no more than 15 seconds or less than 15 seconds.
  • a visual guide may assist the user in generating the user interaction.
  • one or more arrows or images may be presented to the user to guide the user in providing the command to suspend the delivery of therapy.
  • one or more of the interactions may include interacting with a sensor as an optical sensor (e.g., visible light or IR sensor), biometric sensor (e.g., a fingerprint or retinal scanner), a proximity sensor, a gyroscope, or a combination of accelerometer and gyroscope, and the like.
  • the second user interaction may be made through a wireless signal such as RFID or Bluetooth.
  • the second user interaction may include receiving a selection of an indicator box that correspond to either insulin or glucagon and receiving a predetermined sequence of numerical inputs in order to deliver the therapy change selection.
  • the type of user interaction that unlocks the touchscreen, provides access to a therapy suspension user interface, or confirms a suspension request may be the same or may differ.
  • the system may have a time-out such that if no interaction occurs for a set period of time at each step during the therapy suspension request process, the user interface will turn off and the therapy suspension request process has to start again.
  • the time-out if no interaction occurs for more than 30 seconds after the system is waked/ unlocked before the second user interaction is received by the user interface, the user interface will be deactivated.
  • FIG. 25 is a flow diagram illustrating an example method for receiving and implementing a suspension request, which may be implemented by an AMD.
  • the user may use a touchscreen interface to request and confirm a therapy suspension.
  • the AMD may wait for a first gesture on the touchscreen.
  • a therapy user interface may be activated 2506 where the user can request a therapy suspension and provide 2508 the suspension information (e.g., a start day/time and stop day/time and/or a resumption condition).
  • the AMD may wait for second gesture on the user interface 2510.
  • the therapy delivery will be suspended 2512. If the second gesture is received and verified by the therapy suspension control procedure 2426, the therapy delivery will be suspended 2512. If the second gesture is not received or not verified by the therapy suspension control procedure 2426, the therapy suspension control procedure 2426, may determine if a set time has passed since receiving the therapy suspension request 2514. If it is determined that a set time has passed since receiving the therapy suspension request, the request wall be canceled, and the touch screen wall be locked 2516. If it is determined that time from receiving the therapy suspension is less than a set time the AMD may wait for the second gesture to be received.
  • the AN® may automatically activate a therapy suspension user interface 2506, without the need for a first gesture 2504.
  • a gesture e.g., a first gesture
  • a second gesture may stop a suspension before any of the conditions of the stop parameter are met. This allows the user the versatility of being able to modify a suspension that has been activated.
  • FIG. 26 is an illustration of a plurality of screens 2600 that the ambulatory medical device may display when a user activates a therapy suspension user interface.
  • Screen 2602 shows a user interface that an ambulatory medical device may display to a user 2414.
  • the display may be a touchscreen display 2410 that can accept input that includes the first and second gestures.
  • the therapy suspension system (ambulatory medical device 600) is not limited to the displays shown in FIG. 26.
  • Various displays may communicate, to the user 2414, the same information shown in FIG. 26.
  • the screen 2602 allows the user 2414 to select various functions.
  • the pause button 2612, shown on screen 2602 is a function that suspends the delivery of a medicament to the user 2414. When the pause button 2612 is selected, the user 2414 is treated to the pause screen 2604.
  • the pause screen 2604 allows the user 2414 to select a duration of the medicament suspension.
  • the ambulatory medical device 600 may display various interfaces to allow the user 2414 to select a duration of the medicament suspension.
  • the pause screen 2604 shows a simple interface, giving the user 2414 one of two duration options.
  • the pause screen 2606 shows the user 2414 the duration 2614 that the user 2414 selected (e.g., in the figure the user 2414 selected 1 hour. Thus, the medicament delivery is suspended for 1 hour after the suspension begins).
  • the pause screen 2606 has a prompt 2608 for the user to make a gesture to confirm the requested suspension before the medicament suspension begins. As shown by the prompt 2608, the user 2414 is being prompted to swipe right across the bottom of the screen. Once the user 2414 performs the gesture to begin the medicament suspension, the suspension screen 2610 is displayed on the touchscreen. The suspension screen 2610 informs the user 2414 that the medicament is paused.
  • the user 2.414 has the option of performing another gesture to unlock the ambulatory medical device.
  • the prompt 2616 for the user 2414 to unlock the device forces the user to perform another swipe to execute more functions on the ambulatory medical device 600.
  • Suspending the medicament delivery may occur by not generating a dose control signal to deliver a dose of medicament.
  • suspending the medicament delivery may occur by sending a signal to the medicament pump to cease providing therapy or medicament to the subject.
  • the ambulatory medicament device may not immediately suspend therapy upon receiving a command to suspend therapy. For example, if the ambulatory medicament device is in the process of delivering medicament or determines that a condition of the subject indicates that medicament may soon be required to maintain the subject’s condition (e.g., blood glucose) within a particular state (e.g., within a desired blood glucose range), the suspension of therapy may be delayed until at least such time that medicament is not being delivered, is predicted to not be required during the suspension period, or the next therapy has been delivered. In some such cases, the ambulatory medicament device may inform that user that the suspension of therapy is being delayed. Further, the ambulatory medicament device may indicate the reason for the delay.
  • a condition of the subject e.g., blood glucose
  • a particular state e.g., within a desired blood glucose range
  • the suspension of therapy may be delayed until at least such time that medicament is not being delivered, is predicted to not be required during the suspension period, or the next therapy has been delivered.
  • the ambulatory medicament device may inform
  • the user may be able to override the delay and request immediate suspension of therapy. For example, if the user is replacing the medicament cartridge, the user may override an indication that the suspension of therapy- should be delayed. In some cases, the requested start time may be overridden by a determined condition of the subject.
  • the suspension of therapy or the suspension of the delivery of medicament may continue until a resumption condition occurs. In certain cases, when a resumption condition is met, the suspension period may automatically end without action by the user or subject.
  • the resumption condition may include the expiration of a time period, a command from a user (e.g., the subject), detection that the ambulatory medicament devise satisfies a condition (e.g., that medicament has been refilled), that the condition of the subject meets certain criteria (e.g., the subject’s blood glucose level drops below a threshold range or rises above a threshold range), or any other condition that may satisfy the reason for suspension of therapy or that overrides the request for suspension of therapy.
  • the drug delivery device may be configured to automatically resume drug delivery when a glucose threshold is reached or exceeded. This threshold could be set to 300nig/dl for example.
  • the resumption condition may include detection of an impending risk of hypoglycemia or hyperglycemia, or a hypoglycemia or hyperglycemia event. Further, the resumption condition may include a meal announcement, or an “exercise concluded announcement,” a motion sensing event, a pause of other administered medicament, a conclusion of an undefined suspension length (e.g., during cartridge change), a speed -based resumption event, a location-based resumption, a remote resumption in case of an emergency (e.g., commanded from caregiver admin software or clinician), or any other type of resumption event. In some cases, the resumption condition can include a combination of criteria. [0279] In some cases, automatically resuming therapy may include discontinuing the suspension of therapy before the expiration of the suspension period. For example, if a condition that caused therapy to be suspended is resolved prior to the expiration of the suspension period, therapy may be resumed.
  • the ambulatory medicament device may confirm that one or more additional conditions of the ambulatory medicament device are satisfied before therapy is resumed. For example, if the ambulatory medicament device determines that medicament has not been refilled or if there is a problem with the refill (e.g., cartridge is incorrectly installed), the ambulatory medicament device may continue to maintain the suspension of therapy despite the trigger to resume therapy.
  • a therapy suspension may be ended if a third interaction with a user interface (e.g., a gesture) is detected.
  • the third user interface interaction may be detected by the user interface module 2404 and sent to the therapy suspension control procedure 2426. If the therapy suspension control procedure 2426 verifies that third interaction with the user interface is a predetermined third user interface interaction, it may send a signal to the device and subject monitoring procedure 2422 to activate the medicament dose control procedure 2420.
  • This allows the user the versatility of being able to end a suspension that has been activated, during the suspension period set by the user before the confirmation (second interface with the user interface).
  • a user may decide to end a therapy suspension to modify one or more suspension conditions set prior to activation of the current therapy suspension. In some other examples, user may decide to end a therapy suspension due to change in user’s health condition not included in one or more therapy resumption conditions provided before activating the current therapy suspension.
  • FIG. 27 is a flow diagram illustrating an example method of resuming a suspended therapy that may be implemented by an AMD.
  • the AMD suspends one or more therapies selected for suspension 2704 at suspension initiation time received as part of the suspension information.
  • therapy suspension control procedure 2426 deactivates the medicament dose control procedure 2.420 using the device and subject monitoring procedure 2422.
  • the therapy suspension control procedure 2426 continuously monitors the system clock and the subject and device condition (e.g., using medicament dose control procedure 2420).
  • the therapy suspension control procedure 2426 determines that the time passed since the suspension initiation is less than the requested suspension time period 2706 and none of condition for resumption has been met 2708, the therapy suspension continues.
  • the therapy suspension control procedure 2426 determines that the time passed since the suspension initiation is equal to the requested suspension time period 2706, or one or more resumption conditions have been met 2708, it may check other AMD or subject conditions (not included in the therapy suspension information), in order to determine whether the therapy delivery can be safely resumed 2710. If it is determined that the therapy delivery cannot be safely resumed, an alert message will be sent to the user interface to inform the about the reason for such determination 2714. If it is determined that the therapy delivery can be safely resumed, the one or more suspended therapies wall be resumed 2712.
  • FIG. 28 is an illustration 2800 of a plurality of screens that may be displayed, for example, on a touchscreen display when a user 2414 resumes a suspended therapy.
  • Screen 2802 informs the user that the delivery of medicament is currently in a suspended mode.
  • the screen 2812 also shows the user 2414 the current glucose concentration of the blood of the user 2414.
  • the ambulatory medical device 600 may display various vital measurements that are useful to the user 2414.
  • the medicament suspension ends if the glucose concentration of the blood of the user meets or passes a threshold.
  • the interface screen 2804 allows the user 2414 to select and execute various functions on the ambulatory medical device 600.
  • the resume button 2814 is a function that ends a medicament suspension.
  • the ambulatory medical device 600 displays a resume screen 2806.
  • the resume screen 2806 has a prompt 2816 that prompts the user 2414 to perform a gesture.
  • the user 2414 receives a prompt 2816 in the resume screen to swipe right across the bottom of the resume screen 2806. The requirement to perform the gesture to resume medicament delivery prevents the user 2414 from inadvertently resuming medicament delivery in the ambulatory medical device 600.
  • the medicament suspension ends.
  • the resumption screen 2808 shows the user 2414 that the regular medicament delivery has resumed.
  • the ambulatory medical device 600 may display a lock screen 2810.
  • the lock screen 2810 prevents the user 2414 from inadvertently executing more functions on the ambulatory medical device 600.
  • the ambulatory medical device 600 may end the suspension before the one or more conditions to end the suspension are met, when it receives a second gesture.
  • the purpose of the second gesture is to ensure that the user 2414 does not inadvertently end the suspension.
  • the second gesture may be simple or complex.
  • the ambulatory medicament device may determine whether a dose of medicament should be supplied to the user based on a control algorithm used by the ambulatory medicament device to control the provisioning of medicament to the subject. For example, the therapy suspension control procedure 2426 may determine a resumption condition has been satisfied or receive a user input from the user interface module 2404 (a third interaction with a user interface) indicating that therapy suspension should be ended. Subsequently the therapy suspension control procedure 2426 may send a signal to the device and subject monitoring procedure 2422 to activate the medicament dose control procedure 2420. If medicament is to be supplied, the medicament does medicament dose control procedure 2420 may generate and send a dose control signal to the medicament delivery interface 2402.
  • the ambulatory medicament device may alert the user and/or the subject that therapy is being resumed. This alert may occur before generating a dose control signal and/or after a resumption condition is satisfied (e.g., a suspension time expires).
  • a resumption condition e.g., a suspension time expires.
  • the user may request that the suspension of therapy end early. The user may request the early resumption of therapy be interacting with the aforementioned user interface using one or more of the previously described interaction methods (e.g., gestures or taps).
  • An ambulatory medicament device such as, but not limited to, an insulin pump, that provides life-saving treatment to subjects or subjects based on the condition of the subject, may include a user interface (e.g., a touchscreen display) that lets a user to modify the settings of the ambulatory medicament device.
  • the setting may include, but not limited to, a condition that triggers the delivery of medicament to a subject, the quantity of medicament delivered when a condition is met, type of the medicament and the like.
  • the setting may also include features of the AMD that may not be directly related to the medicament delivery (e.g., the screen brightness, an alarm sound, and the like).
  • certain authorized users e.g., a healthcare provider
  • some other settings other authorized users e.g., the subject, a guardian or parent of the subject.
  • a healthcare provider can modify the settings of the ambulatory medicament device.
  • a non-healthcare provider modify at least some settings of the ambulatory medicament device.
  • changing the medicament cartridge may include interacting with a user interface and/or one or more settings of the ambulatory medicament device.
  • Another example of when it is desirable for a non-healthcare user (e.g., a subject, parent, or guardian) to modify settings of the ambulatory medicament device is when the initial settings of the ambulatory medicament device are not providing the desired effect (e.g., sufficient medicament, too much medicament, providing the medicament too slowly or too fast, etc.).
  • the desired effect e.g., sufficient medicament, too much medicament, providing the medicament too slowly or too fast, etc.
  • normal maintenance of the ambulatory medicament device and/or subject may require interaction with the ambulatory medicament device settings and/or controls.
  • negative consequences may begin to occur when an ambulatory medicament device remains connected to a subject at the same site for more than a threshold period of time (e.g., for more than 2-3 days, more than 5 days, more than a week, etc.).
  • the ambulatory medicament device may need to be periodically moved from one site on the subject to another site on the subject (e.g,, from left-side to right-side, from arm to leg, from stomach to back, etc,).
  • the change in site location may require interaction with settings of the ambulatory medicament device (e.g., pausing operation until the site change is completed).
  • the user may be a subject receiving medicament or therapy, or may be another user, such as a clinician or healthcare provider, or a parent or guardian of the subject.
  • the passcode required for changing one or more setting via an intermediary device may be different that the passcode required for changing the same settings directly using the AMD’s user interface.
  • One solution to regulating access to settings of the ambulatory medicament device is to implement a lock feature to require that a user provide a passcode, a passcode, or other information before the user is permitted to modify a setting of the AMD, such as a control parameter.
  • a passcode can be substituted for a passcode or any other type of secret or semi-secret information.
  • the AMD when the AMD is in the locked state, it may continue delivering therapy to the subject at the same rate as unlocked state.
  • the lock feature may be activated by default or may be activated by a user.
  • the lock feature can be enabled through a setting in a control menu of the AMD device provided on a user interface (i.e., touchscreen display).
  • the setting may include an on/off toggle (e.g., a software interface element or a hardware interface element) so when the toggle is on, a passcode (e.g., 4 to 8 numeric digits) may be required.
  • a passcode e.g., 4 to 8 numeric digits
  • the passcode e.g., a 4 to 8 numeric digit code
  • the user may program the ambulatory medicament device with a user passcode selected by the user.
  • the user passcode may be set in response to a passcode change request.
  • a user passcode may expire.
  • a user may be required to generate a new passcode after the previous passcode expires or before the previous passcode is permitted to expire.
  • the ambulatory medicament device may periodically generate a new passcode (e.g., an override passcode), or may generate the passcode at a time when a user supplies the passcode.
  • the user interface element used for accessing a user interface that enable changing one or more settings of the AMD may differ from the user interface for modifying the control parameters associated with that setting.
  • a keypad may be used to enter a passcode for unlocking a user interface for changing a control parameter and a touchscreen may be used to modify the control parameter.
  • the user interface screen may look and function the same as if the lock feature were not enabled. If the lock feature is enabled, when a visual guide for unlocking the device (such as, for example, a linear unlock slider, an arcuate unlock slider, or another unlock user interface element) is activated, a passcode entry interface (e.g., a keypad user interface element) may be displayed. If either the user passcode or the global override passcode is entered, the user interface may proceed as normal. Otherwise, the user interface may revert back to the original lock screen.
  • a visual guide for unlocking the device such as, for example, a linear unlock slider, an arcuate unlock slider, or another unlock user interface element
  • a passcode entry interface e.g., a keypad user interface element
  • the user action that permits a user to change one or more settings of the .AMD may be different from the wake action that activates a user interface.
  • a wake action may be used to activate a touchscreen display that may display a plurality of user selectable elements some of which may be accessible without a passcode.
  • a subset of the user selectable elements for example those allowing the user to change therapycontrol parameters, may require a passcode.
  • access to each user parameter control element may require a different passcode.
  • providing a passcode may to an AMD in locked state, may directly enable access to a subset of control parameter elements.
  • the passcode may be set by- the user enabling the user to select a passcode the user is more likely to remember.
  • the passcode may be set by- the user enabling the user to select a passcode the user is more likely to remember.
  • the passcode may not remember the passcode. Due to the nature of the device (e.g., a device that may- provide life-saving treatment), it is desirable that certain users not be restricted from accessing particular settings of the ambulatory medicament device, and be able to quickly (e.g., within seconds, minutes, prior to a next therapy event, or before harm may occur to the subject) obtain access to the particular settings when required.
  • embodiments disclosed herein include an ambulatory medicament device that includes an override passcode that enables access to the ambulatory medicament device (or control settings thereof) regardless of whether the user passcode is provided.
  • the passcode or the override passcode can be a series of taps, series of inputs, a complex or a simple gesture (e.g., a swipe or other movement across the touchscreen),
  • the series of inputs may be any combination of touch movements, touch points, numerical characters, alphabetical characters, and other symbols.
  • the time that the series of inputs are entered may also be a part of the range of parameters. For example, a series of inputs may need to be entered in no less than 3 seconds or more than 3 seconds, and no more than 15 seconds or less than 15 seconds.
  • One example of the complex gesture is a swipe.
  • the passcode or the override passcode can be a complex or a simple gesture (e.g., a swipe or other movement across the touchscreen), performing a pattern or sequence on the touchscreen (e.g., drawing an image), a multi-touch interaction, a combination of the foregoing, or any other type of interaction with a touchscreen, or portion thereof.
  • a complex gesture is entering a predetermined sequence of touches.
  • the passcode may include a quiz or set of questions,
  • the ambulatory medicament device may be configured to receive therapy settings or modifications to therapy settings from an intermediary device via a communication connection. In some cases, this feature may be supported in addition to providing the user with option of modifying one or more settings with a user interface of the AMD.
  • the communication connection between the intermediary device and the AMD may be a direct connection via, for example, Bluetooth®, or a connection via a network, such as over a local area network or a wide area network.
  • the ambulatory medicament device may include a wireless transceiver, such as an NB-LTE transceiver, a Wi-Fi transceiver, or a Bluetooth transceiver.
  • the intermediary device that provides the user with a user interface to modify settings of the AMD, include any type of device (e.g., a computing device) that can communicate with an ambulatory medicament device.
  • the intermediary device may be a laptop or desktop computer, a smartwatch, a smartphone, or a hardware control
  • a user may provide a user-generated passcode or an override passcode via an interface of the computing device.
  • the computing device may then provide the usergenerated passcode or the override passcode to the ambulatory medicament device via the network connection between the devices.
  • certain intermediary devices may have access to user interfaces that may be used to change one or more settings (e.g., therapy settings) of the AMD.
  • the smart phone of a guardian or a parent of the subject may be used to change one or more settings of the AMD while the AMD is in the locked state.
  • the AMD may be configured to receive a passcode from or via a computing systems (e.g., a cloud computing system).
  • the ,AMD may receive passcode through a direct end-to-end connection (e.g., a wireless connection over a wide area network) stablished with the computing system.
  • another computing device e.g., a smartphone, a laptop, a personal computer, and the like
  • the user can obtain access to the user interface that permits modification of the control parameter by supplying an override passcode.
  • the override passcode may be a universal fixed passcode (e.g., an 8-digit override passcode) that can be used instead of the user set passcode.
  • the override passcode can be stored in the ambulatory medicament device at the time of manufacture and may be shared among multiple ambulatory medicament devices (e.g., a global override passcode), or may be unique to a particular ambulatory medicament device.
  • the override passcode may be managed by the manufacturer or by a third-party service. To obtain the override passcode, the user may contact the manufacturer or passcode managing service.
  • enabling the passcode may exist to prevent a user with a diminished mental capacity (e.g., a child) from modifying settings of the ambulatory medicament device.
  • security may be less of a concern and any user can contact the manufacturer or passcode managing service to obtain the override passcode.
  • a single global override may be used for all devices produced by the manufacturer.
  • a level of security may be desired.
  • the user may be required to provide a serial number of the ambulatory medicament device.
  • each model or each unit of the ambulatory medicament device may have a different override passcode. The user may provide authorization information and a serial number of the ambulatory medicament device to the manufacturer or passcode managing service to obtain the override passcode.
  • the ambulatory medicament device may periodically generate a new override passcode or may generate an override passcode at a time when a user supplies the passcode.
  • the ambulatory medicament device may use the same parametric values to generate the override passcode as another device may use thereby ensuring a match between the override passcodes.
  • the override passcode can be obtained regardless of whether a user is able to contact a manufacturer or other passcode managing service.
  • the user may generate the override passcode without access to a network or phone using, for example, a computing device that can access a common parameter value as the ambulatory medicament device.
  • the override passcode may change over time or be a rotating passcode.
  • the override passcode may change every thirty seconds, every minute, every hour, etc.
  • the override passcode may be determined from an algorithm executed by an application.
  • the ambulatory medicament device may store a copy of the algorithm in a memory of the ambulatory medicament device and may execute the algorithm to determine the override passcode that is currently valid.
  • a copy of the algorithm may be executed by another computing device accessible by the user.
  • the output of the algorithm may be based on a value that is commonly accessible by the ambulatory medicament device and the copy of the algorithm accessible by the computing device.
  • the output of the algorithm may be generated based on a time, a user identifier, a provided value, or any other factor that may be used to repeatedly generate the same output.
  • the override passcode may be calculated based on a combination of factors.
  • the override passcode may be calculated based on a portion of a serial number or model number for the ambulatory medicament device and the time.
  • the determination of the override passcode may be calculated by the ambulatory medicament device, a computer server, and/or an application on a user device.
  • the override code can be automatically received by the ambulatory medicament device. Thus, a user may not need to see or enter the override code.
  • the override code may be transmitted to another device of the user (e.g., a smartphone or laptop). For example, the override code can be texted to a user’s smartphone. In some cases, the override code may be received in a coded manner that may not be understandable by a child or user with diminished mental capacity.
  • the override passcode may be linked to a location.
  • the override passcode may be enterable at a healthcare provider’s office or at the subject’s place of residence.
  • the determination of the location of the ambulatory medicament device may be based on a geolocation system (e.g., a Global positioning System (GPS)) available to the ambulatory medicament device.
  • GPS Global positioning System
  • the passcode may provide a second level of security in addition to other interactions with the user interface (e.g., a first and a second gesture on a touchscreen display) that may be used to change the therapy settings and/or accept the change made to a therapy setting.
  • the passcode may be used instead of other interactions with the user interface (described above).
  • interacting with the user interface may cause the ambulatory medicament device, or other device that can modify a control of the ambulatory medicament device, to present a passcode input screen to the user.
  • the user may enter the passcode to unlock additional user interface features including, for example, a user interface that enables the user to modify at least one control parameter of the ambulatory medicament device.
  • the control parameter can be modified based on an interaction with a parameter control element of the user interface. Further, modification of the control parameter may cause modification of the generation of a dose control signal that is generated by a control algorithm based at least in part on the control parameter.
  • the ambulatory medicament device may have an advanced therapy screen, or other user interface, that permits a healthcare provider, or other user, to obtain additional details relating to therapy provided by the ambulatory medicament device.
  • the advanced therapy screen may generally be intended for a knowledgeable user, such as a clinician, in some cases, any user may obtain access to the advanced therapy screen.
  • the advanced therapy screen may permit the healthcare provider to modify control parameters that may not be modifiable by other users.
  • the healthcare provider may be able to control parameters that relate to the calculation of a rate of insulin accumulation, the rate the insulin diminishes within the blood of the subject, the setting of a glucose setpoint, an aggression level or factor of therapy relating to an amount of insulin provided when the subject’s glucose level is outside the setpoint range, or when the insulin reaches a point of maximum concentration within the blood of the subject (e.g., Tmax).
  • Tmax a point of maximum concentration within the blood of the subject
  • Access to the advanced therapy screen may be limited by requirement of a passcode, which may be referred to as a clinician passcode to distinguish it from the user-generated passcode and/or the override passcode.
  • This clinician passcode may or may not be usergenerated.
  • the clinician passcode may be a separate passcode from the user-generated passcode that permits access to the non-advanced therapy screen interface.
  • the clinician passcode may be separate from the override passcode that permits a user to override the user-generated passcode to obtain access to the non-advanced therapy screen interface.
  • the clinician passcode may be used as an override passcode.
  • the clinician passcode can be valid for period of time (e.g., set by a subject or another authorized user such as the guardian or apparent of the subject). For example, the clinician passcode may be valid for a day, a week, or a month. In some examples, the AMD may allow' certain authorized users to terminate the clinician access at any time.
  • access to the advanced therapy screen may be limited to a particular period of time. After the time period expires, the ambulatory medicament device may automatically restrict access to the advanced therapy screen. In some cases, the window of access may be extended. For example, if the healthcare provider is continuing to interact with the advanced therapy screen, the screen may remain accessible.
  • the advanced therapy screen may provide additional features. For example, while a user may be able to indicate that an amount of insulin provided for a meal or as a correction factor should be higher or lower, the healthcare provider may be able to specifically adjust the amount of insulin. Moreover, while a user’s direction may or may not be followed depending, for example, if the request exceeds a threshold or may cause blood glucose to not satisfy a setpoint range, an indication provided via the advanced therapy screen may be followed regardless or may have a wider range or different threshold that may control whether the instruction is followed. Further, the advanced therapy screen may be used to temporarily pause therapy and/or may prevent subject access.
  • the manufacturer of the ambulatory medicament device may provide a remote unlock signal that can be used to unlock access to the ambulatory medicament device and/or to an advanced therapy screen of the ambulatory medicament device.
  • the passcode may be desired to prevent particular users from inadvertently changing certain control parameters of the ambulatory medicament device.
  • features of the ambulatory medicament device that do not affect therapy may remain accessible to a user when the ambulatory medicament device is in a locked state.
  • a user may be able to access therapy history, screen brightness settings or colors, or any other feature that is unlikely to harm a subject if modified in a particular manner.
  • the passcode feature is generally to prevent control parameter changes, the ambulatory medicament device may provide therapy and continue to provide therapy at the same rate and under the same condition, whether or not the ambulatory medicament device is locked or unlocked.
  • the ambulatory medicament device validates the passcode.
  • the passcode may be validated by comparing the received passcode to a passcode stored in a memory of the ambulatory medicament device or generated by the ambulatory medicament device. If the passcode received from the user is successfully validated, the user may be granted access to a user interface to modifx one or more control parameters. In some cases, the user may be requested to re-enter a passcode to confirm a change to a control parameter. In some other examples, the user may be requested to provide a gesture on a touchscreen to confirm a change to a control parameter.
  • the ambulatory medicament device may prevent access to the user interface to modify the one or more control parameters.
  • the user interface that presents the user with the ability to enter the passcode may permit the user a particular number of tries or a particular number of tries within a particular time period to enter the user passcode. If the correct user passcode is not entered within the provided number of tries or within the particular time period, the user interface may enter a lock state (e.g., the screen will be turned off) and prevent further attempts to enter a passcode for at least a period of time. In some cases, the user passcode option may be indefinitely locked or blocked.
  • control parameters of the ambulatory medical device may be accessible when the override passcode is provided.
  • a user passcode of a different user may be used to provide access to the control parameters of the ambulatory medical device.
  • the user interface may block any attempt to change the override passcode for at least a period of time,
  • a user may deactivate the passcode feature of the ambulatory medicament device. Deactivating the passcode feature may require use of a, separate passcode or the override passcode in addition to the user passcode.
  • the passcode may be optional or omitted based on the computing device connected to the ambulatory medicament device. For example, if the end-to-end connection is established between a smartphone registered to a particular user (e.g., a parent of the subject), the ambulatory medicament device may unlock automatically without requiring a passcode. In other cases, the smartphone, or other computing device, may automatically provide the usergenerated passcode or the override passcode to the ambulatory medicament device upon establishing a connection. In some cases, the ambulatory medicament device may automatically be unlocked when connected to a charger or when in a particular geographic area. For example, a geo-fence may be configured in one or more locations, such as the subject’s house or the clinician’s office.
  • the ambulatory medicament device may automatically be unlocked. Similarly, when the ambulatory medicament device determines that it is not within the geo-fenced region, it may automatically be locked.
  • the determination of the location of the ambulatory medicament device may be made based on a geo-location system, such as the Global Positioning System (GPS).
  • GPS Global Positioning System
  • the user interface screen may be turned off or may accept only the global override passcode.
  • FIG. 29 is a block diagram illustrating the interconnection among modules and procedures in AMD involved in changing the settings of the AMD.
  • one or more settings of the AMD may be changed using a setting change input 2916 to one or more parameter control element parameter control elements 2930/2934/2938 presented on one or more setting user interface screens 2928/2932/2936 provided by the user interface module 2902.
  • access to one or more setting control screens 2928/2932/2936 and/or one or more parameter control element 2930/2934/2938 may be protected by a passcode.
  • the user may provide a passcode input 2918 (e.g., a user generated passcode or an override passcode), via the user interface module 2902 (e.g., using a touchscreen display 2906 or alphanumeric pad 2908).
  • a passcode input 2918 e.g., a user generated passcode or an override passcode
  • the user interface module 2902 e.g., using a touchscreen display 2906 or alphanumeric pad 2908.
  • the user 2910 may provide a passcode 2940 using an intermediary device (e.g., a laptop, a smart phone, and the like) that is connected to the AMD (e.g., via a wireless link).
  • the access to one or more setting user interface screens 2928/2932/2936 and/or parameter control element parameter control elements 2930/2934/2938 may be managed by setting change procedures 2912 stored in a memory in the control and computing module of the AMD.
  • a hard processor may execute the machine-readable instructions associated with the setting change procedures 2912.
  • the option to provide a passcode may become available, when the user 2910 performs a wake action on a wake interface 2904.
  • the wake control procedure 2922 of the CCM determines that a valid wake action is performed, it may present selectable elements associated with the setting user interface screens 2928/2932/2936, for example, on a touchscreen display.
  • the first screen presented on the touchscreen display may provide other selectable elements including an element to change the settings of the AMD.
  • selecting element associated with settings change may activate a second screen that presents selectable elements associated with the setting user interface screens 2928/2932/2936.
  • any of the setting user interface screens 2928/2932/2936 and/or parameter control element 2930/2.934/2938 may require a passcode.
  • each one of the user interface screens 2928/2932/2936 and/or parameter control element 2930/2934/2938 may require a different passcode.
  • one or more user interface screens 2928/2932/2936 and/or parameter control element 2930/2934/2938 may not require a passcode.
  • access to the fist user interface screen 2928 may require a first passcode
  • the access to the second user interface screen 2932 may require a second passcode
  • the access to the third user interface screen 2936 may not need a passcode.
  • all the user interface screens 2928/2932/2936 may be presented without the need for providing a passcode, but access to the one or more control elements in a control screen may require a passcode.
  • the user may select the second user interface screen 2932 without entering a passcode but in order to select one or more parameter control element 2934 on that screen, the user may need to enter one or more passcodes.
  • the passcode may be transmitted to the control and computing unit of the AMD where the setting change procedures 2912 (therapy change control procedure 2920 and wake control procedure 2922) determine the validity of the passcode by comparing it to the one or more stored user generated passwords 2926 or received or stored override passwords 2924 stored in a memory of the CCM.
  • FIG. 30 is a flow diagram illustrating an example method that may be used by an AMD to allow a user to change a setting of the AMD using a user generated passcode or an override passcode.
  • the AMD e.g., the wake action procedure in the CCM
  • a user interface may be activated.
  • the wake action may directly activate a setting change interface 3004 (e.g., a setting change screen presented on a touchscreen display).
  • a specific wake action may activate the setting change interface.
  • the AMD e.g., the setting change procedure in the CCM
  • may request a passcode e.g., by presenting a window to enter a passcode.
  • the AMD may determine whether the passcode matches a user generated passcode 3008. If it is determined the passcode matches with a user generated passcode, the AMD may provide access 3010 to one or more control parameter elements associated with the received passcode. If the received passcode dose not match with any of the stored user generated passcode, the AMD may determine whether the passcode matches with an override passcode 3012. If it is determined the passcode matches an override passcode stored in a memory of AMD or a memory of an authorized computing device, the AMD may provide access 3014 to one or more control parameter elements associated with the received override passcode.
  • FIG. 31 is a flow diagram illustrating another example method that may be used by an AMD to allow a user to change a setting of the AMD using a user generated passcode or an override passcode.
  • the AMD e.g., the wake action procedure in the CCM
  • the AMD may provide a user interface (e.g., a touchscreen display) on which the user can provide a first gesture to activate a setting change interface or screen.
  • the AMD may activate a setting change interface 3106 or a screen.
  • the setting change interface or a screen may include one or more parameter control elements associated with one or more settings of the AMD.
  • the setting change interface or a screen may include one or more selectable elements each associated with a setting change screen (e.g., a screen provided on a touchscreen display) that may include one or more control parameters.
  • the AMD may determine whether the requested setting change is passcode protected or not 31 10.
  • the request for setting change may include selecting a parameter control element.
  • the request for setting change may include selecting a list of parameter control elements (e.g., included in a separate screen provided on a touchscreen display).
  • the AMD may permit access to one or more parameter control elements associated with the requested setting change 3112.
  • the user may need to provide a second gesture on the user interface (e.g., touchscreen display) to confirm the changes made.
  • the AMD may change one or more settings 3118 according to the requested and confirmed changes.
  • the AMD may request a passcode 3120 via a passcode display (e.g., provided on a touchscreen display). In some examples, the request for the passcode may be presented on a display but the passcode may be received via a physical keypad.
  • the AMD may validate the passcode 3124 by comparing it with one or more user generated passcodes or an override passcode. If it is determined that the passcode matches with a user generated passcode or an override passcode, the AMD may activate 3126 one or more parameter control elements associated with the requested setting change. Subsequently, the AMD may receive a setting change via the selected control parameter element 3128.
  • the user may need to provide a second gesture on the user interface (e.g., touchscreen display) to confirm the changes made. In response to receiving the second gesture 3130, the AMD may change one or more settings according to the requested and confirmed changes 3132.
  • a condition may occur that impacts the operation of the ambulatory medicament device (AMD).
  • AMD ambulatory medicament device
  • This condition may be associated with the ability of the ambulatory medicament device to operate as intended by the manufacturer, a subject receiving therapy from the AMD, and/or user (e.g., healthcare provider, parent, or guardian of the subject).
  • the AMD device may be operating as intended, but the condition of the subject may not satisfy a desired level of health.
  • the user may be a subject receiving medicament or therapy, or may be another user, such as a clinician or healthcare provider, or a parent or guardian.
  • This section of the disclosure relates to an AMD, such as an insulin pump or a combined insulin and counter-regulatory agent (e.g., Glucagon) pump, configured to generate a dose control signal configured to cause a medicament pump to infuse medicament into a subject.
  • an ambulatory medicament device configured to detect a condition of the ambulatory medicament device and/or the subject, and to generate an alarm when it is determined that the detected condition satisfies an alarm condition.
  • an ambulatory medicament device may include an alarm system configured to monitor the ambulatory medicament device and/or the subject, and to generate an alarm when it is determined that a condition has been detected that satisfies an alarm condition.
  • the alarm system may organize an alarm manager list, notify a user of these alarms, and/or allow the user to acknowledge alarms, mute, and/or snooze the alarms.
  • the alarm manager list may be a list of pending alarm conditions with which the user can interact using a touchscreen display of the AMD .
  • the alarm system may include a plurality of sensors that monitor the AMD or the subject, a monitoring system interface that receives the data from sensors, and alarm generation module that process the received data and generate alarms when an alarm condition is met.
  • the monitoring system interface and the alarm generation module are implemented using one or more hardware processors and machine readable.
  • the monitoring system interface and the alarm generation module are separate hardware modules.
  • the monitoring system may provide status information received from the plurality of sensors to the alarm annunciation and control system.
  • the status information may include one or more status values.
  • the status information may include device information pertaining to a condition of the AMD or subject information pertaining to a condition of the subject.
  • the alarm annunciation and control system may be configured to determine based at least in part on the status information received from the monitoring system, whether an alarm condition is satisfied.
  • the AMD may generate an alarm for various situations to notify the user, and further may request a user’s acknowledgement to confirm that the user is aware of the current situation to be resolved.
  • the alarm can be generated in various forms to the user in a way that the user can recognize the situation and condition of the alarm or alarms, thus allowing convenient communication between the user and the AMD.
  • an alarm system 3202 may implement alarm control procedures in a control and computing module (CCM) of the AMD.
  • the alarm system 3202 can be implemented as instructions stored in a memory of the CCM and executed by a hardware processor to generate an alarm upon detection of a condition of the ambulatory medicament device and/or the subject.
  • the hardware processor of the monitoring system may be a hardware processor of the ambulatory medicament device that controls medicament delivery.
  • the hardware processor of the monitoring system may be a separate hardware processor.
  • the alarm system 3202 may include a monitoring system interface 3210 and an alarm annunciation and control system 32.12.
  • the alarm annunciation and control system 3212 may include sub-systems for determining the seventy of an alarm condition, user notification processing, and receiving alarm control commands from the user interface module 3218.
  • the user interface module 3218 may include any type of user interface controller for providing a user interface.
  • the user interface may be provided on a display of the AMD or may be transmitted to a display of an electronic device in communication with the AMD.
  • the user interface controller may be a touchscreen controller that is configured to output display signals configured to generate one or more user interface screens on a touchscreen. Further, the touchscreen controller may be configured to receive user input signals corresponding to user interaction with the touchscreen.
  • the monitoring system interface 3210 may monitor the condition or status of the AMD and/or the subject at least partially based on signals or status values received from a set of device sensors 3208 and a set of subject sensors 3216.
  • the device sensors 3208 may be configured to track the status of the components or the elements of the AMD, and the subject sensors 3216 can be configured to obtain measurements of one or more physiological characteristics of the subject.
  • the device sensor 3208 can include a motion sensor that detects motion or acceleration of the AMD or on the AMD (e.g., tapping or shaking gestures).
  • the motion sensor can include an accelerometer, gyroscope, and/or other electrical or mechanical motion sensors that convert motion or acceleration into electrical signals.
  • the user 3226 may wake the AMD from a sleep state or unlock the AMD by interacting with a wake interface 3220.
  • the user 3226 may wake the AMD from another state or mode, such as for example a power saving mode or low power mode, the AMD by interacting with a wake interface 3220.
  • the touchscreen controller may not receive user input or user input signals corresponding to user input (e.g., via a touchscreen display 3222).
  • the touchscreen controller may not receive user interaction or user interaction signals corresponding to user interaction (e.g., via device sensors 3208 including an accelerometer or other motion sensors).
  • Waking the AMD may include activating a touchscreen interface or presenting a lock screen to a user. Further, waking the AMD may include waking the touchscreen controller such that it can receive user input or user input signals corresponding to user input.
  • the wake interface 3220 can include one or more of the additional user interfaces mentioned above that are configured to generate and provide a wake input (or wake signal) to the CCM when detecting a pre-set user interaction. Alternatively, or in addition, the wake interface 3220 can be any type of wake interface element of the AMD that, a user can interact with to wake at least a feature (e.g., a touchscreen interface) of the AMD.
  • the wake interface 3220 element can be a physical button (e.g., a push button, a slide button, etc.), a capacitive element, a resistive element, or an inductive element.
  • the wake interface element can be or can include a biometric element, such as a fingerprint reader, an iris scanner, a face detection scanner, etc.
  • the AMD may wake in response to detection of a particular movement or motion. For example, a determination that the ambulatory medicament device is being moved with a particular motion or within a line of sight or a visual range of a user maycause the AMD to awaken or cause the AMD to awake the touchscreen interface of the AMD.
  • the AMD may determine that the AMD is being moved within a line of sight, of the user based on the type of motion and/or the detection of a user’s eyes via, for example, an iris scanner or a camera.
  • the AMD may wake in response to detection of a tapping on the AMD, such as a single tap or a double tap.
  • a single tap or a double tap may activate one or more elements of the user interface module 3218, such as for example the touchscreen display 3222.
  • the touchscreen display can be a touch digitizer that converts analog interactions of the user (e.g., via electrical or mechanical properties of the user) into digital signals communicated to one or more controllers as discussed herein.
  • a user may interact with the touchscreen display 3222, alphanumeric pad 3224, or other types of user interfaces that may be included in the user interface module 3218.
  • the user interface module 3218 may include any combination of one or more of the touchscreen display 3222, alphanumeric pad 3224, or other types of user interfaces.
  • a device sensor 3208 may be a sensor that generates a signal or status value associated with the condition of modules, interfaces, accessories, disposables of the AMD. In some examples, a device sensor 3208 may generate a signal that corresponds to a parameter associated with a component in a module or interface. For example, one device sensor may record the voltage of a battery and another device sensor may record the follow' rate of a pump the medicament delivery interface 3214.
  • a subject sensor 32.16 may be any sensor that generates a signal or status value associated with one or more physiological indicators (or parameters) of a subject (e.g., heart rate, blood pressure, body temperature, level of blood sugar, serum levels of various hormones or other analytes).
  • the subject sensor can be a continuous glucose monitoring sensor (CGS).
  • CGS continuous glucose monitoring sensor
  • the device and subject monitoring system interface 3210 may continuously receive and analyze signals from device sensors 3208 and subject sensors 3216 to determine the condition of the AMD, the subject, a sensor, and/or other accessories.
  • a single sensor may be used to monitor both the condition of the subject and the ambulatory medicament device or accessories and sensors connected to AMD.
  • a continuous glucose monitoring (CGM) sensor may be used to monitor the condition of the subject and may also be monitored to determine whether the condition of the CGM satisfies an alarm condition (e.g., to alarm a user that the CGM should be replaced).
  • the alarm system 3202 may implement procedures for allowing the user or subject to change the alarm settings and/or acknowledge an alarm annunciation via the user interface module 3218.
  • the user may be able to see one or more alarms annunciated on a user interface (e.g., as a list of alarms), even if the AMD is in a locked state. In these examples, the user may not. be able to acknowledge or respond to alarms when the AMD is in the locked state.
  • the user or subject may access an alarm setting screen or acknowledge an alarm annunciation by providing a wake action or a wake action followed by a first gesture via, for example, the touchscreen display 3222.
  • the first gesture may be created by entering predetermined or particular characters on the alphanumeric pad 3224.
  • the user or subject may access an alarm setting screen or acknowledge an alarm annunciation by providing a single, double, or more tap gestures on the AMD.
  • the alarm system 3202 may distinguish inadvertent alarm control inputs from intentional alarm control inputs.
  • An inadvertent alarm control input may be an alarm acknowledgment input that was made without the intent of the user 3226 to acknowledge the alarm that the ambulatory medical device is delivering to the user.
  • an inadvertent alarm acknowledgment may include one that was accidentally executed by the user 3226 by putting pressure on the AMD in a jacket pocket of the user 32.26.
  • the alarm system 3202 may implement processes for determination and categorization of an alarm condition based on its severity level (e.g., a severity level between 0 and 5, with for example 0 being least or nonurgent alarm conditions and 5 being urgent or most urgent alar conditions), according to information received through the monitoring system interface 3210.
  • the alarm annunciation and control system 3212 may place it in the appropriate queue, for example, based on severity or category.
  • a list of alarms may be generated wherein alarms may be sorted numerically in descending order with the highest priority fault or most urgent alarm condition displayed at the top.
  • the alarm system 3202 may implement procedures for controlling the annunciation of alarm conditions via the user interface module 3218, at least partially, based on their severity level.
  • a user interface e.g., a touchscreen display
  • the device and subject monitoring system interface 3210 may provide a status information received from the device sensor 3208 and/or subject sensor 3216 to the alarm annunciation and control system 3212.
  • the status information may include one or more status values.
  • the status information may include device information pertaining to a condition of the ambulatory medicament device or subject information pertaining to a condition of the subject.
  • the alarm annunciation and control system 3212 may be configured to determine based at least in part on the status information received from the monitoring system interface 3210, whether an alarm condition is satisfied.
  • Determining whether an alarm condition is satisfied may include comparing one or more status values associated with the AMD and/or the subject to one or more alarm thresholds, threshold amounts, or alarm conditions.
  • each alarm threshold, threshold amount, or alarm condition may be associated with an alarm profile.
  • determining whether the alarm condition is satisfied may include comparing the status information to one or more alarm thresholds, threshold amounts, or alarm conditions included in one or more alarm profiles.
  • the alarm profile may be stored in a memory of the AMD.
  • at least some of the alarm profiles may be provided by an authorized user or the subject via a user interface or directly transferred from another device to the storage (e.g., from USB drive, a laptop, smart phone, PC, and the like).
  • at least some of the alarm profiles may be provided at the time of manufacture.
  • Each of the alarm profiles may indicate the characteristics or status of the AMD and/or subject that triggers an alarm corresponding to the alarm profile.
  • at least some alarm profiles may indicate the threshold status values below or above which an alarm should be triggered.
  • one alarm profile may indicate that when a blood glucose level of the subject exceeds a particular threshold, a particular alarm is to be generated and/or annunciated.
  • an alarm profile may indicate that when an available amount, of medicament is below a particular threshold, a particular alarm is to be generated and/or annunciated.
  • the type of alarm and/or the alarm frequency or intensity associated with the medicament level may differ from the alarm triggered based on the blood glucose level.
  • a blood glucose level that exceeds an upper threshold or is below a lower threshold may be associated with different alarm profiles or the same alarm profile.
  • a blood glucose level that is above an upper threshold or a medicament pump that is unable to supply insulin may be associated with the same alarm profile.
  • a medicament pump that is unable to supply insulin due to an empty insulin cartridge may be associated with a different alarm profile than when the medicament pump is unable to supplyinsulin due to damage to the medicament pump.
  • a user can instantly know the stated of the AMD and/or subject based on the annunciation pattern for the alarm.
  • the alarm annunciation and control system can implement an annunciation pattern or alarm condition annunciation pattern selected based at least in part on the status information generated by and/or received from the monitoring system.
  • the annunciation pattern may be selected from a plurality of annunciation patterns based at least in part on the alarm condition and/or the status information.
  • the annunciation pattern may include one or more different text patterns or text information, auditory alarms, visual alarms, or haptic alarms.
  • conditions of the AMD or of the subject that may be associated with an alarm profile include conditions relating to a battery capacity (e.g., below a threshold charge capacity or below a capacity associated with a particular amount of operating time (e.g,, one day)), a battery condition (e.g., high temperature or low voltage), a medicament or drug delivery condition (e.g., medicament is empty or below a threshold, motor is stalled, catheter is occluded, etc.), subject sensor condition (e.g., blood glucose sensor is expiring, or signal was not received from sensor), calibration failure (e.g., CGM calibration needed or incomplete load sequence), high or low glucose levels, network (e.g., Bluetooth® or BN-LTE) communication errors, haptic interface errors (e.g., motor failure), speaker errors (e.g., noise or low volume), medicament cartridge errors (e.g., empty cartridge, cartridge detection error, etc.), and the like. As explained below, each of these errors or conditions may be associated with a battery capacity (e.g.
  • each alarm profile may be associated with a severity level or threshold severity level of the alarm.
  • the severity level or urgency level may be associated with how urgently the condition that triggered the alarm should be addressed or resolved. Further, the severity level may be associated with an amount of harm that may be caused to a subject when the condition that triggered the alarm is not resolved or is not resolved within a particular time period.
  • the number of severity levels may vary based on the type of ambulatory medicament device. Generally, there is no limit to the number of severity levels. However, there may be a point of diminishing returns as the number of severity levels exceeds a particular number because, for example, it may be difficult for a user to distinguish between the different numbers of severity levels or to identify with which severity level a particular alarm is associated. Thus, the number of severity levels may be limited to a particular number, such as 0, 3, 5, 6, 9, or some number in between. However, it is possible for there to be more than 10 severity levels.
  • each condition of the AMD and/or subject that is associated with the same severity level may be associated with the same alarm profile.
  • the AMD may determine a severity of an alarm condition based on the condition of the ambulatory medicament device and/or the subject that triggered the alarm condition. In some cases, the ambulatory medicament device may determine the severity of the alarm condition based at least in part on an alarm profile associated with the alarm condition. [0358] Generally, when the alarm condition does not prevent the AMD from providing therapy, the AMD may continue to provide therapy. In some examples, when the alarm condition interferes with the delivery of therapy, operation of the AMD may be suspended or partially suspended. Generally, alarm conditions that interfere with the provisioning of therapy may be associated with a higher severity level. However, some alarm conditions that interfere with the provisioning of therapy may be associated with lower severity levels.
  • a determination that the AMD cannot supply insulin may normally be associated with a highest severity alarm. But when a user indicates that the site location is currently in process of being changed, the alarm condition may be associated with a lower severity level (e.g., an informational alarm reminding the user that insulin cannot be delivered during site change).
  • the AMD in response to determining that the severity level of the alarm condition matches an unsafe operation (e.g., a condition that may cause the AMD to provide doses of the medicament that are above or below certain values, or to unreliably determine the subject’s condition), the AMD may suspend delivery of the medicament to the subject. Once the condition is resolved, the AMD may resume delivery of medicament to the subject.
  • the AMD may be configured to maintain delivery of medicament to the subject.
  • the alarm annunciation and control system can implement an annunciation pattern or alarm condition annunciation pattern selected based at least in part on the status information generated by and/or received from the monitoring system.
  • the annunciation pattern may be selected from a plurality of annunciation patterns based at least in part on the alarm condition and/or the status information.
  • the alarm annunciation and control system Upon verifying that an alarm condition associated with an alarm profile or alarm condition is satisfied, the alarm annunciation and control system annunciates the alarm condition.
  • the alarm conditions may be associated with a unique annunciation pattern.
  • a unique annunciation pattern for at least certain alarm conditions, a user can instantly know the stated of the AMD and/or subject based on the annunciation pattern for the alarm.
  • the AMD may have a wireless electronic communications interface that can be used to transmit an alarm signal, status information, alarm condition data, and/or an annunciation pattern to a remote electronic device.
  • the remote electronic device may annunciate an alarm when an alarm condition is met.
  • the remote electronic device may include any device that can receive alarm information or status information from the AMD.
  • the remote electronic device may be a smartphone, smartwatch, smart glasses, a laptop, a tablet, or any other computing device.
  • the alarm system may generate a list of pending alarm conditions that can, for example, be displayed on a touchscreen using alarm status indicators.
  • the alarm system may update the list of pending alarm conditions by adding the new alarm condition to the list of pending alarm conditions.
  • the list of pending alarm conditions may include a list of elements (e.g., icons, text, and the like such as alarm status icons) each indicating an alarm condition (e.g., an alarm condition that has been annunciated).
  • the AMD may display an alarm status icon including a visual indication of a count of alarm conditions on the list of pending alarm conditions.
  • the alarm system may organize an alarm manager list, notify a user of these alarms, and allow the user to acknowledge or mute the alarms.
  • the alarm manager list may be a list of pending alarm conditions with which the user can interact using a touchscreen display of the AMD.
  • the list of pending alarm conditions may be sorted according to the severity level associated with the alarm conditions.
  • the alarms are categorized numerically in descending order with the highest priority fault displayed at the top of the list.
  • the alarm conditions of the same severity level may be displayed in chronological order.
  • a level 0 severity may be for a trivial fault that does not require any action by the user or may be for informational purposes only, thus not warranting an alert notification. Acknowledging the alarm condition may clear the alarm.
  • a level 1 severity may be a reminder notification that repeats at a certain frequency (e.g., every 5 minutes) until acknowledged by the user, which results in it being cleared.
  • the annunciation may include a brief vibration and a beep, for example.
  • a level 2 severity may be one relating to an imminent, though non-urgent, loss of system function. Such an annunciation may include 1 brief vibration and 1 beep, for example, and repeating at a certain frequency (e.g., every 5 minutes).
  • alarm annunciation may include an alarm annunciation pattern that is aurally or haptically annunciated. The alarm may be snoozed for a period (e.g., 24 hours) when the user acknowledges the fault; however, the user would still need to address the situation creating the fault to completely stop the annunciation.
  • a. level 3 severity may be for when the system is no longer fully functional thus requiring user intervention to correct the issue.
  • the annunciation may begin with a base level intensity with three brief vibrations and three audio beeps, for example, and repeating at a certain frequency (e.g., every 5 minutes).
  • the annunciation escalates at a second frequency, e.g., every 30 minutes, up to a maximum intensity level.
  • the escalation may be a change in vibration intensity and/or audio level, for example.
  • the alarm may be snoozed for a period (e.g., 30 minutes) when the user acknowledges the fault; however, the annunciation when activated may be cleared when the underlying issue is resolved, e.g., glucose level is raised.
  • an alarm condition may change severity levels. For example, a level 3 severity may be maintained as a level 3 severity or may be lowered to a level 2 severity.
  • the user may choose to snooze for a short period (e.g., 30 minutes) or a long period (e.g., 24 hours).
  • the severity level may be maintained at level 3.
  • the severity level may be lowered to level 2.
  • Such an alarm condition may be referred to as having a level 2.5 severity.
  • a level 4 severity may be for when the system is no longer functional and not correctable by the user.
  • the annunciation may begin with a base level intensity with three brief vibrations and three audio beeps, for example, and repeating at a certain frequency (e.g., every 5 minutes).
  • the annunciation escalates at a second frequency, e.g., every 30 minutes, up to a maximum intensity level.
  • the escalation may be a change in vibration intensity and/or audio level, for example.
  • the audio and haptic alerts may be cleared when the user acknowledges the fault; however, the base alarm remains because the underlying condition persists.
  • a level 5 severity may be for high priority alarms per TEC 60901-1 -8.
  • the annunciation may begin with a base level intensity with 5 brief vibrations and 5 audio beeps, for example, and repeating at a certain frequency (e.g., every 5 minutes).
  • the annunciation escalates at a second frequency, e.g., every 30 minutes, up to a maximum intensity level.
  • the escalation may be a change in vibration intensity and/or audio level, for example.
  • the alarm may be snoozed for a period (e.g,, 30 minutes) when the user acknowledges the fault; however, the annunciation when activated may be cleared only when the underlying issue is resolved, e.g., glucose level is raised,
  • the alarm system may annunciate the alarm conditions via one or more user interfaces (e.g., a display, a touchscreen display, a speaker, and the like).
  • an alarm may include an audio alarm, a text message, a graphical message, a text or graphical message with audio, vibrations, flashing light and any combination of these.
  • the alarm conditions may be transmitted to other devices where, for example, an authorized user (e.g., guardians or parents of the subject), the subject, or an emergency provider can view the alarm condition.
  • the alarm system may annunciate the alarm conditions via the user interface module 3218 of the ambulatory medical device 600.
  • the alarm condition may be annunciated via one or more user interfaces (e.g., a display, a speaker, and the like).
  • the alarm conditions may be transmitted to other devices, via the communication user interface module 3218 of the AMD where, for example, an authorized user 3226 (e.g., guardians or parents of the subject), the subject or an emergency provider can view' the alarm condition.
  • the alarm annunciation and control system 3212 may establish a direct end-to-end connection with a computing system (e.g., a cloud computing system) using the communication module 3204 and send the alarm condition to the computing system through the end-to-end connection.
  • a computing system e.g., a cloud computing system
  • auditory and haptic annunciation of lower urgency alarms may be muted so as to reduce risk of alert fatigue.
  • Lower urgency alarms may be alarms that do not require urgent user attention and may include at least alarms with severity levels 0, 1, 2, and 3.
  • higher urgency alarms may be alarms that require urgent user attention and may not be muted, to protect subject safety.
  • each severity level may be predefined as low or high urgency.
  • users may define how low and high urgency alarms are defined.
  • muting an alarm may include suppressing or not providing auditory and haptic annunciation of the alarm condition.
  • the alarm condition may be displayed, such as on a touchscreen display of the AMD, while auditory and haptic annunciation is not provided.
  • an alarm may be generated and/or annunciated that is associated with the severity of the alarm condition and/or the type of alarm condition. Different alarm conditions and/or alarm profiles may result in different types of alarms or different annunciations of the alarm.
  • an alarm associated with the highest severity level may include an auditory alarm with a loudness that exceeds a particular decibel level (e.g., above 70 or 80 decibels), a visual alarm (e.g., a flashing or steady light) with a luminance above a particular luminance value (e.g., a luminance between 10 5 or 10 6 candelas per square meter), and/or a vibrational alarm.
  • the alarm associated with the highest severity level may not be snoozed or dismissed, as such alarm conditions may require urgent user attention.
  • the alarm associated with the highest severity level may be snoozed for a shorter time period than alarms of lower severity levels (e.g., for 5 minutes, for 10 minutes, etc.).
  • An alarm associated with a different severity level than the highest severity level may include a different combination of auditory, visual, and vibrational alarms. Not only may the existence of auditory, visual, and vibrational alarms differ for different severity levels, but so may the characteristics of each of the alarm types. For example, auditory alarms may have different sound patterns, loudness, frequencies, etc. Visual alarms may be of different intensity, color, pattern, etc. Vibrational or haptic alarms may be of different pattern, intensity, etc. Further, an alarm with a different severity level than the highest severity level may be permitted to be snoozed or dismisses or snoozed for a longer period of time, as such alarm conditions may not require urgent user attention. In some examples, the severity of the alarm condition may determine the type of type of the alarm generated (e.g., audio, text, graphical, or any combination of these).
  • the display of alarm conditions on the user interface may include an icon for each type of alarm condition corresponding to an alarm status indicator for that alarm condition.
  • the user interface may display the number of alarm conditions and/or the number of alarm conditions of a particular type or severity level.
  • a duplicate alarm may be omitted from the alarm manager list.
  • a count of the occurrence of alarms may be increased to reflect the duplicate alarm.
  • a duplicate alarm may result in the annunciation of the duplicate alarm.
  • the duplicate alarm is ignored.
  • the occurrence of a duplicate alarm may cause an escalation of the existing alarm.
  • an alarm condition that causes an annunciation of an alarm with a first severity level when detected as occurring a second time, the alarm may be annunciated with a second severity level that indicates a greater degree of severity than the first severity level.
  • an alarm occurring after an alarm condition is resolved may not be considered a duplicate alarm, but instead may be a reoccurrence of the alarm condition and/or an indicator that the resolution for the alarm condition failed (e.g., an insulin cartridge replacement is faulty or is empty).
  • an existing alarm may be escalated when left unresolved for a period of time. For example, a low battery alarm may initially be annunciated with a first severity level but may be annunciated at a higher severity level if the battery is not being charged after a certain period of time.
  • the alarm manager list may be observed via a user interface (e.g., a touchscreen display) when the user interface is locked.
  • a user interface e.g., a touchscreen display
  • further details about the alarms may be accessible when the user interface is locked.
  • it may be necessary to unlock the user interface unlocked e.g., by a wake action and/or a gesture).
  • Each of the alarm conditions, or information associated therewith, may be added to an indicator or user interface (e.g., a list, or other data structure or user interface element) that may be accessed by a user.
  • This user interface may maintain the alarm condition on the user interface until the alarm condition is resolved.
  • the alarm conditions may be sorted or ranked based on the severity level of the alarm condition, the time that the alarm condition occurred, whether the alarm condition relates to the subject or the ambulatory medicament device, any combination of the foregoing, or any other factor for sorting or ranking the alarm conditions.
  • the displayed information may include details about what caused the alarm, the severity of the alarm, how to respond to or address the alarm, or any other information that may be informative regarding why the alarm was generated and/or how to respond to the alarm.
  • the information may provide a workflow or instructions on how to respond to the alarm.
  • the instructions may include a link to a workflow provided by a manufacturer of the ambulatory medicament device or of another entity, such as an entity that provides medicament or site changing kits.
  • different views of an alarm or different information associated with the alarm may be provided based on an identity of the user, or a role of the user, viewing the alarm. For example, a child may be instructed to contact a parent to address an alarm. But a parent may be provided with information to resolve the alarm. The parent may receive simplified information (e.g., blood glucose level is high) about what caused the alarm, but a healthcare provider may receive more detailed information regarding the alarm (e.g., internal control parameter values, insulin flow rates, curvature of insulin diminishment predictions, etc.) that facilitates the healthcare provider caring for the subject,
  • simplified information e.g., blood glucose level is high
  • a healthcare provider may receive more detailed information regarding the alarm (e.g., internal control parameter values, insulin flow rates, curvature of insulin diminishment predictions, etc.) that facilitates the healthcare provider caring for the subject,
  • the alarm conditions may be displayed on a display of the AMD.
  • the alarm conditions may be displayed on a remote display that is separate from the ambulatory medicament device.
  • the remote display may be a display that is authenticated or associated with a computing device that is authenticated to access data, such as alarm conditions, from the AMD.
  • the alarm manager list may be presented on a mobile device (e.g., a smartwatch or smartphone) or on a computing device (e.g., a laptop or desktop) that can obtain data directly or indirectly from the AMD.
  • annunciating the alarm may include contacting a manufacturer and/or user (e.g., a healthcare worker, a parent or guardian, or other registered user). Further, the alarm may include instructions on repairing the ambulatory medicament device and/or on addressing the alarm condition. For example, the alarm may provide a user with instructions to replace the insulin cartridge and how to replace the insulin cartridge. As another example, the alarm may provide instructions on how to change the battery of the device or on how to change a site where the insulin pump connects to the subject. In some cases, the alarm may include one or more operations associated with the alarm. For example, the alarm may trigger reordering of insulin or may request that the user confirm a reorder request to reorder insulin.
  • a manufacturer and/or user e.g., a healthcare worker, a parent or guardian, or other registered user.
  • the alarm may include instructions on repairing the ambulatory medicament device and/or on addressing the alarm condition. For example, the alarm may provide a user with instructions to replace the insulin cartridge and
  • Certain alarms such as informational alarms, may be dismissible. However, generally the alarm may remain on the alarm list until the condition that caused the alarm is resolved.
  • a user may be able to acknowledge and/or snooze alarms via a user interface.
  • the user may first need to activate the user interface (e.g., by providing a wake action) and then provide a gesture to unlock the user interface.
  • the user may use the wake button to activate a touchscreen display and then provide a gesture on the screen to unlock display.
  • the touchscreen display may be configured to allow the user or subject to navigate directly to the issue or fault for which an alarm is being delivered. This capability provides the user with access to address the fault causing the alarm so that it could be corrected thereby stopping the alarm.
  • a user may be able to acknowledge and/or snooze alarms via motion sensor.
  • the AMD may include a motion sensor that detects motion or acceleration of the AMD or on the AMD (e.g., tapping or shaking gestures).
  • the motion sensor can include an accelerometer, gyroscope, and/or other electrical or mechanical motion sensors that convert motion or acceleration into electrical signals.
  • the user may tap on the AMD to acknowledge and/or snooze alarms.
  • the user may acknowledge and/or snooze alarms via the motion sensor without the AMD activating one or more user interface modules such as the touchscreen display.
  • the user may acknowledge and/or snooze alarms via the motion sensor without activating the user interface (e.g., without providing a wake action).
  • the motion sensor may be configured to detect different tap patterns (e.g., a single tap, a double tap, etc.). Each tap pattern may be associated with a different function.
  • the AMD can include a user interaction sensor which may include any motion sensor(s) and/or any one of the user interface modules such as the touchscreen or the wake interface.
  • the user interaction sensor can convert electrical or mechanical properties of the user into electrical signals.
  • the electrical signals from the user interaction sensor can be user interaction signals.
  • user interaction signals can encompass both user input via a touchscreen and user interaction via a motions sensor as discussed herein.
  • Resolving the alarm may include any action that addresses the condition that caused the alarm to be generated.
  • resolving the alarm may include replacing an insulin cartridge, changing a site where the ambulatory medicament device is connected to the subject, charging a battery of the ambulatory medicament device, providing insulin or a counter- regulatory agent to the subject and/or the ambulatory medicament device, or any other action that may be performed to address an alarm condition.
  • the resolution action may be acknowledging the alarm. For example, when the alarm is informational (e.g., to inform the user that more insulin has been ordered), acknowledging the alarm may be a sufficient resolution action.
  • whether the alarm condition is resolved may depend on an identity of the user. For example, when a child interacts with an alarm related to reordering of insulin, the alarm may remain until a parent or guardian acknowledges the alarm. However, the child may be able to snooze the alarm.
  • a user interface that displays alarms may differ based on who is viewing the alarm. For example, a child may view the alarms, but may not be able to interact with the alarms. However, a parent or guardian may be able to snooze or dismiss an alarm. Further, a child may be instructed to bring the device to a parent or adult to address an alarm.
  • the child may be informed of how urgently to contact the parent (e.g., contact a parent immediately, within a day, within a week, etc.). Moreover, a designated adult may separately be alarmed (e.g., via a text or email alarm). The parent or guardian may receive additional information not provided to the child or subject (e.g., a link to repair instructions or a workflow to address the alarm condition).
  • certain conditions may self-resolve over time.
  • a low battery alarm may resolve as the battery is charged.
  • the alarm may be cancelled automatically as the battery charge level exceeds a particular threshold.
  • a low blood glucose alarm may be resolved once the subject has a meal. The alarm may be cancelled automatically as the subject’s blood glucose level rises.
  • one or more alarms and/or the alarm list can be viewed and/or accessed on a home screen, a main screen, or other non-alarm based user interface screen in addition to a user-interface screen designated for display alarms.
  • the alarm list may be accessed from the ambulatory medicament device and/or a computing system in communication with the ambulatory medicament device.
  • the alarm condition may or may not be resolvable when the ambulatory medicament device is locked or in a locked state or mode.
  • the alarm acknowledgement signal may be configured to be detected by the motion sensor and may be one of a gesture input or a touch input, as will be described hereinafter.
  • a user may interact with the alarms generated based on the alarm condition.
  • the user can interact with the alarms when the AMD and/or the user interface is unlocked.
  • the user can interact with the alarms to snooze them or to obtain further information, when the AMD is locked.
  • the user may not be able to dismiss the alarm without unlocking the ambulatory medicament device.
  • the user may not be able to dismiss the alarm without unlocking the ambulatory medicament device when the alarm is urgent and requires user attention.
  • Interacting with the alarms may include providing information associated with the alarm to a user in response to the user interacting with the alarm, or an indicator representative of the alarm.
  • FIG. 33 shows a flow diagram illustrating an example procedure that may be used by the alarm system of an AMD to annunciate an alarm condition upon receiving a status information that satisfies an alarm condition.
  • the alarm system 3202 implements an annunciation process by execution of instructions by a processor in CCM of the AMD, where the instructions can be stored in the main memory, storage of the AMD, or in a memory of a connected electronic device or computing system,
  • the alarm system 3202 may receive status information 3302 using the monitoring system interface 3210, one or more device sensors 3208 and/or one or more subject sensors 3216. In some examples, the alarm system 3202 determines whether the received status information satisfies an alarm condition 3304. In some examples, the alarm condition may be an alarm condition in an alarm profile. If the received status information does not satisfy an alarm condition, no action may be taken 3306. If the received status information satisfies an alarm condition, the alarm system may determine whether the alarm condition is already present in the list of pending alarm conditions or not 3308. If the alarm condition is not present in the list of pending alarm conditions, the alarm system may add the alarm condition to the list of pending alarm conditions 3310. Next the alarm system, may determine the severity of the alarm condition 3312.
  • the alarm system 3202 can select an annunciation pattern 3314 and annunciate the alarm condition using the selected annunciation pattern 3316. If the alarm condition is present in the list of pending alarm conditions, at block 3318, the alarm system may select an annunciation pattern and annunciate the alarm condition using the selected annunciation pattern 3320. In some examples, the annunciation pattern selected at block 3318, may be an annunciation pattern that is different than the previously used annunciation patterns for the alarm condition. In some such examples, the annunciation pattern selected at block 3318, may be selected based on number of times that the same alarm condition is satisfied by a received status information.
  • the process of the alarm detection and control function may repeat each processing cycle so long as the ambulatory medical device is in use.
  • the alarm system may wait for user acknowledgment of the alarm. If the user acknowledges the alarm, the system proceeds to perform alarm processing. However, if the user fails to acknowledge the alarm, the annunciation continues and may escalate depending on the level of the alarm.
  • the alarm conditions may be categorized based and annunciated based on their seventy level. In some examples, the alarms are categorized numerically in descending order with the highest priority fault displayed at the top of the list.
  • a level 0 severity may be for a trivial fault that does not require any action by the user thus not warranting an alarm notification.
  • a level 1 severity may be an informational type notification that repeats at a certain frequency (e.g., every 30 minutes) until acknowledged by user which results in it being reset. The annunciation may include a brief vibration and a beep, for example.
  • a level 0 severity may be for a trivial fault that does not require any action by the user thus not warranting an alarm notification.
  • a level 1 severity may be an informational type notification that repeats at a certain frequency (e.g., every 30 minutes) until acknowledged by user which results in it being reset. The annunciation may include a brief vibration and a beep, for example.
  • a level 0 severity may be for a trivial fault that does not require any action by the user thus not warranting an alarm notification.
  • a level 1 severity may be an informational type notification that repeats at a certain frequency (e.g., every
  • 2 severity may be one relating to an imminent loss of system function.
  • an annunciation may include two brief vibrations and two beeps, for example, and repeating at a certain frequency (e.g., every 30 minutes).
  • a certain frequency e.g., every 30 minutes.
  • 3 fault may be for when the system is no longer fully functional thus requiring user intervention to correct the issue.
  • the annunciation may begin with a base level intensity with three brief vibrations and three audio beeps, for example, and repeating at a certain frequency (e.g., every 5 minutes).
  • the annunciation escalates at a second frequency, e.g., every 30 minutes, up to a maximum intensity level.
  • the escalation may be a change in vibration intensity and/or audio level, for example.
  • the escalation may be cleared to base level when the user acknowledges the fault; however, the base alarm remains if underlying condition persists. Thus, the user would still need to address the situation creating the fault to completely stop the annunciation.
  • a level 4 severity may be for when the system is no longer functional and not correctable by the user.
  • the annunciation may begin with a base level intensity with three audio beeps, for example, and repeating at a certain frequency (e.g., every 5 minutes).
  • the annunciation escalates at a second frequency, e.g., every 30 minutes, up to a maximum intensity level.
  • the escalation may be a change in audio level, for example.
  • the escalation may be cleared when the user acknowledges the fault; however, the base alarm remains because the underlying condition persists.
  • a level 5 severity may be for high priority alarms per IEC 60601-1-8. The annunciation when activated may be cleared when the underlying issue is resolved, e.g., glucose level is raised,
  • a condition may occur that impacts the operation of the ambulatory medicament device.
  • This condition may be associated with the ability of the ambulatory medicament device to operate as intended by the manufacturer, a subject receiving therapy from the ambulatory medicament device, and/or user (e.g., healthcare provider, parent, or guardian of the subject).
  • the condition or malfunction of the ambulatory medical device may prevent the ambulatory medical device from providing therapy to the subject.
  • the condition or malfunction may permit, at least for a period of time, the ambulatory medical device to continue providing at least partial therapy to the subject.
  • it is desirable to track the alert until the condition that caused the alert is resolved.
  • it is desirable to issue different types of alerts for different conditions to enable a subject or user to easily distinguish the severity of the condition that triggered the alert.
  • the best response to a problem with the device for a subject is to notify the device manufacturer, or other user that can address the problem, while the subject continues to receive therapy until a replacement device can be obtained or a repair can be made.
  • alert fatigue can be an issue with medical devices due to excessive alerts which do not necessarily require user interaction. Alert fatigue can be dangerous because it can lead users to ignore serious alerts or alerts that require action in the short term.
  • the method described herein may be performed by an AMD (e.g., by one or more processor of the AMD) to detect device malfunctions for the AMD and that can generate alerts corresponding to the ambulatory medical device and prioritize the alerts to enable the subject or user to quickly and easily determine whether the device malfunction will impact therapy, should be addressed in the short-term (e.g., immediately, in 1-2 hours, within the day, etc.), and/or can be addressed at the subject’s convenience (e.g., within a month, or more).
  • the method may be used by other systems.
  • the system disclosed herein can detect a condition in which the ambulatory medical device does not meet a manufacturer’s specification (e.g., a failure of a haptic annunciator, a Bluetooth® radio malfunction, glucagon or insulin runs out, there is a medicament delivery malfunction, a touchscreen failure, etc.).
  • a condition in which the ambulatory medical device does not meet a manufacturer’s specification e.g., a failure of a haptic annunciator, a Bluetooth® radio malfunction, glucagon or insulin runs out, there is a medicament delivery malfunction, a touchscreen failure, etc.
  • the condition
  • the alert may be re-annunciated as a reminder at some later period in time (e.g., the alert may be re-annunciated daily at 4:00 PM or on Saturdays at noon).
  • the length of time between annunciations may depend on the severity of the fault. In some cases, the re-annunciation cannot be stopped by the user, but may only cease if the underlying condition is resolved.
  • the method may include detecting a condition of the ambulatory medical device.
  • the condition of the ambulatory medical device may be determined by one or more sensors of the ambulatory medical device. Further, the condition of the ambulatory medical device may be determined by the presence or absence of one or more errors when performing one or more functions of the ambulatory medical device. For example, if the ambulatory medical device fails to establish a communication connection with a control system or a data storage system, it may be determined that there is a possible malfunction with the ambulatory medical device. As another example, if the ambulatory medical device fails to deliver medicament or detects an error when attempting to deliver medicament, there may be a malfunction with the medicament pump.
  • the condition of the ambulatory medical device may be determined based on one or more configuration values being outside a normal operating range. For example, if the speed of delivery of medicament is faster or slower than a configured operating range, then it may be determined that there is a malfunction with the medicament pump or a connection with a medicament delivery tube (e.g., a catheter).
  • the method may include comparing the detected condition of the ambulatory medical device to a set of normal operating parameters.
  • the set of normal operating parameters may be the specifications set by the manufacturer for when the ambulatory medical device is operating as intended by the manufacturer. In some cases, the normal operating parameters may be associated with a range of values.
  • the operating parameter for a speed of medicament delivery may be associated with a range of speeds, which may vary based on user settings, medicament type, site location of medicament delivery, or manufacturing tolerances, among other parameters.
  • Comparing the detected condition of the ambulatory medical device to the set of normal operating parameters may include comparing each operating parameter in the specification to a corresponding detected operating parameter of the ambulatory medical device.
  • the ambulatory medical device may generate a user alert based on the determined condition of the ambulatory medical device.
  • the AMD may generate an alert when the detected condition of the ambulatory medical device does not satisfy a set of normal operating parameters.
  • the method may further include determining whether the detected condition satisfies a minimum set of operating parameters.
  • the minimum set of operating parameters may match the normal operating parameters. However, typically the minimum set of operating parameters differ from the normal operating parameters.
  • the minimum operating parameters may include the minimum specifications, minimum parameters, or minimum condition required by the ambulatory medical device to maintain or continue providing therapy to the subject. In other words, the minimum operating parameters are the operating parameters sufficient to provide therapy. However, the minimum operating parameters may not be sufficient to enable all features of the ambulatory medical device. For example, the minimum operating parameters may permit the ambulatory medical device to deliver insulin to the subject, but may not be sufficient to deliver the insulin at a normal delivery speed for the particular ambulatory medical device.
  • the minimum operating parameters may permit the delivery of therapy, but may not be sufficient to track a log of therapy or to transmit a therapy log to another computing system.
  • the normal operating parameters and/or minimum operating parameters may be specified by a subject or healthcare provider (e.g,, the minimum amount of medicament that is to be provided in each bolus may be specified by a healthcare provider).
  • the normal or minimum operating parameters may be modified. [0399] When it is determined that the condition of the ambulatory medical device satisfies at least the minimum operating parameters, the ambulatory medical device may be configured to maintain delivery of therapy to the subject.
  • Maintaining delivery of therapy may include maintaining therapy at the same rate, at a reduced rate (e.g., providing only basal therapy and therapy responsive to a meal announcement), or at a minimum maintenance rate (e.g., providing only basal insulin).
  • a reduced rate e.g., providing only basal therapy and therapy responsive to a meal announcement
  • a minimum maintenance rate e.g., providing only basal insulin.
  • the ability of the ambulatory medical device to distinguish between a minimum set of operating parameters and a normal set of operating parameters enables an ambulatory medical device with a malfunction to continue providing therapy, which sometimes includes life-saving treatment, to a subject until the ambulatory medical device can be repaired or until the condition of the device worsens to a point where the minimum operating parameters cannot be maintained.
  • the ambulatory medical device may temporarily maintain delivery of therapy.
  • Temporarily maintaining therapy may provide a subject time to address the issue that caused the ambulatory medical device to not satisfy the normal operating parameters before the subject loses access to therapy.
  • the ambulatory medical device temporarily maintains therapy until the device condition makes it no longer possible to maintain therapy.
  • FIG. 34 is a block diagram illustrating the interconnection among modules and procedures in AMD involved in monitoring the condition of the AMD and generating an alert when a device malfunction is detected.
  • the condition of AMD may include the status of the modules and components of the AMD, such as AMD modules and sensors 3404 and/or operation of modules and procedures of the AMD.
  • the alert system may be implemented as a set of alert control procedures 3408 in the control and computing module 610 (CCM) of the AMD.
  • the alert control procedures 3408 may be implemented as instructions stored in a memory of CCM (e.g., the main memory 616) and executed by a hardware processor 614 to generate an alert upon detection of a malfunction of the ambulatory medicament device.
  • the hardware processor may be a hardware processor of the ambulatory medicament device that controls medicament delivery. In other cases, the hardware processor of the monitoring system may be a separate hardware processor, [0401]
  • the alert control procedures 3408 may include a monitoring interface 3414, an operation monitoring procedure 3412 and alert generation procedure 3416.
  • the monitoring interface 3414 may monitor and evaluate the condition of the AMD and/or the subject at least partially based on the information received from the operation monitoring procedure 3412 and device sensors 3410.
  • the device sensors may be configured to track the status of the components or the modules of the ambulatory medicament device and the operation monitoring procedure 3412 may be configured to monitor the operation of the modules and other procedures.
  • the detected of the AMD may be provided to the alert generation procedure monitoring interface.
  • the alert generation procedure 3416 may compare the detected condition of the AMD with a set of normal operating parameter. In some examples, the alert generation procedure may also determine whether the detected condition of the AMD satisfies a minimum set of operating parameters. In some examples, if it is determined that the detection condition of the AMD does not satisfy the normal operating parameters, the alert generation procedure may generate an alert. In some examples, the alert may be transmitted to the user interface module 3406 and displayed on a display of the AMD (e.g., a touchscreen display). In some other examples, once an alert is generated the AMD may establish a connection (e.g., a wireless connection) with another device.
  • a connection e.g., a wireless connection
  • This other device may include a local device (e.g., a laptop, smartphone, or smartwatch of the user) or a computing system of a cloud-based service.
  • the alert may be transmitted by the communication module 3402 to the computing systems where it may be displayed on user interface associated with the computing system.
  • the additional device may receive data from the ambulatory medical device enabling it to monitor the condition of the ambulatory medical device.
  • the type of the alert, and the frequency at which the alert is repeated, or whether an alert is dismissible or not, may be determined by the alert generation procedure based on the detected condition of the AMD and the alert information stored in a memory of the AMD.
  • the alert information may be provided by the subject, an authorized user, or a healthcare provider.
  • the alert information may be stored in the AMD at time of manufacturing.
  • the alert generation procedure may cause the medicament delivery interface, such as the therapy delivery module 606, to stop therapy delivery or modify one or more delivery parameters (e.g., therapy delivery rate).
  • the therapy delivery may be maintained at a normal rate.
  • the alert may include any type of alert.
  • the alert may be a visual alert (e.g., a light or changing light), an audible alert (e.g,, a beep or series of beeps), a haptic or vibration alert, an email alert, a text alert, or any other type of alert.
  • the user alert may enable the user to determine the device condition of the ambulatory medical device based on the alert. For example, an indication that the ambulatory medical device failed to deliver a medicament may trigger one type of alert while an indication that the ambulatory medical device has below a particular level of medicament available may trigger a different alert.
  • the user alert is dismissible and/or may be snoozed by the user. In other cases, such as when the ambulatory medical device fails to satisfy a set of minimum operating parameters, the user alert may not be dismissible or cannot be snoozed.
  • a dismissible alert may be scheduled to repeat on a particular schedule until an alert modification condition occurs.
  • the frequency with which the dismissible alert repeats may depend on the seventy of the condition or the particular operating parameters that do not satisfy normal or minimum operating parameters. More urgent device conditions may result in alerts that repeat more frequently. Further, alerts may vary based on when the condition was detected, the time of day, or the detected activity of a subject (e.g., sleep, abnormal activity, or elevated activity, such as exercise). Similarly, the snooze options may vary for different alerts or any of the aforementioned conditions. In some cases, the ambulatory medical device may escalate an alert if it detects that the condition of the ambulatory medical device has become more critical.
  • the alert frequency may be for a static time period (e.g., every 5 hours) or may ramp towards more frequency (e.g., every 5 hours for 1 to 3 reminders, every 4 hours for 3 to 6 reminders, etc.), or may change based on time of day (e.g., snooze alerts during sleeping hours for non-urgent alerts), etc.
  • the alert modification condition may include any action that causes the operating parameters of the ambulatory medical device to return to normal operating parameters.
  • the alert modification condition may be a repair or replacement of a faulty component.
  • the alert modification condition may include an acknowledgement of the alert.
  • the alert modification condition may include a worsening of the ambulatory medical device condition.
  • the modification to the alert may include the substitution of the alert to a different, alert that indicates a different or more serious condition of the ambulatory medical device. For example, an urgent condition may become critical if the detected malfunction is addressed after generating certain number of alerts.
  • an urgent condition When an urgent condition becomes critical, it may trigger a different alert type (e.g., a louder sound, or brighter image) and/or escalation in the alert frequency.
  • a different alert type e.g., a louder sound, or brighter image
  • the audible alert may become louder and may be combined with a vibration alert from a haptic annunciator.
  • the ambulatory medical device may cease providing therapy to the subject.
  • generating the alert may further include contacting a manufacturer and/or healthcare provider (e.g., clinician). Further, generating the alert may include ordering replacement parts. In some cases, the alert may instruct a subject or user on how to repair the ambulatory medical device.
  • a manufacturer and/or healthcare provider e.g., clinician
  • generating the alert may include ordering replacement parts.
  • the alert may instruct a subject or user on how to repair the ambulatory medical device.
  • the ambulatory medical device is repaired, or the condition that caused the alert is resolved, a user may permanently (or until the next time a device condition triggers the alert) dismiss the alert.
  • the ambulatory medical device may automatically dismiss the alert if it senses that the device condition that caused the alert has been resolved.
  • the ambulatory medical device may periodically recheck the device condition to determine whether the alert condition has been resolved.
  • the manufacturer or healthcare provider may remotely clear or stop an alert using, for example, an NB-LTE connection. In some cases, only the manufacturer and/or healthcare provider can clear or stop the alert. Further, in some cases, a manufacturer and/or a healthcare provider may notify a user (e.g., a subject, or parent or guardian) of an issue or impending issue with the ambulatory medical device. The notification may be received by the ambulatory medical device via the NB — LTE connection. Alternatively, or in addition, the notification may be received via a computing device, such as a smartphone or laptop.
  • FIG. 35 is a flow diagram illustrating an example procedure that may be used by the alert system of an AMD to monitor the operation of an AMD and generate alerts when a device malfunction is detected.
  • the alert system continuously monitors the status of all modules and components associated with AMD as well as the operation of all modules and procedures of the AMD.
  • the alert system may determine whether the detected device condition satisfies a set of normal operating parameters 3504. If it is determined that the detected device condition satisfies a set of normal operating parameters, the alert system takes no action and continuous monitoring the AMD. If it is determined that the device condition does not satisfy a set of normal operating parameters, the alert system determines whether the detected device condition satisfies a set of minimum operating parameters.
  • the alert system may send a signal to the therapy delivery module to stop delivery of therapy to the subject 3508, and immediately generate a critical user alert 3512 indicating that immediate action is required.
  • the alarm system of the AMD may contact a healthcare provider or certified user (e.g., parent or guardian of the subject) and also send the critical alert to one or more computing devices (e.g., laptop, cell phone, personal computer, and the like) of the healthcare provider or certified user.
  • the alert system may maintain the delivery of therapy to the subject 3510 and generate a user alert 3514.
  • the alert system may maintain the delivery of the therapy at rate associated with the detected condition of the AMD (e.g., normal rate or minimum maintenance rate) until an alert modification condition is detected 3516.
  • the alert system may determine whether the new device condition satisfies a normal set parameters 3518. If, at block 3518, it is determined that the new' device condition satisfies a set of normal operating parameters, the alert system may resume the normal operation of the AMD 3520 (e.g., deliver the therapy at a normal rate).
  • the alert system may determine whether the new device condition satisfies a minimum set parameters 3522. If, at block 3522, it is determined that the new- device condition satisfy a set of minimum operating parameters. The alert system may maintain or modify the rate of therapy delivery according to the new device condition 3526 and generate a user alert 3530 according to the according to the new device condition. If, at block 3522, it is determined that the new device condition does not satisfy a set of minimum operating parameters, the alert system may send a signal to the therapy delivery module to stop delivery of therapy to the subject block 3524, and immediately generate a critical user alert 3528 indicating that immediate action is required.
  • the alarm system of the AMD may contact a healthcare provider or certified user (e.g., parent or guardian of the subject) and also send the critical alert, to one or more computing devices (e.g., laptop, cell phone, personal computer, and the like) of the healthcare provider or certified user.
  • a healthcare provider or certified user e.g., parent or guardian of the subject
  • computing devices e.g., laptop, cell phone, personal computer, and the like
  • Ambulatory medical devices allow subjects the freedom to treat themselves while being mobile. Self-managed medical treatment comes with inherent risks to the subject.
  • An automated blood glucose control system may automatically provide insulin and/or a counter-regulatory agent (e.g., Glucagon) to a subject to help control the blood glucose level of the subject.
  • a control algorithm is implemented by an automated blood glucose control system (BGCS) to determine when to deliver one or more glucose control agents and how much agent to provide to the subject.
  • the control algorithm may control both an ongoing or periodic delivery of insulin (e.g,, a basal dose), and a correction bolus that may be provided to adjust a subject’s blood glucose level to within a desired range.
  • the control algorithm may use blood glucose level readings obtained from a sensor, such as a continuous glucose monitoring (CGM) sensor, that obtained automated blood glucose measurements from the subject.
  • CGM continuous glucose monitoring
  • the control algorithm may deliver a bolus of insulin in response to an indication of a meal to be consumed or being consumed by the subject.
  • Insulin may be administered subcutaneously into blood of a subject. There is often a delay between when the insulin is provided and when the amount of insulin in the subject’s blood plasma reaches maximum concentration. This amount of time may vary based on the type of insulin and on the physiology of the particular subject. For example, with a fast-acting insulin, it may take approximately 65 minutes for a bolus of insulin to reach maximum concentration in the blood plasma of the subject. For some other types of insulin, it may take anywhere from 3-5 hours to reach maximum concentration in the blood plasma of the subject. Accordingly, the blood glucose control system may implement a predictive algorithm that implements a bi-exponential pharmacokinetic (PK) model that models the accumulation of insulin doses in the blood plasma of the subject. The blood glucose control system may modify its predictions based on the type of insulin, one or more blood glucose readings, and/or characteristics of the subject.
  • PK pharmacokinetic
  • a subject may receive a manual bolus of insulin or medicament.
  • a user e.g., healthcare provider, parent, or guardian
  • subject may inject a dose of insulin into the subject.
  • the user or subject may manually direct the automated blood glucose control system to provide a bolus of insulin to the subject.
  • the present disclosure relates to an automated blood glucose control system configured to provide automatic delivery of glucose control therapy to a subject and receive information about manual glucose control therapy provided to the subject. Using the received information about the manual glucose therapy, the automated blood glucose control system can adjust the blood glucose control algorithm to account for the manual dosing of insulin (or counter-therapy agents).
  • the manual glucose control therapy may be provided by injection therapy, or it may be provided by an insulin pump.
  • the automated blood glucose control system may receive an indication of insulin or medicament to administer to a subject in place of an automatically calculated dose of insulin.
  • the automated blood glucose control system may receive an indication that a subject is consuming or will consume a meal.
  • the indication may include a type of meal to be consumed (e.g., breakfast, lunch, or dinner) and an estimate of the quantity of food or carbohydrates to be consumed (e.g., less than usual, a usual amount, more than usual, 30-40 grams of carbohydrates, 45-60 grams of carbohydrates, etc.).
  • the automated blood glucose control system may calculate an amount of insulin to administer to the subject.
  • the calculation may be based on an insulin to carbohydrate ratio provided by a clinician and/or determined by the automated blood glucose control system.
  • the calculation may be based at least in part on a history of blood glucose level measurements for the subject when consuming particular meals.
  • the calculated amount of insulin for the meal announced by the user may be presented to the user.
  • the user e.g., the subject
  • the user may modify the amount of insulin to administer.
  • the user may determine that for the size meal the subject is consuming or planning to consume, more or less insulin should be administered.
  • the user may modify the calculated insulin dosage to match the user’s determination of the amount of insulin to administer.
  • the automated blood glucose control system may modify its control algorithm based on the user’s input.
  • future meal announcements may result in a calculation of insulin that satisfies the subject’s insulin needs and/or preferences.
  • the indication of an amount of a manual bolus may be received by a user entering a numerical value (e.g., an amount of insulin, a number of carbohydrates, or another calculation) associated with administering insulin.
  • a numerical value e.g., an amount of insulin, a number of carbohydrates, or another calculation
  • the automated blood glucose control system may automatically-calculate a meal dose of insulin and present it to a user via a user interface where a user may enter the manual bolus information.
  • the user may have an option to enter the manual bolus.
  • the meal controller of the blood glucose pump can provide a recommendation against the manual entry if there is a prior history of online operation or a basis for making the recommendation.
  • the information may be received from a user via a user interface.
  • This user interface may be provided by the automated blood glucose control system.
  • the user interface may be generated by another device, such as a laptop or desktop, a smartphone, a smartwatch, or any other computing device that can communicate via wired or wireless communication with the automated blood glucose control system.
  • the information may include one or more of: an indication of delivery of a manual bolus (e.g., via injection therapy), an amount of the manual bolus, a type of the insulin (or other medicament), a time when the manual bolus was delivered, a general location that the manual bolus was administered to the subject (e.g., back, stomach, arm, leg, etc.), a reason for the manual bolus (e.g., a meal, a maintenance dose, a blood glucose level reading, in advance of exercise, etc.), and any other information that may be useable by the blood glucose control system in controlling the blood glucose level of the subject.
  • an indication of delivery of a manual bolus e.g., via injection therapy
  • an amount of the manual bolus e.g., a type of the insulin (or other medicament)
  • a time when the manual bolus was delivered e.g., a general location that the manual bolus was administered to the subject (e.g., back, stomach, arm, leg
  • providing manual dosing information to the automated blood glucose control system can help the blood glucose control system maintain the blood glucose level of the subject within a desired range when the automated features of the blood glucose control system are active or operational. For example, if the automated blood glucose control system determines from a CGM sensor reading that a subject’s blood glucose level is high, the automated blood glucose control system might normally administer a bolus of insulin. However, if the automated blood glucose control system receives an indication that a manual bolus of insulin was administered recently (e.g,, within the past thirty minutes), the automated blood glucose control system may reduce or not administer a bolus of insulin, thereby preventing a Hypoglycemic event. In some such cases, the automated blood glucose control system may continue monitoring the blood glucose level of the subject and may administer additional insulin at a later time if the blood glucose level readings do not reflect an expected blood glucose level based on the reported manual bolus of insulin.
  • the automated blood glucose control system may track the amount of insulin delivered and the timing of the administering of the bolus.
  • the automated blood glucose control system may store the information associated with the manual bolus in a therapy log. . Accordingly, when the automated blood glucose control system is operating in an automatic mode, the automated blood glucose control system can access the therapy log to determine whether any manual bolus were administered and, if so, the timing and amount of the manual bolus.
  • the automated blood glucose control system may model the diminishing of insulin, or other medicament, in the blood plasma over time based on the information associated with the manual bolus. Modeling the diminishing of medicament over time may be used to estimate a future effect of the medicament previously administered.
  • the model may account for previously administered medicament by the automated blood glucose control system. Further, in some cases, the model may account for physiological characteristics of the subject, such as the subject’s weight or an input parameter related to the subject’s weight (e.g., body mass index).
  • the model may account for perfusion over time of the medicament bolus from a subcutaneous infusion site into the blood plasma of the subject. Further, the automated blood glucose control system may model an accumulation of insulin, model time course of activity of insulin, or model a finite rate of utilization of insulin.
  • the automated blood glucose control system may adjust the automated administering of insulin, or other medicament when operating in an automatic mode. Further, the automated blood glucose control system may operate the administering of medicament (e.g., by controlling a medicament pump) based on a glucose level of the subject and the modeled concentration of medicament in the subject.
  • the automated blood glucose control system may confirm that the manual bolus was delivered to the subject.
  • the confirmation may be determined based at least in part on whether blood glucose level readings by the CGM sensor match or are within a threshold level anticipated by the automated blood glucose control system based on the manual dosing information.
  • the automated blood glucose control system may request, via a user interface, that a user confirm that the manual bolus was delivered.
  • a user may be requested to confirm the administering of the manual bolus by using a particular gesture or sequence of interactions with a user interface (e.g., a touchscreen) of the automated blood glucose control system or of a device (e.g., laptop or smartphone, etc.) that communicates with the automated blood glucose control system.
  • a user interface e.g., a touchscreen
  • a device e.g., laptop or smartphone, etc.
  • the information relating to the manual bolus may include an amount of insulin and a reason the manual bolus was administered (e.g., for a meal of a particular size).
  • the automated blood glucose control system may determine an amount of insulin the automated blood glucose control system would administer in an automatic operating mode based on the manual dosing information if the manual bolus had not been supplied. If the automated blood glucose control system determines it would have supplied a different quantity of the medicament, and if the difference exceeds a threshold, the automated blood glucose control system may adjust a blood glucose control algorithm to account for the difference. For example, the automated blood glucose control system may change the operating setpoint or range of insulin the automated blood glucose control system attempts to maintain in the subject. As another example, the automated blood glucose control system may supplement the manual bolus with additional insulin to account for an underadministering of insulin or may reduce a subsequent dosage of insulin to account for an overadministering of insulin.
  • the automated blood glucose control system may maintain a therapy log of manual insulin therapy. This therapy log may be maintained based on the use of the automated blood glucose control system to provide a manual bolus or based on information provided by the user based on manual administering of insulin (e.g., via injection).
  • the manual boluses may be supplied when the automated blood glucose control system is not operating, is not operating in an automatic mode, or is not connected to the subject.
  • the automated blood glucose control system may determine therapy, if any, to provide to the subject based on a combination of the therapy log and the glucose control algorithm implemented by the automated blood glucose control system.
  • the automated blood glucose control system may generate a dose control signal based on the determined therapy. This dose control signal may be supplied to a medicament pump, which may control delivery of the medicament (e.g., insulin) to the subject.
  • a user may control whether the automated blood glucose control system is operating in a manual mode or an automatic mode by interacting with a user interface of the automated blood glucose control system or of a device that communicate with the automated blood glucose control system.
  • the user interaction may include any type of user interaction with a user interface.
  • the user interaction may include interaction why physical buttons or interactions with a touchscreen including gestures or taps on the touchscreen.
  • a system of one or more computers can be configured to perform particular operations or actions by virtue of having software, firmware, hardware, or a combination of them installed on the system that m operation causes or cause the system to perform the actions.
  • One or more computer programs can be configured to perform particular operations or actions by virtue of including instructions that, when executed by data processing apparatus, cause the apparatus to perform the actions.
  • One general aspect includes a method including: providing an option to a user to select between receiving medicament using a manual delivery component or an automated delivery system. The method also includes receiving, by the automated delivery system, subjective information regarding the activity or action that may alter the biood-glucose level. The method also includes receiving, by the manual delivery component, an amount of the medicament to be infused.
  • the method also includes storing a time and the amount of medicament that is infused into the automated delivery system that controls blood glucose level.
  • Other embodiments of this aspect include corresponding computer systems, apparatus, and computer programs recorded on one or more computer storage devices, each configured to perform the actions of the methods.
  • Implementations may include one or more of the following features.
  • the method where the automated delivery system modifies medicament delivery based on the time and the amount of medicament that was received from either the manual delivery component or the automated delivery system.
  • the method where the manual delivery component includes a keypad which allows the user to type in the dosage amount of the desired medicament.
  • the method where providing the option to select is provided prior to a user performing the activity that may alter the blood-glucose level.
  • the method where the activity that may alter the blood- glucose level includes of consuming food or exercising.
  • the method where the subjective information regarding the activity of consuming food includes the approximate relative size of the food that is to be digested.
  • the method where the subjective information regarding the activity of exercising includes the intensity and the duration of the exercise.
  • the method where the intensity and the duration of the exercise is compared to the recommended intensity and duration, and depending on whether it is the same, larger, or smaller than the recommended intensity and duration the automated delivery system is able to determine the actions that is required to regulate the glucose level of the blood. Implementations of the described techniques may include hardware, a method or process, or computer software on a computer-accessible medium.
  • One general aspect includes a system having a medical device configured to provide an option to a user to select between receiving medicament using a manual delivery component or an automated delivery system.
  • the system also includes automated delivery system configured to receive subjective information regarding the activity that may alter the blood-glucose level.
  • the system also includes a manual delivery component configured to receive an amount of the medicament to be infused.
  • the system also includes where the medical device storing a time and the amount of medicament that is infused into an automated delivery system that controls blood glucose levels.
  • Other embodiments of this aspect include corresponding computer systems, apparatus, and computer programs recorded on one or more computer storage devices, each configured to perform the actions of the methods.
  • ambulatory medical device Upon utilizing an ambulatory medical device to request for a therapy change, users may have different preferences. Therefore, it is desirable for modern technology, specially the ambulatory medical devices to be equipped with optionality features. These optionality features may fulfill the different preferences of the users and subjects. The optionality features may allow users to control the therapy changes more closely and may allow them to be more engaged with the medical assistance of the ambulatory medical device.
  • an ambulatory medical device needs to provide options which allows the user to either manually request the amount of the desired medicament or chose an automated delivery system that automatically delivers the right amount of the medicament at the right time without further assistance.
  • the user may personally input the desired amount on a keypad that is provided by the medical device.
  • the medical device further confirms and delivers the requested medicament.
  • the data is stored into a model predicative control component which is further used to control and regulate the blood glucose level.
  • the user must provide subjective information regarding the activity or the action that may alter the blood-glucose level.
  • the user must provide the time and the dosage amount of the food that is going to be digested.
  • This information is tied to the automated delivery system, and the subjective information is further stored into a model predicative control component.
  • Embodiments described herein include an ambulatory medical device that has a keypad which allows a user to type in a dose of insulin or glucagon to be administered to a user.
  • a user may wish to receive a single dose of insulin prior to consuming food and decide how much insulin need to be administered.
  • the user may choose to receive a burst of glucagon due to low blood sugar because of physical activities.
  • Embodiments may include the options for manual inputs of medicament and automated delivery system of medicament.
  • the automated delivery system of medicament is driven by the blood glucose level or related trends.
  • Embodiments herein address a problem that may arise when the user has just received a manual dose and has switched on the automated delivery system.
  • the automated delivery system may be made aware of all manual medicament infusion amounts and the timing of such infusions. Accordingly, the manual delivery component may inform the automated delivery system upon delivering any medicament the type of medicament delivered, the amount of medicament and the timing of the medicament delivered. By having the above information, the automated delivery system may determine the amount of medicament that is the user’s blood stream and adjust the automated delivery of medicament and the timing of the automated delivery. Accordingly, embodiments are directed to allows for a risk-free transition from the manual delivery component and the automated delivery system.
  • Differences from other system may include that the manual delivery may be tied to an automated delivery system, the dose input from the user is then stored into the MPC algorithm (Model Predictive Control) instead of the meal delivery algorithm and is handled by the MPC algorithm.
  • Other embodiments may include selection being able to have a relativistic algorithmically tuned value.
  • Other embodiments may include a learning algorithm that includes a usual size meal or larger size meal or small size meal.
  • Embodiments may include correlating the manual inputs to asking the user what the size of the meal was and learning how the insulin affects the user.
  • Embodiments may include correlating the manual inputs to asking the user what activity the user performed and learning how the glucagon affects the user for a particular activity.
  • FIG. 36 illustrates a schematic of the therapy change delivery system 3600 in an ambulatory medical device 3602 that allows the user the choice of receiving manual delivery of medicament or automated delivery of medicament. Moreover, the therapy change delivery system 3600 allow the user to transition between the manual mode and the automated mode with ease.
  • the therapy change delivery system 3600 includes the ambulatory medical device 3602, a signal processing component 3604, a user 3606, a therapy delivering component 3608, a therapy change input 3610, input components 3612, activity change component 3614, and a therapy change delivery 3616.
  • the user 3606 may initiate a therapy change input 3610 to request the manual or automated medicament.
  • the ambulatory medical device 3602 is any medical device that a user 3606 may carry around and use with the approval of a medical professional. There are many different types of ambulatory medical devices 3602. In one embodiment, the ambulatory medical device 3602 is an insulin and/or glucagon infusion device for user 3606 that have type I diabetes. Ambulatory medical devices 3602 allow users 3606 the freedom to receive medical care in any setting at their convenience. However, the drawback of using an ambulatory medical device 3602. could be the user 3606 making mistakes when the user is away from the medical professionals. One possible issue may be caused the user 3606 switches from a manual delivery mode to an 177 automated delivery mode when the automated delivery mode is unable to determine the amount of medicament in the user’s blood stream.
  • Embodiments are directed to the manual medicament delivery information being provided to the automated medicament delivery system so that it can adjust its operations based on the current and future medicament in the user’s blood stream.
  • the ambulatory medical device 3602 is an insulin and/or glucagon infusion device, doing automated delivery of medicament can be problematic.
  • the ambulatory medical device 3602 includes a signal processing component 3604, a therapy delivering component 3608, and input components 3612.
  • the signal processing component 3604, therapy delivering component 3608, and input components 3612 may be physically connected, wirelessly connected, connected via a cloud-based computer system, or connected in any other way.
  • the signal processing component 3604 is a computing system that performs the computing functions for the ambulatory medical device 3602.
  • the signal processing component 3604 includes a processor, memory, and storage.
  • the signal processing component 3604 maybe a single computing system or may be made up of several computing systems.
  • the signal processing component 3604 may perform the computing functions for a single ambulatorymedical device 3602 or many ambulatory medical devices.
  • the signal processing component 3604 receives signals from the therapy delivering component 3608 and from the input components 3612.
  • the signal processing component 3604 also transmits signals to the therapy delivering component 3608 and the input components 3612. Signals of the therapy change input 3610, the therapy change delivery 3616, and all steps of the activity change component 3614 may be received or transmitted by the signal processing component 3604.
  • the user 3606 is any individual that uses the ambulatory- medical device 3602.
  • the user 3606 is an individual with diabetes that requires a periodic infusion of insulin or glucagon to maintain healthy blood sugar levels.
  • the ambulatory medical device 3602. infuses insulin or glucagon into the user 3606.
  • the user 3606 may transport the ambulatory- medical device 3602. Thus, as the user 3606 moves around, there is a danger that the user 3606 will inadvertently- activate input in the ambulatory medical device 3602. that initiates a therapy change input 3610.
  • the therapy delivering component 3608 provides medicaments to the user 3606. Signals received from the signal processing component 3604 are executed by the therapydelivering component 3608 to change therapy such as starting, modifying, or stopping a therapy.
  • the therapy delivering component 3608 may have a computing component for interpreting and executing instructions from the signal processing component 3604, Thus, the therapy delivering component 3608 can follow a program that is controlled by the signal processing component 3604.
  • the therapy delivering component 3608 is one or more infusion pumps.
  • An infusion pump is capable of delivering fluids at varying rates to a user 3606.
  • the infusion pump may deliver any fluid, including medicaments.
  • the infusion pump may be connected to a user 3606 through any means.
  • the infusion pump is connected to the body through a cannula.
  • the therapydelivering component 3608 is an insulin infusion pump.
  • the therapy delivering component 3608 is an insulin and glucagon infusion pump. Signals received from the signal processing component 3604 may be interpreted by an insulin and glucagon pump to start, stop, or change the rate of insulin and glucagon being delivered into a user 3606.
  • the therapy delivering component 3608 is an electrical stimulation device.
  • An example of an electrical stimulation device is a cardiac pacemaker.
  • a cardiac pacemaker stimulates the cardiac muscle to control heart rhythms.
  • Instructions received from the signal processing component 3604 may be interpreted by a cardiac pacemaker to start stimulating a cardiac muscle, stop stimulating a cardiac muscle, or change the rate of stimulation of a cardiac muscle.
  • Another example of an electrical stimulation device is a deep brain stimulator to treat Parkinson’s disease or movement disorders. Instructions received from the signal processing component 3604 may be interpreted by the deep brain stimulator to start, stop, or modify the stimulation of the brain.
  • the therapy change input 3610 is an input provided by the user 3606 to change a therapy that is currently being delivered to the user 3606.
  • the change of therapy may be to start a therapy, modify a therapy, or cancel a therapy.
  • the types of therapy- changes are dependent on the type of ambulatory medical device 3602.
  • the ambulatory- medical device 3602 is an insulin or glucagon infusion device.
  • the therapy- change input 3610 in an insulin or glucagon infusion device may be an instruction, that when executed, causes the insulin or glucagon infusion device to start infusing an amount of insulin or glucagon into the user 3606.
  • the therapy change input 3610 may be an instruction to modify the rate of insulin or glucagon infusion into the user 3606,
  • the therapy change input 3610 may also be an instruction to cancel insulin or glucagon infusion into the user 3606 from the insulin or glucagon infusion device.
  • the ambulatory medical device 3602 is an electrical implant, that when operated, stimulates a part of the body.
  • An example is an electrical brain implant for users 3606 with Parkinson’s disease or for pain management.
  • the implementation of the therapy change can be to modify the rate of electrical stimulation to the body.
  • the therapy change delivery 3616 is the performance, by the ambulatory medical device 3602, of the therapy change input 3610 that was verified by the 3614.
  • the therapy change that is delivered by the therapy change delivery 3616 corresponds to the therapy change selection made by the user 3606.
  • the ambulatory medical device 3602 alerts the user 3606 that it is performing a therapy change delivery 3616.
  • the ambulatory medical device 3602 displays the therapy change during the therapy change delivery 3616. Any number of details of the therapy change may be displayed during the therapy change delivery 3616. As shown in FIG. 43, a simple message of “Delivering” may be displayed during the therapy change delivery 3616.
  • the ambulatory medical device 3602 plays a sound effect during the therapy change delivery 3616.
  • the therapy change delivery 3616 may be canceled by an input by the user 3606.
  • the input to cancel a therapy change delivery 3616 may be any input such as a wake signal input or a series of touch inputs such as a gesture.
  • the input components 3612. allow the user 3606 to interact with and control the ambulatory medical device 3602.
  • the amount of control that a user 3606 has may vary based on the type of ambulatory medical device 3602 and the user 3606.
  • an ambulatory medical device 3602 that delivers pain medication may allow the user more control than an ambulatory medical device 3602 that controls heart rhythms.
  • a user 3606 that is a young child may be allowed less control over an ambulatory medical device 3602 than a user 3606 that is a teen or an adult.
  • the input components 3612 include a wake button 3626, a touchscreen display 3628, and an alphanumeric pad 3630.
  • the wake button 3626 is activated by a user 3606 to create a wake signal input to unlock an ambulatory medical device 3602.
  • the wake button 3626 may be any input button.
  • the wake button 3626 is a capacitive button that detects a change in capacitance.
  • the wake button 3626 may have a computing component for interpreting and executing instructions from the signal processing component 3604, Thus, the wake button 3626 can follow a program that is dictated by the signal processing component 3604.
  • the touchscreen display 3628 may display a therapy change user interface for the user 3606 and receive user 3606 inputs on the touchscreen display 3628 input surface. Inputs on the touchscreen display 3628 may be registered by any touch technology including, but not limited to capacitive and resistive sensing.
  • the touchscreen display 3628 may be a part of a mobile computing device, such as a cellular phone, tablet, laptop, computer, or the like.
  • the touchscreen display 3628 may have a computing component for interpreting and executing instructions from the signal processing component 3604. Thus, the touchscreen display 3628 can follow instructions that are directed by the signal processing component 3604.
  • the touchscreen display 3628 may display buttons, alphanumeric characters, symbols, graphical images, animations, or videos.
  • the touchscreen display 3628 may display an image to indicate when the ambulatory medical device 3602 is locked or inaccessible via the touchscreen display 3628.
  • the touchscreen display may receive the series of inputs that make up the first gesture and the second gesture.
  • the alphanumeric pad 3630 registers numerical inputs, alphabetical inputs, and symbol inputs.
  • the alphanumeric pad 3630 includes a multitude of keys corresponding to numerical, alphabetical, and symbol inputs.
  • the alphanumeric pad 3630 may have a computing component for interpreting and executing instructions from the signal processing component 3604. Thus, the alphanumeric pad 3630 can follow' instructions that are dictated by the signal processing component 3604.
  • the alphanumeric pad 3630 may be configured to provide haptic feedback from its keys.
  • the alphanumeric pad or pads 3630 may have any number of keys and any number of characters and may span multiple screens that the user 3606 can toggle between in order to find all of their sought-after characters.
  • the wake button 362.6 is incorporated into the alphanumeric pad 3630.
  • the wake button 3626 may be any one or more keys of the alphanumeric pad 3630.
  • the alphanumeric pad 3630 is displayed as part of the touchscreen display 3628. Characters from the alphanumeric pad 3630 may be used as input for the wake signal input, first gesture, therapy change selection, and second gesture. In an exemplary embodiment, the first gesture and/or second gesture are created by entering predetermined characters on the alphanumeric pad 3630.
  • the activity change component 3614 may be part of a specialized software that is executed on an ambulatory medical device or include a specialized hardware that performs the various functions described here.
  • the activity change component 3614 may receive inputs from the user regarding weather the user is about to conduct activities that will change the blood glucose of the user. For example, the user may provide input using the input components 3612 that the user is about to perform exercise that may lower their blood sugar or eat a meal that will increase their blood sugar.
  • the activity change component 3614 offers the user the option via the mode controller 3620 to select between the automated delivery system 3618 or the manual delivery component 3622. As shown m FIG. 36, the manual delivery system may inform the automated delivery system 3618 and the model predictive control component 3624 regarding any manual medicament deliveries of insulin or glucagon.
  • the user may choose the dosage amount, the drug type (insulin or glucagon, fast or slow acting) and the time of the delivery and the manual delivery component 3622 may receive such information and deliver the medicament) s) accordingly.
  • the manual delivery component 3622 may inform the automated delivery system 3618 and the model predictive control component 3624 regarding the drug type (insulin or glucagon; fast or slow acting) and the time of the delivery.
  • the data from previous manual medicament infusions can be readily available so that the automated delivery system 3618 may be able to determine how much medicament is still in the user’s blood stream.
  • the automated delivery system 3618 may make that determination by tracking the finite rate of utilization of infused insulin by the subject based on the time and amount of any manual medicament infusions reported to the automated delivery system 3618.
  • FIG. 37 is a flow chart of a process 3700 detailing a medicament selection process, according to an exemplary embodiment.
  • the medical device provides an option to a user to select between receiving medicament using a manual delivery component or an automated delivery system. By using the mode controllers 620, the user can select the method for the therapy change request between manual delivery component and the automated deliverysystem.
  • the medical device may receive subjective information regarding the activity or action that may alter the blood-glucose level. Subjective information may include the size of the meal and/or the type of physical activity.
  • the manual delivery component may receive an amount of the medicament to be infused.
  • the medicament may be a plurality of hormones, including but not limited to, glucagon or insulin.
  • the medical device may store a time and the amount of medicament that was infused into the automated delivery component that controls the blood glucose level.
  • the systems that are disclosed in FIG. 36 will be utilized to accomplish each and every step from steps 3702, 3704, 3706 and 3708.
  • FIG. 38 is another flow diagram of a process 3800 for providing options for meal dosage selection or physical activity of the user on an ambulatory device.
  • Embodiments described herein include an ambulatory medical device that has a keypad which allows a user to type in a dose of insulin or glucagon to be administered to a user.
  • a user may wish to receive a single dose of insulin prior to consuming food and decide how much insulin need to be administered.
  • the user may choose to receive a burst of glucagon due to low blood sugar because of physical activities.
  • Embodiments may include the options for manual inputs of medicament and automated delivery system of medicament.
  • the automated delivery system of medicament is driven by the blood glucose level or related trends.
  • Embodiments herein address a problem that may arise when the user has just received a manual dose and has switched on the automated delivery system.
  • the automated delivery system may be made aware of all manual medicament infusion amounts and the timing of such infusions.
  • the manual delivery component may inform the automated delivery system upon delivering any medicament the type of medicament delivered, the amount of medicament and the timing of the medicament delivered.
  • the automated delivery system may determine the amount of medicament that is the user’s blood stream and adjust the automated delivery of medicament and the timing of the automated delivery. Accordingly, embodiments are directed to allows for a risk-free transition from the manual delivery component and the automated delivery system.
  • the user may inform the activity change component 3614 that the user is about to engage in activities that, may alter the blood-glucose level of the user.
  • the mode controller 3620 may be activated at decision block 3804 and ask whether the user wants to use the manual delivery component 3806 or the automated system 3810. If the user chooses to use the manual delivery component 3806 and the user provides an input to infuse medicament, the ambulatory device 3602 may delivery the medicament to the user.
  • the manual delivery component 3806 may inform at least one of the model predictive control component 3808 and the automated delivery system 3810 regarding the type of medicament, amount of medicament and the time when the medicament was delivery.
  • the predictive control component 3808 and automated delivery system 3810 may track these manual infusions of medicament and determine that based on the rate of decay or the half-life of the medicament the total amount of medicament that remains in the user’s blood stream at a particular time or a period of time. Accordingly, when the automated delivery system 3810 is activated by the user, the automated delivery system 3810 may change its medicament infusion based on the medicament that remains in the user’s blood stream after a manual infusion by the user.
  • Differences from other system may include that the manual delivery may be tied to an automated delivery system, the dose input from the user is then stored into the MPC algorithm (Model Predictive Control) instead of the meal delivery algorithm and is handled by the MPC algorithm.
  • Other embodiments may include selection being able to have a relativistic algorithmically tuned value.
  • Other embodiments may include a learning algorithm that includes a usual size meal or larger size meal or small size mean.
  • Embodiments may include correlating the manual inputs to asking the user what the size of the meal was and learning how the insulin affects the user.
  • Embodiments may include correlating the manual inputs to asking the user what activity the user performed and learning how the glucagon affects the user for a particular activity.
  • FIG. 39 illustrates a plurality of screens 3900 that may be produced by the ambulatory medical device 3602.
  • the plurality of screens 3900 demonstrates a process that a user may take in order to enter meal doses.
  • the enter meal doses screen 3902 may be displayed.
  • a warning text may be displayed for the user to ensure safety.
  • the warning text states that entering a dose may be unsafe and the device will not adapt its meal doses. This warning text cautions the user of the risks that may be involved in the process of using the ambulatory medical device 3602.
  • a password screen 3904 may be displayed.
  • a keypad is provided for the user to enter a predetermined sequence of numbers to ensure that the user is the actual registered user of the ambulatory medical device 3602.
  • the enter meal doses official screen 3906 and meal doses official screen 3908 may be displayed.
  • the user may decide to access the advanced screen 3912, and upon doing so, the advanced screen 3912 will allow the user to double check the CGM Insulin levels and change the speed of the of the insulin pump.
  • the user is provided the option to have the meal keypad on or off. If the user selects to have the keypad on, then an option may be provided for the user to choose the max dose limit. If the user decides to choose the max dose limit, the official max dose limit screen 3910 is displayed, where the user may enter up to 10 units of the dose. The provided number of units is then stored in the model predictive control component 116 for further regulation of the blood glucose level.
  • FIG. 40 illustrates a plurality of screens 4000 that may be produced by the ambulatory medical device 3602.
  • the ambulatory medical device e.g., the ambulatory medical device 500, 600, or 3602
  • the initial menu screen 4002 may be displayed.
  • options regarding functionalities of the ambulatory medical device 3602 is provided.
  • the list of functionalities may cover all the aspects of the ambulatory medical device 3602.
  • the user may access and control many aspects of the device by choosing the setting option.
  • the setting option will allow the user to further assess and regulate the adjustable functionalities of the ambulatory medical device 3602.
  • the setting screen 4004 may be displayed and the user may select the advanced setting option.
  • the advanced setting screen 4006 is displayed, and the user is provided the option to double check the CGM insulin levels and change the speed of the of the insulin pump.
  • the user may speed up the process or slow down the process depending on the regulation stats that are provided by the model predictive control component 3624.
  • FIG. 41 illustrates a plurality of screens 4100 that may be produced by the ambulatory medical device 3602.
  • the plurality of screens 4100 is the process that a user may take in order to enter meal announcements.
  • the home screen 4102. provides information and stats regarding the cartridge of the ambulatory medical device 3602. The user may select the meal button with or without an installation of a new cartridge. If a user selects the meal button without installing a new cartridge, the ambulatory device 3602 will display the warning screen 4106, where the user is warned that the insulin cartridge is empty, and the device further advises the user to change the cartridge.
  • the ambulatory medical device 3602 will display the carbs screen 4104, where the user is provided the option to choose a meal dose option.
  • the carbs screen 4104 allows the user to provide subjective information regarding the food that is to be digested. This subjective data provided by the user is further stored in the model predictive control component 3624 for further regulation of the blood glucose level.
  • FIG. 42 illustrates a plurality of screens 4200 that may be produced by the ambulatory medical device 3602.
  • the plurality of screens 4200 demonstrates the process of the user being alerted about the empty cartridge and having the option to replace the cartridge and further enter the meal doses.
  • Warning screen 4202 alerts the user that the insulin cartridge is empty and the fact that it needs to be replaced.
  • screens 4204 and 4206 will be displayed.
  • Screen 4204 is initially displayed, and a user may enter a specified dose for each meal on a numerical pad.
  • screen 4206 is displayed where a next button is provided for the user to further complete the therapy change.
  • the numerical specified dose is further stored in the model predictive control component 3624 for further regulation of the blood glucose level.
  • FIG. 43 illustrates a plurality of screens 4300 that may be produced by the ambulatory medical device 3602.
  • a user may cancel the delivery of the medicaments prior to the completion of the delivery.
  • the ambulatory medical device 3602 displays a countdown prior to delivery.
  • the initial countdown screen 4302 is proceeded by the secondary countdown screen 4306.
  • a cancel button is provided for the user to cancel the therapy change.
  • the user may cancel the delivery at any time. By swiping the cancel button, the user may officially stop the delivery of the therapy change. If the user does not cancel, the therapy change may be delivered successfully.
  • the time and the amount of the therapy change delivery is stored in the model predictive control component 3624 for further regulation of the blood glucose level.
  • the delivery will be canceled and the screen 4304 wall be provided.
  • the ambulatory medical device 3602 wall display a lock screen 4308 and take the time to officially cancel the therapy change request.
  • FIG. 44 is a block diagram illustrating a computer system 4400 that may be implemented in the various embodiments in the described subject matter.
  • the computer system 4400 includes a processor 4402 (e.g., electronic or hardware processor), main memory 4404, storage 4406, a bus 4408, and input 4410.
  • the processor 4402 may be one or more processors.
  • the processor 4402 executes instructions that are communicated to the processor through the main memory 4404.
  • the main memory 4404 feeds instructions to the processor 4402.
  • the main memory 4404 is also connected to the bus 4408.
  • the main memory 4404 may communicate with the other components of the computer system through the bus 4408. Instructions for the computer system 4400 are transmitted to the main memory 4404 through the bus 4408.
  • Those instructions may be executed by the processor 4402, Executed instructions may be passed back to the mam memory 4404 to be disseminated to other components of the computer system 4400.
  • the storage 4406 may hold large amounts of data and retain that data while the computer system 4400 is unpowered.
  • the storage 4406 is connected to the bus 4408 and can communicate data that the storage holds to the main memory 4404 through the bus 4408.
  • the processor 4402 may be any type of general-purpose processor including, but not limited to a central processing unit (“CPU”), a graphics processing unit (“GPU”), a complex programmable logic device (“CPLD”), a field programmable gate array (“FPGA”), or an application-specific integrated circuit (“ASIC”).
  • CPU central processing unit
  • GPU graphics processing unit
  • CPLD complex programmable logic device
  • FPGA field programmable gate array
  • ASIC application-specific integrated circuit
  • the mam memory 4404 can be any type of main memory that can communicate instructions to the processor 4402 and receive executed instructions from the processor 4402.
  • Types of main memory 4404 include but are not limited to random access memory (“RAM”) and read only memory (“ROM”).
  • RAM random access memory
  • ROM read only memory
  • the computer system 4400 incorporates RAM as the form of main memory 4404 to communicate instructions to the processor 4402 and receive executed instructions from the processor 4402.
  • Other embodiments may be envisioned that incorporate other types of mam memory 4404 in the computer system 4400.
  • the storage 4406 can be any type of computer storage that can receive data, store data, and transmit data to the main memory 4404 via the bus 4408.
  • Types of storage 4406 that can be used in the computer system 4400 include, but are not limited to, magnetic disk memory, optical disk memory, and flash memory.
  • flash memory is used as the storage 4406 in the computer system 4400 of the ambulatory medical device 102, Other embodiments that use other types of storage 4406 for the computer system 4400 may be envisioned.
  • the bus 4408 connects the internal components of the computer system 4400.
  • the bus 4408 may include a multitude of wires that are connected to the components of the computer system 4400.
  • the wires of the bus 4408 may differ based on the components of the computer system 4400 to which the bus 4408 connects.
  • the bus 4408 connects the processor 4402 to the main memory 4404.
  • the processor 4402 is directly connected to the main memory 4404.
  • the input 4410 of the computer system 4400 may include a touchscreen display 4412, an alphanumeric pad 4414, and buttons 4416.
  • the touchscreen display 4412 may both produce output and accept input.
  • the touchscreen display can generate user input signals corresponding user input.
  • a touchscreen controller can receive user the user input signals.
  • the touchscreen display can display user interface screens generated by computer system 4400 as discussed herein (for example, the critical status information interface illustrated in FIG. 55).
  • the bus 4408 may be coupled to the touchscreen display 4412 to produce visual output.
  • the touchscreen display 4412 may also accept input via capacitive touch, resistive touch, or other touch technology.
  • the input surface of the touchscreen display 4412 can register the position of touches on the surface. Some types of touchscreen display 4412 can register multiple touches at once.
  • the alphanumeric pad 4414 may include a multitude of keys with numerical, alphabetical, and symbol characters. Signals from the alphanumeric pad 4414 may be communicated by the bus 4408 to the mam memory 4404. Keys of the alphanumeric pad 4414 may be capacitive or mechanical. In some embodiments, the alphanumeric pad 4414 is displayed on the touchscreen display 4412. Buttons 4416, such as the wake button or interface, may be capacitive, mechanical, or other types of input buttons.
  • the wake interface may include one or more of the embodiments described herein with respect to the wake interface 3220 of FIG. 32.
  • the input 4410 may be a user interface module as disclosed with respect to the user interface module 3218 of FIG. 32.
  • the user interface module may include any type of user interface controller for providing a user interface as discussed herein.
  • the user interface may be provided on a display 4412 of the computer system 4400 (e.g., an AMD 100), or may be transmitted to a display of an electronic device in communication with the computer system 4400 (e.g,, an AMD 100),
  • the user interface controller may be a touchscreen controller that is configured to output display signals configured to generate one or more user interface screens on a touchscreen. Further, the touchscreen controller may be configured to receive user input signals corresponding to user interaction with the touchscreen.
  • occlusion e.g., a kink or obstruction in the medicament delivery path
  • the occlusion may be detected by a system and/or the medicament pump.
  • a false signal may be detected that would otherwise cause a system to slow and/or stop therapy delivery.
  • Systems and methods described herein can be effective at reducing the likelihood of needlessly slowing and/or stopping therapy delivery by better detecting false occlusion signals.
  • the systems and methods can protect the user from dangerous occlusions while minimizing false alarms of occlusions. False alarms may be the result of one or more signals, such as an electrical signal (e.g., increased current), an increased friction within the system, or some other signal.
  • FIG. 45A illustrates a schematic of an example ambulatory medicament pump 4500 that is configured to maintain delivery of therapy to a subject after determining that a possible occlusion exists in a medicament delivery system.
  • the medicament delivery system can include the ambulatory medicament, pump 4500 and/or other components described herein, such as elements described with respect to FIG. 29, FIG. 33 (deleted), FIG. 34, and FIG. 36.
  • the ambulatory medicament pump 4500 includes a medicament reservoir 4502, a pump motor 4508, a non-transitory memory 4510, and an electronic hardware processor 4512.
  • the ambulatory medicament pump 4500 can include a medicament passageway 4506 configured to couple to a medicament delivery interface 4504.
  • the medicament passageway 4506 may include a delivery tube operatively coupled between the medicament reservoir 4502 and an infusion site or a subcutaneous depot of the subject and may be configured to deliver the medicament through the skin of the subject.
  • the medicament delivery interface 4504 may be at the infusion site or a subcutaneous depot of the subject, and of the subject where medicament is delivered to the subject as therapy.
  • the ambulatory medicament pump 4500 is any medical device that the subject may carry around and use with the approval of a medical professional.
  • the ambulatory medicament pump 4500 may correspond to and/or share certain functionality with one or more devices described herein, such as the ambulatory medical device 3602. or therapy delivering component 3608 described above with respect to FIG. 36.
  • the ambulatory medicament pump 4500 is an insulin and/or glucagon infusion device for subjects that have type I diabetes. Ambulatory medicament pumps 4500 allow subjects the freedom to receive medical care in any setting at their convenience.
  • the ambulatory medicament pump 4500 could malfunction during use by the subject in the absence of a medical professional.
  • an interference or occlusion may develop within the ambulatory medicament pump 4500 and/or associated elements.
  • An occlusion may develop in a variety of possible scenarios. For example, a tube (e.g., the medicament passageway 4506) may become kinked, the pump motor 4508 may become jammed or obstructed (e.g., from sand or debris), the medicament reservoir 4502 may become jammed or obstructed, etc.
  • an occlusion alert is identified, this could be an indication of an actual occlusion that requires attention and perhaps repair by a professional.
  • the occlusion alert may suggest that there is an anomaly or other condition in the therapy delivery and/or functionality of the ambulatory medicament pump 4500 but not that an occlusion is present.
  • the anomaly could correspond to a false alarm.
  • the false alarm could be due to one or more conditions, such as an increase of pressure in the medicament reservoir 4502, an increased pressure on a pump piston operatively coupled to pump motor 4508, slippage of the piston, a spike or drop in electrical current delivered to the pump motor 4508, and/or something else.
  • the ambulatory medicament pump 4500 can include a wireless data interface may be physically connected with the ambulatory medicament pump 4500, wirelessly connected, connected via a cloud-based computer system, or connected in any other way.
  • the processor 4512 is part of a computing system that performs the computing functions for the ambulatory medicament pump 4500.
  • the processor 4512 may be a single processor or may be made up of several processors.
  • the processor 4512 may perform the computing functions for a single ambulatory medicament pump 4500 or many ambulatory medicament pumps.
  • the processor 4512 receives signals from the pump motor 4508 and/or from the wireless data interface.
  • the processor 4512. also transmits signals to the pump motor 4508 and/or from the wireless data interface.
  • the subject is any individual that uses the ambulatory medicament pump 4500.
  • the subject is an individual with diabetes that requires a periodic infusion of insulin or glucagon to maintain healthy blood sugar levels.
  • the ambulatory medicament pump 4500 infuses insulin or glucagon into the subject.
  • the subject may transport the ambulatory medicament pump 4500.
  • the ambulatory medicament pump 4500 can include therapy delivery components, such as the pump motor 4508.
  • the therapy delivery components may include one or more elements of an infusion pump, such as the pump piston, a cannula, and/or other components as described herein.
  • the therapy delivery components provide medicaments to the subject.
  • Signals received from the processor 4512 are executed by the therapy delivery components, such as the pump motor 4508, to change therapy such as starting, modifying, or stopping a therapy.
  • the therapy delivery components may include a computing component for interpreting and executing instructions from the processor 4512. Thus, the therapy delivery components can follow a program that is controlled by the processor 4512.
  • the therapy change delivery 3616 is the performance, by the ambulatory medicament pump 4500, of the therapy change input 3610 that was verified at the therapy delivering component 3608.
  • the therapy change that is delivered by the therapy change delivery 3616 corresponds to the therapy change selection made by the subject.
  • the ambulatory medicament pump 4500 alerts the subject that it is performing a change in therapy delivery.
  • the ambulatory medicament pump 4500 displays the therapy change during the change in therapy delivery. Any number of details of the therapy change may be displayed during the change in therapy delivery, such as shown in FIG. 43 and described above.
  • the ambulatory medicament pump 4500 may include a user interface, such as a graphical user interface.
  • the user interface may be operatively coupled to the ambulatory medicament pump 4500 via, for example, the wireless data interface.
  • the user interface can include a touchscreen display.
  • the touchscreen display may display an occlusion detection interface for the subject and/or receive subject inputs on the occlusion detection interface. Inputs on the touchscreen display may be registered by any touch technology including, but not limited to capacitive and resistive sensing.
  • the touchscreen display may be a part of a mobile computing device, such as a cellular phone, tablet, laptop, computer, or the like.
  • the touchscreen display may have a computing component for interpreting and executing instructions from the processor 4512, Thus, the touchscreen display can follow instructions that are directed by the processor 4512.
  • the touchscreen display may display buttons, alphanumeric characters, symbols, graphical images, animations, or videos.
  • the user interface is not a touchscreen display.
  • the user interface may include one or more mechanical buttons.
  • the user interface may include an alert generator, such as a light emitter, a speaker, a haptic feedback system, or other sensory alert system.
  • the ambulatory medicament pump 4500 may be configured to detect possible occlusions and probable occlusions.
  • a possible occlusion suggests that an occlusion may exist but that more information is needed to adequately determine that an occlusion probably exists.
  • a probable occlusion suggests that the ambulatory medicament pump 4500 or other system element may take action based on the detection that a probable occlusion exists.
  • the ambulatory medicament pump 4500 may undertake one or more of a variety of actions.
  • the system may be configured to detect one or more fluid delivery parameters associated with the medicament delivery system.
  • the fluid delivery parameter can include an electrical parameter, such as a current supplied by the pump motor 4508, an electrical resistance associated with the pump motor 4508, or a voltage associated with the pump motor 4508.
  • the fluid deliveryparameter can include any other detectable parameter, whether via a sensor (e.g., a pressure sensor, a flow rate sensor, or the like) or via some other way.
  • the fluid deliveryparameter can include a fluid flow rate and/or a fluid flow acceleration through the cannula, through the medicament reservoir 4502, through the medicament passageway 4506, through the medicament delivery interface 4504, or through some other portion of the ambulatory medicament pump 4500 or of the medicament delivery system.
  • the fluid delivery parameter can include a pressure on the pump motor 4508, on the medicament reservoir 4502, on the medicament passageway 4506, on the medicament delivery interface 4504, or on some other component or components of the medicament delivery system.
  • the pressure on or inside any components of the medicament delivery system may be obtained by a pressure sensor (e.g., a pressure sensor integrated with the component).
  • the acceptable pressure within the ambulatory medicament pump 4500 may be around 2.-3 pounds per square meh (psi)
  • the fluid delivery parameter may be a pressure threshold of any pressure above a threshold pressure level (e.g., about 15 psi),
  • the ambulatory medicament pump 4500 may determine that a fluid delivery parameter satisfies an initial occlusion condition.
  • the first initial occlusion condition may indicate that a possible occlusion exists that interferes with delivery via the medicament delivery system. Because it may be advantageous to continue the delivery of medicament to the subject when only a possible occlusion exists (as opposed to a probable occlusion), in response to the determination that the fluid delivery parameter satisfies the initial occlusion condition, the ambulatory medicament pump 4500 can maintain delivery of therapy to the subject. Maintaining delivery of therapy can include providing therapy at the same rate as prior to the determination that the initial fluid delivery parameter satisfies the initial occlusion condition.
  • maintaining delivery may mean providing therapy at a different rate from prior to the determination.
  • maintaining delivery may include providing delivery at a different speed (e.g., half speed).
  • the ambulatory medicament pump 4500 in response to the determination that the fluid delivery parameter satisfies the initial occlusion condition, may modify an attribute of the delivery of therapy while maintaining delivery of the therapy to the subject.
  • the attribute may include a delivery speed, a delivery interval, a delivery pressure, or impulse, etc.
  • the ambulatory medicament pump 4500 can begin injecting the fluid slowly and then inject quickly to invoke a jerk. This may be helpful at clearing a possible occlusion. Other examples are possible.
  • the ambulatory medicament pump 4500 may pulse the delivery of delivery of therapy at regular and/or irregular intervals.
  • maintaining delivery may include slowing delivery and then suddenly pushing hard (e.g., to invoke a jerk). Invoking a jerk may be helpful in dislodging a cause of the occlusion (e.g., a jammed piece of sand or other debris).
  • the ambulatory medicament pump 4500 may delivery the therapy slowly or faster in an attempt to clear the occlusion. In some embodiments, the ambulatory medicament pump 4500 may modify (e.g., reduce) the pressure within the ambulatory medicament pump 4500 and/or related system parts.
  • the ambulatory medicament pump 4500 may pause delivery of therapy for a length of time.
  • the length of time of the pause may be at least about 1 second, at least about 2 seconds, at least about 3 seconds, at least about 5 seconds, at least about 10 seconds, at least about 15 seconds, at least about 30 seconds, at least about 1 minute, or any length of time therebetween or fall within a range of any time having endpoints therein.
  • the ambulatory medicament pump 4500 in response to the determination that the verification parameter satisfies the final occlusion condition, may increase delivery of therapy to the subject after a passage of an amount of time.
  • the amount of time may be about 10 seconds, about 20 seconds, about 30 seconds, about 45 seconds, about 1 minute, at least about 2 minutes, about 3 minutes, about 5 minutes, or any amount of time therebetween or fall within a range of any time having endpoints therein.
  • the ambulatory medicament pump 4500 may be configured to receive a verification parameter associated with the possible occlusion.
  • the verification parameter can serve as a way for the ambulatory medicament pump 4500 to determine whether the possible occlusion is actually a probable occlusion.
  • the verification parameter may be a separate indication that tends to confirm the existence of the occlusion.
  • the verification parameter may be received from a glucose detector operatively coupled to the ambulatory medicament pump 4500.
  • the verification parameter can include a glucose level signal received from the glucose sensor configured to detect a glucose level of the subject.
  • the glucose level signal can include one or more glucose parameters, such as a glucose level of the subject and/or an indication of a glucose trend indicating at least, a predicted change in the glucose level of the subject.
  • the verification parameter can include an amount, of time before receiving another indication of the status of the possible occlusion.
  • the ambulatory medicament pump 4500 may wait about 10 seconds, about 30 seconds, about 1 minute, about 2 minutes, about 5 minutes, about 10 minutes, about 15 minutes, about 30 minutes, about 45 minutes, about an hour, about 2 hours, about 3 hours, or any amount of time therebetween or fall within a range of any time having endpoints therein.
  • the verification parameter can include a result from an action taken by the ambulatory medicament pump 4500 in an attempt to further diagnose or otherwise characterize a possible occlusion (e.g., to support a determination that it is a probable conclusion). Such an action may include supplying a sudden increase in pressure by the pump motor 4508 or other action.
  • the ambulatory medicament pump 4500 may determine that the verification parameter satisfies a final occlusion condition. If the verification parameter supports the inference toward a probable occlusion, then this may suggest that the final occlusion condition is satisfied.
  • the final occlusion condition indicates that a probable occlusion exists in the medicament delivery system.
  • the final occlusion condition includes a glucose level indicating a threshold value of at least 150 mg/dL of blood glucose concentration. Other values are possible.
  • the initial occlusion condition and the final occlusion condition can be based on different parameters. For example, the initial occlusion condition may be based on a current drawn by the pump motor 4508 while the final occlusion condition may be based on a glucose level signal of the subject. Other combinations are possible.
  • the ambulatory medicament pump 4500 can modify (e.g., reduce) delivery of therapy to the subject.
  • the modification of therapy may include providing less than the amount of therapy delivered during the maintaining of therapy.
  • the modification of therapy can include reducing and/or essentially stopping the delivery of therapy.
  • the stopping of delivery may be temporary.
  • the ambulatory medicament pump 4500 may increase delivery of therapy to the subject after a passage of an amount of time. Because of the pause in therapy, in some examples the ambulatory medicament pump 4500 will increase delivery, at least temporarily, at a greater rate than the rate prior to the pause.
  • the ambulatory medicament, pump 4500 can further generate a first user alert, based at least in part on the determination that the fluid delivery parameter satisfies the initial occlusion condition. Additionally or alternatively, the ambulatory medicament pump 4500 can generate a second user alert based at least in part on the determination that the verification parameter satisfies the final occlusion condition.
  • the first and/or second user alert can be displayed via the user interface.
  • the first and/or second user alerts can be a sensory alert, such as a visual, tactile, aural, or other sensory alert.
  • the sensory alert may be an annoying and/or loud tone or voice, audible alarm, phone call, and/or other kind of sensory alarm.
  • the second user alert maybe provided to the subject receiving the therapy and/or another person or persons.
  • the second user alert may be configured to wake a sleeping subject and/or caregiver.
  • the ambulatory medicament pump 4500 may identify an intermediate occlusion condition and that the fluid delivery parameter satisfies the intermediate occlusion condition.
  • the intermediate occlusion condition may be satisfied after the determination of the initial occlusion condition.
  • the ambulatory medicament pump 4500 can determine that the fluid delivery parameter satisfies an intermediate occlusion condition, wherein the intermediate occlusion condition indicates that the possible occlusion persists.
  • the ambulatory medicament pump 4500 may modify an attribute of the delivery of therapy.
  • the attribute of the delivery of therapy that is modified may include a rate of delivery and/or a size of a bolus of therapy.
  • the attribute may include a delivery speed, a delivery interval, a delivery pressure, or impulse, etc.
  • the ambulatory medicament pump 4500 may modify the attribute of the delivery of therapy in order to invoke a jerk or to otherwise address a potential occlusion.
  • the attribute may relate to an action taken by the ambulatory medicament pump 4500 in an attempt to further diagnose or otherwise characterize a possible occlusion (e.g., to support a determination that it is a probable conclusion).
  • FIG. 45B is a schematic illustrating an example occlusion detection system 4514.
  • the occlusion detection system 4514 can include a non-transitory memory 4516, an electronic hardware processor 4518, and a user interface 4520.
  • the user interface 4520 may include an interactive graphical user interface, such as a. smartphone or another mobile device.
  • the processor 4518 may execute instructions stored on the memory 4516 to perform various functions.
  • the occlusion detection system 4514 can receive a fluid delivery parameter associated with a medicament delivery system.
  • the medicament delivery system may include an ambulatory medicament pump (e.g., the ambulatory medicament pump 4500) and/or other medicament delivery system components, such as describe above.
  • the fluid delivery parameter may be the fluid delivery parameter described above.
  • the occlusion detection system 4514 can determine that the fluid delivery parameter satisfies an initial occlusion condition.
  • the initial occlusion condition may indicate that a possible occlusion exists in the medicament delivery system.
  • the occlusion detection system 4514 can send an instruction to the medicament delivery system to maintain delivery of therapy to the subject in response to the determination that the fluid delivery parameter satisfies the initial occlusion condition. Additionally or alternatively, the occlusion detection system 4514 may generate a user alert based at least in part on the determination that the fluid delivery parameter satisfies the initial occlusion condition. The user alert may be generated via the user interface 4520.
  • the occlusion detection system 4514 can also receive a verification parameter associated with the possible occlusion. The occlusion detection system 4514 can then determine that the verification parameter satisfies a final occlusion condition.
  • the final occlusion condition can indicate that, a probable occlusion exists in the medicament delivery system.
  • the occlusion detection system 4514 can send an instruction to the medicament delivery system to modify (e.g., reduce) delivery of therapy to the subject m response to the determination that the verification parameter satisfies the final occlusion condition.
  • the occlusion detection system 4514 can generate a user alert based at least in part on the determination that the verification parameter satisfies the final occlusion condition.
  • FIG. 46A and FIG. 46B show methods for determining possible and/or probable occlusions.
  • FIG. 46 A is a flow' chart flow diagram illustrating an example method 4600 that may be used by an ambulatory medical device to maintain delivery of therapy to a subject after determining that a possible occlusion exists in a medicament delivery system.
  • the method 4600 may be performed by a system such as a medicament delivery system including the ambulatory medicament pump 4500.
  • the system detects a fluid delivery parameter associated with the medicament delivery system.
  • the system determines that the fluid delivery parameter satisfies an initial occlusion condition.
  • the initial occlusion condition can indicate that a possible occlusion exists.
  • the system maintains delivery of therapy to the subject in response to the determination that the fluid delivery parameter satisfies the initial occlusion condition.
  • the system receives a verification parameter associated with the possible occlusion.
  • the system determines that the verification parameter satisfies a final occlusion condition.
  • the final occlusion condition indicates that a probable occlusion exists in the medicament delivery system.
  • the system may modify (e.g., reduce) delivery of therapy to the subject. The modification of therapy may be based on the determination that the verification parameter satisfies the final occlusion condition.
  • FIG. 46B is a flow'' chart flow diagram illustrating an example method 4614 that may be used by an occlusion detection system to maintain delivery of therapy to a subject after determining that a possible occlusion exists in a medicament delivery system.
  • the method 4614 may be performed by a system such as an occlusion detection system such as the occlusion detection system 4514.
  • the system receives a fluid delivery parameter associated with a medicament delivery system.
  • the system determines that the fluid delivery parameter satisfies an initial occlusion condition.
  • the initial occlusion condition can indicate that a possible occlusion exists.
  • the system sends an instruction to the medicament delivery system to maintain delivery of therapy to the subject in response to the determination that the fluid delivery parameter satisfies the initial occlusion condition.
  • the system receives a verification parameter associated with the possible occlusion.
  • the system determines that the verification parameter satisfies a final occlusion condition.
  • the final occlusion condition indicates that a probable occlusion exists in the medicament delivery system.
  • the system may send an instruction to the medicament delivery system to modify (e.g., reduce) delivery of therapy to the subject. The modification of therapy may be based on the determination that the verification parameter satisfies the final occlusion condition.
  • Alert fatigue can be an issue with medical devices due to excessive alerts which do not necessarily require user interaction.
  • an alarm condition may occur that does not require immediate user attention or may only be resolved by the manufacturer of the AMD. Persistent annunciation of such alarms may cause alert fatigue, which can be dangerous because it can lead users to ignore all alerts, including serious alerts or alerts that require action in the short term.
  • the disclosed alarm system and methods may implement a Do Not Disturb mode which users may activate to mute non-urgent alarms.
  • the system and methods described herein can suppress lower urgency alarms during user selected periods.
  • the user-selected periods can include times when a user is sleeping or in a meeting.
  • a recurring time interval may include a tune interval occurring every day (e.g., every day between 18:00 and 7:00, or between 20:00 and 6:00, or other time intervals.)
  • lower urgency alarms may include at least alarms with severity levels 0, 1, 2, and 3, as disclosed herein.
  • Higher urgency alarms e.g., severity levels 3, 4, 5, etc.
  • severity levels 3, 4, 5, etc. may not be muted, both during usual operation of the AMD and when Do Not Disturb mode is activated.
  • the user may define which severity levels are to be considered urgent in a Do Not Disturb session. It should be noted that severity level alone may not be enough to determine whether an alarm may be muted.
  • one severity level may encompass both mute-eligible and mute-ineligible alarms. For example, in some cases, only some level 3 alarms may be muted.
  • mute-eligible level 3 alarms may include the level 2.5 alarms as described herein.
  • FIG. 47 shows a flow diagram illustrating an example procedure that may be used by the alarm system of an AMD to mute non-urgent alarm conditions or in annunciating alarms.
  • the process 4700 begins at block 4702, when the device receives a request to activate alarm muting, or Do Not Disturb mode.
  • alarm muting may include activation of the Do Not Disturb mode and vice versa.
  • the request to activate Do Not Disturb mode may include alarm muting instructions.
  • alarm muting or alarm muting instructions may include silencing auditory and/or haptic annunciation of alarms while maintaining visual annunciation of the alarm condition (e.g.
  • the do not disturb mode of the ambulatory medicament device may be activated in response to determining that alarm annunciation should be muted in accordance with the alarm muting instructions. In some such cases, at least some alarm annunciation patterns may not be aurally or haptically annunciated.
  • a user may input various parameters as part of the alarm muting instructions when activating Do Not Disturb mode.
  • the user may define a start and end time between which alarm muting is to remain activated.
  • the user may define a length of time over which alarm muting is to remain activated.
  • the user may set alarm muting to recur at regular intervals or time intervals, such as every night during a time frame the subject is typically asleep. If the defined Do Not Disturb period does not begin immediately, the system may annunciate alarms on an accelerated schedule prior to activation of Do Not Disturb mode.
  • snoozed alarms may have alarm reminders that are annunciated at regular or predetermined intervals until the alarm is resolved.
  • the system may annunciate the reminder for the unresolved alarm prior to the activation time of Do Not Disturb mode.
  • the user may select which alarms to mute when activating Do Not Disturb mode.
  • Do Not Disturb mode may be activated with a default selection of alarms to be muted.
  • alarm muting instructions may include a recurring time interval indicating a time interval during which the do not disturb mode may be activated.
  • the recurring time interval may include a time interval (e.g., time between a start and an end time) occurring periodically (e.g,, every day).
  • the system may activate alarm muting in accordance with the specified alarm muting instructions.
  • the system may check whether a request to deactivate Do Not Disturb mode has been received.
  • a request to deactivate Do Not Disturb mode may be created manually by the user or may be created automatically by the system. For example, if the defined period lapses for a Do Not Disturb session, the system may automatically request to deactivate Do Not Disturb mode. In some cases, the user may manually termmate a Do Not Disturb session prior to the scheduled deactivation time, as described herein in relation to FIG. 51.
  • the system may receive a deactivation request when the user cancels the current Do Not Disturb session. If a request to deactivate Do Not Disturb mode has been received, the process 4700 may proceed to block 4718. If a request to deactivate Do Not Disturb mode has not been received, Do Not Disturb mode remains active and the process 4700 may proceed to block 4708.
  • the system may detect an alarm condition.
  • the system may determine whether the detected alarm condition is an urgent alarm condition requiring urgent user attention in the short term. In some cases, determining whether the alarm condition is urgent may include comparing the severity level of the alarm condition against a threshold severity level. If the severity level of the alarm condition exceeds the defined threshold severity level, the alarm condition may be considered an urgent alarm requiring urgent user attention.
  • the threshold severity level may be predetermined. In other cases, the threshold severity level may be defined by the user as part of the alarm muting instructions. Further details relating to determining alarm urgency is described herein in relation to blocks 4810 and 4812 of FIG. 48.
  • the process 4700 continues to blocks 4712 and 4714, and the alarm condition may be displayed on a list of pending alarm conditions 5200 (FIG. 52) and annunciated in real time. After block 4714, the system may loop back or return to decision block 4706. [0504] The system may maintain an indication of the alarm condition on the list of pending alarm conditions 5200 until the alarm condition is resolved. In some cases, the list of pending alarm conditions may be an alarm manager list, and the user may interact with each listed alarm condition to view alarm details, acknowledge the alarm, snooze the alarm, or otherwise resolve the alarm.
  • the process 4700 proceeds to block 4716, where the alarm condition is added to the alarm manager list, or list of pending alarm conditions, and the auditory and haptic annunciation associated with the alarm condition is muted. After block 4716, the system may loop back or return to decision block 4706.
  • Raised alarms may be added to the alarm manager list at the time of detection and displayed on a user interface until the condition that caused the alarm is resolved.
  • an alarm condition may not have an auditory or haptic alert, the user may still view the alarm condition information and resolve the alarm condition.
  • Resolving the alarm condition may include, but is not limited to, the user taking action to correct the condition that caused the alarm, the user acknowledging the alarm, the user snoozing the alarm, or the device no longer detecting the alarm condition (e.g., low' blood glucose condition is no longer present).
  • Do Not Disturb mode may be deactivated. As described herein, Do Not Disturb mode may terminate automatically (e.g. the defined time period in the alarm muting instructions has lapsed) or may be manually deactivated. The user may override Do Not Disturb mode by manually cancelling Do Not Disturb mode at any point while alarm muting is activated. In some cases, the user may override a current Do Not Disturb session by inputting new alarm muting instructions.
  • the system may annunciate the most severe alarm condition from the list of pending alarm conditions that has not yet been annunciated. The most severe alarm condition may be associated with the highest severity level of the nonurgent alarms on the list of pending alarm conditions.
  • the other alarm conditions on the list may remain muted but may continue to be displayed on the list until the alarm conditions are resolved.
  • Previously annunciated alarms e.g. urgent alarm conditions
  • the system may detect a first alarm condition, a second alarm condition, and a third alarm condition while in Do Not Disturb mode.
  • the system may first detect the first alarm condition at block 4708.
  • the system may determine that the first alarm condition is an urgent alarm condition. As such, the first alarm condition may be both added to the list of pending alarm conditions and annunciated in real time, according to blocks 4712 and 4714.
  • the system may then return or loop back to decision block 4706, Do Not Disturb mode may remain active if the system does not receive a request to deactivate alarm muting. Without deactivating Do Not Disturb mode, then, the system may detect the second alarm condition.
  • the system may determine that the second alarm condition is not an urgent alarm condition.
  • the second alarm condition may be added to the list of pending alarm conditions without auditory or haptic annunciation, according to block 4716.
  • Do Not Disturb mode may remain active if the system does not receive a request to deactivate alarm muting.
  • the system may detect the third alarm condition.
  • the system may determine that the third alarm condition is also a non-urgent alarm condition.
  • the third alarm condition may have a severity level lower than the second alarm condition.
  • the third alarm condition may be added to the list of pending alarm conditions without auditory or haptic annunciation.
  • the system may then receive a request to deactivate Do Not Disturb mode.
  • the system may then deactivate Do Not Disturb mode, at block 4718.
  • the system may annunciate the muted alarm with the highest severity level, at block 4720. In this example, the system would annunciate the second alarm condition, since the first alarm condition was already annunciated as an urgent alarm and the third alarm condition has a lower severity level.
  • the system may deactivate the Do Not Disturb mode upon or in connection with annunciating the above first alarm condition, as discussed further below.
  • FIG. 48 is a flow diagram illustrating another example procedure in annunciating alarms or activating a Do Not Disturb mode in an AMD.
  • the process 4800 begins at block 4802, when the system receives a request to activate Do Not Disturb mode. In response to the request, the system may activate Do Not Disturb mode at block 4804.
  • the system may determine whether a request to deactivate Do Not Disturb mode has been received. The process at blocks 4802, 4804, and 4806 may proceed according to the disclosure related to blocks 4702, 4704, and 4706 of FIG. 47. If a request to deactivate Do Not Disturb mode has been received, the process 4800 may proceed to block 4826. If a request to deactivate Do Not Disturb mode has not been received. Do Not Disturb mode remains active and the process 4800 may proceed to block 4808.
  • the system may determine a severity level of the alarm condition.
  • the severity level may be based on the underlying fault of the alarm condition. For example, a low battery warning may be assigned a low seventy level (e.g. level 1), while an extremely low blood glucose measurement may be assigned a high severity level (e.g. level 5).
  • the system may determine whether the severity level of the first alarm condition exceeds a threshold severity level.
  • the threshold severity level may be a predefined severity level, which if exceeded, may cause the system to determine that the alarm condition is an urgent alarm condition requiring urgent user attention in the short term. In some cases, the threshold severity level may be defined by the user as part of the alarm muting instructions.
  • the user may want to be immediately alerted of any alarms that are level 2 or higher. If the severity level of the alarm condition exceeds the defined threshold severity level, then the alarm condition is considered urgent and the process 4800 proceeds to block 4814. If the severity level of the alarm condition does not exceed the defined threshold severity level, the alarm condition is not considered urgent and the process 4800 proceeds to decision block 4820.
  • the system may automatically deactivate Do Not Disturb mode in response to detecting an urgent alarm condition.
  • the list of pending alarm conditions may be arranged in order of severity.
  • the alarm condition with the highest severity level may be listed at the top of the list of pending alarm conditions and the rest of the alarm conditions would be listed in descending order of severity level.
  • the alarm condition may be displayed at the top of the list of pending alarm conditions 52.00 as the alarm condition with the highest severity level and annunciated in real time.
  • the system may only annunciate the urgent alarm condition upon deactivation of Do Not Disturb mode.
  • the system may also annunciate the second alarm on the list of pending alarm conditions (e.g. the muted alarm condition with the highest severity level).
  • the system may determine whether the severity level of the detected alarm condition exceeds the severity level of the most severe alarm condition currently on the list of pending alarm conditions. If the severity level of the detected alarm condition exceeds the highest severity level on the list of pending alarm conditions, the process 4800 proceeds to block 4822, where the alarm condition may be listed at the top of the list of pending alarm conditions. After block 4822, the system may loop back or return to decision block 4806.
  • the process 4800 may proceed to block 4824, where the alarm condition may be added to the list of pending alarm conditions in order of severity level. If the severity level of the detected alarm condition is equal to the severity level of one or more other alarm conditions present on the list, the detected alarm condition may be added to the list of pending alarm conditions in chronological order within its severity level group. After block 4824, the system may loop back or return to decision block 4806.
  • Do Not Disturb mode may be deactivated. As described herein, Do Not Disturb mode may terminate naturally (e.g. the defined time period in the alarm muting instructions has lapsed) or may be manually deactivated.
  • the system may annunciate the first alarm condition from the list of pending alarm conditions (e.g. the most severe alarm condition). The other alarm conditions on the list may remain muted but may continue to be displayed on the list until the alarm conditions are resolved.
  • FIG. 49 is a flow diagram illustrating an example procedure that may be used by the system to escalate a non-urgent alarm when Do Not Disturb mode is activated.
  • the process 4900 begins at block 4902, where the system may activate Do Not Disturb mode.
  • Do Not Disturb mode may be activated in response to alarm muting instructions.
  • the user may manually activate Do Not Disturb mode by inputting alarm muting instructions for immediate activation.
  • the user may input alarm muting instructions to schedule a Do Not Disturb session to begin at a later time.
  • the system may automatically activate Do Not Disturb mode at the scheduled recurring time.
  • the user mayinput alarm muting instructions to schedule recurring sessions and the system may automatically activate Do Not Disturb mode for each recurring session.
  • the system may detect an alarm condition.
  • the system may determine that the alarm condition is not urgent (e.g. does not require urgent user attention in the short term).
  • the system may display the alarm condition on a list of pending alarm conditions, at block 4908.
  • the system may determine whether the time elapsed from the detection of the alarm condition has exceeded a threshold amount of time.
  • the threshold amount of time may be predetermined by the system. In some other cases, the threshold amount of time may be defined by the user as part of the alarm muting instructions or through AMD settings. If the time elapsed since the detection of the alarm condition has not exceeded the threshold amount of time, the process 4900 may return to block 4908 and the system may maintain the alarm condition on the list of pending alarm conditions.
  • maintaining the alarm condition on the list of pending alarm conditions may include maintaining the order in which the alarm condition is displayed on the list.
  • maintaining the alarm condition on the list of pending alarm conditions may include maintaining the alarm condition details but adjusting the order of the alarm condition as later alarms are added to the list.
  • the process 4900 may proceed to block 4912 and the alarm condition may be escalated.
  • Escalating an alarm condition may include increasing the severity level of the alarm condition (e.g. increasing the severity level of the alarm condition from level 2 to level 3). It should be noted that the alarm condition may be escalated by more than one seventy level at a time (e.g. increasing the severity level of the alarm condition from level 1 to level 4 or starting from any level (e.g., level 0) to be escalated to any other level (e.g., level 5)).
  • the system may determine whether the alarm condition at the new severity level is urgent. If the escalated alarm condition is not urgent, the process 4900 may loop or return to block 4908 and maintain the alarm condition display as disclosed herein. If the escalated alarm condition is urgent, the process 4900 may proceed to block 4916 and the alarm condition may be annunciated. For example, if a level 2 alarm is considered non-urgent, it may be muted when the alarm condition is first detected. However, if the alarm condition has not been resolved after a period of time, the system may escalate the alarm condition from level 2 to level 3. If level 3 alarms are considered urgent alarms requiring urgent user attention, then the alarm condition may be annunciated upon escalation. If level 3 alarms are also considered not urgent, then the alarm condition may remain muted.
  • FIG. 50 is an illustration of a plurality of screens 5000 that may be displayed on a touch screen display of an AMD for activating alarm muting (Do Not Disturb Mode) on the AMD.
  • a home screen 5004 may include a menu icon 5002, an alarm status icon 5006, and a pump operation field 5020.
  • the pump operation field 5020 may be automatically updated at regular intervals to show high level subject information.
  • the alarm status icon 5006, in this exemplary embodiment, may be shaped as an alarm bell.
  • the alarm status icon 5006 may be updated to provide high level information about alarm conditions of the AMD, In some cases, the alarm status icon 5006 may be an alarm bell with a counter in the middle indicating the number of annunciated alarms.
  • the alarm status icon 5006 may display “0” or may not display any number or text. In some other cases, the alarm status icon 5006 may be updated with “zzz” or other visual cues to indicate that alarm muting, or Do Not Disturb (DND) mode, is activated. In some other cases, the alarm status icon 5006 may be in a shape of a crescent moon to indicate that alarm muting is activated. In yet other cases, the alarm status icon 5006 may not be a displayed icon. In such cases, alarm status may be indicated by other forms of notification, such as, but not limited to, auditory, haptic, or visual cues (e.g. a light on the device that flashes when alarm conditions are detected).
  • auditory haptic
  • visual cues e.g. a light on the device that flashes when alarm conditions are detected.
  • Selecting the alarm status icon 5006 may provide the user with access to the list of pending alarm conditions 5200 (see FIG. 52).
  • the menu icon 5002 when selected, may display a menu screen 5008 through which the user may control operation of the AMD.
  • the menu screen 5008 may include an alarm muting button 5010.
  • the alarm muting button 5010 may be shaped as an alarm bell with “zzz” to represent that the alarm alerts are silenced or snoozed.
  • Selecting the alarm muting button 5010 may display a Do Not Disturb (DND) setup screen 5012.
  • the DND setup screen 5012 may display an alarm muting control interface through which the user may input alarm muting instructions (e.g. defining a time frame for the Do Not Disturb session).
  • the alarm muting control interface may be controlled via touchscreen controller.
  • the alarm muting control interface may be a dropdown or scroll- through menu from which the user may select a length of time for which to activate alarm muting, as illustrated in FIG. 50.
  • the alarm muting control interface may be a time wheel, and the user may rotate the wheel to increase or decrease the length of time for which to activate alarm muting.
  • the alarm muting control interface may include one or more text boxes in which the user may enter the amount of time for which to activate alarm muting.
  • the alarm muting control interface may list time periods at regular increments, such as 15-minutes increments, 30-minutes increments, 1-hour increments, 2-hour increments, or the like.
  • the alarm muting control interface may allow users to input a start time and an end time for the Do Not Disturb session, rather than inputting a length of time. The start time can be in the future to allow the user to plan or schedule a Do Not Disturb session.
  • the alarm muting control interface may have additional features to define recurring Do Not Disturb sessions.
  • the user may select the Start button 5014. If Do Not Disturb mode is set to begin immediately, selection of the Start button 5014 will cause the system to display a confirmation page 5016 to inform the user that Do Not Disturb mode was activated . If Do Not Disturb mode is set to begin after a period of time, the confirmation page 5016 may display Do Not Disturb confirmation information, including, but not limited to, recurrence information, defined start time, defined end time, and total alarm muting time. For subject privacy, after a period of inactivity, the system may automatically lock the AMD and display a lock screen 5018.
  • the system may include limitations on the permissible length of time over which alarms may be muted.
  • the system may include limitations on the number of consecutive hours or the total number of hours alarm muting is activated within a day, within a week, or other timeframe.
  • the user may be able to activate Do Not Disturb mode up to a typical sleeping time but substantially less than a day.
  • the system may allow longer periods of Do Not Disturb based on safe access level. Accordingly, the system may monitor the number of hours that Do Not Disturb has been active.
  • Some alarms may include one set of limitations while other alarms may have a different set of limitations, including depending on the number of hours that Do Not Disturb has been active.
  • some types of alarms may be silenced, while other alarms (e.g., haptic annunciation) may not be silenced.
  • the user may define which types of alarms are to be silenced.
  • Do Not Disturb mode may mute but not postpone detected alarm conditions. Though auditory and haptic annunciations may be muted, the list of pending alarm conditions 5200 may be updated in real time and can be viewed by the user at any time.
  • FIG. 51 is an illustration of a plurality of screens 5100 that may be displayed on a touch screen display of an AMD for deactivating alarm muting, or Do Not Disturb mode, on the AMD.
  • the home screen 5004 may include a menu icon 5002, an alarm status icon 5006, and a pump operation field 5020.
  • the alarm status icon 5006 may be the shape of an alarm bell with “zzz” or other text to indicate that alarm muting is activated.
  • the menu icon 5002 when selected, may display a menu screen 5008 through which the user may control the AMD.
  • the menu screen 5008 may include an alarm muting button 5010, Selecting the alarm muting button 5010 may display the alarm muting control interface.
  • the alarm muting control interface may be updated to show a Do Not Disturb setting screen 5104
  • the setting screen 5104 may show the time that the active Do Not Disturb session will expire. If the user changes the display time of the device, the remaining duration of the Do Not Disturb period may be maintained such that the end time is updated with the new device display time. Alternatively, or in addition, the setting screen 5104 may show' how much longer the Do Not Disturb mode is set to last. As described herein, the user may override Do Not Disturb mode by manually cancelling Do Not Disturb mode at any point while alarm muting is activated.
  • the setting screen 5104 may include a Cancel button 5106. Selecting the Cancel button 5106 may cause the system to deactivate alarm muting and display a cancellation confirmation page 5102, For subject privacy, after a period of inactivity, the system may automatically lock the AMD and display the lock screen 5018.
  • the Do Not. Disturb setting screen 5104 may include additional options to change the current alarm muting settings.
  • the user may override the existing alarm muting settings by inputting new alarm muting instructions. Submitting new alarm muting instructions may terminate the existing session.
  • the newly defined alarm muting instructions may override the existing Do Not Disturb parameters and begin a Do Not Disturb mode session in accordance with the newly defined alarm muting instructions, such that the new Do Not Disturb session does not add onto the currently defined period.
  • the system may not have a limit on the number of times which the user can initiate Do Not Disturb. For subject privacy, after a period of inactivity, the system may automatically lock the AMD and display the lock screen 5018.
  • FIG. 52 show's an example list of pending alarm conditions 5200 when Do Not Disturb mode is not activated.
  • the list of pending alarm conditions 5200 may include an alarm notification icon 5202.
  • the alarm notification icon 5202 may be in the shape of an alarm bell.
  • the alarm notification icon 5202 may be any shape that matches the alarm status icon 5006 displayed on the home screen 5004.
  • the alarm notification icon 5202 may be displayed when one or more alarm conditions have been detected without otherwise being displayed when no alarm conditions have been detected.
  • the list of pending alarm conditions 5200 may display information regarding the alarm conditions, including, but not limited to alarm condition description, cause of alarm condition, and date and time of alarm condition. Each alarm condition may have an associated alarm status indicator 5204, 5206.
  • the alarm status indicator 5204, 5206 may be updated to reflect various annunciation patterns. For example, as illustrated, an exclamation mark in a triangle may represent an urgent annunciation pattern. As illustrated, an exclamation mark in a circle may represent a non-urgent annunciation pattern. In some cases, low level alarm conditions may be represented by a letter “i” to indicate a notification -only or informational alarm condition. In some cases, urgent alarm conditions may be represented by multiple exclamation marks in a triangle or circle. Each alarm condition in the list of pending alarm conditions 5200 may be selected to view further details about the alarm and to resolve the alarm. In some cases, an alarm status indicators, may indicate whether an alarm condition was annunciated or muted.
  • urgent alarms may not be muted or snoozed, even when Do Not Disturb mode is activated.
  • the alarm status indicator 5204 for urgent alarms may not change as Do Not Disturb mode is activated and deactivated.
  • non-urgent alarms may be muted or snoozed, either manually by the user or automatically as defined by alarm muting instructions during a Do Not Disturb session. In such cases, the alarm status indicator 5206 for non-urgent alarms may be updated to represent that the alarm condition has been muted or snoozed (FIG. 53A and FIG. 54A).
  • the user may view an alarm using a user interface provided on a touchscreen display, both when the display is locked and when the display is unlocked.
  • FIG. 53A and FIG. 53B are illustrations of such a user interface for accessing the alarm notifications screen when the display is locked.
  • the home screen 5004 may include a lock status icon 5302, an alarm status icon 5006, and a pump operation field 5020.
  • the lock status icon 5302, as illustrated, may be in the shape of a padlock when the AMD is locked.
  • the lock status icon 5302 may be updated when the AMD is unlocked.
  • the lock status icon 5302 may be changed to the shape of an open padlock or replaced with the menu icon 5002. when the device is unlocked. If there are existing alarm conditions, the alarm notification icon 52.02 may also be displayed on the interface.
  • FIG. 53A illustrates the user interface when there are detected alarm conditions.
  • the alarm status icon 5006 may display the number of detected alarm conditions.
  • the user may view the list of pending alarm conditions 52.00 without unlocking the interface.
  • the list of pending alarm conditions 5200 may appear.
  • the user may not be able to select the alarms (e.g., to see more information or interact with the alarms) because the device is locked.
  • the list of pending alarm conditions 5200 may include the lock status icon 5302, If alarm mutmg is activated, muted alarms may be associated with an alarm status indicator 5206, which may be updated to represent that the alarm was muted or snoozed (“zz” as illustrated). As described herein, urgent alarms may not be muted while Do Not Disturb mode is active, and thus the associated alarm status indicator 5204 for urgent alarms may remain unchanged. If the alarm muting is deactivated while pending alarms are still on the list of pending alarm conditions 5200, the alarm status indicator 5206 for non-urgent alarms may be updated to the usual alarm status indicator associated with the alarm condition, even if the alarm alert is not annunciated.
  • the “sensor expiring soon” alarm may not be annunciated even when Do Not Disturb mode is deactivated, if the “battery alarm 24” alarm is a higher-severity non-urgent alarm. Nonetheless, the alarm status indicator 5206 may be updated to an exclamation point or information symbol as discussed herein, for example, with reference to FIG. 51 .
  • FIG. 53B shows the user interface when there are no detected alarm conditions.
  • the alarm status icon 5006 may display “0” or may not display any number when there are no pending alarm conditions. In such cases, selecting the alarm status icon 5006 may cause the system to display the display interface 5304 illustrated.
  • the display interface 5304 illustrated may inform the user that there are no alarm conditions. In such cases, because there are no alarm conditions, the alarm notification icon 5202 may not be displayed. In some cases, the display interface 5304 illustrated may further include information as to whether Do Not Disturb is activated.
  • FIG. 54A and FIG. 54B are illustrations of a user interface for accessing the alarm notifications screen when the display is unlocked.
  • the home screen 5004 may include a menu icon 5002, an alarm status icon 5006, and a pump operation field 5020. Selecting the menu icon 5002 may allow the user to update AMD settings.
  • FIG. 54A illustrates the user interface when there are detected alarm conditions.
  • the alarm status icon 5006 may display the number of detected alarm conditions. Selecting the alarm status icon 5006 may cause the system to display the list of pending alarm conditions 5200. The user may then access alarm control functions by selecting an alarm condition of interest. If alarm mutmg is activated, muted alarms may be associated with an alarm status indicator 5206 for non-urgent alarms, which may be updated to represent, that, the alarm was muted or snoozed (“zz” as illustrated). As described herein, urgent alarms may not be muted while Do Not Disturb mode is active, and thus the associated alarm status indicator 5204 for urgent alarms may remain unchanged.
  • the alarm status indicator 5206 for nonurgent alarms may be updated to the usual alarm status indicator associated with the alarm, even if the alarm alert is not annunciated. For example, as illustrated, the “sensor expiring soon” alarm may not be annunciated even when Do Not Disturb mode is deactivated, if the “battery alarm 24” alarm is a higher-severity non-urgent alarm. Nonetheless, the alarm status indicator 5206 may be updated to an exclamation point or information symbol as discussed herein, for example, with reference to FIG. 51.
  • FIG. 54B illustrates the user interface when there are no detected alarm conditions.
  • the alarm status icon 5006 may display “0” or may not display any number when there are no pending alarm conditions. In such cases, selecting the alarm status icon 5006 may cause the system to display the display interface 5402 illustrated.
  • the display interface 5402 illustrated may inform the user that there are no alarm conditions. In such cases, because there are no alarm conditions, the alarm notification icon 5202 may not be displayed. In some cases, the display interface 5402 illustrated may further include information as to whether Do Not Disturb is activated.
  • the .AMD may be operated in various modes to extend battery life.
  • the AMD may operate in a sleep mode, a low power mode, and/or a power saving mode. It shall be understood that the described modes are merely illustrative and that the AMD may be configured to operate m other modes not described herein, which may also extend battery life of the device.
  • the AMD may operate in a power saving mode to save power and minimize user disturbances as discussed herein.
  • the power saving mode may be activated by the user via one or more user inputs or interaction as discussed herein.
  • the power saving mode can be entered or exited via a wake interface of the AMD as discussed herein.
  • the powder saving mode can be entered or exited via a tap or other gestures on the AMD as discussed herein.
  • the power saving mode may be activated automatically by the AMD after the AMD does not receive one or more user inputs or interactions (e.g., via the motion sensor or touchscreen) for a predetermined amount or period of time associated with a period of inactivity of a user not interacting with the AMD or providing user input to the AMD.
  • the AMD may have an always on screen (which can be a type of user interface screen) that displays in the power saving mode certain desired or predetermined status information, including critical status information, that may be relatively more important for quick review during glucose control therapy without having to unlock or wake the AMD.
  • the AMD can display the always on screen in the power saving mode.
  • the critical status information may be part of the status information received by the AMD via the monitoring system interface as discussed herein.
  • the status information can include device information pertaining to a condition of the ambulatory medicament device or subject information pertaining to a condition of a subject.
  • an always on screen displaying certain status information in the power saving mode can allow a user to view the important or critical therapy and device information without having to turn on or wake the AMD.
  • the power saving mode features discussed herein can reduce the number of times the user fully wakes the AMD.
  • FIG. 55 illustrates an example AMD 5500 with an always on user interface provided on a display or touchscreen display 5502 while the AMD 5500 is in the power saving mode.
  • the user interface may include certain critical status information as part of the critical status information interface screen displayed on the touchscreen display 5502 while the AMD 5500 is in the power saving mode.
  • the AMD 5500 may turn off a backlight used to illuminate the touchscreen display 5502.
  • the AMD 5500 may cause the touchscreen controller to not receive or not respond to user input signals.
  • the AMD 5500 may not respond to any user inputs on the touchscreen display 5502 via touching or otherwise motioning on the touchscreen display 5502.
  • the touchscreen display 5502 can have a filter configured to have a predetermined viewing angle range relative to the touchscreen display such that information cannot be seen on the touchscreen when viewed from an angle outside of a predetermined viewing angle range relative to the plane of the display.
  • the filter can be part of the privacy features of the AMD 5500 (e.g., privacy mode as discussed herein.)
  • the critical status information interface screen may display a glucose level indicator 5504 as a critical status indicator.
  • the glucose level of the subject as discussed herein may be 115 mg/dL.
  • the glucose level indicator 5504 can be considered to be a subject, status indicator.
  • the AMD 5500 can determine whether a glucose level of the subject is within a predetermined glucose range and generate a display of a glucose interface screen (which may be a type or be part of user interface screen).
  • the AMD can display on the touchscreen display 5502 the glucose level indicator via a glucose interface screen to prioritize displaying the status information corresponding to the glucose level not being within the predetermined glucose range.
  • the critical status information interface screen may display a glucose trend indicator 5506 as a critical status indicator.
  • the arrow may be flat to indicate that the glucose level is stable.
  • an arrow pointing up may indicate that the glucose level is rising.
  • an arrow pointing down may indicate that the glucose level is falling.
  • the glucose trend indicator 5506 can be considered to be a subject status indicator.
  • the critical status information interface screen may display a therapy status indicator 5508 as a critical status indicator.
  • the therapy status indicator 5508 may be a circle that is animated (e.g., rotating) to indicate that the AMD 5500 is operating and providing glucose control therapy.
  • the therapy status indicator 5508 may indicate when the delivery of medicament is paused or suspended.
  • Another therapystatus indicator may indicate when glucose level is low.
  • the therapy status indicator 5508 can be considered to be a medicament device status indicator.
  • the critical status information interface screen may display an alarm status indicator 5510 as a critical status indicator.
  • the alarm status indicator 5510 can be considered to be a medicament device status indicator and can also be a type of alert status indicator.
  • the alarm status indicator 5510 may be a bell or bell icon.
  • the bell may include a number displayed on the user interface within the bell indicating the number of alarms presently on, for example, the list of pending alarms.
  • the alarm status indicator 5510 may be an alarm bell with a counter in the middle indicating a count of alarm conditions. In some cases, when there are no detected alarm conditions, the alarm status indicator 5510 may display “0” or may not display any number or text as illustrated in FIG. 55.
  • the alarm status indicator 5510 may not include a counter and, instead, a separate alarm state icon may be displayed to indicate the count of alarm conditions.
  • the alarm status indicator 5510 can include the alarm state icon such as the counter being displayed within the alarm status indicator 5510.
  • the alarm status indicator 5510 may be updated with “zzz” or other visual indicators or icons to indicate that alarm muting, or Do Not Disturb mode, is activated or that one or more alarms have been snoozed.
  • the alarm status indicator 5510 may be in a shape of a crescent moon to indicate that alarm muting is activated.
  • the critical status information interface screen may display a remaining medicament level indicator 5512 as a critical status indicator.
  • the remaining medicament level of, for example, insulin is indicated to presently be full (e.g., a solid outline of an insulin cartridge).
  • the medicament level indicator 5512 can be considered to be a medicament device status indicator and can also be a type of alert status indicator.
  • the critical status information interface screen may display a battery level indicator 5514 as a critical status indicator.
  • the battery level of the AMD 5500 is indicated to presently be at full charge (e.g., a solid outline of a battery).
  • the battery level indicator 5514 can be considered to be a medicament device status indicator and can also be a type of alert status indicator.
  • the AMD 5500 can determine that a power level of a battery of the AMD 5500 is below a predetermined power level threshold and generate a display of a battery status interface (which may be a type or be part of user interface screen).
  • the AMD can display on the touchscreen display 5502 a battery charging indicator on a battery status interface to prioritize displaying the status information corresponding to the power level being below the predetermined power level threshold.
  • the battery charging indicator may include, but is not limited to, an image of a battery charger for the battery of the AMD 5500.
  • the user interface may include certain other status information displayed on the touchscreen display 5502 while the AMD is in the power saving mode.
  • the status information interface screen may include the critical status information interface screen.
  • the indicators 5504, 5506, 5508, 5510, 5512, and/or 5514 may considered critical status information relative to other status information such indicators 5516 and/or 5518.
  • the critical status information can include other information, icons, and/or indicators important or critical for user review while receiving glucose control therapy, including while in the power saving mode.
  • the status information interface screen may display a lock status indicator 5516 as a status indicator.
  • the lock status icon is displayed to be locked or closed to indicate that the AMD 5500 is presently in a locked state/mode, including while in a power saving mode. While the AMD 5500 may exit out of the locked mode via a wake mode mdicator/interface 5520 as discussed herein, other user interaction gestures such as tapping may cause the AMD 5500 to exit out of a locked state, where for example the lock status indicator 5516 is no longer displayed.
  • the lock status indicator 5516 can be considered to be a medicament device status indicator.
  • the lock status icon as illustrated, may be in the shape of a padlock when the Ah® 5500 is locked.
  • the lock status icon may be updated when the AMD 5500 is unlocked.
  • the lock status icon may be changed to the shape of an open padlock or replaced with a menu icon when the AMD 5500 is unlocked.
  • the alarm status indicator 5510 may be updated to indicate unresolved alarm conditions.
  • the status information interface screen may display a wake mode indicator or message 5518 as a status indicator.
  • the wake mode indicator or message 5518 indicates that user can tap the wake interface or button 5520 of the AMD 5500 to wake the screen and/or cause the AMD 5500 to exit the power saving mode.
  • Waking the screen can include activating the touchscreen controller such that the AMD 5500 is responsive to user input on the touchscreen display.
  • the wake mode buton/interface 5520 can be considered to be a medicament device status indicator.
  • the wake mode of the AMD 5500 can be considered a full functionality mode of the AMD 5500 as described herein, for example, in reference to paragraphs [0094]-[0108] and [0332]-[0384] with all functions including the touchscreen display fully active and functioning with minimal (e.g., certain select) or no power saving features active.
  • the wake mode of the AMD 5500 can include a fully functioning and interactive touchscreen display that refreshes at desired rate, such as 60 hertz, and updates that status icons and indicators at a desired standard rate. In some cases, the refresh rate of the touchscreen display can be greater than 60 hertz, such as for example, 120 hertz or greater.
  • the wake mode of the AMD 5500 can include a fully functioning motion sensor as discussed herein.
  • the user interface screen may include other wake mode indicator or message 5518, that indicate to the user what the wake mode button/interface 5520 is and/or provides information for activating the wake mode.
  • the user interacting with the wake mode button/interface 5520 e.g., pressing the wake mode mdicator/interface 5520
  • the wake mode indicator or message 5518 may correspond to and indicate the location of the wake interface, may be a message to interact with the wake interface to activate the wake mode, or both.
  • the AMD 5500 can generate and cause to display a power saving interface screen that includes the wake mode indicator.
  • the power saving interface screen can be or be part of the user interface screens discussed herein. Once in the wake mode, the AMD 5500 may not display or stop displaying the wake mode indicator or message 5518.
  • the user may interact with a wake mode button/mterface 5520 to create a wake request signal to unlock the AMD 5500.
  • the AMD 5500 may deactivate or exit power saving mode.
  • the AMD can turn on or increase the brightness of the backlight as part of entering the wake mode. For example, the AMD can turn on or increase brightness the backlight between 8 PM and 7 AM (e.g., when it is dark or nighttime) in response to receiving a wake request.
  • the backlight can be turned on or brightness increased by for example holding the wake mode button/interface 5520 for a first predetermined period of time (such as 1-2 seconds).
  • a first predetermined period of time such as 1-2 seconds
  • the AMD 5500 can turn on or increase brightness of the backlight to a dimmer state, such as 40-60% brightness, relative to maximum brightness.
  • the AMD 5500 can turn on or increase brightness of the backlight to maximum brightness.
  • the AMD 5500 can track or count a length of time that the user interacts with or presses the wake mode indicator/interface 5520.
  • the AMD may enter or reactivate the power saving mode when the user interacts with the wake mode button/interface 5520 as discussed herein.
  • the 'wake mode button/interface 5520 may include, but is not limited to, a physical button, a capacitive sensor, or an inductive sensor.
  • a wake button may be incorporated into the alphanumeric pad 3224.
  • the wake interface may be any one or more keys of the alphanumeric pad 3224.
  • the wake interface may be a capacitive button that detects a change in capacitance.
  • the wake interface may have a computing component for interpreting and executing instructions from the signal processing component. Thus, the wake interface can follow a program that, is dictated by the signal processing component.
  • the AMD 5500 in the power saving mode can refresh, update, change, or animate the status information screens, including the critical status information screens, less frequently or at a less frequent rate than updating the status interface screens in a wake mode.
  • the AMD 5500 can refresh, update, change, or animate the status information icons or indicators, including the critical status information indicators or icons, less frequently or at a less frequent rate than updating the status information indicators or icons in a wake mode.
  • certain critical status indicators may be updated at different rates. For example, some critical status indicators may be updated at a wake mode refresh rate, while other critical status indicator or other status indicators may be updated at a less frequent or power saving refresh rate.
  • Certain status information may not be updated in the power saving mode.
  • the lock status indicator 5516 may not be updated until the AMD 5500 changes modes from the power saving mode to the wake mode.
  • the AMD 5500 in the power saving mode can lower a refresh rate of the touchscreen to a lower refresh level relative to a maximum refresh rate of touchscreen.
  • the lower refresh rate in the power saving mode can be for example 0.1 , 0.5, 1, 1.5, 2, 2.5 3, 4, 5 or more hertz.
  • the lower refresh rate in the power saving mode is less than the refresh rate of in the wake mode of, for example, 60 hertz.
  • the AMD 5500 in the power saving mode can lower brightness or dim of the touchscreen display 5502 to a lower brightness level relative to a full brightness level of the display.
  • the brightness may be 5, 10, 15, 20, 25, 30, 40, 50, or 60 % brightness relative to the full brightness of the touchscreen display 5502.
  • the AMD 5500 in the power saving mode can lower brightness or dim a backlight of the touchscreen display 5502 to a lower illumination level relative to a maximum illumination level of the backlight.
  • the brightness may be 5, 10, 15, 20, 25, 30, 40, 50, or 60 % brightness relative to the full brightness of the backlight.
  • the backlight can illuminate the touchscreen display 5502 and have an adjustable brightness separate from the adjustable brightness of the touchscreen display 5502.
  • the AMD 5500 can display the critical status information interface screen while using, for example, 5-10% additional electric current relative to electric current used with the display turned off (e.g., sleep mode as discussed herein) with the AMD 5500 operating (providing glucose control therapy).
  • the AMD 5500 can draw' an additional 100-200 milliamps of additional current (5-10% more) without, changes/ updates to the screen on top of the 2-4 milliamps that the AMD 5500 may draw while delivering glucose control therapy without the display being on.
  • the combination of the AMD 5500 displaying certain critical status information, less frequent update of status indicators/icons, lower refresh rate of the display, lower brightness of the display, and/or lower brightness of the backlight (or turning of the backlight) can be considered to be a low power mode.
  • the AMD 5500 may update the display less frequently compared to when in the wake mode.
  • the AMD may update the display every 1 minute, every 2 minutes, every 5 minutes, or more.
  • the display can be a static screen that draws minimal current to stay on as discussed herein.
  • the low' power mode can be a variant of the power saving mode that for example allows display of certain critical status information as discussed herein.
  • the low power mode can be a type of power saving mode.
  • the power saving mode can include displaying certain critical status information with an always on screen as discussed herein.
  • the AMD 5500 functions to achieve additional power savings via lower frequency refresh or updates, lower brightness, etc., this can be considered a low power mode that helps achieve the lowered 5-10% additional electric current draw' relative to the display being off.
  • the sleep mode can be a variant of the power saving mode that for example allows for certain user interaction such as tapping as discussed herein while the display and backlight are off.
  • the low power inode can be a type of power saving mode.
  • the sleep mode can be used during the day or at night while the subject sleeps. With the display and backlight off, the AMD may achiever further power savings relative to the lower power mode.
  • the AMD 5500 can have a privacy mode.
  • the privacy mode may be activated by the user or the AMD 5500 can activate the privacy mode automatically based on time of day or geolocation.
  • the user may activate the privacy mode via one or more user interface via a menu or icon selection as discussed herein.
  • the AMD 5500 can generate a privacy mode interface screen and display on the privacy mode interface screen one or more status indicators corresponding to the status information without displaying at least one of the critical status indicators that may contain relatively sensitive information.
  • the critical status information interface screen or the privacy mode interface screen may omit or not display the glucose level indicator, the therapy status indicator, or both.
  • none of the critical status indicators are displayed while privacy mode is active.
  • the critical status information interface screen may only show a lock symbol or an indication that privacy mode is activated.
  • privacy mode can include activating the sleep mode such that display is off while the AMD 5500 delivery glucose control therapy.
  • the display may be turned off while privacy mode is activated.
  • Privacy mode may be activated independently or in conjunction with power saving mode.
  • the AMD 5500 may allow the user to configure the power saving mode to activate the privacy mode when the power saving mode is activated as discussed herein.
  • the AMD 5500 may allow the user to configure to activate the privacy mode after the power saving mode is activated.
  • the AMD 5500 may allow the user to configure to activate the privacy mode without the power saving mode being activated.
  • the privacy mode can be configured to be activated via a wake interface discussed herein.
  • FIG. 56 is a flow diagram 5600 illustrating an example procedure to activate a power saving mode in an AMD.
  • the AMD can activate the power saving mode upon receiving a request from the user 5602 (e.g., via a wake interface or menu selection on the touchscreen display).
  • the AMD can activate the power saving mode after a predetermined amount of time has passed 5604 associated with a period of inactivity of a user not interacting with the AMD or providing user input to the AMD.
  • the AMD can deactivate the touchscreen controller 5606 such that the touchscreen controller does not receive or does not react to user input signals corresponding to the user input on the touchscreen display.
  • the AMD can lower or dim the brightness or the backlight (e.g., lower or dim illumination level of the display relative to a maximum illumination level) or turn off the backlight 5608 to achieve power savings in the power savings mode.
  • the AMD may implement other powder saving features as discussed herein, such as reduced refresh and update rates, etc.
  • the AMD may receive status information, including critical status information, 5610 as discussed herein.
  • the AMD may then display the status information, including critical status information, 5612 as discussed herein.
  • the AMD may utilize the always on screen functionality, including variation thereof, as discussed herein.
  • the AMD may exit out of the power saving mode when the user wakes the device via a wake interface as discussed herein.
  • the AMD may exit out of the power saving mode via other user interactions or gestures.
  • the AMD may exit out of the pow'er saving mode via a user interaction corresponding to a single or double tap on the AMD that the AMD determines via a motion sensor.
  • the user may interact with the AMD and command the AMD via user interaction with the AMD corresponding to taps or other gestures on the AMD while the AMD remains in the power saving mode.
  • the user may snooze alarms or toggle the display to turn on or off without the AMD exiting the power saving mode (e.g., without entering the wake mode).
  • the AMD can have one or more user interaction sensors.
  • the user interaction sensors can include motion sensors.
  • the motion sensor can include an accelerometer, gyroscope, and/or other electrical or mechanical motion sensors that convert motion or acceleration into electrical signals.
  • the electrical signals can be sent to the one or more controllers of the AMD as user interaction signals.
  • the motion sensors can be part of the device sensors 3208 as discussed herein.
  • the motion sensor can detect, for example, a single tap or a double tap anywhere on the AMD, including on the touchscreen display.
  • the motion sensor can detect and send user interaction signals associated with any number of taps, such as for example, a triple tap, a quadruple or more taps on the AMD.
  • other user interaction gestures detected by the motion sensor can be used with the AMD as discussed herein in combination with or in lieu of taps.
  • other user interaction gestures may include shaking the AMD, moving the AMD, tilting the AMD, picking up the AMD, and/or the like that may activate or initiate functionality of the AMD as discussed herein in reference to tapping.
  • FIG. 57 is a flow diagram 5700 illustrating an example procedure for tap interaction in a power saving mode of an AMD.
  • the tap interaction can be a single tap.
  • the tap interaction for flow' diagram 5700 as discussed below' in reference to FIG. 57 can be a double tap.
  • the user interaction with AMD for flow diagram 5700 can be another user interaction wdth the AMD as discussed herein.
  • a tap interaction such as a single tap, can turn on or off the display. Turning on or off the display via taps, for example single taps, can be called toggling the display or toggling on or off the display without deactivating or exiting the power saving mode while toggling certain power saving mode features, such as temporarily turning on the display.
  • the AMD can enter or activate the power saving mode 5702 as discussed herein.
  • the AMD can deactivate the touchscreen controller 5704 as discussed herein so that the AMD does not register or react to user input on the touchscreen display.
  • the AMD can display status information 5706, which can include critical status information, on the display, for example with an always on screen.
  • the motion sensor of the AMD can remain active such that the AMD can receive and respond to user interaction with the AMD.
  • the AMD can detect a tap 5708, such as a single tap, on the AMD as discussed herein via the motion sensor sensing user interaction with the AMD corresponding to the tap.
  • the AMD can turn off the display 5710. For example, in turning off the display, the AMD may enter into the sleep mode as discussed herein while still continuing to provide glucose control therapy.
  • the AMD can detect another tap 5712, such as another single tap, after turning off the display.
  • the AMD can turn on the display 5714 and continue displaying the status information 5706.
  • FIG. 58 is a flow'' diagram 5800 illustrating another example procedure for tap interaction in a power saving mode of an AMD.
  • the tap interaction can be a double tap.
  • the tap interaction for flow diagram 5800 as discussed below in reference to FIG. 58 can be a single tap.
  • the user interaction with AMD for flow 7 diagram 5800 can be another user interaction with the AMD as discussed herein.
  • a tap interaction such as a double tap, can turn on or off the backlight.
  • Turning on or off the backlight via taps, for example double taps can be called toggling the backlight or toggling on or off the backlight without deactivating or exiting the powder saving mode while toggling certain power saving mode features, such as turning on the display.
  • the AMD can enter or activate the power saving mode 5802 as discussed herein.
  • the AMD can deactivate the touchscreen controller 5804 as discussed herein so that the AMD does not register or react to user input on the touchscreen display.
  • the AMD can display status information 5806, which can include critical status information, on the display, for example with an always on screen.
  • the motion sensor of the AMD can remain active such that the AMD can receive and respond to user interaction with the AMD .
  • the AMD can detect a tap 5808, such as a double tap, on the AMD as discussed herein via the motion sensor sensing user interaction with the AMD corresponding to the tap.
  • the AMD can turn on or increase the brightness of the backlight 5810 used to illuminate the display.
  • the AMD can turn on the backlight when the backlight was off, for example, in the power saving mode.
  • the AMD can increase brightness of the backlight when the backlight was on, but not at maximum illumination for example, in the power saving mode.
  • the AMD can detect another tap 5812, such as another double tap, after turning on or increasing the brightness of the backlight of the display.
  • the AMD can turn off the backlight when the backlight was previously off when the first double tap in step 5808 was received.
  • the AMD can keep the backlight on and decrease the brightness when the backlight was on when the first double tap in step 5808 was received and the brightness was increased in step 5810.
  • the AMD when the AMD does not detect another tap, such as another double tap, the AMD can turn off the backlight or decrease the brightness of backlight 5816 after a predetermined amount of time has passed 5814 associated with the backlight being on or at increased brightness for a certain time period when the AMD is in the power saving mode.
  • the AMD can continue displaying the critical status information 5806.
  • FIG. 59 is a flow diagram 5900 illustrating another example procedure for tap interaction in a power saving mode of an AMD.
  • the tap interaction can be a single tap.
  • the tap interaction for flow' diagram 5900 as discussed below in reference to FIG. 59 can be a double tap.
  • the user interaction with AMD for flow diagram 5900 can be another user interaction with the AMD as discussed herein.
  • the AMD can enter or activate the power saving mode 5902 as discussed herein.
  • the AMD can deactivate the touchscreen controller 5904 as discussed herein so that the AMD does not register or react to user input on the touchscreen display.
  • the power saving mode of flow diagram 5900 can include turning off the display as discussed herein for example in reference to a sleep mode. Accordingly, the AMD can turn off the display 5906 as part of entering or activating the power saving mode.
  • the motion sensor of the AMD can remain active such that the AMD can receive and respond to user interaction with the AMD .
  • the AMD can detect a tap 5908, such as a single tap, on the AMD as discussed herein via the motion sensor sensing user interaction with the AMD corresponding to the tap.
  • the AMD can turn on the display 5910.
  • the AMD can display status information, which can include critical status information, on the display.
  • the AMD can display alarms that were previously snoozed (e.g., indication via alarm status icons) in response to the tap 5908 when turning on the display 5910.
  • the AMD may activate the touchscreen controller as part of turning on the display 5910 such that the user can interact with the AMD via user input using the touchscreen display as discussed herein.
  • the motion sensor of the AMD can remain active such that the AMD can receive and respond to user interaction with the AMD.
  • the AMD can remain in the power saving mode after detecting the tap 5908.
  • the AMD may exit or deactivate the power saving mode and enter a different mode in response to the tap.
  • the AMD may enter a wake mode in response to the tap 5908.
  • the AMD can detect another tap 5914, such as another single tap, after turning on the display and displaying the status information.
  • the AMD can turn off the display 5906 after detecting the other tap 5914.
  • the AMD can enter or activate the power saving mode in response to tap 5914.
  • the AMD can enter or activate the power saving mode when the AMD entered the wake mode in response to tap 5908.
  • the AMD when the AMD does not detect another tap, such as another single tap, the AMD can turn off the display after a predetermined amount of time has passed 5916 associated with the display being on for a certain time period. In some cases, when the AMD does not detect another tap, such as another single tap, the AMD can turn off the display after a predetermined amount of time has passed 5916 associated with the display being on for a certain time period when the AMD is in the power saving mode. In some cases, the AMD can reenter or reactivate the power saving mode after a predetermined amount of time of not detecting another tap where the AMD had exited the power saving mode, such as for example, in response to the detecting the tap 5908.
  • FIG. 60 is a flow diagram 6000 illustrating another example procedure for tap interaction in a power saving mode of an AMD.
  • the tap interaction can be a double tap.
  • the tap interaction for flow diagram 5900 as discussed below in reference to FIG. 60 can be a single tap.
  • the user interaction with AMD for flow' diagram 6000 can be another user interaction with the AMD as discussed herein.
  • the AMD can enter or activate the power saving mode 6002 as discussed herein.
  • the AMD can deactivate the touchscreen controller 6004 as discussed herein so that the AMD does not register or react to user input on the touchscreen display.
  • the power saving mode of flow diagram 6000 can include turning off the display as discussed herein for example in reference to a sleep mode. Accordingly, the AMD can turn off the display 6006 as part of entering or activating the power saving mode.
  • the motion sensor of the AMD can remain active such that the AMD can receive and respond to user interaction with the AMD.
  • the AMD can detect a tap 6008, such as a double tap, on the AMD as discussed herein via the motion sensor sensing user interaction with the AMD corresponding to the tap.
  • the AMD can turn on the display 6010.
  • the AMD may activate the touchscreen controller as part of turning on the display 6010 such that the user can interact with the AMD via user input using the touchscreen display as discussed herein.
  • the AMD can turn on backlight 6012 used to illuminate the display.
  • the AMD may delay turning on the backlight after turning on the display for a predetermined time period and/or until detecting another user interaction with the AMD such as the AMD being moved, including being picked up.
  • the AMD can display status information, which can include critical status information, on the display as discussed herein, for example in reference to step 5912.
  • the motion sensor of the AMD can remain active such that the AMD can receive and respond to user interaction with the AMD.
  • the AMD can remain in the power saving mode after detecting the tap 6008.
  • the AMD may exit or deactivate the power saving mode and enter a different mode in response to the tap 6008. For example, the AMD may enter a wake mode in response to the tap 6008.
  • the AMD can detect another tap 6014, such as another double tap, after turning on the display and the backlight.
  • the AMD can detect another tap 6014, such as another double tap, and turn off the backlight or decrease the brightness of backlight 6018.
  • the AMD can enter or activate the power saving mode in response to tap 6014.
  • the AMD can enter or activate the power saving mode when the AMD entered the wake mode in response to tap 6008.
  • the AMD can turn off the backlight or decrease the brightness of backlight 6018 after a predetermined amount of time has passed associated with the backlight being on.
  • the AMD when the AMD does not detect another tap, such as another double tap, the AMD can turn off the backlight or decrease the brightness of backlight 6018 after a predetermined amount of time has passed associated with the backlight being on when the AMD is in the power saving mode. In some cases, the AMD may decrease the brightness of the backlight after the predetermined amount of time before turning off the display 6006 after another or second predetermined amount of time as discussed below.
  • the AMD can turn off the display 6006 after detecting the other tap 6014.
  • the AMD when the AMD does not detect another tap, such as another double tap, the AMD can turn off the display 6006 after a predetermined amount of time has passed 6016 associated with the display being on for a certain time period.
  • the AMD when the AMD does not detect another tap, such as another double tap, the AMD can turn off the display 6006 after a predetermined amount of time has passed 6016 associated with the display being on for a certain time period when the AMD is in the power saving mode.
  • the AMD can reenter or reactivate the power saving mode after a predetermined amount of time of not detecting another tap where the AMD had exited the power saving mode, such as for example, in response to the detecting the tap 6008.
  • the AMD can first dim or decrease the brightness of the backlight after a first predetermined amount of time has passed 6016 without receiving another tap. After a second predetermined amount of time has passed (e.g., with a dimmed backlight), the AMD can turn off the display 6006.
  • FIG. 61 is a flow diagram 6100 illustrating another example procedure for tap interaction with an ambulatory medical device.
  • the tap interaction can be a double tap.
  • the tap interaction for flow' diagram 6100 as discussed below’ in reference to FIG. 61 can be a single tap.
  • the user interaction with AMD for flow' diagram 6100 can be another interaction with the AMD as discussed herein.
  • the AMD may operate based on the flow diagram 6100 in the pow'er saving mode with an always on screen as discussed herein.
  • the AMD may operate based on the flow diagram 6100 in the power saving mode without an always on screen, such as in the sleep mode with the display off as discussed herein.
  • the AMD may turn on the display to notify of an alarm condition and turn off the display after the alarm is snoozed or otherwise acknowledged without exiting the power saving mode.
  • the AMD may exit or deactivate the power saving mode when the alarm condition detected in flow diagram 6100 corresponds to an urgent or high seventy alarm as discussed herein.
  • the AMD may operate based on the flow diagram 6100 in a wake mode to snooze an alarm via tapping gesture(s) as discussed herein.
  • the AMD can detect an alarm condition 6102 being present as discussed herein.
  • the AMD may receive status information via the monitoring system interface.
  • the AMD may determine that the status information satisfies an alarm condition for the ambulatory medicament device and/or for the subject.
  • the AMD can then display on the display one or more alarm status indicators corresponding to the alarm condition 6104 as discussed herein.
  • the AMD can turn on the display when the display was off as discussed herein for the power saving mode or sleep mode. In some cases, the AMD may be operating with an always one screen as discussed herein. In some cases, the AMD can announce the alarm condition 6104 using an auditory annunciation pattern or a haptic annunciation pattern, or both. The AMD can use the auditory and/or haptic annunciation pattern in combination with displaying the one or more alarm status indicators or can use the auditory and/or haptic annunciation pattern when not displaying the one or more alarm status indicators (e.g., the display is off).
  • the various annunciation and display combinations can be set by the user for the AMD and/or can be part of the modes of operation of the AMD discussed herein.
  • the AMD may default to auditory and/or haptic annunciation pattern without turning on the display when the display is off.
  • the motion sensor of the AMD can remain active such that the AMD can receive and respond to user interaction with the AMD.
  • the AMD can detect a tap 6106, such as a double tap, on the AMD as discussed herein via the motion sensor sensing user interaction with the AMD corresponding to the tap.
  • the AMD can snooze the alarm or alarm condition 6108.
  • snoozing the alarm can include the AMD no longer displaying the one or more alarm status indicators on the display after being displayed in response the alarm condition.
  • the AMD can display the one or more alarm status indicators in response to the alarm condition and stop displaying the one or more alarm status indicators when the user snoozes the alarm.
  • the AMD when the AMD was in the sleep mode with the display off, the AMD can turn on the display to display the one or more alarm status indicators, and after a predetermined period of time, turn off the display again to reenter the sleep mode with the screen mode (without exiting the power saving mode).
  • the AMD can determine that alarm condition requires urgent user attention based on, for example, a severity level of the alarm as discussed.
  • the AMD can prevent or not allow the alarm to be snoozed via for example taps or other user interactions as discussed herein.
  • the AMD in response to determining that the alarm requires urgent user attention, can deactivate or exit the power saving mode into, for example, the wake mode.
  • the AMD in response to determining that the alarm requires urgent user attention, the AMD can deactivate or exit the sleep mode (e.g., operating with the display off) and continue operating in the power saving mode with, for example, an always on screen.
  • the AMD can allow low priority or not urgent alarms to be snoozed as discussed herein. In some cases, whether AMD allows the alarm to be snoozed or not, the AMD can deactivate or exit the power saving mode into, for example, the wake mode when an alarm condition is detected (e.g., inter wake mode regardless of whether the alarm is urgent or low priority)
  • the AMD may update the alarm condition or alarm information with snoozed status 6110, such as updating the one or more alarm status indicators to indicate that a particular alarm has been snoozed.
  • the alarm status indicators may include or be changed to alarm status icons that indicate an alarm condition has been snoozed.
  • the AMD can move or add the snoozed alarm status indicators to a list of pending alarm conditions.
  • the list of pending alarm conditions can include indications or the alarm status icons associated with the alarm status indicators that indicate the alarm condition has been snoozed. Adding the snoozed alarm status indicators or alarm status icons to the list of pending alarm conditions can be part of the step of no longer displaying the one or more alarm status indicators on the display in response to the alarm being snoozed.
  • the AMD may not display the list of pending alarm conditions (which can include snoozed or as well as non-snoozed alarms) on an always one screen in a power saving mode of the AMD.
  • the list of pending alarm conditions may then be later access via user input/interaction with AMD or for example, when entering the wake mode.
  • the AMD can update, increment, and/or display an alarm status indicator (e.g., alarm status indicator 5510) with a counter that shows the number of alarm on the list of pending alarm conditions and/or whether one or more alarm conditions have been snoozed.
  • the AMD can display on the display and/or annunciate (auditory and/or haptic annunciation pattern) a snooze confirmation 6112 that the alarm condition has been snoozed.
  • the snooze confirmation may be or include the step of updating and/or changing the alarm status icons and/or incrementing a counter of the alarm status icon.
  • the AMD can stop displaying the alarm status indicators on the user interface screen in, for example, the always on screen in the power saving mode of the AMD.
  • the AMD can stop displaying the alarm status indicators on the user interface screen when a predetermined period of time has passed after snoozing the alarm.
  • an unexpected situation may occur that impacts the operation of the ambulatory medicament device (AMD) such as an external impact or damage to the AMD.
  • AMD ambulatory medicament device
  • an AMD that includes various mechanical components
  • the AMD may have settings inadvertently modified by a collision when the AMD is accidentally dropped.
  • a user may be the subject who is receiving medicament or therapy, a clinician or healthcare provider, a parent or guardian, or any other user who may be permitted to modify settings of the ambulatory medicament device.
  • a pump motor e.g., motor 312
  • medicament delivery error may occur which can lead to a dangerous situation for the subject.
  • the AMD may stop operating, manually or automatically when the AMD is dropped.
  • the AMD when the AMD is not programmed to store or have any backup data (e.g., the number of turns of the motor used to provide the specific therapy individualized for a specific subject), an inaccurate amount of delivered medicament may be recorded. The user may not even be aware of any such circumstances.
  • any backup data e.g., the number of turns of the motor used to provide the specific therapy individualized for a specific subject
  • an ambulatory medicament device may be configured to detect the sudden motion and to prevent an inadvertent modification to a control parameter and/or to medicament delivery.
  • the sudden motion may include an event of sudden dropping of the AMD by a user or any external impact to the AMD.
  • the AMD may include a sensor (e.g., device sensors 3208 in FIG. 32) which may be one or more motion sensors, an accelerometer, or a geolocation system to detect an external impact on the AMD or a motion of the AMD.
  • a sensor e.g., device sensors 3208 in FIG. 32
  • the aforementioned sensor or sensors may be used to determine or detect a velocity of the AMD and/or the subject.
  • one or more motion sensors such as an accelerometer and/or gyroscope, can be implemented for detecting a freefall motion or any other external movement of the AMD based on motion data.
  • the motion data may be associated with movement of the AMD and collected from the one or more motion sensors.
  • a motion sensor can detect any motion made around or on the AMD, e.g., a freefall motion of the AMD based on the motion data.
  • freefall may refer to a condition where the object under consideration experiences substantially unimpeded downward acceleration due to gravity.
  • the motion sensor may detect such a gravitational acceleration of an object (e.g., AMD) in freefall.
  • an object e.g., AMD
  • the gravitational acceleration falls toward the center of the Earth at an acceleration rate of about 9.81 m/s 2
  • a certain acceleration or higher set in the AMD is detected by the one or more sensors
  • the AMD determines that there is a freefall motion of the AMD, falling from the top of, e.g., about 1.2 - 1.5 m, to the ground.
  • the motion detection is however not limited to the freefall motion, but may include other movements, for example, a shake (e.g., left to right movement and/or up and down movement for certain displacement for a certain period of time or more), swiping, pinching, tapping, etc.
  • the AMD when motion or motions have been detected by the one or more sensors, the AMD may act to stop certain actions or functions of the AMD to prevent damage to internal components and/or incorrect delivery of medication (e.g., erroneous dosing).
  • the controller when there is zero output from the accelerometer, the controller may determine the freefall motion and thus control the operation of the AMD (e.g., halt operation as discussed herein).
  • the AMD may detect motion or motions via motion sensors in various forms as noted above and may store in motion data.
  • the stored motion data can be used not only for merely detecting a motion of the device such as freefall as described above, but also for interaction with users so as to alert the user regarding any potential or actual malfunction of the device and to receive user acknowledgement of the alert. Therefore, motion data detected by the AMD can provide useful information both to alert the user to potential problems and to allow the user to initiate interaction with the AMD, if the user so chooses.
  • the AMD alert the user in a situation where a medicament is potentially erroneously delivered to a subject/patient which can result in a critical situation, for example, a situation where the AMD is damaged in a fall, by being dropped, accidentally thrown etc. as described above.
  • the motion detection can be employed for various uses as further described below.
  • the AMD may determine W'hether the motion is a freefall motion of the AMD 6204 as discussed herein.
  • the operation or functions of one or more of components of the AMD e.g., a pump of the AMD
  • the AMD may lock the touchscreen (e.g., disable touchscreen controller to prevent touch inputs) and/or lock the AMD into, for example, a sleep or locked state.
  • pausing the pump may also pause the medicament delivery to the subject.
  • the number of cycles of the pump may be recorded at the instance when the freefall motion is detected at step 6206. Then, the motor 312 might be ceased to stop or pause the pump operation at step 6208 and pause or stop the delivery of medicament to the subject at step 6210, In addition, the amount of medicament delivered between the time the freefall motion was detected and the time delivery of the medicament was paused may be also recorded at step 6212, In some cases, the AMD may execute steps 6202, 6204, and 6210 upon determining that the AMD is in freefall without recordation of medicament delivery of steps 6206 and 6212.
  • the pump of the AMD may have a pump mechanism including, e.g., a housing, DC servomotor, a reservoir, cartridges, circuitries, batteries, and the like, which are sensitive to any outside impact due to an inadvertent or accidental collision, drop, etc.
  • the pump mechanism may be adapted to use a general pump mechanism.
  • the ambulatory medicament pump can be any pump that can be used in medicament pumps known to those of skill in the art, for example, a peristaltic pump but not limited thereto.
  • one or more motion sensors such as an accelerometer can detect a freefall motion of the AMD based on motion data, which is associated with movement of the AMD, collected from the one or more motion sensors.
  • a motion sensor can detect a freefall motion of the AMD based on the motion data and the AMD may paused or stopped, which may cease operation of medicament delivery.
  • paused may refer to stoppage for a predetermined period of time and may automatically resume operation after a certain period of time or when a certain condition has met. In some cases, paused can include stopping the AMD until the user directs the AMD operations to resume. When the AMD is paused or operation is halted, such as in a case where the AMD is halted until further instructed by the user after the detection of the freefall motion, the delivery of medicament to the subject can be paused as a result.
  • the halt operation of pausing delivery of medicament to the subject can be carried out by instructing the controller to cease rotation of the motor 312 of the ambulatory medicament pump, by cutting power supply to the ambulatory medicament pump, or switching from a closed loop circuit to an open loop circuit by controlling a switch unit.
  • the user may be informed via a user interface (e.g., touchscreen display 504) when the AMD has stopped operating the pump/motor 212, 312.
  • the AMD may pause the delivery of the medicament for a period of time.
  • the period of the time can be one minute, five minutes, ten minutes, thirty minutes, an hour, or an amount of time defined by the subject.
  • an alarm can be outputted in various ways to inform a user.
  • An acknowledgement of the user of the alarm may be required in certain situations.
  • the alarm may alert the user regarding various conditions regarding the AMD and may warn the user regarding.
  • the various conditions may include potential damage to the system and changes in medicament parameters, cessation of AMD operation.
  • the alarm conditions may further include instances where the user may be informed regarding either potential or actual changes to the system’s operation.
  • the user interface may be a touchscreen interface or a non-touchscreen interface, or the wake interface 3220.
  • the user interface may present one or more user-interface screens to a user informing the user of the status of the AMD or to receive a user’s direct manipulation.
  • the user interface can be implemented via an electronic device that includes a display and one or more buttons, switches, dials, capacitive touch interfaces, or touchscreen interfaces.
  • the ambulatory medicament device may include an alarm system configured to monitor the ambulatory medicament device and/or the subject, and to generate an alarm when it is determined that a condition has been detected that satisfies an alarm condition,
  • the CCM may include control methods of the AMD implemented to prevent unintended therapy changes by detecting particularly a certain motion of the AMD.
  • the blood glucose control system that provides blood glucose control via an ambulatory medicament pump may further include a medicament reservoir (e.g., reservoir 408) configured to store a medicament and from which the medicament can be delivered to the subject by the pump 212.
  • the pump 212 can include one or more medicament cartridges or can have the integrated reservoir 408 of medicament.
  • the operation of the pump 212 can be controlled by the controller 400
  • the motion sensor can sense an end of the freefall motion and resume the delivery of the medicament upon detecting the end of the freefall motion or resume the delivery of the medicament after a specifically set period time has lapsed.
  • the user may be notified with the resumption of medicament delivery via the user interface, or in certain embodiments, the user interface may display an option button for the user to accept or decline the resumption of medicament delivery.
  • the AMD may be programmed to record an amount of medicament administered to the subject upon detecting the freefall motion and determine an amount of medicament administered between a time the freefall motion was detected and a time delivery of the medicament w'as paused. In this manner, the amount of medicament delivered to the patient between the instance of the freefall motion and the instance of the pause may be determined in accordance with therapeutic protocols.
  • the amount of medicament administered to the subject can be determined for example based on the number of cycles completed by the ambulatory medicament pump. The number of cycles can be calculated based on how many turns the motor 312 has made prior to the stopping of the motor.
  • the AMD may detect an end of the freefall motion.
  • the AMD may resume administering the medicament to the subject based on the recorded amount of medicament by controlling the pump.
  • the end of freefall motion may be detected by a baseline output of the motion sensor.
  • the baseline output may be the signal output detected by the accelerometer and may correspond to the signal output due to gravity when the AMD is at rest.
  • the baseline output can be within a range of acceleration values surrounding the acceleration of gravity.
  • the range of acceleration values can encompass accelerations felt by the ambulatory medicament device while attached to the subject.
  • the AMD can determine the AMD is in free fall motion. For example, when the motion sensor detects zero output, the AMD is in free fall motion. In some cases, the AMD can determine that AMD is in freefall when the output is greater than zero, but less than the predetermined freefall threshold. When the signal output is greater than the predetermined freefall threshold, the AMD can determine that the AMD is not at rest or that subject is moving the AMD, but that the AMD is not in freefall motion because the motion sensor provides an output signal between the baseline output and the predetermined freefall threshold signal output.
  • the AMD can determine that the AMID is in freefall.
  • the predetermined freefall threshold may correspond to when the AMD has experienced freefall acceleration due to gravity from 2-6 feet, including 3-5 feet, including 4-5 feet, including any values in-between,
  • the AMD may further calculate a jerk of the ambulatory medicament device during the freefall motion based on the acceleration and determine whether the jerk exceeds a threshold value. If the jerk does not exceed a threshold value, the AMD may resume administering the medicament to the subject. If, however, the jerk exceeds the threshold value, the AMD may generate an alarm to notify a user, and request that the user acknowledge the alarm in the form of an alarm response signal from the user (or subject). The alarm may be configured to include an urgency level based on the calculated jerk.
  • the alarm, and the alarm response signal may be implemented in multiple formats.
  • the alarm response signal may include an alarm snooze signal, which snoozes the alarm, or an alarm acknowledgement signal configured to dismiss the alarm.
  • the alarm associated with the highest alarm severity level however may not be snoozed or dismissed.
  • the alarm associated with the highest, severity level may be snoozed for a shorter time period than alarms of lower severity levels, which will be described in more detail further below'.
  • the alarm herein may be generated due to various reasons, e.g., due to the drop of the AMD as described above, and in addition the motion sensor may detect further motions of the device, and the motion sensor may be further configured to detect the motion of the user responding to the alarm. That is, the ambulatory medicament device may not only detect the motion of the device itself as freefall, but may also be configured to detect the motion of the device by an external impact (e.g., tap, shake, etc.) on the device body.
  • an external impact e.g., tap, shake, etc.
  • another alarm may be generated after a specific period of time has lapsed, and in this case, an alarm acknowledgement response may be received, and the alarm may be dismissed.
  • the alarm or alarms can be categorized by the level of intensity, for example, a low ? - level alarm, a medium-level alarm, or a high-level alarm, that is determined based on the alarm condition. That is, the alarm may have an urgency level, for example, between 0 and 5 determined based on the alarm condition, such that the alarm can be generated differently based on the level of urgency associated with the alarm condition.
  • the alarm condition may be an alarm condition in an alarm profile as will be described below in more detail.
  • the number of cycles of the pump may be recorded at the instance when the freefall motion is detected at step 6206. Then, the motor might be ceased to stop or pause the pump operation at step 6208 to ultimately pause or stop the delivery of medicament to the subject at step 6210, In addition, the amount of medicament delivered between the time the freefall motion was detected and the time delivery of the medicament was paused may be also recorded at step 6212.
  • FIG. 63 a flow diagram 6300 illustrating an example procedure to control an operation of an ambulatory medical device pump after freefall motion has ended.
  • the AMD may calculate a jerk at step 6304.
  • the jerk or jolt corresponding to a rate at which an object’s acceleration changes with respect to time. It is a vector quantity (having both magnitude and direction).
  • the jerk or jolt can be associated an impact on the AMD as a result of, for example, contacting the ground or some other object after freefall motion with the impact generating forces or acceleration values on the AMD greater than an alarm and/or diagnostic threshold step 6306.
  • the jerk or jolt can occur without freefall motion.
  • the jerk or jolt may be determined because the AMD was hit or bumped against an object that resulted in an impact generating forces or acceleration values on the AMD greater than the alarm and/or diagnostic threshold step 6306.
  • the AMD then may output an alarm if the calculated jerk is equal to or greater than an alarm and/or diagnostic threshold at step 6308.
  • the alarm and/or diagnostic threshold rate maybe used as criteria in determining whether the alarm condition is satisfied by comparing status information (e.g., calculated jerk) to one or more alarm thresholds (e.g., reference jerk that is preset or predetermined jerk threshold) or alarm conditions.
  • status information e.g., calculated jerk
  • alarm thresholds e.g., reference jerk that is preset or predetermined jerk threshold
  • An alarm can be generated to inform the user 6308 of a malfunction or some other condition of the AMD as result of the jerk.
  • the user may- be required to acknowledge the alarm 6312.
  • the AMD and/or motor operation may be resumed to continue the delivery of medicament to the subject at steps 6314 and 6316.
  • the alarm acknowledgement will be described in more detail in the Motion-Based Alarm Acknowledgement of User section. If the jerk is on the other hand the alarm less than the alarm and/or diagnostic threshold, the AMD and/or motor operation may be resumed to continue the delivery of medicament to the subject at steps 6314 and 6316 without generating alarms or running a diagnostic test.
  • a diagnostic test may be performed to check the condition of the pump at step 6310.
  • the diagnostic test can be employed as a standard for determining whether to resume the administration of the medicament to the subject. If the AMD does not pass the diagnostic test, e.g., fails to meet specific requirements set for determining whether to resume the administration of the medicament to the subject based on one or more operating parameters, the AMD or one or more components of the AMD may be considered as being damaged or any of the controllers contained therein may be determined to have a malfunction. In this case, an alarm may be generated informing the user of the damage or the like of the AMD and step 6308 may be performed. On the other hand, if the diagnostic test is passed, the pump operation may be resumed to resume the delivery of medicament to the subject at steps 6314 and 6316.
  • the AMD when the AMD is determined to be malfunctioning (e.g., damaged), the AMD may be reset by restarting the device.
  • the AMD may either automatically restart or direct the user to restart the AMD (e.g., as part of an alarm condition). If restarting the device resolves the malfunction issues caused by the jerk, the AMD may resume pump operation and medicament delivery steps 6314, 6316.
  • the diagnostic test may be performed and/or the alarm generation process may be performed again.
  • the AMD may generate an alarm 6308 informing the user that the AMD is damaged and needs to be repaired. Such an alarm may be a high severity alarm as discussed herein.
  • the AMD may generate other alarms discussed herein while resuming operation 6314, 6316. The other alarms may inform of some malfunction of the AMD that does not require immediate resolution in order for the AMD to resume operation 6314, 6316.
  • the AMD can generate an alarm when the AMD cannot verify the amount of medicament delivered due to the subject.
  • the actual amount of medicament delivered by the AMD may be determined or calculated based on the amount a dispending screw has been turned by the pump motor to dispense medicament from the cartridge.
  • the actual amount of medicament delivered by the AMD can be determined based on flow' sensors and corresponding outputs indicating the amount of medicament dispensed.
  • the actual amount of medicament delivered by the AMD can be determined based on the amount of volume remaining or volume change of medicament in the cartridge.
  • the AMD can also determine how much medicament was supposed or desired to be delivered to the subject based on an algorithm for delivering glucose control therapy as discussed herein.
  • the AMD may generate an alarm as discussed herein.
  • the alarm generated because the AMD cannot verify actual versus desired medicament delivery can be part of the generate alarm 6308 and/or diagnostic test 6310 steps as discussed herein.
  • the alarm generated because the AMD cannot verify actual versus desired medicament delivery can be part of other alarm generation as discussed herein.
  • the AMD may generate an alarm regarding the error in medicament delivery during operation after resumption of pump operation and medicament delivery 6314, 6316.
  • the method described herein may be performed by an AMD (e.g., by one or more processors of the AMD) to detect AMD device malfunctions, generate corresponding alerts, and prioritize the alerts to enable the subject or user to quickly and easily determine whether the device malfunction wall impact therapy, and should be immediately addressed.
  • the method of device malfunction alert prioritization may be used by other systems.
  • Certain alarms such as informational alarms, may be dismissible. However, generally the alarm may remain on the alarm list until the condition that caused the alarm is acknowledged and resolved.
  • a user may be able to acknowledge and/or snooze alarms via a user interface.
  • the user may first need to activate the user interface and then provide a gesture to unlock the user interface.
  • the user may use the wake button to activate a touchscreen display and then provide a gesture on the screen to unlock display.
  • the touchscreen display may be configured to allow the user or subject to navigate directly to the issue or fault for which an alarm is being delivered. This capability provides the user with more direct access to address the fault causing the alarm, so that the fault may be addressed more easily, and the alarm may then be stopped.
  • Acknowledging the alarm may include an action to respond to the alarm such that the user can resolve the alarm.
  • resolving the alarm may include replacing an insulin cartridge, changing a site where the ambulatory medicament device is connected to the subject, charging a battery of the ambulatory medicament device, providing insulin or a counter- regulatory agent to the subject and/or the ambulatory medicament device, replacing a damaged AMD or motor due to dropping thereof, or any other action that may be performed to address an alarm condition.
  • the resolution action may be acknowledging the alarm. For example, if the alarm is informational (e.g., to inform the user that more insulin has been ordered or to inform that the AMD is not functioning properly), acknowledging the alarm may be a sufficient resolution action.
  • FIG. 64 is a flow diagram 6400 illustrating an example procedure to receive an alarm acknowledgement from a user, when there is an active alarm detected due to various errors detected such as error in the AMD, error in medicament measurement, etc.
  • an alarm condition can be detected at step 6402 and an alarm can be generated based on the alarm condition (e.g., severity or urgency level of the alarm as described herein) at step 6404.
  • the alarm can be generated to notify the user of the current situation or operation status of the AMD.
  • the user may be then requested to acknowledge the alarm to make sure that the user is aware of the current alarm and associated operating conditions of the AMD at step 6406.
  • the alarm acknowledgement can be done in various ways, e.g., touching or tapping (one or more taps on one or various locations) on the touchscreen or touching or tapping on the AMD, shaking the AMD, shaking a hand above the touchscreen, swiping on the touchscreen, pressing the wake button or any other implemented button (as a touchscreen or physical button), etc.
  • touching or tapping one or more taps on one or various locations
  • shaking the AMD shaking a hand above the touchscreen
  • swiping on the touchscreen pressing the wake button or any other implemented button (as a touchscreen or physical button), etc.
  • the alarm may be snoozed or silenced 6412. In some cases, the alarm may be snoozed for a specified or predetermined period of time at 6412. In some cases, the alarm may be dismissed 6420 when the alarm is acknowledged and the alarm condition is determined to have a low urgency (e.g., level 0-2, including level 1). In some cases, the alarm may be dismissed 6420 when the alarm is not acknowledged or snoozed, but the alarm condition is determined to have a low urgency (e.g., level 1). The low urgency alarm may be generated 6406 and after not detecting an alarm response from the user, the alarm may be dismissed 6420 with low urgency alarms.
  • a low urgency e.g., level 0
  • the alarm may be snoozed 6412 when the alarm is acknowledged (and not snoozed by the user when the option to snooze is provided), but the alarm condition is determined to have a higher urgency (e.g., level 2) that merits generating a second alarm 6416 as discussed herein.
  • the AMD can generate user interface screens as discussed herein to provide an option for the user to snooze an alarm and/or acknowledge the alarm. Whether the user can snooze and/or acknowledge the alarm can be determined based on the urgency of the alarm as discussed herein.
  • the AMD may add the alarm condition to a list of alarms as discussed herein. After the alarm has been snoozed 6412, the AMD maystart a timer to track the passage of time. After a predetermined period of time has passed, the AMD can generate a second alarm at step 6414 to notify the user that the alarm condition still exists. When the AMD detects 6416 that the user has acknowledged the second alarm, the alarm can be then dismissed at step 6418.
  • the snooze function may be performed again for a predetermined period of time (6412) to generate additional alarms (e.g., second alarms) until the alarm condition is dismissed by the user or resolved as discussed herein.
  • the one or more user interface screens configured as a touchscreen may provide a graphical display including information about an alarm when an alarm threshold or condition is reached or exceeded as discussed herein.
  • the one or more user interface screens may be an alarm acknowledgement touch user interface element.
  • the one or more user interface screens may be configured to receive an alarm acknowledgement signal from the user via the touchscreen. Then, the one or more user interface screens may include resumption of administering the medicament to the subject based on the alarm acknowledgement signal.
  • the AMD when the magnitude of a measured jerk exceeds a threshold, the AMD may be configured to resume operation after the user acknowledges the alarm.
  • the graphical display can be arranged and colored based on an urgency level of the alarm condition. For example, the alarm condition having the highest urgency level may be colored in red and displayed at the top of the screen. The alarm condition having the lowest urgency level may be colored in green at the bottom of the screen for the user to easily discern therebetween.
  • the color and the location herein are merely examples but can be any color and any location (e.g., upper right corner, middle, or the like on the screen).
  • the graphical display is not limited to the visual display, but could be in the form of sound, by, e.g., a speaker generating audible signals based on the level of the urgency.
  • the audible signal may include one of, e.g., a beep, a series of beeps, a patterned beeping, or a speech output describing the alarm.
  • the volume and the play length of the audible signal may vary based on the level of urgency (e.g., playing for one minute for the highest urgency while playing for 10 seconds for the lowest urgency).
  • the ambulatory medicament device may include a haptic motor allowing a haptic alarm signal to be generated therethrough based on an urgency of the alarm condition.
  • the haptic alarm signal may include, e.g., a sustained vibration, a burst vibration, or a vibration pattern.
  • the length or intensity of the vibration may vary based on the urgency level of the alarm.
  • an alarm condition when a motion is detected, an alarm condition can be detected before generating an alarm.
  • An alarm response from the subject can be detected based on the motion data of the user to determine whether to silence the alarm.
  • the motion data here may include an acceleration of the ambulatory medicament device or touch inputs on touchscreen caused by the alarm response.
  • the alarm response may be a series of taps, e.g., a single tap, a double tap, multi-tap, or a multi-location tap on a body and/or touchscreen of the ambulatory medicament device or a shaking of the ambulatory medicament device (refer to FIG. 64).
  • the alarm response is not limited to the taps or shaking.
  • the alarm response may include any other motions or levels of motion (e.g., soft tap, soft shaking, a different number of shakings, etc.) can be implemented.
  • the alarm response may be further determined whether it is an alarm snooze response or an alarm acknowledgement response. Accordingly, when the alarm response is determined to be the alarm snooze response, the alarm may be snoozed for a specific period of time which may vary based on an urgency level of the alarm. For example, a low urgency alarm (e.g., level 1) may be snoozed for a longer predetermined period of time relative to the shorter predetermined period of time of a high or higher urgency alarm (e.g., level 2).
  • an alarm can be generated based on an urgency level. For instance, when an alarm condition is detected at 6402, the urgency level as described above may be determined and the alarm can be generated based on the determined urgency level 6404. In some examples, for an alarm having a higher urgency level may be generated in red color, a louder sound or a sound in a longer period of time (e.g., 1 minute), higher vibrations, etc., than an alarm having a lower urgency level which may be generated in yellow color, a softer sound, a sound in a shorter period of time (e.g., 10 seconds), softer vibrations, etc,, so as to distinguish the alarms.
  • a higher urgency level may be generated in red color, a louder sound or a sound in a longer period of time (e.g., 1 minute), higher vibrations, etc.
  • an alarm having a lower urgency level which may be generated in yellow color, a softer sound, a sound in a shorter period of time (e.g., 10 seconds), softer vibrations, etc,
  • the user may be required to acknowledge if the urgency or priority level is above a certain level.
  • the period of time can vary based on the urgency level, for example, snoozed for 1 minute for a lower urgent alarm and snoozed for 5 seconds for a higher urgent alarm, at 6412.
  • the user is then again requested to respond to the alarm to confirm that the user is aware of the alarm.
  • the user may not be able to snooze the alarm if the alarm is above a certain urgency level (e.g., level 3-5 alarms).
  • a user may be able to acknowledge and/or snooze alarms via a user interface.
  • the user may first need to activate the user interface (e.g., by providing a wake action) and then provide a gesture to unlock the user interface.
  • the user may use the wake button or touch input on the AMD to activate a touchscreen display and then provide a gesture on the screen to unlock display. Unlocking the display wall be further described below' in detail.
  • the touchscreen display may be configured to allow the user or subject to navigate directly to the issue or fault for which an alarm is being delivered. This capability provides the user with access to address the fault causing the alarm so that it could be corrected thereby stopping the alarm.
  • a user may be able to acknowledge and/or snooze alarms via motion sensor.
  • the Aik® may include a motion sensor that detects motion or acceleration of the AMD or on the AMD (e.g., tapping or shaking gestures).
  • the motion sensor can include an accelerometer, gyroscope, and/or other electrical or mechanical motion sensors that convert motion or acceleration into electrical signals.
  • the user may tap on the Aik® to acknowledge and/or snooze alarms.
  • the user may acknowledge and/or snooze alarms via the motion sensor without the AMD activating one or more user interface modules such as the touchscreen display.
  • the user may acknowledge and/or snooze alarms via the motion sensor without activating the user interface (e.g., without providing a wake action).
  • the motion sensor may be configured to detect different tap patterns (e.g., a single tap, a double tap, etc.). Each tap pattern may be associated with a different function.
  • the AMD can include a user interaction sensor which may include any motion sensor(s) and/or any one of the user interface modules such as the touchscreen or the wake interface.
  • the user interaction sensor can convert electrical or mechanical properties of the user into electrical signals.
  • the electrical signals from the user interaction sensor can be user interaction signals.
  • user interaction signals can encompass both user input via a touchscreen and user interaction via a motions sensor as discussed herein.
  • a user may interact with the alarms generated based on the alarm condition.
  • the user can only interact with the alarms when the AMD and/or the user interface is unlocked.
  • the user can interact with the alarms to snooze them or to obtain further information, when the AMD is locked.
  • the user may not be able to dismiss the alarm without unlocking the ambulatory medicament device.
  • the user may not be able to dismiss the alarm without unlocking the ambulatory medicament device when the alarm is urgent and requires user attention.
  • Interacting with the alarms may include providing information associated with the alarm to a user in response to the user interacting with the alarm, or an indicator representative of the alarm.
  • the AMD can determine that alarm condition requires urgent user attention based on, for example, a severity level of the alarm as discussed.
  • the AMD can prevent or not allow the alarm to be snoozed via for example taps or other user interactions as discussed herein.
  • the AMD in response to determining that the alarm requires urgent user attention, can deactivate or exit a power saving mode into, for example, a wake mode.
  • the AMD may update the alarm condition or alarm information with snoozed status, such as updating the one or more alarm status indicators to indicate that a particular alarm has been snoozed.
  • the alarm status indicators may include or be changed to alarm status icons that indicate an alarm condition has been snoozed.
  • the AMD can move or add the snoozed alarm status indicators to a list of pending alarm conditions.
  • the list of pending alarm conditions can include indications, or the alarm status icons associated with the alarm status indicators that indicate the alarm condition has been snoozed. Adding the snoozed alarm status indicators or alarm status icons to the list of pending alarm conditions can be part of the step of no longer displaying the one or more alarm status indicators on the display in response to the alarm being snoozed.
  • the AMD may not display the list of pending alarm conditions (which can include snoozed or as well as non-snoozed alarms) on an always one screen in a power saving mode of the AMID.
  • the list of pending alarm conditions may then be later access via user input/interaction with AMD or for example, when entering the wake mode.
  • an alarm that was dismissed as discussed herein may be added to the list of pending alarm conditions.
  • the dismissed alarm may include a status indicator that indicates that the alarm was dismissed.
  • the touchscreen when there is an existing alarm or alarms to be resolved, the touchscreen may not be unlocked until the active alarm is resolved. Once a user acknowledges or resolves the alarm, or the issue can be resolved automatically (e.g., when the AMID was in a freefall motion but there is no error in the medicament delivery after the freefall motion is ended), the user can awake the touchscreen by motion as described above and a home screen can be displayed on the touchscreen. Waking up and unlocking the touchscreen by motion will be described hereinafter.
  • a user 3226 may wake the AMD from a sleep state or unlock the AMD by interacting with a wake interface 3220.
  • the user 3226 may wake the AMD from another state or mode, such as for example a power saving mode or low power mode, the AMD by interacting with a wake interface 3220.
  • the touchscreen controller may not receive user input or user input signals corresponding to user input (e.g., via a touchscreen display 3222).
  • the touchscreen controller may not receive user interaction or user interaction signals corresponding to user interaction (e.g., via device sensors 3208, including an accelerometer or other motion sensors).
  • Waking the AMD may include activating a touchscreen interface or presenting a lock screen to a user. Further, waking the AMD may include waking the touchscreen controller such that it can receive user input or user input signals corresponding to user input.
  • the wake interface 3220 can include one or more of the additional user interfaces mentioned above that are configured to generate and provide a wake input (or wake signal) to the CCM when detecting a pre-set user interaction. Alternatively, or in addition, the wake interface 3220 can be any type of wake interface element of the AMD that a user can interact with to wake at least a feature (e.g., a touchscreen interface) of the AMD. In some cases, the AMD may wake in response to detection of a particular movement or motion.
  • a determination that the ambulatory medicament device is being moved with a particular motion may cause the AMD to awaken or cause the AMD to awake the touchscreen interface of the AMD.
  • the AMD may wake in response to detection of a tapping on the AMD, such as a single tap or a double tap.
  • a single tap or a double tap may activate one or more elements of the user interface module 3218, such as for example the touchscreen display 3222.
  • the touchscreen display can be a touch digitizer that converts analog interactions of the user (e.g., via electrical or mechanical properties of the user) into digital signals communicated to one or more controllers as discussed herein.
  • the tap control or other gesture control of the AMD may be context sensitive.
  • the AMD’s response to gesture controls may depend on whether there are any active alarms.
  • a single and/or double can turn on or off (toggle) the touch screen.
  • a single and/or double can turn on or off (toggle) the backlight.
  • the context sensitive response of the AMD to user inputs can also be time dependent. For example, when a user snoozes or acknowledges an alarm as discussed herein, if a certain amount of time since snoozing or acknowledging is less than a predetermined context time threshold, the AMD may respond to gesture user inputs (e.g., taps) as discussed herein as if there are no active alarms (even though an alarm may have been recently snoozed and/or acknowledged), such as for example toggling the touchscreen and/or backlight. After more time than the predetermined context time threshold has passed, the AMD may respond to gesture user inputs (e.g., taps) to change and/or display alarm conditions as discussed herein.
  • gesture user inputs e.g., taps
  • a user may interact with the touchscreen display 3222, alphanumeric pad, or other types of user interfaces that may be included in the user interface module 3218.
  • the user interface module 3218 may include any combination of one or more of the touchscreen display 3222, alphanumeric pad, or other types of user interfaces,
  • a device sensor 3208 may be a sensor that generates a signal or status value associated with the condition of modules, interfaces, accessories, disposables of the AMD. In some examples, a device sensor 3208 may generate a signal that corresponds to a parameter associated with a component in a module or interface. For example, one device sensor may record the voltage of a battery and another device sensor may record the follow rate of a pump the medicament delivery interface 3214.
  • the alarm system 3202 may implement procedures for allowing the user or subject to change the alarm settings and/or acknowledge an alarm annunciation via the user interface module 3218.
  • the user may be able to see one or more alarms annunciated on a user interface (e.g., as a list of alarms), even when the AMD is in a locked state. In these examples, the user may not. be able to acknowledge or respond to alarms when the AMD is in the locked state.
  • the user or subject may access an alarm setting screen or acknowledge an alarm annunciation by providing a wake action or a wake action followed by a first, gesture via, for example, the touchscreen display 3222.
  • the first, gesture may be created by shaking the AMD, inputting a swipe gesture on the touchscreen, pinching the AMD, or tapping one or more times on a specific location of the AMD (e.g., a single tap, a double tap, multi-tap, a multi-location tap, sequentially or non-sequentially, on an upper left corner, a lower right corner, or the like of the AMD or the pump).
  • touching three corners of the AMD can power on or off the AMD.
  • user interactions may include the selection of an icon, a series of taps or inputs, one or more gestures (e.g., a linear swipe, an arcuate swipe, a circular swipe, or other simple or complex movement across the touchscreen), performing a pattern or sequence on the touchscreen (e.g., drawing an image), a multi-touch or multi-input interaction, a combination of the foregoing, or any other type of interaction with a touchscreen, or portion thereof.
  • the series of inputs may be any combination of touch movements, touch points, numerical characters, alphabetical characters, and other symbols.
  • Gesture interactions can be guided by visual indicia displayed or printed on the AMD.
  • the visual indication can include animations that suggest or guide user interactions with a touchscreen.
  • the first user interaction can include an arcuate swipe around at least a portion of a generally circular icon or logo.
  • the first and/or second user interactions may include a predetermined sequence of numerical and/or alphabetical inputs.
  • a series of multiple inputs the range of parameters for an input may be dependent on other inputs in the series. For example, required start position of a touch movement may be dependent on the position of the previous touch movement.
  • the time that the series of inputs are entered may also be a part of the range of parameters. For example, a senes of inputs mayneed to be entered in no less than 3 seconds or more than 3 seconds, and no more than 15 seconds or less than 15 seconds.
  • a user may be asked to enter a passcode or password to unlock the touchscreen, or, after the touchscreen display has been activated by the wake signal, a passcode may be required to unlock the touchscreen display.
  • the user may enter a securitycode into the AMD or an intermediary device that the AMD and/or the intermediary device may validate or verify matches the passcode to access certain functions of the AMD.
  • the passcode or password can be entered in the form of motion, such as a series of taps or inputs, one or more gestures (e.g., a linear swipe, an arcuate swipe, a circular swipe, or other simple or complex movement across the touchscreen), performing a pattern or sequence on the touchscreen (e.g., drawing an image), a multi-touch or multi-input interaction, a combination of the foregoing, or any other type of interaction with a touchscreen, or portion thereof.
  • a keypad may be used to enter a passcode for unlocking a user interface.
  • a user can wake up the touchscreen by motion in various forms.
  • a motion of a user or a motion e.g., tap on the AMD or movement of the AMD
  • the ambulatory medical device checks determines whether there is an active alarm to be resolved at 6504.
  • the touchscreen may become active at 6506.
  • the AMD may turn on the touchscreen at step 6506.
  • the AMD may turn on the backlight as part of step 6506.
  • the AMD may also unlock the touchscreen 6508 and enter into an active mode in response to the motion detected 6502, depending on for example the type of motion detected, and for example display a home screen. For example, a single tap can turn on step 6506 the touch screen. A double tap can turn on 6506 the touchscreen and unlock the touchscreen 6508. In some cases, where the touchscreen is displaying an always on interface in the locked or sleep state, the AMD may wake 6506 and unlock the touchscreen 6508.
  • a user may be requested to acknowledge the alarm (step 6406 of FIG. 64) or perform an action to resolve the alarm as discussed herein.
  • the AMD may display a list of pending alarm conditions as discussed herein.
  • the AMD may wake and/or unlock the touchscreen as discussed herein for steps 6506 and/or 6508.
  • the AMD can receive a touch input directly from a user via a user interface configured as a touchscreen.
  • the touch input can be made in various ways, for example, a user can tap on the touchscreen, a single tap, a double tap, multi-tap, a multilocation tap, a pinch gesture, or a swipe gesture, or can touch with one or more touches on one or more corners of the touchscreen.
  • the user can touch the touchscreen in the form of any of the above-described touch input or any other touch input to unlock touchscreen.
  • a computing processor of the AMD may be configured for locking the device, and when a touch input is detected on any portion of the touchscreen, the processor may wake the touchscreen bydisplaying a home screen.
  • the touch input could be a gesture password for unlocking the touchscreen.
  • the computing processor may include a motion sensor detecting touch gestures performed at any location on the touchscreen.
  • the computing processor may add a distinct input value associated with each identified touch gesture to an input buffer to form a series of input values.
  • the series of input values in the input buffer may then be compared to a series of values corresponding to a predetermined touch gesture passcode sequence.
  • the touchscreen may be unlocked when the series of input values in the input buffer matches the series of values corresponding to the predetermined touch gesture passcode sequence.
  • the touchscreen may enter a locked state until the user attempts a touch input to the touchscreen.
  • at ouch input may include one or more touches on one or more locations on the AMD (e.g., front, sides, or rear of the AMD).
  • the touchscreen may be locked for a certain period of time or a secondary identification may be required, e.g., an identification code may be sent to a user’s phone or via email for security.
  • the touchscreen can be unlocked with or without the gesture password check and a home screen may be displayed on the screen.
  • the touchscreen may display a touch user interface element for user to touch.
  • the touchscreen can become active upon determining there is no pending alarm at steps 6604, 6606.
  • the AMD may perform actions and functions discussed herein in reference to steps 6506 and 6508 discussing FIG. 65.
  • step 6406 of FIG. 64 the process may go back to step 6406 of FIG. 64 to request a user to acknowledge the alarm or perform an action to resolve the alarm as discussed herein.
  • the AMD may display a list of pending alarm conditions as discussed herein.
  • the AMD may wake and/or unlock the touchscreen as discussed herein for steps 6506 and/or 6508 in reference FIG. 65.
  • a password input to unlock the touchscreen may be requested at step 6608 after waking the touchscreen in step 6606.
  • a user can enter a predetermined password in various ways, including user gesture control inputs such as tapping, shaking, etc., as described above, to unlock the touchscreen based on user motion at step 6610. If the motion of the user, as a gesture password input, matches at step 6612 with a stored password that is prestored and authorized, the screen may be unlocked at step 6614. If an incorrect gesture password has been entered, the touchscreen may become locked or return to the sleep or locked state. In some cases, if an incorrect gesture password has been entered more than a set number of times may- become locked for a redetermined period of time.
  • a further verification may be required to unlock the touchscreen and/or AMD in order to access the AMD.
  • Examples of password generation are disclosed in U.S. Patent No. 11,103,638, the entire contents of which are incorporated by reference herein and made a part of this specification.
  • a user may be able to acknowledge and/or snooze an alarm via a user interface.
  • the user may- first need to activate the user interface (e.g., by providing a wake action) and then provide a gesture to unlock the user interface.
  • the user may- shake the AMD or pick up the AMD to activate a touchscreen display and then provide a gesture on the screen to unlock the display.
  • the touchscreen display may be configured to allow- the user or subject to navigate directly- to the issue, fault, or alarm condition for which an alarm is being delivered.
  • the ambulatory medicament device may receive the touch input via the touchscreen as noted above and determine whether an alarm is active upon receiving the touch input. If it is determined that, there is no alarm, the touchscreen may be unlocked to receive the user’s touch input command.
  • the touch input can include various forms the user input, e.g., a single tap, a double tap, multi -tap, a multi-location tap, a pinch gesture, a swipe gesture, or the like.
  • the touch input can be performed on any portion of the touchscreen including one or more corners of the touchscreen.
  • the location of the touch input may be recognized as a different user command, e.g., when an upper right corner is touched, the input may be interpreted as an attempt to, e.g., increase the volume or brightness of the screen.
  • the touch input can further include one or more touches at different locations of the touchscreen. Based on the touch input detected, the touchscreen and the ambulatory medicament device can be unlocked.
  • a user motion input may be used for release of delivery of a bolus medicament dose or other medicament or therapy delivery.
  • the motion input can be any form of gesture made to one or more locations on the ambulatory medicament device (e.g., a single tap, a double tap, a triple tap, a multi tap, a multi-location tap, a pinch gesture, or a swipe gesture).
  • the motion can be detected by various sensors such as an accelerometer as described above, a capacitive touch sensor, a resistive touch sensor, an infrared and surface acoustic wave (SAW) touch sensor, etc. as previously described in detail regarding the motion detection.
  • SAW surface acoustic wave
  • the user may be asked to confirm the delivery of the medicament dose by requesting a secondary input.
  • the request may be made on the touchscreen or through a speaker, a haptic motor generating a vibration, or any other form that can alert the user.
  • a blood sugar level of the subject may be continuously monitored in real time to determine whether there is a need for the bolus medicament dose based on the blood sugar level.
  • the touchscreen may display a menu option for the user to enter a touch input to initiate the medicament bolus dose. Accordingly, it is possible to promptly adjust therapy as desired to secure a sufficient supply of medicament to the subject.
  • the medicament therapy regimen can be managed quickly without any delay in delivery of an appropriate amount of medicament, for example, by adjusting food intake dose or bolus based on the need.
  • FIG. 67 is a flow diagram illustrating an example process 6700 to deliver medicament to a subject by motion control. That is, FIG. 67 illustrates alerting a user of medicament delivery need or when change in the medicament delivery is demanded.
  • the AMD may monitor a glucose level of a user at 6702 m real time.
  • the AMD may include a subject sensor 3216 (refer to FIG. 32) that generates a signal or status value associated with one or more physiological indicators (or parameters) of a subject (e.g., heart rate, blood pressure, body temperature, level of blood glucose, serum levels of various hormones or other analytes).
  • physiological indicators e.g., heart rate, blood pressure, body temperature, level of blood glucose, serum levels of various hormones or other analytes.
  • the subject sensor can be a continuous glucose monitoring sensor (CGS).
  • the device and subject monitoring system interface 3210 may continuously receive and analyze signals from device sensors 3208 and subject sensor 3216 to determine the condition of the AMD, the subject, a sensor, and/or other accessories.
  • a subject sensor 3216 may be any sensor that generates a signal or status value associated with one or more physiological indicators (or parameters) of a subject (e.g., heart rate, blood pressure, body temperature, level of blood glucose, serum levels of various hormones or other analytes).
  • the subject sensor can be a continuous glucose monitoring sensor (CGS).
  • the device and subject monitoring system interface 3210 may continuously receive and analyze signals from device sensors 3208 and subject sensors 3216 to determine the condition of the AMD, the subject, a sensor, and/or other accessories.
  • the user may be prompted to initiate the medicament dose delivery at step 6706.
  • the user can acknowledge or initiate the medicament dose by providing a specific motion at step 6708 as the user gesture control motion.
  • the motion can include various predetermined motions described herein that correspond to a user gesture control motion for the AMD in the context of bolus delivery.
  • an additional user input request may be prompted for confirming the medicament delivery at step 6710.
  • the user may input a second or another motion as user gesture control motion to confirm that the medicament should be delivered.
  • the confirmation of the medicament delivery can be done by the user inputting a specified motion (tap, touch, swiping, etc.).
  • the tap motion may be a senes of taps, e.g., a single tap, a double tap, multitap, or a multi -location tap on a body and/or touchscreen of the ambulatory medicament device or a shaking of the ambulatory medicament device.
  • the confirmation motion input of the user at 6712 may the same as the user gesture control motion input at 6708. In some case, the confirmation motion input of the user at 6710 may be different from the as the user gesture control motion input at 6708.
  • the AMD may release the medicament delivery to the subject (e.g., user) at step 6714 based on glucose levels of the user or other parameters of the glucose control therapy.
  • the AMD may include a speaker configured to generate audio prompts.
  • a sound may be generated via the speaker to alert the user.
  • the sound may be a beep, music, or any other audible signals to alert the user.
  • the AMD may include a touchscreen controller configured to output display signals configured to generate user interface screens on a touchscreen and to receive user input signals corresponding to user interaction with the touchscreen.
  • a visual signal may be prompted the user to confirm the medicament dose.
  • the AMD may include a haptic motor configured to generate vibration signals on a body of the subject.
  • a vibration signal may be generated to prompt 6710 the subject to confirm the medicament dose at step 6712.
  • the user can confirm the medicament dose by providing a touch input or gesture motion as specified at step 6712.
  • the process 6700 can be applied for various situations, e.g., when a need to initiate the medicament delivery is detected as described above (e.g., high blood glucose level or bolus based on food intake).
  • the process 6700 can be used with administration of other medicament such as glucagon, where AMD determines glucagon delivery is desired and prompts the user to initiate and/or confirm delivery of glucagon.
  • the process 6700 can be applied to a situation when a sudden change in the medicament dose is detected or a change in medicament dose setting is desired. The user can simply accept the change or initiate the medicament dose delivery by providing a specific motion as discussed herein,
  • ambulatory medical devices allow subjects the freedom to treat themselves with an automated blood glucose control system.
  • the automated blood glucose control system may automatically provide insulin and/or a counter-regulatory agent (e.g., glucagon) to a subject to help control the blood glucose level of the subject.
  • a control algorithm is implemented by an automated blood glucose control system (BGCS) to determine when to deliver one or more glucose control agents and how much agent to provide to the subject.
  • the control algorithm may control both an ongoing or periodic delivery of insulin (e.g., a basal dose), and a correction bolus that may be provided to adjust a subject’s blood glucose level to within a desired range.
  • the control algorithm may use blood glucose level readings obtained from a sensor, such as a continuous glucose monitoring (CGM) sensor, that obtained automated blood glucose measurements from the subject.
  • CGM continuous glucose monitoring
  • the automated blood glucose control system may receive an indication of insulin or medicament to administer to a subject in place of an automatically calculated dose of insulin.
  • the automated blood glucose control system may receive an indication that a subject is consuming or will consume a meal.
  • the indication may include a type of meal to be consumed (e.g., breakfast, lunch, or dinner) and an estimate of the quantity of food or carbohydrates to be consumed (e.g., less than usual, a usual amount, more than usual, 30-40 grams of carbohydrates, 45-60 grams of carbohydrates, etc.).
  • the automated blood glucose control system may calculate an amount of insulin to administer to the subject. The calculation may be based on an insulin to carbohydrate ratio provided by a clinician and/or determined by the automated blood glucose control system.
  • Insulin may be administered subcutaneously into blood of a subject. However, there is often a delay between when the insulin is provided and when the amount of insulin in the subject’s blood plasma reaches maximum concentration. This amount of time may vary based on the type of insulin and on the physiology of the particular subject. In addition, when there is an unexpected change in medicament dose has been determined, the user or subject may not be aware of such a case if not looking at the AMD.
  • a subject may receive a manual bolus of insulin or medicament.
  • a user e.g., healthcare provider, parent, or guardian
  • subject may inject a dose of insulin into the subject.
  • the user or subject may manually direct the automated blood glucose control system to provide a bolus of insulin to the subject.
  • the motion activated AMD can make a quick change in medicament delivery.
  • the process 6700 enables therapy changes efficiently and promptly by a specified gesture motion allowing communication between the user and the AMD.
  • the one-time motion or touch input can enable to perform various functions of the AMD (e.g., delivery of medicament, change of medicament dose, acknowledging the alarm, etc.).
  • the user can be informed with a medicament dose change based on real time measurement and make such a change by a simple motion or touch.
  • the indication of an amount of a manual bolus may be received by a user entering a numerical value (e.g., an amount of insulin, a number of carbohydrates, or another calculation) associated with administering insulin, which may be considered a specified gesture interaction required for entry of the manual bolus of medicament.
  • a specified gesture interaction required for entry of the manual bolus of medicament may be a sliding action or other movement on a touchscreen to confirm or initiate desired functions as discussed herein.
  • the automated blood glucose control system may automatically-calculate a meal dose of insulin and present it to a user via a user interface where a user may enter the manual bolus information.
  • the announcement can be made by generating a sound or vibration without the user having to manipulate the AMD to find out.
  • the user can initiate the medicament delivery by a touch input and accept any modification in the medicament dose by a touch input as well.
  • the touch input is not limited such that the user can make a single tap, double taps, or triple taps on the touch screen or on any portion of the AMD.
  • one touch may indicate initiating the medicament delivery
  • double tap may indicate confirmation of the delivery
  • triple tap may indicate verification of change in medicament dose determined based on detected blood sugar level.
  • the motion-enabled medicament delivery efficiently and quickly change the medicament delivery to the user in a simplified way.
  • an ambulatory medicament pump configured to maintain delivery of therapy to a subject after determining that a possible occlusion exists in a medicament delivery system
  • the ambulatory medicament, pump comprising: a medicament reservoir configured to store medicament to be delivered as therapy to the subject, a medicament, delivery interface configured to couple to a medicament passageway connecting the medicament, reservoir to a subcutaneous depot, of the subject through the skin of the subject when the ambulatory medicament pump is operatively connected to the subject; a pump motor configured to deliver the medicament from the medicament reservoir through the medicament delivery interface; a non-transitory memory configured to store specific computer-executable instructions, and a hardware processor in communication with the non-transitory memory and configured to execute the specific computer-executable instructions to at least: detect a fluid delivery parameter associated with the medicament delivery system; determine that the fluid delivery parameter satisfies an initial occlusion condition, wherein the initial occlusion condition indicates that a possible occlusion exists that interferes with delivery via the medicament
  • the ambulatory medicament pump of example 1 wherein the hardware processor is further configured to execute the specific computer-executable instructions to at least: generate a user alert based at least in part on the determination that the fluid delivery parameter satisfies the initial occlusion condition.
  • the ambulatory medicament pump of any of examples 1-2 wherein the hardware processor is further configured to execute the specific computer-executable instructions to at least: generate a user alert based at least in part on the determination that the verification parameter satisfies the final occlusion condition.
  • the ambulatory medicament pump of any of examples 1-3 wherein the medicament passageway comprises a delivery tube operatively coupled between the medicament reservoir and an infusion site configured to deliver the medicament through the skin of the subject.
  • the ambulatory medicament pump of any of examples 1-4 wherein the fluid delivery parameter comprises a current supplied to the pump motor.
  • modifying delivery of therapy to the subject comprises stopping delivery of therapy.
  • the ambulatory medicament pump of any of examples 1-6 wherein the verification parameter comprises a glucose level signal received from a sensor configured to detect a glucose level of the subject.
  • the ambulatory medicament pump of example 7 wherein the final occlusion condition comprises a glucose level indicating a threshold value of at least 150 mg/dL of blood glucose concentration.
  • the ambulatory medicament pump of any of examples 1-8 wherein the hardware processor is further configured to execute the specific computer-executable instructions to at least: in response to the determination that the fluid delivery parameter satisfies the initial occlusion condition, pause delivery of therapy for at least 3 seconds.
  • the ambulatory medicament pump of any of examples 1-9 wherein the hardware processor is further configured to execute the specific computer-executable instructions to at least: in response to the determination that the verification parameter satisfies the final occlusion condition, increase delivery of therapy to the subject after a passage of an amount of time.
  • the ambulatory medicament pump of any of examples 1-10 wherein the hardware processor is further configured to execute the specific computer- executable instructions to at least: in response to the determination that the fluid delivery parameter satisfies the initial occlusion condition, modify an attribute of the delivery of therapy while maintaining delivery of the therapy to the subject.
  • the ambulatory medicament pump of any of examples 1 -11 wherein the hardware processor is further configured to execute the specific computerexecutable instructions to at least: determine that the fluid delivery parameter satisfies an intermediate occlusion condition, wherein the intermediate occlusion condition indicates that the possible occlusion persists; and in response to the determination that the fluid delivery parameter satisfies the intermediate occlusion condition, modify an attribute of the delivery of therapy.
  • the ambulatory medicament pump of any of examples 1 -12 wherein attribute of the delivery of therapy comprises one or more of a rate of delivery or a size of a bolus of therapy.
  • an occlusion detection system comprising: a non-transitory memory configured to store specific computer-executable instructions; and a hardware processor in communication with the non-transitory memory and configured to execute the specific computer-executable instructions to at least: receive a fluid delivery parameter associated with a medicament delivery system; determine that the fluid delivery parameter satisfies an initial occlusion condition, wherein the initial occlusion condition indicates that a possible occlusion exists in the medicament delivery system; in response to the determination that the fluid delivery parameter satisfies the initial occlusion condition, send an instruction to the medicament delivery system to maintain delivery of therapy to a subject; receive a verification parameter associated with the possible occlusion; determine that the verification parameter satisfies a final occlusion condition, wherein the final occlusion condition indicates that a probable occlusion exists in the medicament delivery system; and in response to the determination that the verification parameter satisfies the final occlusion condition, send an instruction to at least: receive a fluid delivery parameter associated
  • the occlusion detection system of example 14 wherein the hardware processor is further configured to execute the specific computer-executable instructions to at least: generate a user alert based at least in part on the determination that the fluid delivery parameter satisfies the initial occlusion condition.
  • the hardware processor is further configured to execute the specific computer-executable instructions to at least: generate a user alert based at least in part on the determination that the verification parameter satisfies the final occlusion condition.
  • the occlusion detection system of any of examples 14-16 wherein the fluid delivery parameter comprises a current supplied to a pump motor in communication with the occlusion detection system.
  • the occlusion detection system of any of examples 14-17 wherein the fluid delivery parameter comprises a pressure obtained by a pressure sensor in communication with the occlusion detection system.
  • sending an instruction to the medicament delivery system to modify delivery of therapy to the subject comprises sending an instruction to the medicament delivery system to halt delivery of therapy.
  • the occlusion detection system of any of examples 14-19 wherein the verification parameter comprises a glucose level signal received from a sensor configured to detect a glucose level of the subject.
  • the occlusion detection system of example 20 wherein the final occlusion condition comprises a glucose level indicating a threshold value of at least 150 mg/dL of blood glucose concentration.
  • the occlusion detection system of any of examples 14-21 wherein the hardware processor is further configured to execute the specific computer-executable instructions to at least: in response to the determination that the fluid delivery parameter satisfies the initial occlusion condition, send an instruction to pause delivery of therapy for at least 3 seconds.
  • the occlusion detection system of any of examples 14-22 wherein the hardware processor is further configured to execute the specific computer-executable instructions to at least: in response to the determination that the verification parameter satisfies the final occlusion condition, send an instruction to increase delivery of therapy to the subject after a passage of an amount of time.
  • an ambulatory medicament device configured to maintain indications of alarm conditions on a list of pending alarm conditions without auditory or haptic annunciation of at least some of the alarm conditions while a do not disturb mode is active
  • the ambulatory medicament device comprising: a monitoring system interface configured to receive status information, wherein the status information comprises at least one of device information pertaining to a condition of the ambulatory medicament device or subject information pertaining to a condition of a subject; a memory configured to store specific computer-executable instructions and the list of pending alarm conditions, and a hardware processor in communication with the memory and configured to execute the specific computerexecutable instructions to at least: receive alarm muting instructions via user interaction with an alarm muting control interface, in response to determining that alarm annunciation should be muted in accordance with the alarm muting instructions, activate the do not disturb mode of the ambulatory medicament device, wherein at least some alarm annunciation patterns are not aurally or haptically annunciated while the ambulatory medicament device, wherein at least some
  • the ambulatory medicament device of example 24 wherein the hardware processor is configured to execute further computer-executable instructions to, in response to determining that the first alarm condition requires urgent user attention, deactivate the do not disturb mode.
  • determining that the first alarm condition requires urgent user attention comprises: determining a severity level of the first alarm condition; and determining that the severity level of the first alarm condition exceeds a threshold severity level.
  • the ambulatory medicament device of any of examples 24-26 wherein the alarm muting control interface comprises a touchscreen controller configured to output display signals configured to generate user interface screens on a touchscreen and to receive user input signals corresponding to user interaction with the touchscreen.
  • the ambulatory medicament device of any of examples 24-27 wherein the alarm muting instructions comprise a recurring time interval, wherein the hardware processor is configured to execute further computer-executable instructions to activate the do not disturb mode during the recurring time interval.
  • the ambulatory medicament device of example 28 wherein the recurring time interval comprises a time interval occurring every day between 18:00 and 07:00.
  • the ambulatory medicament device of any of examples 24-29 wherein the alarm muting control interface is part of a remote device that is separate from the ambulatory medicament device.
  • the ambulatory medicament device of any of examples 24-30 wherein the list of pending alarm conditions is sorted according to severity levels of alarm conditions included on the list of pending alarm conditions.
  • the ambulatory medicament device of any of examples 24-31 wherein the list of pending alarm conditions is displayed on a user interface of the ambulatory medicament device.
  • the ambulatory medicament device of example 32 wherein the list of pending alarm conditions comprises alarm status indicators, wherein the alarm status indicators indicate whether pending alarm conditions in the list of pending alarm conditions were annunciated or muted.
  • the ambulatory medicament device of any of examples 24-33 wherein the alarm muting instructions comprise a time period during which the do not disturb mode is to remain active, wherein the hardware processor is configured to execute further computer-executable instructions to deactivate the do not disturb mode after the time period has passed.
  • the ambulatory medicament device of example 34 wherein the hardware processor is configured to execute further computer-executable instructions to: receive via user interaction with the alarm muting control interface, prior to termination of the time period, instructions to deactivate the do not disturb mode; and deactivate the do not disturb mode,
  • the ambulatory medicament device of any of examples 24-35 wherein the hardware processor is configured to execute further computer-executable instructions to: determine the second alarm condition has not been resolved for a threshold amount of time; escalate the second alarm condition such that the second alarm condition requires urgent user attention; and in response to determining that the second alarm condition requires urgent user attention, annunciate the second alarm condition using a second alarm condition annunciation pattern comprising at least one of auditory or haptic annunciation.
  • the ambulatory medicament device of any of examples 24-36 wherein resolving alarm conditions comprises at least one of: correcting the alarm conditions, acknowledging the alarm conditions, or snoozing the alarm conditions.
  • the ambulatory medicament device of example 37, wherein correcting the alarm conditions comprises one or more actions taken by a user that address a condition which caused an alarm to be generated.
  • the ambulatory medicament device of any of examples 24-38 wherein the first alarm condition is resolved automatically when the status information or the subject information no longer indicates the first alarm condition.
  • the ambulatory medicament device of any of examples 24-39 wherein the hardware processor is configured to execute further computer-executable instructions to maintain an indication of the third alarm condition on the list of pending alarm conditions until the third alarm condition is resolved without auditory or haptic annunciation of the third alarm condition.
  • a glucose control system comprising: a monitoring system interface configured to receive status information, wherein the status information comprises at least one of device information pertaining to a condition of the glucose control system or subject information pertaining to a condition of a subject; a memory configured to store specific computer-executable instructions and a list of pending alarm conditions; and a hardware processor in communication with the memory and configured to execute the specific computerexecutable instructions to at least: receive alarm muting instructions via user interaction with an alarm muting control interface; in response to determining that alarm annunciation should be muted in accordance with the alarm muting instructions, activate a do not disturb mode of the glucose control system, wherein at least some alarm annunciation patterns are muted while the glucose control system is in the do not disturb mode; detect, via the monitoring system interface, that the status information or the subject information indicates an alarm condition; determine that the alarm condition does not require urgent user attention; and in response to determining that the alarm condition does not require urgent user attention, maintain an indication of the
  • the glucose control system of example 42 wherein the hardware processor is configured to execute further computer-executable instructions to, upon deactivation of the do not disturb mode, annunciate a most severe alarm condition, based on the severity levels of the alarm conditions included on the list of pending alarm conditions.
  • the glucose control system of any of examples 41-43 wherein the hardware processor is configured to execute further computer-executable instructions to: detect, via the monitoring system interface, a second alarm condition; determine that the second alarm condition requires urgent user attention; and in response to determining that the second alarm condition requires urgent user attention, deactivate the do not disturb mode.
  • the glucose control system of any of examples 41-44 wherein the hardware processor is configured to execute further computer-executable instructions to: detect, via the monitoring system interface, a second alarm condition; determine that the second alarm condition requires urgent user attention; and in response to determining that the second alarm condition requires urgent user attention, annunciate the second alarm condition without deactivating the do not disturb mode, using a second alarm condition annunciation pattern comprising at least one of auditory or haptic annunciation.
  • the glucose control system of any of examples 41 -45 wherein the list of pending alarm conditions comprises alarm status indicators, wherein the alarm status indicators indicate whether pending alarm conditions in the list of pending alarm conditions were annunciated or muted.
  • the glucose control system of any of examples 41-46, wherein the alarm muting control interface comprises a touchscreen controller configured to output display signals configured to generate user interface screens on a touchscreen and to receive user input signals corresponding to user interaction with the touchscreen.
  • a method of annunciating alarms associated with a glucose control system comprising: receiving alarm muting instructions via user interaction with an alarm muting control interface; in response to determining that alarm annunciation should be muted in accordance with the alarm muting instructions, activating a do not disturb mode of the glucose control system, wherein at least some alarm annunciation patterns are muted while the glucose control system is m the do not disturb mode; detecting that an alarm condition exists, determining that the alarm condition does not require urgent user attention, and in response to determining that the alarm condition does not require urgent user attention, maintain an indication of the alarm condition on a list of pending alarm conditions until the alarm condition is resolved without auditory or haptic annunciation of the alarm condition while the do not disturb mode is active.
  • the method of example 48, wherein detecting that an alarm condition exists comprises detecting that at least one of device information pertaining to a condition of the glucose control system or subject information pertaining to a condition of a subject indicates an alarm condition.
  • receiving the alarm muting instructions comprises receiving, via user interaction with the alarm muting control interface, a time period during which the do not disturb mode is to remain active.
  • the method of example 50 further comprising: receiving, via user interaction with the alarm muting control interface, prior to termination of the time period, instructions to deactivate the do not disturb mode; and deactivating the do not disturb mode.
  • the method of any of examples 48-51 further comprising: detecting a second alarm condition; determining that the second alarm condition requires urgent user attention; and in response to determining that the second alarm condition requires urgent user attention, deactivating the do not disturb mode.
  • the method of any of examples 48-52 further comprising: detecting a second alarm condition; determining that the second alarm condition requires urgent user attention; and in response to determining that the second alarm condition requires urgent user attention, annunciating the second alarm condition without deactivating the do not disturb mode, using a second alarm condition annunciation pattern comprising at least one of auditory or haptic annunciation.
  • an ambulatory medicament device configured to display critical status information in a power saving mode
  • the ambulatory medicament device comprising: a monitoring system interface configured to receive status information, wherein the status information comprises at least one of device information pertaining to a condition of the ambulatory medicament device or subject information pertaining to a condition of a subject, a touchscreen controller configured to output display signals configured to generate user interface screens on a touchscreen and to receive user input signals corresponding to user input on the touchscreen, wherein the touchscreen is configured to be illuminated by a backlight; an accelerometer configured to detect user interaction with the ambulatory medicament device and output user interaction signals corresponding to the user interaction with the ambulatory medicament device, wherein user interaction with the ambulatory medicament device comprises a single tap or a double tap on the ambulatory medicament device; a memory- configured to store computer-executable instructions; and a hardware processor in communication with the memory and configured to execute the computer-executable instructions to at least: receive the user input signals via the touchscreen controller; receive the user interaction
  • the ambulatory medicament device of example 54 wherein the hardware processor is configured to execute further computer-executable instructions to determine that a power level of a battery of the ambulatory medicament device is below a predetermined power level threshold and in response to determining that the power level of the battery of the ambulatory medicament device is below the predetermined power level threshold, the hardware processor is configured to execute further computer-executable instructions to: generate a display of a battery status interface, and display on the battery status interface a battery charging indicator to prioritize displaying the status information corresponding to the power level being below the predetermined power level threshold.
  • the ambulatory medicament device of example 55 wherein the battery charging indicator comprises an image of a battery charger for a battery of the ambulatory medicament device.
  • the ambulatory medicament device of any of examples 54-56 wherein the hardware processor is configured to execute further computer-executable instructions to determine whether a glucose level of the subject is within a predetermined glucose range and in response to determining that the glucose level is not within the predetermined glucose range, the hardware processor is configured to execute further computer-executable instructions to: generate a display of a glucose interface screen; and display on the glucose interface screen the glucose level indicator to prioritize displaying the status information corresponding to the glucose level not being within the predetermined glucose range.
  • the ambulatory medicament device of any of examples 54-57 wherein the hardware processor is further configured to execute the computer-executable instructions to display on the critical status information interface screen an alarm state icon comprising a visual indication of a count of alarm conditions.
  • the hardware processor is configured to execute further computer-executable instructions to: activate a privacy mode in response to a request to activate the privacy mode; generate a display of a privacy mode interface screen; and display on the privacy mode interface screen one or more status indicators corresponding to the status information without displaying at least one of the plurality of critical status indicators.
  • the ambulatory medicament device of example 59 wherein the at least one of the plurality of critical status indicators not displayed comprises at least one of the glucose level indicator of the subject or the therapy status indicator.
  • the ambulatory medicament device of example 60 wherein none of the plurality of critical status indicators are displayed on the privacy mode interface screen.
  • the ambulatory medicament device of any of examples 59-61 wherein the hardware processor is configured to execute further computer-executable instructions to turn off the touchscreen while in the privacy mode.
  • the ambulatory medicament device of any of examples 59-62 wherein the hardware processor is configured to execute further computer-executable instructions to activate the privacy mode while activating the power saving mode.
  • the ambulatory medicament device of any of examples 59-63 wherein the hardware processor is configured to execute further computer-executable instructions to receive the request to activate the privacy mode interface screen while in the power saving mode.
  • the ambulatory medicament device of any of examples 59-64 wherein the hardware processor is configured to execute further computer-executable instructions to receive the request to activate the privacy mode interface screen while not in the power saving mode.
  • the ambulatory medicament device of any of examples 59-65 wherein the touchscreen comprises a filter configured to have a predetermined viewing angle range relative to the touchscreen such that information cannot be seen on the touchscreen when viewed from an angle outside of the predetermined viewing angle range.
  • the ambulatory medicament device of any of examples 59-66 wherein in the power saving mode, the ambulatory medicament device displays the critical status information interface screen by using 5-10% additional electric current relative to electric current used with the touchscreen turned off while the ambulatory medicament device is operating.
  • the ambulatory medicament device of any of examples 54-67 wherein the hardware processor is configured to execute further computer-executable instructions to: determine that the user interaction signals correspond to a single tap on the ambulatory medicament device; and in response to determining that the user interaction corresponds to the single tap on the ambulatory medicament device, turn off a touchscreen display.
  • the ambulatory medicament device of example 68 wherein the hardware processor is configured to execute further computer-executable instructions to: determine that the user interaction signals correspond to an other single tap on the ambulatory medicament device; and in response to determining that the user interaction corresponds to the other single tap on the ambulatory medicament device, turn on the touchscreen while remaining in the power saving mode.
  • the ambulatory medicament device of any of examples 54-69 wherein the hardware processor is configured to execute further computer-executable instructions to: determine that the user interaction signals correspond to a double tap on the ambulatory medicament device; and in response to determining that the user interaction corresponds to the double tap on the ambulatory medicament device, turn on the backlight while remaining in the power saving mode.
  • the ambulatory medicament device of example 70 wherein the hardware processor is configured to execute further computer-executable instructions to: determine that the user interaction signals correspond to an other double tap on the ambulatory medicament device; and in response to determining that the user interaction corresponds to the other double tap on the ambulatory medicament device, turn off the backlight while remaining in the power saving mode.
  • the ambulatory medicament device of any of examples 54-71 wherein the hardware processor is configured to execute further computer-executable instructions to: determine that the user interaction signals correspond to a single tap or a double tap on the ambulatory medicament device; and in response to determining that the user interaction corresponds to the single tap or the double tap on the ambulatory medicament device, deactivate the power saving mode.
  • the ambulatory medicament device of any of examples 54-72 wherein the hardware processor is configured to execute further computer-executable instructions to update the critical status information interface screen in the power saving mode less frequently than updating the user interface screens in a wake mode of the ambulatory medicament device.
  • the ambulatory medicament device of any of examples 54-73 wherein the hardware processor is configured to execute further computer-executable instructions to: receive a request to activate a wake mode of the ambulatory medicament device, and in response to receiving the request to activate the wake mode, deactivate the power saving mode.
  • the hardware processor in response to receiving the request to activate the wake mode, is configured to execute further computer-executable instructions to: determine that the request to activate the wake mode was received during a predefined period of time, and in response to determining that the request was received during the predefined period of time, turn on the backlight.
  • the ambulatory medicament device of example 75 wherein the predefined period of time is between 8:00 PM and 7:00 AM of a day.
  • the ambulatory medicament device of any of examples 74-76 wherein the hardware processor is configured to execute further computer-executable instructions to receive a wake request signal corresponding to user request on a wake interface of the ambulatory medicament device to active the wake mode.
  • the ambulatory medicament device of example 77 wherein the wake interface comprises a physical button, a capacitive sensor, or an inductive sensor.
  • the ambulatory medicament device of any of examples 77-78 wherein the hardware processor is configured to execute further computer-executable instructions to: generate a display of a power saving interface screen on the touchscreen: and display on the power saving interface screen one or more wake mode indicators corresponding to a location of the wake interface, a message to interact with the wake interface to activate the wake mode, or both.
  • the ambulatory medicament device of example 79 wherein the hardware processor is configured to execute further computer-executable instructions to not display the one or more wake mode indicators in the wake mode,
  • the ambulatory medicament device of any of examples 77-80 wherein in response to receiving the wake request signal, the hardware processor is configured to execute further computer-executable instructions to: determine that the wake request signal was received for a first predetermined time length; and in response to determining that the wake request signal was received for the first predetermined time length, turn on the backlight to 40-60% brightness relative to a maximum brightness of the backlight.
  • the ambulatory medicament device of example 81 wherein the hardware processor is configured to execute further computer-executable instructions to: determine that the wake request signal was received for a second predetermined time length, the second predetermined time length being longer than the first predetermined time length; and in response to determining that the wake request signal was received for the second predetermined time length, turn on the backlight to the maximum brightness of the backlight.
  • the ambulatory medicament device of any of examples 54-82 wherein the hardware processor is configured to execute further computer-executable instructions to lower a refresh rate of the touchscreen to a lower refresh level relative to a maximum refresh rate of touchscreen.
  • the ambulatory medicament device of example 83 wherein the lower refresh rate of the touchscreen is 1 hertz.
  • the ambulatory medicament device of any of examples 54-85 wherein the hardware processor is configured to execute further computer-executable instructions to low'er brightness of the touchscreen of the ambulatory medicament device to a lower brightness level relative to a full brightness level of the touchscreen.
  • the ambulatory medicament device of any of examples 54-86 wherein the ambulatory medicament device comprises a bi-hormonal pump capable of administering insulin and a counter-regulatory agent.
  • the ambulatory medicament device of any of examples 54-87 wherein the status information is received from a sensor that measures at least one of a characteristic of the ambulatory medicament device or a physiological parameter of the subject.
  • an ambulatory medicament device configured to display critical status information in a power saving mode
  • the ambulatory medicament device comprising: a monitoring system interface configured to receive status information, wherein the status information comprises at least one of device information pertaining to a condition of the ambulatory medicament device or subject information pertaining to a condition of a subject; a motion sensor configured to detect user interaction with the ambulatory medicament device and output user interaction signals corresponding to the user interaction with the ambulatory medicament device, wherein user interaction with the ambulatory medicament device comprises a single tap or a double tap on the ambulatory medicament device; a memory configured to store computer-executable instructions; and a hardware processor in communication with the memory and configured to execute the computer- executable instructions to at least: receive the user interaction signals via the motion sensor; activate a power saving mode of the ambulatory medicament device after a period of inactivity or in response to a request to activate the power saving mode, wherein the period of inactivity comprises the hardware processor not receiving a user interaction signal for
  • the ambulatory medicament device of example 89 further comprising any one or more features of example 54 to example 88.
  • an ambulatory medicament device configured to display critical status information in a power saving mode
  • the ambulatory medicament device comprising: a monitoring system interface configured to receive status information, wherein the status information comprises at least one of device information pertaining to a condition of the ambulatory medicament device or subject information pertaining to a condition of a subject; a memory configured to store computer-executable instructions; and a hardware processor in communication with the memory and configured to execute the computer-executable instructions to at least: activate a power saving mode of the ambulatory medicament device after a period of inactivity or in response to a request to activate the power saving mode, wherein the period of inactivity comprises the hardware processor not receiving user input for a predetermined period of time; turn off a backlight of the ambulatory medicament device configured to illuminate a touchscreen of the ambulatory medicament device; receive the status information via the monitoring system interface, determine critical status information from the status information, generate a display of a critical status information interface screen on the touchscreen; and display on the critical status
  • the ambulatory medicament device of example 91 further comprising any one or more features of example 54 to example 88.
  • an ambulatory medicament device configured to display critical status information in a power saving mode
  • the ambulatory medicament device comprising: a monitoring system interface configured to receive status information, wherein the status information comprises at least one of device information pertaining to a condition of the ambulatory medicament device or subject information pertaining to a condition of a subject; a memory configured to store computer-executable instructions; and a hardware processor in communication with the memory and configured to execute the computer-executable instructions to at least: activate a power saving mode of the ambulatory medicament device after a period of inactivity or in response to a request to activate the power saving mode, wherein the period of inactivity comprises the hardware processor not receiving user input for a predetermined period of time; receive the status information via the monitoring system interface; determine critical status information from the status information; generate a display of a critical status information interface screen on a touchscreen of the ambulatory medicament device; and display on the critical status information interface screen at least one of a plurality of critical status indicators corresponding to the
  • the ambulatory medicament device of example 93 further comprising any one or more features of example 54 to example 88,
  • the ambulatory medicament device of any of examples 93-94 wherein the hardware processor is configured to execute further computer-executable instructions to dim a backlight of the ambulatory medicament device to a lower illumination level relative to a maximum illumination level of the backlight, the backlight configured to illuminate the touchscreen.
  • the ambulatory medicament device of example 95 wherein the lower illumination level of the backlight is 40-60% of the maximum illumination level of the backlight.
  • an ambulatory medicament device configured to respond to user input or interaction in a power saving mode, the ambulatory medicament device comprising: a monitoring system interface configured to receive status information, wherein the status information comprises at least one of device information pertaining to a condition of the ambulatory medicament device or subject information pertaining to a condition of a subject, a touchscreen controller configured to output display signals configured to generate user interface screens on a touchscreen and to receive user input signals corresponding to user input on the touchscreen, wherein the touchscreen is configured to be illuminated by a backlight; an accelerometer configured to detect user interaction with the ambulatory medicament device and output user interaction signals corresponding to the user interaction with the ambulatory medicament device, wherein user interaction with the ambulatory medicament device comprises a single tap or a double tap on the ambulatory medicament device; a memory configured to store computer-executable instructions; and a hardware processor in communication with the memory and configured to execute the computer-executable instructions to at least: receive the user input signals via the touchscreen controller; receive the
  • the hardware processor in response to determining that the status information satisfies the alarm condition, is configured to execute further computer-executable instructions to annunciate the alarm condition using an alarm annunciation pattern comprising at least one of audio or haptic annunciation.
  • the ambulatory medicament device of any of examples 97-98 wherein in response to determining that the status information satisfies the alarm condition, the hardware processor is configured to execute further computer-executable instructions to: determine that the alarm condition requires urgent user attention; and in response to determining that the alarm condition requires urgent user attention, display on the alarm interface screen the one or more alarm status indicators without snoozing the alarm condition in response to the double tap on the ambulatory medicament device.
  • the hardware processor in response to determining that the alarm condition requires urgent user attention, is configured to execute further computer-executable instructions to deactivate the power saving mode.
  • the ambulatory medicament device of any of examples 99-100 wherein the hardware processor is configured to execute further computer-executable instructions to: determine that the alarm condition does not require urgent user attention; and in response to determining that the alarm condition does not require urgent user attention, allow the alarm condition to be snoozed.
  • the hardware processor in response to snoozing the alarm condition, is configured to execute further computer-executable instructions to maintain the one or more alarm status indicators on a list of pending alarm conditions.
  • the ambulatory medicament device of example 102 wherein the list of pending alarm conditions is not displayed on the user interface screens with the power saving mode active.
  • the ambulatory medicament device of any of examples 102-103, wherein the list of pending alarm conditions comprises alarm status icons, wherein the alarm status icons indicate whether the alarm condition was snoozed.
  • the ambulatory medicament device of any of examples 97-104 wherein in response to displaying on the alarm interface screen that the alarm condition was snoozed, the hardware processor is configured to execute further computer-executable instructions to not display the one or more alarm status indicators after the predetermined period of time or an other predetermined period of time.
  • the ambulatory medicament device of any of examples 97-105, wherein activating the powder saving mode comprises turning off the backlight.
  • the ambulatory medicament device of any of examples 97-106, wherein activating the power saving mode comprises turning off the touchscreen.
  • the hardware processor in response to determining that the status information satisfies the alarm condition, is configured to execute further computer-executable instructions to turn on the touchscreen.
  • the ambulatory medicament device of any of examples 107-108 wherein in response to determining that the status information does not satisfy the alarm condition and that the user interaction signals correspond to the single tap or the double tap on the ambulatory medicament device, the hardware processor is configured to execute further computer-executable instructions to turn on the touchscreen.
  • the ambulatory medicament device of any of examples 107-109 wherein in response to determining that the status information does not satisfy the alarm condition and that the user interaction signals correspond to the double tap on the ambulatory medicament device, the hardware processor is configured to execute further computerexecutable instructions to turn on the touchscreen and turn on the backlight.
  • the ambulatory medicament device of any of examples 97-110 wherein the hardware processor is configured to execute further computer-executable instructions to: determine that the user interaction signals correspond to an other single tap on the ambulatory medicament device; and in response to determining that the user interaction corresponds to the other single tap on the ambulatory medicament device, turn off the touchscreen.
  • the ambulatory medicament device of any of examples 97-111 wherein the hardware processor is configured to execute further computer-executable instructions to: determine that the user interaction signals correspond to an other double tap on the ambulatory medicament device; and in response to determining that the user interaction corresponds to the other double tap on the ambulatory medicament device, turn off the backlight.
  • the ambulatory medicament device of any of examples 97-112 wherein in response to determining that the status information satisfies the alarm condition, the hardware processor is configured to execute further computer-executable instructions to deactivate the power saving mode.

Landscapes

  • Health & Medical Sciences (AREA)
  • Engineering & Computer Science (AREA)
  • Biomedical Technology (AREA)
  • Public Health (AREA)
  • General Health & Medical Sciences (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Medical Informatics (AREA)
  • Animal Behavior & Ethology (AREA)
  • Veterinary Medicine (AREA)
  • Heart & Thoracic Surgery (AREA)
  • Physics & Mathematics (AREA)
  • Epidemiology (AREA)
  • Primary Health Care (AREA)
  • Anesthesiology (AREA)
  • Hematology (AREA)
  • Vascular Medicine (AREA)
  • Pathology (AREA)
  • Business, Economics & Management (AREA)
  • General Business, Economics & Management (AREA)
  • Molecular Biology (AREA)
  • Surgery (AREA)
  • Biophysics (AREA)
  • Diabetes (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Medicinal Chemistry (AREA)
  • Bioinformatics & Cheminformatics (AREA)
  • General Physics & Mathematics (AREA)
  • Chemical & Material Sciences (AREA)
  • Databases & Information Systems (AREA)
  • Optics & Photonics (AREA)
  • Emergency Management (AREA)
  • Emergency Medicine (AREA)
  • Data Mining & Analysis (AREA)
  • Electromagnetism (AREA)
  • Human Computer Interaction (AREA)
  • Dermatology (AREA)
  • Pharmaceuticals Containing Other Organic And Inorganic Compounds (AREA)

Abstract

La présente invention concerne des dispositifs à médicament ambulatoires qui délivrent un traitement à un sujet, tel que le contrôle de la glycémie. L'invention concerne des systèmes et des procédés qui peuvent mettre en œuvre une ou plusieurs fonctionnalités qui améliorent l'expérience de l'utilisateur, en modifiant l'administration d'un traitement à un sujet après avoir déterminé qu'une obstruction possible existe dans un système d'administration de médicament, en surveillant l'état d'un dispositif médical ambulatoire et l'état de santé d'un sujet qui reçoit un traitement à partir du dispositif médical ambulatoire et en annonçant une situation d'alarme lorsque cela est nécessaire, en mettant sélectivement en sourdine les annonces d'alarme tandis qu'un mode de non-perturbation est activé, en mettant en œuvre divers modes d'économie d'énergie pour économiser de l'énergie, en commandant le fonctionnement du dispositif et l'administration de médicament sur la base des commandes de geste d'utilisateur, et en commandant l'administration de médicament sur la base d'un état du dispositif de médicament ambulatoire.
PCT/US2021/064228 2020-01-08 2021-12-17 Pompes à médicament et leurs systèmes de commande WO2022140204A1 (fr)

Priority Applications (27)

Application Number Priority Date Filing Date Title
AU2021410650A AU2021410650A1 (en) 2020-12-21 2021-12-17 Medicament pumps and control systems thereof
EP21911945.0A EP4262924A1 (fr) 2020-12-21 2021-12-17 Pompes à médicament et leurs systèmes de commande
CA3205669A CA3205669A1 (fr) 2020-12-21 2021-12-17 Pompes a medicament et leurs systemes de commande
US18/258,241 US20240062867A1 (en) 2020-12-07 2021-12-17 Medicament pumps and control systems thereof
PCT/US2022/017368 WO2022178447A1 (fr) 2021-02-19 2022-02-22 Pompes à médicament dotées de systèmes et procédés pour améliorer l'expérience de l'utilisateur
US17/683,830 US20220265143A1 (en) 2020-12-07 2022-03-01 Ambulatory medicament pumps with selective alarm muting
US17/685,235 US11925788B2 (en) 2020-12-07 2022-03-02 Ambulatory medicament device with motion detection and gesture-based control
US17/685,292 US11497852B2 (en) 2020-12-21 2022-03-02 Ambulatory medicament device with power saving mode
US17/685,149 US11534546B2 (en) 2020-12-07 2022-03-02 Ambulatory medicament device with motion detection and gesture-based control
US17/685,144 US11497849B2 (en) 2020-12-07 2022-03-02 Ambulatory medicament device with power saving mode
US17/685,297 US20220184300A1 (en) 2020-12-07 2022-03-02 Occlusion detection in ambulatory medicament pumps
US17/685,170 US11565041B2 (en) 2020-12-07 2022-03-02 Ambulatory medicament device with power saving mode
US17/654,776 US20220199218A1 (en) 2020-12-07 2022-03-14 Ambulatory medicament pump with integrated medicament ordering interface
US17/654,913 US20220208331A1 (en) 2020-12-07 2022-03-15 Remote modification of therapy delivered by ambulatory medicament pump
US17/655,122 US20220208370A1 (en) 2020-12-07 2022-03-16 Remote modification of therapy delivered by ambulatory medicament pump
US17/656,356 US11515027B2 (en) 2020-12-07 2022-03-24 Cloud-connected ambulatory pump integration
PCT/US2022/071308 WO2022204705A1 (fr) 2021-03-25 2022-03-24 Commande de dose de médicament d'urgence
US17/656,345 US20220223251A1 (en) 2020-12-07 2022-03-24 Cloud-connected ambulatory pump integration
US17/656,849 US20220222734A1 (en) 2020-12-21 2022-03-28 Cloud-connected ambulatory pump integration
US17/657,086 US11529466B2 (en) 2020-01-08 2022-03-29 Cloud-connected ambulatory pump integration
US17/657,105 US20220218904A1 (en) 2020-12-07 2022-03-29 Cloud-connected ambulatory pump integration
US17/657,263 US20220223273A1 (en) 2020-12-07 2022-03-30 Cloud-connected ambulatory pump integration
US17/657,607 US20220218905A1 (en) 2020-12-07 2022-03-31 Ambulatory medicament pump voice operation
US17/657,547 US20220223252A1 (en) 2020-12-07 2022-03-31 Aggregate reporting of glucose level control system data
US17/657,612 US11581080B2 (en) 2020-12-07 2022-03-31 Ambulatory medicament pump voice operation
US17/882,469 US20230166035A1 (en) 2021-03-25 2022-08-05 Emergency medicament dose control
US18/431,002 US20240173475A1 (en) 2020-12-07 2024-02-02 Ambulatory medicament device with motion detection and gesture-based control

Applications Claiming Priority (44)

Application Number Priority Date Filing Date Title
US202063128428P 2020-12-21 2020-12-21
US63/128,428 2020-12-21
US202163139210P 2021-01-19 2021-01-19
US63/139,210 2021-01-19
US202163151565P 2021-02-19 2021-02-19
US63/151,565 2021-02-19
US202163152716P 2021-02-23 2021-02-23
US202163152744P 2021-02-23 2021-02-23
US63/152,716 2021-02-23
US63/152,744 2021-02-23
US202163157541P 2021-03-05 2021-03-05
US63/157,541 2021-03-05
US202163167563P 2021-03-29 2021-03-29
US63/167,563 2021-03-29
US202163168203P 2021-03-30 2021-03-30
US63/168,203 2021-03-30
US202163169112P 2021-03-31 2021-03-31
US63/169,112 2021-03-31
US202163183900P 2021-05-04 2021-05-04
US63/183,900 2021-05-04
US202163194126P 2021-05-27 2021-05-27
US63/194,126 2021-05-27
US202163212521P 2021-06-18 2021-06-18
US63/212,521 2021-06-18
US202163215857P 2021-06-28 2021-06-28
US63/215,857 2021-06-28
US202163216177P 2021-06-29 2021-06-29
US63/216,177 2021-06-29
US202163238670P 2021-08-30 2021-08-30
US63/238,670 2021-08-30
US202163239365P 2021-08-31 2021-08-31
US63/239,365 2021-08-31
US202163261290P 2021-09-16 2021-09-16
US63/261,290 2021-09-16
US202163249975P 2021-09-29 2021-09-29
US63/249,975 2021-09-29
US202163263602P 2021-11-05 2021-11-05
US202163276481P 2021-11-05 2021-11-05
US63/263,602 2021-11-05
US63/276,481 2021-11-05
US202163264645P 2021-11-29 2021-11-29
US63/264,645 2021-11-29
PCT/US2021/072742 WO2022126080A1 (fr) 2020-12-07 2021-12-03 Pompes à médicament et systèmes de commande pour gérer des données de thérapie de régulation de la glycémie d'un sujet
USPCT/US2021/072742 2021-12-03

Related Parent Applications (3)

Application Number Title Priority Date Filing Date
PCT/US2021/072742 Continuation-In-Part WO2022126080A1 (fr) 2020-01-08 2021-12-03 Pompes à médicament et systèmes de commande pour gérer des données de thérapie de régulation de la glycémie d'un sujet
PCT/US2021/064228 Continuation-In-Part WO2022140204A1 (fr) 2020-01-08 2021-12-17 Pompes à médicament et leurs systèmes de commande
PCT/US2022/012795 Continuation-In-Part WO2022159393A1 (fr) 2020-12-07 2022-01-18 Dispositif ambulatoire et composants correspondants

Related Child Applications (12)

Application Number Title Priority Date Filing Date
PCT/US2021/012795 Continuation-In-Part WO2021142335A1 (fr) 2020-01-08 2021-01-08 Systèmes et procédés de suivi de lignée de données et de cycle de vie d'enregistrement utilisant des registres distribués
PCT/US2021/072742 Continuation-In-Part WO2022126080A1 (fr) 2020-01-08 2021-12-03 Pompes à médicament et systèmes de commande pour gérer des données de thérapie de régulation de la glycémie d'un sujet
PCT/US2021/064228 Continuation-In-Part WO2022140204A1 (fr) 2020-01-08 2021-12-17 Pompes à médicament et leurs systèmes de commande
PCT/US2022/012795 Continuation-In-Part WO2022159393A1 (fr) 2020-12-07 2022-01-18 Dispositif ambulatoire et composants correspondants
PCT/US2022/017368 Continuation-In-Part WO2022178447A1 (fr) 2020-01-08 2022-02-22 Pompes à médicament dotées de systèmes et procédés pour améliorer l'expérience de l'utilisateur
US17/683,830 Continuation US20220265143A1 (en) 2020-12-07 2022-03-01 Ambulatory medicament pumps with selective alarm muting
US17/685,297 Continuation US20220184300A1 (en) 2020-12-07 2022-03-02 Occlusion detection in ambulatory medicament pumps
US17/685,235 Continuation US11925788B2 (en) 2020-12-07 2022-03-02 Ambulatory medicament device with motion detection and gesture-based control
US17/685,170 Continuation US11565041B2 (en) 2020-12-07 2022-03-02 Ambulatory medicament device with power saving mode
US17/685,149 Continuation US11534546B2 (en) 2020-12-07 2022-03-02 Ambulatory medicament device with motion detection and gesture-based control
US17/685,292 Continuation US11497852B2 (en) 2020-12-21 2022-03-02 Ambulatory medicament device with power saving mode
US17/685,144 Continuation US11497849B2 (en) 2020-12-07 2022-03-02 Ambulatory medicament device with power saving mode

Publications (1)

Publication Number Publication Date
WO2022140204A1 true WO2022140204A1 (fr) 2022-06-30

Family

ID=82158762

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2021/064228 WO2022140204A1 (fr) 2020-01-08 2021-12-17 Pompes à médicament et leurs systèmes de commande

Country Status (1)

Country Link
WO (1) WO2022140204A1 (fr)

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080167641A1 (en) * 2005-05-13 2008-07-10 Novo Nordisk A/S Medical Device Adapted To Detect Disengagement Of A Transcutaneous Device
US20140024907A1 (en) * 2012-07-19 2014-01-23 Lifescan, Inc. Method and system to indicate hyperglycemia or hypoglycemia for people with diabetes
US20140046260A1 (en) * 2006-02-09 2014-02-13 Deka Products Limited Partnership Infusion pump assembly
US20140276409A1 (en) * 2013-03-14 2014-09-18 Tandem Diabetes Care, Inc. System and method for detecting occlusions in an infusion pump
US20170100538A1 (en) * 2007-05-21 2017-04-13 Bigfoot Biomedical, Inc. Occlusion sensing for an infusion pump
US20190344009A1 (en) * 2017-01-06 2019-11-14 Trustees Of Boston University Infusion system and components thereof

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080167641A1 (en) * 2005-05-13 2008-07-10 Novo Nordisk A/S Medical Device Adapted To Detect Disengagement Of A Transcutaneous Device
US20140046260A1 (en) * 2006-02-09 2014-02-13 Deka Products Limited Partnership Infusion pump assembly
US20170100538A1 (en) * 2007-05-21 2017-04-13 Bigfoot Biomedical, Inc. Occlusion sensing for an infusion pump
US20140024907A1 (en) * 2012-07-19 2014-01-23 Lifescan, Inc. Method and system to indicate hyperglycemia or hypoglycemia for people with diabetes
US20140276409A1 (en) * 2013-03-14 2014-09-18 Tandem Diabetes Care, Inc. System and method for detecting occlusions in an infusion pump
US20190344009A1 (en) * 2017-01-06 2019-11-14 Trustees Of Boston University Infusion system and components thereof

Similar Documents

Publication Publication Date Title
US11497849B2 (en) Ambulatory medicament device with power saving mode
US11803367B2 (en) Ambulatory medicament device with alarm
US11497852B2 (en) Ambulatory medicament device with power saving mode
WO2021067767A1 (fr) Système de régulation de la glycémie
US20240062867A1 (en) Medicament pumps and control systems thereof
WO2022140204A1 (fr) Pompes à médicament et leurs systèmes de commande
EP4262924A1 (fr) Pompes à médicament et leurs systèmes de commande

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21911945

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 3205669

Country of ref document: CA

WWE Wipo information: entry into national phase

Ref document number: 18258241

Country of ref document: US

ENP Entry into the national phase

Ref document number: 2021410650

Country of ref document: AU

Date of ref document: 20211217

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 2021911945

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2021911945

Country of ref document: EP

Effective date: 20230721