h/p/cosmos 150/50 mercury Operating And Service Manual page 92

IEC 60601-1 classifies networks and data networks as shown in figure 11 according to criteria A, B and C to identify a
statement about the consequences and required response times. Reaction time means for connection of a PEMS to a
network or data network, the time lag between the occurrence of a fault in the network or data network and the occurrence of
patient harm. Table 1 contains potential risks based on severity and response time in case of data loss or alteration of data in
a network or data network.
Severity
Death or serious injury
Medium injury
Light injury
Minor
Table 1: Possible risks by severity and reaction time in case of data loss or disturbances of the network or data network
respectively.
Class „C" network or data network:
All time-critical processes and applications for which a malfunction or interruption would lead to a critical situation for the
patient as in an intensive care network are categorized as class C. Such a network should not be connected to the general
hospital network, because such a connection might create uncontrollable risks. The accessibility of such an isolated (floating)
network has to be very high; interruptions should not occur or only very seldom. For such a network the manufacturer /
deliverer is the only responsible party. He must define the specifications of the network nodes to be used.
Note: In practice such an isolation of networks in hospitals can be realized only with very high technical effort or not at all.
Depending on the manufacturer, the patient monitors in intensive care can also show x-ray images, laboratory data and other
patient related information; this requires a connection of the intensive care network and the general hospital network to
transfer data such as x-ray images form the PACS. In this case the responsibility for such networks is clearly transferred to
the operator.
Class „B" network or data network:
This category of networks or data networks includes all applications and processes, which are not time-critical and which
handle therapeutic or diagnostic patient data. Such a network may be connected to another network such as a hospital
network via a defined and controllable or safe interface. The standards for such a network are high so that interruptions are
limited.
The specifications of such a network are either defined by the manufacturer or the system administrator who is appointed by
the operator. As class B networks are usually radiological networks, it is difficult to define the responsibility for such a system
when several manufacturers allocate different modules.
© 2012 h/p/cosmos sports & medical gmbh
Reaction time Network class
Second(s) A
Minute(s) A
Hour(s) A/B
Second(s) A
Minute(s) A/B
Hour(s) B
Second(s) B
Minute(s) B
Hour(s) B/C
Second(s) C
Minute(s) C
Hour(s) C
file: n:\article\cos14310m5-v1_06hpc-en\20120504_cos14310m5-v1.06hpc-en_manual_h-p-cosmos_running_machine.docx
email@h-p-cosmos.com
safety, installation and commissioning
Example
Infusion (closed loop), lack of control of operation robot
Missing alarm transfer of an intensive care network
Wrong therapy data on dialysis machine or ventilator
Wrong alarm transfer, lack of control of operation robot
Wrong alarm transfer, lack of control of operation robot
Image mutilation, loss of therapy protocol
Loss of a x-ray image
Malfunction of a tele-medic connection
Breakdown of a tele-medic connection
created 04.05.2012 printed 04.05.2012 page: 92 of 191