Inputs:
door latch sensor for IV
Battery Voltage and current sense for Coulomb count of battery load
Air-in-Line sensor (optical)
Pressure sensor
Motor drive signals from uC
Power On Self Test Processor status
User interface with switches; flow rate, duration, etc...
Temperature sensor
Power Management state
Fluid in hose
To perform the actual flow rate, the transfer function of the Infusion pump must be well defined for all situations. Pinched hose ( very common nuicance), air in hose, empty bag, type of fluid, temperature, pressure. An ALGORITHM MUST BE DEFINED BY YOU.
It is not acceptable always to simply apply DC to motor and coast, but rather compute from algorithm and sensor inputs, apply DC, count coulombs, open DC, short motor (stop quickly) , rest. repeat.
From MAXIM....
All infusion pumps must perform power-on self-test (POST) to meet FDA requirements. This includes tests of all critical processors, critical circuitry, indicators, displays, and alarm functionality. Some POST operations can require user observations, but additional circuitry is used for self-checking to reduce the risk of undetected failures.
For example, some models use a safety processor to monitor the performance of the main processor and to generate an alarm if unexpected behavior is detected. Another example of self-test is the simple monitoring of current through light-emitting diodes (LEDs) as they are turned on and off. If currents fall outside the acceptable range, a fault is indicated. Probably the most common self-test is the watchdog timer (WDT). Microprocessor supervisors with WDT functions are commonly used to ensure that the processor executes within proper code boundaries. In medical devices, it is usually not acceptable to have the supervisor on the same IC as the microprocessor, as this approach would subject the supervisor to the same transient errors as the microprocessor.
Supervisory functions are critical for ensuring that the pump is operating properly during patient use. Microcontrollers (of which there are often several in a single pump) must be held in reset until all power supplies are within tolerance and stable. All power supplies are monitored with voltage supervisors for undervoltage and overvoltage conditions. Motor loading is monitored and motor-stall detection is provided. (Motor stall is a critical failure causing a top-priority alarm.) Because of the criticality of the system, often power-supply voltages are monitored with ADCs so that their exact value can be recorded periodically. ADCs are also needed for sensor readings, such as temperature, motor loading, IV line pressure, and battery voltage.
Temperature sensing is implemented in the battery pack, the power supply, the motor, and the display. Due to the high efficiency of these designs, fans are usually not needed. These pumps must be splash-proof, so it is difficult to put in openings for airflow.