Error handling in infusion devices with distributed motor control and related operating methods

1. A method of operating a motor using a first control module and a second control module, the method comprising:

initializing each of the first control module and the second control module to a boot loader stage, wherein operation of the motor is distributed across the first control module and the second control module such that the first control module and/or the second control module are operable to disable power to the motor;

in response to a first handshake between the first control module and the second control module while in the boot loader stage, loading a respective operating system for execution by each of the first control module and the second control module, wherein the respective operating system supports execution of respective application code by the first control module and the second control module by confirming functioning of the first control module and the second control module respectively; and

in response to a second handshake between the respective operating systems executing on the first control module and the second control module, loading the respective application code for execution by each of the first control module and the second control module from external memory.

2. The method of claim 1 , further comprising:

detecting, by the first control module, an anomalous condition after loading first application code for execution by the first control module from the external memory; and

in response to the anomalous condition:

disabling, by the first control module, input power to the motor;

storing, by the first control module, diagnostic information for the anomalous condition from its processing core to its internal memory; and

resetting the first control module to the boot loader stage after storing the diagnostic information.

3. The method of claim 2 , further comprising:

identifying, by the second control module, the anomalous condition in response to the first control module detecting the anomalous condition; and

in response to identifying the anomalous condition:

storing, by the second control module, second diagnostic information for the anomalous condition from its processing core to its internal memory; and

resetting the second control module to the boot loader stage after storing the second diagnostic information.

4. The method of claim 1 , further comprising determining, by one of the first control module and the second control module at the boot loader stage, whether a reset limit has been met prior to the first handshake.

5. The method of claim 4 , further comprising determining, by the respective operating system executing on other of the first control module and the second control module, whether the reset limit has been met prior to the second handshake.

6. The method of claim 1 , an infusion device including the first control module, the second control module, and the motor, wherein loading respective application code for execution by each of the first control module and the second control module from the external memory comprises:

executing, by the first control module, a delivery control application for determining a dosage command corresponding to an amount of fluid for delivery to a user associated with the infusion device; and

executing, by the second control module, a motor control application for converting the dosage command to one or more motor commands for operating the motor to deliver the amount of fluid.

7. The method of claim 6 , further comprising:

detecting, by the first control module, an anomalous condition after providing the dosage command to the second control module; and

in response to the anomalous condition:

disabling, by the first control module, input power to the motor;

storing, by the first control module, diagnostic information for the anomalous condition from its processing core to its internal memory; and

resetting the first control module to the boot loader stage after storing the diagnostic information.

8. The method of claim 7 , wherein:

the first control module comprises a pump control module;

the second control module comprises a motor control module coupled to a motor driver module coupled to the motor; and

disabling the input power comprises the pump control module disabling input power to the motor driver module.

9. The method of claim 8 , wherein disabling the input power to the motor driver module comprises opening a switching element between an energy source and the motor driver module.

10. The method of claim 6 , further comprising:

detecting, by the second control module, an anomalous condition after receiving the dosage command from the first control module; and

in response to the anomalous condition:

disabling, by the second control module, input power to the motor;

storing, by the second control module, diagnostic information for the anomalous condition from its processing core to its internal memory; and

resetting the second control module to the boot loader stage after storing the diagnostic information.

11. The method of claim 10 , wherein:

the first control module comprises a pump control module;

the second control module comprises a motor control module coupled to a motor driver module coupled to the motor; and

disabling the input power comprises opening a switching element between the motor driver module and the motor.

12. The method of claim 1 , wherein the first control module comprises a pump control module generating a dosage command for operating the motor of an infusion device and the second control module comprises a motor control module coupled to a motor driver module to operate the motor driver module in response to the dosage command.

13. The method of claim 12 , further comprising:

detecting, by the pump control module, an anomalous condition after loading first application code for execution by the pump control module from the external memory; and

in response to the anomalous condition:

disabling, by the pump control module, input power to the motor driver module;

storing, by the pump control module, diagnostic information for the anomalous condition from its processing core to its internal memory; and

resetting the pump control module to the boot loader stage after storing the diagnostic information.

14. The method of claim 12 , further comprising:

detecting, by the motor control module, an anomalous condition after receiving the dosage command from the pump control module; and

in response to the anomalous condition, electrically disconnecting, by the motor control module, the motor from an output of the motor driver module.

15. An infusion device comprising:

a motor;

a first control module; and

a second control module, wherein the first control module and the second control module are configured to:

initialize each of the first control module and the second control module to a boot loader stage, wherein operation of the motor is distributed across the first control module and the second control module such that the first control module and/or the second control module are operable to disable power to the motor;

in response to a first handshake between the first control module and the second control module while in the boot loader stage, load a respective operating system for execution by each of the first control module and the second control module, wherein the respective operating system supports execution of respective application code by the first control module and the second control module by confirming functioning of the first control module and the second control module respectively; and

in response to a second handshake between the respective operating systems executing on the first control module and the second control module, load respective application code for execution by each of the first control module and the second control module from external memory.

16. The infusion device of claim 15 , further comprising a motor driver module coupled between an energy source and the motor, wherein:

the motor is operable to deliver fluid to a body of a user;

the first control module comprises a pump control module to generate a dosage command for the motor; and

the second control module comprises a motor control module coupled to the motor driver module to operate the motor driver module in response to the dosage command.

17. The infusion device of claim 15 , wherein the first control module is configured to:

detect an anomalous condition after loading first application code for execution by the first control module from the external memory; and

in response to the anomalous condition:

disable input power to the motor;

store diagnostic information for the anomalous condition from its processing core to its internal memory; and

reset to the boot loader stage after storing the diagnostic information.

18. The infusion device of claim 17 , further comprising a motor driver module coupled between an energy source and the motor and a switching element coupled between the energy source and the motor driver module, wherein:

the motor is operable to deliver fluid to a body of a user;

the first control module comprises a pump control module to generate a dosage command for the motor;

the second control module comprises a motor control module coupled to the motor driver module to operate the motor driver module in response to the dosage command; and

the pump control module disables input power to the motor by opening the switching element.

19. The infusion device of claim 15 , wherein:

the first control module comprises a pump control module;

the second control module comprises a motor control module; and

loading respective application code for execution by each of the first control module and the second control module from the external memory comprises:

executing, by the pump control module, a delivery control application for determining a dosage command corresponding to an amount of fluid for delivery to a user associated with the infusion device; and

executing, by the motor control module, a motor control application for converting the dosage command to one or more motor commands for operating the motor to deliver the amount of fluid.

20. The infusion device of claim 19 , further comprising a motor driver module coupled between an energy source and the motor and a switching element coupled between the motor driver module and the motor, wherein the motor control module is configured to:

detect an anomalous condition after receiving the dosage command from the pump control module; and

in response to the anomalous condition, disable input power to the motor by opening the switching element.