Method and apparatus for data transmission between an electromedical implant and an external apparatus

[0001] The invention concerns a method and an apparatus for data transmission between an electromedical implant and an external apparatus, as set forth in the classifying portion of claim 1 and the classifying portion of claim 13 respectively.

[0002] In order to monitor operation of an electromedical implant or the state of the patient in question, it is necessary for such implants to be equipped with telemetry devices. They make it possible for data which is available in the implant and which reflects the state of the patient and the implant to be read out into an external apparatus in a contact-free procedure. Such electromedical implants are for example cardiac pacemakers, defibrillators, cardioverters or other electronically actuated or controlled implants.

[0003] Thus U.S. Pat. No. 5,720,770 discloses for example a method of data transmission between an electromedical implant having a first transmitter/receiver unit and an associated external apparatus having a second transmitter/receiver unit, wherein data transmission begins with a triggering signal which is sent from the transmitter/receiver unit of the external apparatus to the transmitter/receiver unit of the implant. That triggering signal is sent at predeterminable first intervals of time, in normal operation of the implant. In such a bidirectional radio path as is used here, the receivers at both ends of the communication path are always switched on in order to detect when the other partner in the communication takes up a communication.

[0004] The energy resources within an electromedical implant of that kind however are severely limited so that it would be desirable to achieve the lowest possible level of energy consumption in order to increase the operating life.

[0005] For that purpose, U.S. Pat. No. 5,720,770 proposes that the processors which control the telemetry device of the implant are powered down to a minimum level of operation during the inactive times of the telemetry device and that they are “woken up” upon the receipt of a triggering signal from the external apparatus and go back up into the normal mode of operation in which more energy is consumed.

[0006] That method however still suffers from the disadvantage that the receiver of the implant must be continuously in operation in order to detect the triggering signal from the external apparatus.

[0007] Therefore the object of the invention is to provide a method of the general kind set forth, which permits energy-saving operation of the implant.

[0008] The invention includes the technical teaching that a particularly energy-saving made of operation of the implant is achieved if the triggering signal is always emitted by the first implanted transmitter/receiver unit, that is to say the transmitter/receiver unit of the implant, wherein at least reception readiness of the first transmitter/receiver unit is maintained for a second interval of time after emission of the triggering signal. Reception readiness of the first transmitter/receiver unit of the implant is maintained only for a certain period of time which is shorter than the period of time up to the next triggering signal so that at least the receiver portion and preferably also the transmitter portion of the first transmitter/receiver unit is switched off before the next triggering signal and therefore does not consume any energy. Depending on how the ratio between reception and rest phases turns out, it is possible to achieve a considerable saving in energy in that way.

[0009] In that respect the energy saving can be achieved by the method according to the invention, that is to say the communication protocol according to the invention, irrespective of the specific design structure of the receiver and transmitter.

[0010] In particular simple variants the triggering signal is formed by or contains a first data set to be transmitted.

[0011] In further advantageous embodiments of the method according to the invention the second external transmitter/receiver unit, in response to a transmission of data by the first implanted transmitter/receiver unit, sends a first acknowledgment to the first transmitter/receiver unit. In this case the first acknowledgment contains at least a first item of control information for controlling the reception readiness condition of the first transmitter/receiver unit. In that way it is possible to control the reception readiness of the first transmitter/receiver unit, in dependence on whether a transmission is also to be effected by the second transmitter/receiver unit. It will be appreciated that in this respect reception readiness, that is to say the second time interval, must last at least so long that the first acknowledgment is still received by the first transmitter/receiver unit or the second time interval is determined at least on the basis of the time in which such an acknowledgment is to be expected.

[0012] It is further possible that the reception phase is varied by the first acknowledgment or a transmission following same of the second transmitter/receiver unit. Thus the reception phase, that is to say the second time interval, can be curtailed, if, in the context of the current transmission cycle, no further transmission of the second transmitter/receiver unit is to be effected and reception readiness can thus be terminated promptly or at once. It is however also possible to extend the second time interval if at least one further transmission is also to follow.

[0013] Preferably the first acknowledgment is also formed by or contains a second data set to be transmitted.

[0014] In preferred variants of the method the external apparatus implements a first plausibility check in respect of the data transmitted by the first transmitter/receiver unit. In this case certain check bits of the transmitted data sets can be checked on the basis of certain criteria. Then, depending on the plausibility of the transmitted data, the first acknowledgment contains a second item of control information for control of the first transmitter/receiver unit. In the event of lack of plausibility of the transmitted data, the second item of control information contains a first control signal for triggering a renewed transmission of data by the first transmitter/receiver unit. That advantageously achieves an increase in transmission security as probably defectively transmitted data are requested again.

[0015] Preferably, at the first control signal the first transmitter/receiver unit implements a renewed transmission of data if a number of renewed transmissions, which is sufficiently low to avoid overloading the energy supply of the implant, is not exceeded. In that respect the number of renewed transmissions can be predetermined, in particular by means of a suitable control signal from the external apparatus. Alternatively or in addition it can be established in dependence on the state of charge of the energy storage means of the implant.

[0016] In preferred developments, a further increase in the level of probability of data authenticity is achieved in that, to check the transmission of data by the implant, upon the existence of plausibility of the transmitted data, the second transmitter/receiver unit sends back to the first transmitter/receiver unit at least a part of the transmitted data. If they are not in conformity with the data sent, there is a high degree of probability that an error has also already occurred in transmission to the second transmitter/receiver unit.

[0017] Preferably, after checking of the transmission of the data by way of the first transmitter/receiver unit, the implant sends a second acknowledgment to the second transmitter/receiver unit. When successful transmission is established, that second acknowledgment contains a first signature representing the validity of the transmission. Following that sending, the implant closes down the reception readiness of the first transmitter/receiver unit and preferably also the transmission readiness. The renewed output of a triggering signal then marks the expiry of the rest phase which is thereby optimized in respect of its duration.

[0018] As a further preferred feature, for further enhancing probability of data authenticity, the external apparatus implements a second plausibility check in respect of the second acknowledgment. When a lack of plausibility in respect of the second acknowledgment is established, a renewed interrogation on the part of the implant is effected after expiry of a further time interval after transmission of the second acknowledgment. In that case, after expiry of the further time interval, the implant takes up the condition of reception and transmission readiness of the first transmitter/receiver unit for a renewed further time interval which is sufficient to receive and answer an inquiry from the external apparatus. Furthermore, in that case, the inquiry is answered by renewed sending of the second acknowledgment and/or the data which were last sent. That ensures that correspondingly brief temporary disturbances have relatively little influence. In addition, on the basis of a comparirable energy saving which is advantageous precisely in relation to external apparatuses which are designed in the form of portable patient equipment.

[0019] It is preferably provided in that respect that, in the event of non-receipt of transmissions from the first transmitter/receiver unit, at the second transmitter/receiver unit, over a predetermined number of transmission or reception readiness intervals of the second transmitter/receiver unit, the transmission or reception readiness interval of the second transmitter/receiver unit is prolonged in order to catch any divergence drift of synchronicity.

[0020] In advantageous embodiments of the method according to the invention at least the rest phase can be varied during operation by a second item of control information being sent by the second transmitter/receiver unit to the first transmitter/receiver unit which is ready to receive. It is possible in that way for example to take into consideration a change in the patient condition, insofar as upon an improvement the transmission intervals are prolonged while in the event of a worsening of the patient condition they are curtailed.

[0021] In that respect transmission frequency is controllable either later in the case of bidirectional transmission by a service center which is connected to the external apparatus, or it can be set beforehand by the doctor with the help of the programmer. In that way monitoring can be accurately matched to the condition of the patient.

[0022] In further advantageous embodiments the rest phase is varied in dependence on the operating parameters of the implant. Those operating parameters also accurately reflect the condition of the patient so that transmission frequency of the implant is automatically adapted to the patient condition.

[0023] Preferably, when appropriate implant operating parameters prevail, the first transmitter/receiver unit sends an emergency triggering signal to the second transson of the second acknowledgment which is then present in duplicate in the external apparatus and/or the data which were last sent, it is possible to decide whether the data set can be assumed to be valid.

[0024] Preferably in this case also when defective transmission of the data is found, renewed transmission of data is effected by the first transmitter/receiver unit if a number of renewed transmissions, which is sufficiently low to avoid overloading the energy supply of the implant, is not exceeded.

[0025] In advantageous variants of the method according to the invention, renewed transmission is effected after the expiry of a waiting time interval, in which case the length of the waiting time interval preferably increases in the case of multiple repeated transmission. It is possible in that way to compensate for systematic errors, for example the temporary presence of an item of equipment which is causing interference and which makes error-free transmission impossible.

[0026] Preferably, after renewed transmission of data by the first transmitter/receiver unit, the steps in the method are implemented again, beginning with the plausibility check, in order in this case also to increase the probability of data authenticity.

[0027] In a further development stage, it is also possible to save energy in the external terminal apparatus. For that purpose, in advantageous developments of the method according to the invention, the second transmitter/receiver unit is substantially permanently ready to receive in the initial condition until the first data exchange with the implant. At least during the first data exchange the transmission or reception readiness of the second transmitter/receiver unit is reduced to a periodic transmission or reception readiness interval, in which case the second transmitter/receiver unit is synchronized with the first transmitter/receiver unit in such a way that the transmission or reception readiness intervals of the first and second transmitter/receiver units at least overlap. In this case also the switch-off times of the second transmitter/receiver unit make it possible to achieve a considemitter/receiver unit, for triggering an alarm signal. In that way it is then possible to initiate suitable countermeasures for example by an emergency center which is connected to the external apparatus.

[0039] FIG. 1 shows an apparatus for carrying out the method according to the invention with an electromedical implant 1 which is provided with a telemetry device and an external apparatus 2 which comprises a mobile portion 3 and a base station 4.

Mobile Portion 3

[0040] In this arrangement the mobile portion 3 has a control device 5 and a first interface device 6, a mobile radio device 7, a second interface device 8, a man-machine interface 9 and a third interface device 16 which are respectively connected to the control device 5. The first interface device 6 is connected to the control device 5 indirectly by way of a further interface device 17. The power supply for the mobile portion is afforded by way of Li-ion batteries which are disposed in the power supply portion 10.

[0041] The first interface device 6 comprises a telemetry transmitter/receiver unit so that the mobile portion 3 can make contact with the implant by way of a bidirectional telemetry section. The receiver and the transmitter of the interface device 6 are integrated in an IC. The two circuit portions form a functional unit. The receiver and the transmitter preferably operate in the UHF-range at 403.55 MHz, while the baud rate stages are 4, 8, 16 and 32 Kbit/s. It is however also possible to use in particular for the implant energy-saving frequencies in the VHF- or LF-range.

[0042] The mobile radio device 7 can transmit data which are read out of the implant for example by way of the first interface device 6 in the form of SMS-messages and can be called by a service center serving as a monitoring arrangement or a central storage arrangement.

[0043] A connection can be made between the mobile portion 3 and the base station 4 by way of the second interface device 8. It is in the form of an infrared interface (IrDA). It operates bidirectionally and can transmit data in the half-duplex mode.

[0044] The man-machine interface 9 makes it possible for the mobile portion 3 to be operated by a user.

[0045] The third interface device 16 is used for receiving external data or for service. It is also in the form of an IrDA interface.

[0046] The serial interface for both IrDA interface devices 8 and 16 and the interface to the mobile radio device 7 are disposed in parallel so that there is only ever one unit which can be operated. The IrDA interfaces 8 and 16 are connected in parallel. Both interfaces are continuously ready for reception so that an external request can be serviced at any time. The software then only has to establish at which IrDA interface the reception request occurs.

[0047] The power supply for the mobile portion 3 is implemented by means of Li-ion batteries. They can supply the mobile portion 3 in the fully charged-up state for at least 20 hours (standby time+16 SMS-transmissions). The dimensioning of the batteries applies in regard to the end of the operating life. The arrangement therefore has a 1000 mAh Li-ion battery.

Mobile Portion 3: Modular Embodiment

[0048] In a further embodiment which is not specifically illustrated the telemetry unit 6 for communication with the implant 1 including a transmitting/receiving antenna and an electronic actuating system for telemetry as well as an interface device 17 is disposed in a separate module. That separate module has an interface device 17 for electrical and possibly also mechanical connection to a mobile telephone.

[0049] The separate module can be fitted for example instead of the battery pack into the mobile telephone, thus affording a mechanically sturdy unit comprising the mobile telephone and a separate housing which possibly projects to an immaterial degree beyond the previous external contour of the mobile telephone.

[0050] In this variant the separate module has a battery compartment into which can be fitted the original battery pack of the mobile telephone or however another suitable battery or a suitable battery pack. That battery then serves for the power supply for the entire system consisting of the mobile telephone and the separate module and can be charged by way of the standard charging connections on the mobile telephone.

[0051] In the case of this variant, there are three basic possible options in regard to data connection between the separate module and the mobile telephone:

• [0052] 1 by way of the external electromechanical plug of the (usually serial) interface provided on the mobile telephone,
• [0053] 2 by way of an electromechanical plug of the (serial) interface provided on the mobile telephone, which plug is additionally to be integrated in the battery compartment of the mobile telephone, or
• [0054] 3 by way of the IrDA interface provided on the mobile telephone.

[0055] In the case of the first and third variants, there is an optical or mechanical connection between the separate module and the interface integrated in the mobile telephone, that is to say the separate module or a fixed extension thereof covers over the interface of the mobile telephone and at that location includes a suitable plug connection or extends into the proximity of the interface of the mobile telephone and includes at that end an infrared interface. Those solutions involve special software for the mobile telephone, which permits control which is initiated by way of that interface.

[0056] For integration of the plug in the battery compartment the second variant additionally requires a mechanical and electrical modification to the mobile telephone. A suitable connection of that plug not only to the serial interface but also to other parts of the electronics of the mobile telephone mean that it is possible to provide for direct control of the mobile telephone by the telemetry unit.

[0057] In both cases the known normal function of the mobile telephone is retained. Priority control for telemetry transmissions can possibly be provided. Preferably, the electronics of the mobile telephone are automatically set in operation when required by the telemetry unit which is permanently in a state of reception readiness or which is selectively time-controlled (event control).

[0058] In a further variant the separate module can be integrated on a SIM-card. That SIM-module is fitted in place of the standard SIM-card into the SIM-card tray and uses the interface provided for same as the standard.

[0059] Possibly for example the transmitting/receiving antenna and the electronic actuating system for telemetry can be so designed that, when the SIM-module is inserted, they are disposed outside the housing of the mobile telephone.

[0060] In this variant, a buzzer which is usual in mobile telephones can be actuated for acoustic display of the various patient alarm functions. The optical display which is provided in any case on mobile telephones can be used for the optical display, in all modular variants.

Mobile Portion 3: Man-Machine Interface

[0061] Provided on the mobile portion 3 are a LED and a buzzer for optical and acoustic display of functions and operating states, as well as some switches for manually triggering functions.

[0062] A flashing light-emitting diode indicates the low battery state as soon as the battery charge has fallen to 10%. The mobile portion 3 then still has a minimum running reserve of about 2 hours. As the mobile portion 3 is not always visible to the patient, the buzzer, by a short alarm, also indicates the occurrence of the low battery state. The buzzer must operate at a frequency of about 2 kHz or below and must be suitably loud so that even patients of limited perception can be certain to hear the alarm sound. The buzzer should trigger an alarm again approximately every 5 minutes to remind the patient to charge up the battery.

[0063] There is provided a recessed on/off switch which cannot be unintentionally operated. The switch position is labeled so that it is possible to see whether the mobile portion 3 is switched on. That switch is necessary as the mobile portion 3 with the mobile radio device 7 must be switched off in some areas in which it is to be found, for example in an in-flight situation and in certain areas of hospitals.

[0064] There may be provided a key for sending a short message for testing the SMS-channel to the service center. The mobile portion 3 shows by means of a flashing LED that such a test has been started. The service center recognizes the received short message as being a test and sends an acknowledgment to the mobile portion 3. Flashing of the LED is thereupon terminated again, whereby the patient can see that both the outgoing and also the incoming connection to the service center are operable.

[0065] For diagnostic purposes, there can be provided a key by means of which the patient can trigger data transmissions to the service center. If the patient suffers from complaints or troubles of any kind which possibly cannot be in any way detected as such for the implant, that key can be pressed. Thereupon a data set is transmitted, which besides the items of information which are to be transmitted as a routine matter, includes the time of triggering and acquisition of the associated data by the implant. The transmitted short message also informs the service center that this is a patient-triggered data transmission which is possibly to be dealt with separately.

[0066] For acute emergency cases, it is possible to use a patient alarm key which is also protected from unintentional incorrect operation. That emergency key can be arranged in recessed relationship for that purpose and can be additionally protected by a cover which first has to be opened in order to trigger off the patient alarm. The protection against incorrect operation can also be in the form of a time lock in the software, which assumes the key function to be valid only if the key is depressed for a relatively long period of time (for example more than 3 seconds). A successfully triggered patient alarm is acknowledged acoustically by the buzzer. Thereafter the key can be released again. In addition a light-emitting diode is continuously switched on for 10 seconds and then lights up once again for 2 seconds each minute as a reminder that a patient alarm has been triggered. The buzzer is always actuated simultaneously with the light-emitting diode so that even patients of limited perception can perceive this acknowledgment from the external apparatus.

[0067] A patient alarm is immediately transmitted to the service center by way of SMS. It is canceled only when the service center acknowledges the patient alarm—also by way of SMS—, thereby ensuring that the alarm has reached the service center. Acknowledgment of the alarm by the service center is also displayed by a light-emitting diode and a buzzer on the mobile portion 3. Those measures contribute on the one hand to calming the patient, while on the other hand ensuring that, upon triggering of a patient alarm in a dangerous condition for the patient, further measures do not fail to be implemented if the patient alarm could not be transmitted successfully.

[0068] If a patient alarm which has not been acknowledged is to be canceled, the mobile portion 3 has to be switched off. After the restart the mobile portion is in the normal state again. The mobile portion automatically signals back to the service center by way of SMS. In the service center, it can then be recognized that the external apparatus was reset and the patient alarm canceled.

[0069] Successful implementation of a patient alarm situation has a higher priority in comparison with the low battery display. The low battery display is only implemented again when the service center has acknowledged the patient alarm. The mobile portion 3 is to be switched off if disturbance to the surrounding area by the buzzer is to be prevented.

Mobile Portion 3: Data Encryption

[0070] Only one processor which performs both the tasks of the central unit and also those of the communication unit is used as the control unit 5 for the mobile portion 3. The software can be downloaded by way of the IrDA interface 16 into a flash-ROM. The memory capacity of the internal flash-ROM is 128 KBytes, that of the integrated EEPROM is 4 KBytes and that of the static external SRAM is 64 KBytes. The program memory size is thus limited to the capacity of the installed flash-ROM and cannot be expanded (Harvard structure). The external static SRAM can be expanded.

[0071] SMS-transmission is implemented using a 128 bit DES encryption process which is based on a private-public key system. Encryption is implemented in software terms, that is to say no encryption IC is used. For safe operation, the system uses a watchdog circuit which at regular intervals checks the processor 5 and puts it into a secure status again if program execution is not taking place correctly.

[0072] No further encryption is required on the way from the implant 1 to the external apparatus 2 because of the short range in addition to the implant-specific encoding of the data.

Mobile Portion 3: Position-Finding

[0073] It is provided for the mobile radio device 7 that the field strength information with the associated numbers of the current and adjoined cells and the bit error rate is transmitted by way of SMS. On the basis of that position-finding information it is possible to locate the mobile portion 3 in emergency situations in which the patient is incapacitated.

Mobile Portion 3: Call Number Management

[0074] The mobile radio device 7 includes a mobile radio module 7.1 and a memory in the form of a SIM(Subscriber Identity Module)-card 7.2. The SIM-card reader can be soldered directly into the circuit board under the mobile radio module 7.1. The SIM-card 7.2 is thus not accessible to the user. A SIM-card reader is provided in any case in embodiments which are based on the use of a mobile telephone.

[0075] The call number or numbers of the service center is or are permanently stored in the memory of the SIM-card 7.2 by the mobile radio module 7.1. The mobile portion 3 is supplied with a SIM-card which contains the call number of a service center in the call number memory as a preset parameter. The call numbers on the SIM-card can be altered by way of SMS. Call number management (writing and reading the numbers on and from the SIM-card) must be implemented by the central control device 5 of the external apparatus. The preset call number is kept permanently on the SIM-card for the sake of safety on another memory location and is used if the external apparatus 2 cannot form a connection with a new call number. That ensures that establishing contact always remains possible.

[0076] It is also possible to operate a plurality of service centers. The patient reports to any service center. In that way the address of the customer is known there and it is possible to decide which service center initially takes over the procedure. If the customer switches on his external apparatus, then it reports to the preset service center insofar as it immediately sends an SMS-message thereto. Now, by sending back an SMS-message, the service center can transmit the call number which is to be used in future. The mobile portion 3 can thus be automatically associated at any time with another service center without a service engineer having to convert the mobile portion 3. That makes particular sense when it is possible thereby to avoid having to send SMS-messages over frontiers.

[0077] The databases of the service centers are the same as each other so that it is always clear which implant 1 or mobile portion 3 is being operated by which service center. Suitable fields are to be provided in the database.

[0078] In operation it is possible in each case to pick up only one further (second) number. That is used if the contact with the “new” service center can be successfully achieved. If that is not the case, the “old” call number is used again. If the external apparatus is again referred to a further service center, the second number is overwritten so that the operating procedure involved is always such that firstly the second number is tried and, in the event of one or more abortive attempts, the first number is used. The advantage of this procedure is that it is possible to achieve full flexibility but the secure call number remains stored so that a complete collapse of the connection is reliably avoided.

[0079] A kind of LIFO-memory can also be organized in the SIM-card, for a maximum memory depth (for example ten call numbers). If the previously operative service center presets a new call number, that is used as the most up-to-date call number. If however transmission problems occur with that new call number, then in each case the next older call number is used until finally the permanently stored preset call number is next. If the memory is occupied, for example with 9 call numbers and the preset call number, then the oldest, that is to say the call number which is closest to the preset number is erased. The advantage of this procedure is its high level of redundancy as it is to be assumed that a connection occurs with at least one of the stored service centers. The disadvantage is that under some circumstances many service centers receive data from an external apparatus, which only then can be combined together and evaluated jointly.

[0080] As the external apparatus 2 is equipped with a modem 12 the call number memory in the SIM-card can additionally also be used for those call numbers. The organization can be implemented based on management of the mobile radio numbers. By virtue of the call numbers being stored on the SIM-card, in the event of replacement of the external apparatus on the part of the customer, for example in the event of a defect, the SIM-card can be fitted into the new apparatus again so that the mode of making the connection to the service centers is implemented without any gap or interruption.

Base Station 4

[0081] The base station 4 comprises a charging device 11 for the batteries in the power supply portion 10 and a modem 12, acting as a data transmission device, for the fixed-line telecommunication network 13 which is addressed by the mobile portion 3 by way of the interface device 14. The base station 4 further includes an additional antenna 15 which upon connection to the mobile portion 3 is connected to the mobile radio device 7 and thus improves the transmission quality.

[0082] The charging device 11 serves to charge up the Li-ion batteries of the mobile portion 3 and at the same time serves for the power supply for the components of the base station 4. The charging device is equipped with a regulator which is suitable for Li-ion batteries, and a monitoring circuit. It is designed for a maximum charging current of 350 mA. It is dimensionally designed, and can be switched over, for a primary ac voltage of 220/110V, 50/60 Hz, in which respect a range of 100 to 240 V for the primary ac voltage and a frequency range of 47-63 Hz is preferred. Protection class 2 is used for the external apparatus 2. The power supply in the base station 4 can also be replaced by a suitable plug mains unit. The interface device 14 is in the form of an infrared interface (IrDA).

[0083] The additional antenna 15 is in the form of a diversity antenna. The arrangement is provided in each case with suitable λ/4-antennae which are in the form of loop or helix antennae.

[0084] There is no mains switch. If the base station 4 is to be disconnected from the mains network, the plug mains unit can be pulled out.

External Apparatus 2: Co-Operation of the Mobile Portion 3 and the Base Station 4

[0085] The mobile portion 3 is inserted into the base station 4 for the purposes of charging and for data transmission by way of the fixed-line telecommunication network 13.

[0086] The base station 4 is equipped with a light-emitting diode which lights up when the mobile portion 3 is plugged in and a charging current is charging the batteries. The light-emitting diode goes out when the mobile portion 3 is removed or current is no longer being taken by the mobile portion 3. The display of the light-emitting diode is inverted for the duration of the transmission, but at least one second, when a message is sent or received by way of the installed modem 12. The base station 4 acknowledges insertion of the mobile portion 3 or removal of the mobile portion 3, by a brief sound from a buzzer.

[0087] The mobile portion 3 is fully operational during charging in the base station 4. The voltage transformers in the base station 4 are designed for up to 40 V so that a connection for charging from a motor vehicle system is possible. The control device 5 monitors the battery voltage and the supply of voltage at the mobile radio module 7.1. When the mobile portion 3 is switched on the batteries are fully charged again after about 4 hours in the base station 4.

[0088] For the purposes of data transmission the control device 5 is designed in such a way that it is only after a predetermined number of unsuccessful transmission attempts by way of the mobile radio device 7 that the transmission of data to the monitoring device is effected by way of the fixed-line telecommunication network 13 by means of the interface devices 8 and 14 and the modem 12. If therefore the mobile radio transmission is not operating or the external apparatus 2 is being operated in a country which does not support a mobile radio standard, that is to say in the mobile portion 3 there are data which could be put into intermediate storage in the memory of the SIM-card 7.2 and which could not be transmitted by way of the mobile radio network to the service center, then transmission is effected by way of the modem as soon as the mobile portion is plugged into the base station.

[0089] The IR-interface 8 of the mobile portion 3 and the IR-interface 14 of the base station 4 are continuously ready to receive. The mobile portion 3 exchanges data with the base station 4 as soon as it is docked thereinto. That means that it is known to the mobile portion 3 in each case whether there is an operational modem 12 in the base station 4.

[0090] As the messages to be transmitted involve very short data blocks, a transmission speed of 9600 bauds is sufficient. The modem 12 is either integrated in the base station 4 or if necessary it can be connected by the service engineer by being simply fitted by snapping engagement into the base station 4. The modem 12 can be switched over to a software handshake as it is only that kind of “optical 2-wire transmission” that is supported by way of the IrDA interfaces 8 and 14.

External Apparatus 2: Self-Test

[0091] If an error is detected in operation, a corresponding inquiry from the service center is received or if the external apparatus 2 goes on the network again after a power-on reset, the external apparatus 2 executes a self-test and signals the result to the service center. The external apparatus 2 therefore automatically signals errors and faults, it can be checked from the service center, and it signals back again when it is again ready for operation (for example after re-charging of the discharged batteries). The SMS-string with the result of the self-test is only transmitted if the foregoing three preconditions require this, no information relating to the self-test is contained in the normal transmission string.

[0092] The purpose of the self-test is to permit conclusions to be drawn about the operation of the hardware. A decision can then be taken in the service center how those faults and errors have to be handled. The external apparatus 2 signals in six cases immediately by way of SMS-messages or alternatively by way of a modem:

• • [0093] A dangerous state is being signaled by the pacemaker.
  • [0094] The transmission section to the pacemaker is not operable.
  • [0095] A self-test of the external apparatus signals a fault or error.
  • [0096] Upon signaling of a low battery state prior to power-off.
  • [0097] In the case of a patient alarm, that is to say the patient triggers an alarm by pressing a key of the interface 9.
  • [0098] On demand by the service center.

[0099] The following criteria can be adopted as the options in terms of self-diagnosis of the external apparatus:

• [0100] a) The check sum by way of the program code (flash-ROM, EEPROM, ROM-error, program incorrectly loaded) gave a memory error.
• [0101] b) A memory test in respect of the RAM gave a memory error.
• [0102] c) Temporary failure of the mobile radio network has occurred (can also indicate hardware faults; reading out the mobile radio device 7 can clarify matters here).
• [0103] d) A time-out in communication with the service center has occurred (as c)).
• [0104] e) A received data string is too short or a check sum error has occurred (hardware fault in the telemetry or reception disturbance or range problems).
  External Apparatus 2: Time Synchronization

[0105] Only relative time is available for the microprocessors in external apparatuses, with the real-time clock thereof. The time in the implant 1 is not adjusted and after half a year is accurate to +/−0.5 hours so that it cannot be used to establish the system time of the external apparatus 2. If in the mobile portion 3 the battery is discharged or removed by the service engineer, it can happen that the real-time clock totally loses the time. The external apparatus however requires the current time for specifying same in connection with data which are sent to the service center in order to document when events were received from the implant 1.

[0106] The data are sent in the form of SMS-messages, and received messages are acknowledged by the service center by way of SMS-messages, in relation to the external apparatus 2. In order to set the current time in the external apparatus 2, that is to say to implement time synchronization of the external apparatus 2, the time signature (SMS-header) of the acknowledgment SMS which contains data and clock time is used.

[0107] If that acknowledgment SMS comes back within for example one minute, the external apparatus 2 can set the absolute time in accordance with the header of the acknowledgment, as it is guaranteed that both SMS were on the way for less than a minute. If a longer time has elapsed between the sent SMS and the acknowledgment, the SMS-header of the acknowledgment cannot be evaluated as it is not possible to establish whether the original transmission or the acknowledgment was delayed in transmission. Experience has shown that the time for an SMS-transmission is in the range of below 10 seconds so that the foregoing procedure can be well applied.

[0108] As there is a very high probability that, after a power-on reset, the clock time in the external apparatus 2 is wrong, immediate time synchronization is provided for that situation. When the external apparatus 2 connects to the network again after a power-on reset, it signals that to the service center straightaway by way of SMS. The clock of the external apparatus can then be immediately set with the SMS-acknowledgment from the service center.

[0109] It is possible to establish that both the service center and also the external apparatus 2 are operated with UTC-time. That means that the entire system operates on one time. Local time such as for example CET or CEST then has to be ascertained from UTC-time when producing doctors' letters.

[0110] If problems should arise when ascertaining the absolute time, time transmission by way of the modem 12 can still be used as an alternative. Such a service is generally made available by various providers for the public telephone network.

External Apparatus 2: Service Interface

[0111] By way of the interface device 16 for example a service engineer can communicate with the mobile portion 3 using for example a laptop. Another possibility is that the external apparatus operates as a data logger insofar as data (for example as a blood sugar monitor) are read in, which are then also sent to the service center by way of SMS.

[0112] The range of the interface device 16 is at least 0.4 m. It is arranged in such a way that it can be used by an apparatus which is beside the external apparatus 2, when the mobile portion 3 is docked into the base station 4. It operates bidirectionally and can transmit data in the half duplex mode. The transmission speed of the third interface device 16 is at least 9600 bauds and can then be stepped up to 115 Kbauds.

[0113] The third interface device 16 is to be arranged in such a way that the communication between the base station 4 and the mobile portion 3 operates reliably, that is to say, there is no possibility of influence on the second interface device 8 by the third interface device 16.

[0114] FIG. 2 shows a flow chart of a data transmission method which can be used in conjunction with the method according to the invention and which can be used for data transmission between the implant 1 and the external apparatus 2.

[0115] The triggering signal for data transmission is in this case always emitted by the transmitter/receiver unit of the implant 1, for which purpose the transmitter/receiver unit is switched on in a step 18.

[0116] In step 19 transmission of the first data is then effected from the implant 1 to the external apparatus 2. A string which comprises 17 bytes is transmitted. These are 1 byte synchronization, 4 bytes identification. 1 byte serial number of the transmission, 1 byte length of the string being transmitted, 8 bytes data, and 2 bytes security (CRC). In the case of asynchronous transmission there is an overhead of three bits per byte so that 17*11 bits=187 bits have to be transmitted.

[0117] Thereupon step 20 involves plausibility checking of the first data transmitted, by the external apparatus. In that case for example a check is effected in respect of the CRC-bits, in relation to the transmitted string, or a check to ascertain whether the synchronization bits have the previously known values. It is also possible to check whether the string length coincides with the sent string length and/or whether the serial number of the transmission is correct. There is no checking of flags as no handling of the flags takes place in the external apparatus 2. In the event of expansions of the telemetry, the same type of an external apparatus can thus always be used. There is no checking of the implant number as the external apparatus can pass on the information of a plurality of implants.

[0118] If the external apparatus in step 20 detects that the data are not plausible, step 22 involves establishing whether a predetermined number of renewed transmission attempts was exceeded.

[0119] If it is established in step 22 that the predetermined number of renewed transmission attempts was not exceeded, then in step 23 valid data are again requested from the pacemaker. That request can comprise synchronization (8 bits), identification (32 bits), the serial number of the message (8 bits) and an agreed code (8 bits). That string can also be safeguarded with an CRC-byte. 64 bits+8*3 bits=88 bits are then sent in order to initiate a transmission inquiry in respect of the pacemaker.

[0120] If in step 20 the external apparatus detects that the data are plausible, then in step 21, after the plausibility check has been implemented, a first acknowledgment is sent to the implant 1, the first acknowledgment containing a first item of control information for controlling the reception readiness of the first transmitter/receiver unit. If the data set was recognized as being valid, in this case with or in the first acknowledgment a check data set is sent, which is checked by the implant 1. There are two possible options in this respect:

• • [0121] As the safest method, the previously sent first data set is sent back completely to the implant 1 which then compares the sent data set to the received data set. Then 187 bits would be sent back again.

[0122] Alternatively synchronization (8 bits), identification (32 bits), the serial number of the transmission (8 bits) and the CRC-bits (16 bits) are sent back for checking purposes to the implant 1 which then checks whether the sent string (identification, number of the transmission) and whether the received CRC-bits conform with the CRC-bits of the sent message. In that case 8 byes are then transmitted instead of 17 bytes as above, that is to say 64 bits+8*3 bits=88 bits (about half in relation to variant 1).

[0123] If in step 24 checking of the first acknowledgment in the implant gives a negative result, that is to say if the check data are not identical to the output data, then the first data set is sent again. The implant then tries it again after a fixed period of time. The external apparatus 2 informs the service center about the number of incorrectly transmitted data packets.

[0124] If in step 24 checking of the first acknowledgment in the implant gives a positive result, the implant in step 25 sends a second acknowledgment to the external apparatus 2. That second acknowledgment can comprise synchronization (8 bits), identification (32 bits), the serial number of the message (8 bits) and an agreed code (8 bits). That string can also be safeguarded with an CRC-byte. 64 bits+8*3 bits=88 bits are sent.

[0125] In step 26 the implant 1 then stops all transmitting and receiving activities.

[0126] In step 27 the passing of a given period of time is checked, after which a fresh data set is waiting in the implant to be sent.

[0127] After receipt of the second acknowledgment the mobile portion 3 will pass to the service center the first data which have now been verified. The first data set is marked as valid and the service center knows that these data are, with a very high level of probability, correct. The external apparatus retains those first data until the implant supplies a fresh data set which is verified as being correct.

[0128] If an error occurs upon reception of the second acknowledgment (for example different implant number or acknowledgment code is not right) the first data are nonetheless sent by SMS to the service center, but in addition the external apparatus 2 signals that the second acknowledgment of the implant 1 could not be validly transmitted.

[0129] In this case there is the possibility that the implant 1, after dispatch of the second acknowledgment, after the passing of a precisely fixed period of time, goes into the receive mode again. Upon a renewed inquiry the external apparatus 2 for example can again send the first acknowledgment consisting of 88 bits in order to request a new transmission. Immediately after it has checked that it is addressed the implant 1 can begin with the renewed transmission without the received data first having to be evaluated. In this case the second acknowledgment or the first data set can be sent again. The external apparatus 2 then has in duplicate either the first data set or the second acknowledgment and it can now decide whether the first data set can be assumed to be valid.

[0130] The transmission/reception cycles can be repeated a plurality of times. For reasons of saving energy however it is necessary to ensure that the procedure is interrupted after a given number of transmissions in order not to unnecessarily discharge the energy storage means of the implant. The external apparatus should then nonetheless send the data to the service center, but the data must be marked as non-verified. The data are held in the external apparatus 2 until a fresh data set is sent by the implant. In addition the last valid data set should be kept in the external apparatus, which the service center can then interrogate. In the case of a plurality of implants which co-operate with the external apparatus 2, the respectively last data sets of each implant are to be kept in the external apparatus 2.

[0131] In the described variant of the method the receiver of the external apparatus 2 is ready at any time to receive data from the implant.

[0132] The following point is to be noted in regard to other variants of the method: at regularly recurring or any moments in time, transmissions are sent from the implant 1 to the external apparatus 2, which either contain data or which only indicate that the implant 1 is active and ready to receive. If more than one message is to be sent, they are sent in succession. Those transmissions are received by the external counterpart arrangement, analyzed and acknowledged. The acknowledgments are expected in a fixed time window after transmission so that the receiver in the implant 1 only has to be active for a short time. Data can already be transmitted to the implant 1 in the acknowledgments. On the basis of the content and type of the acknowledgments, this indicates whether further data are waiting in the external apparatus 2 for transmission towards the implant 1. The acknowledgments are respectively analyzed by the implant 1 to ascertain whether the external apparatus 2 wishes to send further data and it will then automatically proceed in the protocol for the transmission of data in the opposite direction (as described above). That cycle can now be repeated as often as may be desired until all data have been transmitted in both directions and no apparatus would want to send further data.

[0133] In a further variant, a reduction in energy consumption in the external apparatus 2 is also achieved. As soon as a message has been received from the external apparatus 2, the implant and the external apparatus are synchronized by establishing time segments whereby periodic times are defined, in which the receiver of the external apparatus is active. The implant 1 may then also only transmit within those time segments, if it is to be received. The above-indicated handling instructions are correspondingly modified so that the implant 1 can only send within the time segments and it can no longer send at just any times.

[0134] That limitation does not apply for an existing communication (sequence of transmissions and acknowledgments) so that the receiver in the external apparatus 2 still remains active for some time after stopping an acknowledgment in order to be able to receive any consequential transmission that may follow from the implant 1. The implant also must not stop a transmission in any time segment. If the external apparatus 2 is to keep contact with a plurality of implants, then specific time segments are managed for each implant involved, and those time segments as far as possible should not overlap in order to avoid interference in relation to simultaneous transmission in respect of different implants.

[0135] The time segments can be altered within the limits of the above-described normal bidirectional communication both in terms of the duration of the active and also the passive phase as well as the time of synchronization. If no further transmissions are received from the implant over a given period of time, then the active time segment is increased in length stepwise at the expense of the passive time segment in order to catch any drift divergence of synchronicity. In the extreme case the receiver in the external apparatus is continuously active. That is also the reset state when switching on.

[0136] FIG. 3 in the form of a flow chart shows which strategy can be adopted in the event of repetitions of transmissions by the implant 1. FIG. 3 shows in detail step 22 from FIG. 2 with the input 22.1 and the outputs 22.2 and 22.3.

[0137] Step 28 firstly involves checking whether a counter Z has not yet exceeded a predetermined first value, in this case 2. In this respect the counter Z represents the number of transmission attempts executed. In step 18 it is set to zero and it is increased by 1 whenever step 19 is implemented. If the predetermined first value has not yet been exceeded, a new transmission is initiated immediately by way of the output 22.2. Firstly therefore the attempt is made a second time to send the transmission.

[0138] If the predetermined first value has been exceeded, then in step 29 a timer is set to zero.

[0139] Step 30 then involves checking whether the counter Z has not yet exceeded a predetermined second value, in this case 3. If the predetermined second value has not yet been exceeded, the system waits noticeably by virtue of the waiting loop 31, as a systematic error can be assumed to apply in terms of transmission. That can be for example a disturbing item which makes the transmission impossible for some time (for example a piece of electrical equipment which is not adequately interference-suppressed). After a waiting time of for example 5 minutes, a further transmission attempt is started. If this is also unsuccessful the cycle is continued at step 28.

[0140] Step 32 then involves checking whether the counter Z has not yet exceeded a predetermined third value, in this case 4. If the predetermined third value is not yet exceeded the system waits even longer through the waiting loop 33, for example 1 hour, and starts a last transmission attempt. If this is also unsuccessful, the cycle is continued at step 28 and thereafter left at 22.3. In that case therefore transmission is only implemented again when fresh data are ready for transmission in the pacemaker.

[0141] FIG. 4 shows a block circuit diagram of a variant of a patient monitoring system using the present invention.

[0142] In this case data transmission takes place between the implant 1 and the external apparatus shown in FIG. 1, the implant 1 being worn by a patient 33. From the external apparatus 2, the read-out data are transmitted by way of a mobile radio section 34 of a mobile radio network to a mobile radio station 35 of the mobile radio network and from there sent also by way of a mobile radio section 36 or alternatively by way of a fixed-line network connection 37 to a service center 38 which serves as a central storage arrangement and monitoring arrangement. In this case all data are sent in the form of SMS-messages and mutually acknowledged by way of SMS.

[0143] The central storage unit 38 is provided with a fully automatic database. The medical data are automatically read by way of TCP/IP-connection into the database computer where they are respectively entered into the provided tables and table fields, in respect of moment in time, implant, patient, external apparatus and medical contact (doctor/clinic).

[0144] Upon the attainment of a certain degree of filling of the database, the data are transferred from the computer onto external media (for example CD or tape). In accordance with the medical guidelines for data security patient-related data are stored immediately (as far as may be possible) on external read only media (CD-ROM). Proper access to all externally safeguarded data is continuously possible by way of suitable references in the database.

[0145] The access options to the data are regulated by complex rights allocation (for example reading, writing, modifying, erasing, etc.) for various user groups such as data managers, clinic or doctor. During operation of the database manual interventions and inquiries by system operators and other clients (for example the doctor 40) are possible at any time.

[0146] Priority-controlled triggers in the database and a coupled expert system make it possible to react specifically to medical facts and situations: the database generates in accordance with predefined rules items of information for the doctor and the system operator and passes such information to the target apparatuses 39 by way of fax, e-mail and internal and external computer connections. The items of information which are outputted are kept for later collective inquiry in the database. In that way the doctor can again request a summarizing or lost report in relation to the patient. He receives medical information in a few minutes even during examination and summarized information relating to the next after-care date. The transmission medium and the target addresses can in this case be configured independently of the triggering time and event. In that way the attending doctor 40 can obtain information about the state of health of his patient 33, in a manner as is wanted by the doctor.

[0147] In an emergency the patient 33 can thus also receive medical help more quickly than usual. That emergency situation is triggered both by objectively measured medical data and also by depressing a key on the mobile portion 3. He enjoys highest priority, in relation to the other events.

[0148] In addition the database can also react separately to data transmissions which are triggered by the patient, for example insofar as in this case also information is sent to the doctor and the system operator. In that way the subjective condition of the patient can be taken into account to a particular degree in the data acquisition procedure, and also incorporated into the diagnosis options.

[0149] FIG. 5 shows a block circuit diagram of a variant of a patient monitoring and after-care system using the present invention.

[0150] In this case the patient 33 with the implant 1 and the external apparatus 2 for after-care investigation are disposed in the interrogation region 41 of an after-care arrangement. In this case, triggered by the triggering device which co-operates with the external apparatus upon entering the interrogation region 41, interrogation of the first data from the implant 1 is automatically executed by the doctor 40 prior to the after-care examination. In this case transmission of the first data is effected by means of the long-range telemetry connection between the implant 1 and the external apparatus 2.

[0151] The result of the interrogation passes in suitably processed form by way of the path described in relation to FIG. 4 by way of the service center 38 to the target apparatus 39 from which it is outputted to the doctor 40 for his information. At the same time further patient-related data are also outputted from the database of the service center 38 so that the doctor 40 can form a comprehensive picture.

[0152] The routine current investigation by the doctor is thus supplemented by an overall picture over the time since the last visit to the doctor. The doctor acquires a picture over a number of weeks or months, which is substantially more informative than the current examination. In this case, a good picture is formed of the lifestyle habits of the patient, whereas it is precisely the appointment with the doctor that can represent an exceptional situation from the usual lifestyle (travel to the clinic or to the doctor, going up stairs, stress in traffic etc.).

[0153] In the actual examination the doctor (for example in carrying out stress tests) can also immediately request a report from the service center 38, which is then supplied after a few minutes. In that way parameter changes which were set by means of the programmer can be immediately checked and possibly also optimized. Further reports can be produced by virtue of storage in the database and further evaluation options by the expert system or by comparison with other cases. In that way, due to advances in medical knowledge, it is possible to recognize new correlations. They are then notified to the doctor in the next report, without the doctor having to check each of his patients for possible effects and consequences, when fresh knowledge comes to light.

[0154] In a further variant of the invention it is additionally possible, as soon as the patient 33 enters the interrogation region 41 of an after-care arrangement, to automatically start given standard test or diagnosis programs which are normally only carried out under medical supervision. It is possible for example to implement stimulus threshold, sensitivity, stress or defibrillation-shock tests.

[0155] FIG. 6 shows a variant of the invention from FIG. 5 in which an external apparatus 2′ is fixedly installed in the interrogation region 41 of the after-care arrangement. In this case the interrogation procedure is triggered as soon as the patient 33 with the implant 1 is in the interrogation range of the external apparatus 2′ for a certain period of time.

[0156] The result of the interrogation procedure goes in suitably processed form directly from the external apparatus 2′ to the target apparatus 39 from which it is outputted to the doctor 40 for his information. At the same time further patient-related data are also acquired by way of the connection 43 from the database of the service center 38 and outputted at the target apparatus 39 so that in this case also the doctor 40 can have a comprehensive picture.

[0157] FIG. 7 shows a block circuit diagram of a telemetry device of an electromedical implant which can be used together with the present invention.

[0158] The telemetry device has a close-range transmitter 44, a telemetry unit 45 connected thereto and an antenna interface device 46 which is connected to the telemetry unit 45 and by way of which a close-range antenna 47 is connected to the close-range transmitter/receiver unit.

[0159] In addition, to form a long-range telemetry device, the arrangement has a long-range transmitter 48 connected to the telemetry unit 45 and a long-range antenna 48 connected to the antenna interface device 46.

[0160] Furthermore the close-range telemetry device and the long-range telemetry device have separate energy storage means 51 and 52.

[0161] The other necessary system components for a telemetry device such as intermediate storage means, operational control, encoding, decoding and driver with threshold detector are in this case integrated in the telemetry unit 45.

[0162] For switching over between the long-range transmitter 48 and the close-range transmitter 44, they are connected to the telemetry unit 45 by way of a switching unit 46.1. For switching over between the close-range antenna 47 and the long-range antenna 49, they are connected to the antenna interface device 46 by way of a further switching unit 46.2. It will be appreciated however that in other variants, the two transmitters, like also the two antennae, can also be disposed connected in parallel to the telemetry unit 45 and the antenna interface unit 46 as in general close-range and long-range telemetry are not operated simultaneously.

[0163] To provide for adaptation of the modulation method for the respective telemetry involved, the arrangement has a matching logic unit 50 which is connected to the telemetry unit 45. The long-range telemetry device is operated at substantially the same effective data rate as the close-range telemetry device.

[0164] FIG. 8 shows the transmitter/receiver unit of an embodiment of the implant 1, in which separate energy storage means 56 and 57 are provided for the transmitter 54 and the receiver 55. The energy storage means involve separate buffer capacitors 56 and 57. These capacitors 56 and 57 only have to be charged to the level of energy necessary for the respective procedure. The energy consumption of the one procedure does not influence the energy supply for the other procedure. The procedures can thus directly follow each other, which is advantageous in relation to a bidirectional communication protocol without charging of a single buffer capacitor to double the energy content being necessary for that purpose.

[0165] FIG. 9 shows a circuit diagram of a transmitter according to the invention of the first transmitter/receiver unit of a variant of the implant from FIG. 1.

[0166] In this case a stable, frequency-modulatable transmitter has been embodied by means of two bipolar transistors 58, 59, wherein the first transistor 58 in a Col-pitts or Clapp circuit with an SAW-resonator 60 forms an SAW-stabilized oscillator, and the second transistor 59 serves as a buffer stage and antenna driver. The transistors 58, 59 are designed for maximum gain at lowest collector current. The frequency can be modulated by a capacitance diode 61 in series with the SAW-resonator 60. The frequency variation and thus the data rate and/or the range of the transmitter can however be increased the capacitance diode being replaced by a PIN-diode which is switched by a further transistor.

[0167] The antenna used can be a simple wire loop or an open wire (throw-out antenna) in the contour of the header of the implant. Overall in this case at 400 MHz a current consumption of less than 1 mA is possible, at a range of several meters. The circuit can be supplied directly from a buffer capacitor fed by a high-resistance battery of the implant 1, or from a low-resistance battery. There is no need for a charge pump.

[0168] FIG. 10 shows a further embodiment of an apparatus according to the invention which substantially corresponds to that shown in FIG. 1, for which reason reference will only be made here to the differences involved.

[0169] This arrangement involves an external apparatus 2″ which is suitable for monitoring, actuating and transmitting data from various electronic apparatuses 1′. Uses can be the remote monitoring of installations, for example the degree of filling of automatic drinks dispensers or automatic vending machines, a link with domestic technology, for example the control and monitoring of the air conditioning installation or the heating system, coupling to alarm installations or glass breakage signaling installations, for example burglary signaling by way of mobile radio, coupling to measurement systems, for example weather stations and level metering units on rivers, coupling to systems for traffic observation and control, for example traffic signs, bridges etc. It can also be used as a bugging system or as a mobile telephone with special digital functions.

[0170] The differences in relation to the structure shown in FIG. 1 essentially concern the mobile portion 3′ of the external apparatus 2″. In this case the first interface device includes four potential-free inputs 6.1 by way of optocouplers and four potential-free outputs 6.2. By virtue of the potential separation of the inputs and outputs 6.1 and 6.2, the external apparatus 2″ is suitable for monitoring and controlling digital states.

[0171] In addition the receiving and transmitting portion 6 of FIG. 1 is not included here, instead the serial interface 63 (RS 232) which is thus liberated is taken out by way of a 9-pole plug. In the case of the RS 232 a software handshake with three lines (RXD, TXD, GND) is sufficient. That means that the transmission rate is also limited to 9600 bauds. The serial interface 63 is not designed to be potential-free. By way of a further plug 64 the connections of the mobile radio module 7.1 can be taken to a microphone, a loudspeaker and optionally a buzzer (6 lines) so that for further areas of use it is possible to add a listening/speech combination and a buzzer.

[0172] The inputs 6.1 are in the range 1 at between −3V and 1.5V L-level, between 3.5 and 8V H-level and 10 mA input current; while in the range 2 they are at between −3V and 8V L-level, between 18V and 30V H-level and 10 mA input current. State recognition is implemented by way of an LED-display at a maximum switching frequency of 100 Hz rectangular and a separation voltage of 2.5 kV.

[0173] The outputs have between 15 and 30V DC separate voltage feed, a load current of 200 mA, short-circuit protection, protection from thermal overloading and a separation voltage of 2.5 kV. Potential separation is effected by way of optocouplers and the power switching function by way of MOS-FETs.

[0174] A difference in relation to the structure shown in FIG. 1, in respect of the base station 4′, only arises in regard to the power supply by the plug mains unit 11′, instead of the mains unit in the base station. A further possible configuration provides that the base station is omitted and the external apparatus is supplied directly by way of a mains unit. In the event of mains failure the mobile portion then still continues to operate for about 20 hours.

[0175] The invention is not limited in terms of implementation thereof to the preferred embodiments set forth hereinbefore. On the contrary a large number of alternative configurations are possible, which make use of the illustrated structure even in configurations of a basically different kind.