Page 51 - Mobility Management, July/August 2021

USER
Disable LUCI Override Control
WHEELCHAIR
Audio and Visual Notification
Limits Speed Real Time Fault Detection
LuciCore SOFTWARE
Self-Monitor and Disable
Collision and Drop-off Data
SENSORS
LUCI IS “FAIL SAFE”
LuciCore software has been written from the ground up to keep users safe. LUCI uses a multi-tiered architecture to monitor and react to failures in a safe way.
LUCI actively monitors all the onboard sensors for faults. If LUCI detects that sensor data is corrupt or missing, it safely stops the chair and notifies the user with both audio and visual indicators. If the green or yellow LUCI Status light is on, the user can be confident that LUCI is monitoring the environment.
LUCI controls the wheelchair speed at the most fundamental levels of hardware and software using a real- time system. If this system detects issues in the advanced LuciCore collision or drop-off protection system, it will safely bring the wheelchair to a stop. At this point, if a user wants to continue ‘unassisted’ then LUCI can be turned off and the chair will operate as if it was never equipped with LUCI.
With these protections, LUCI mitigates risk and brings the wheelchair to a stop safely in the event of a system failure. Here are more details on how LUCI mitigates leaving the user stranded.
• If a sensor on LUCI stops working, the user can press the LUCI button on the Dashboard to activate override and continue driving.
• The user can also use the Setup Tool to disable LUCI completely for a longer period until LUCI can be serviced. This allows the user freedom and use of their wheelchair without the protection of LUCI.
If a core component fails, LuciCore uses onboard hardware and software to monitor operation and status of LUCI. When this low-level firmware detects that LUCI is not correctly operating it disables LUCI automatically to allow the wheelchair to operate as if LUCI was not installed. Failsafe mechanisms in LUCI ensure that if LUCI is not active, the LUCI light and system status light on the dashboard will not be illuminated so that the user knows they are operating without LUCI. Furthermore, if LUCI experiences a severe failure, there is an automatic switch that closes, enabling the wheelchair to be driven until LUCI can be serviced.
In all cases, the worst failure of LUCI leaves the user with a wheelchair no more dangerous than a wheelchair without LUCI.
17
LUCI® SAFETY REPORT