BACKGROUND
5 It is known to use robots for assisting and performing surgery. Figure 1 illustrates a typical
surgical robotic system. A surgical robot 100 consists of a base 102, an arm 104 and an
instrument 106. The base supports the robot, and may itself be attached rigidly to, for
example, the operating theatre floor, the operating theatre ceiling or a cart. The arm extends
between the base and the instrument. The arm is articulated by means of multiple flexible
10 joints 108 along its length, which are used to locate the surgical instrument in a desired
location relative to the patient. The surgical instrument is attached to the distal end of the
robot arm. The surgical instrument penetrates the body ofthe patient at a port so as to access
the surgical site. The surgical instrument comprises a shaft connected to a distal end effector
110 by a jointed articulation. The end effector engages in a surgical procedure. In figure 1,
15 the illustrated end effector is a pair of jaws. A surgeon controls the surgical robot 100 via a
remote surgeon console 112. The surgeon console comprises one or more surgeon input
devices 114. These may take the form of a hand controller or foot pedal. The surgeon console
also comprises a display 116.
20 A control system 118 connects the surgeon console 112 to the surgical robot 100. The control
system receives inputs from the surgeon input device(s) and converts these to control signals
to move the joints of the robot arm 104 and end effector 110. The control system sends these
control signals to the robot. Joint controllers on the robot arm 104 drive the joints 108 to
move accordingly.
25
30
Power for driving the joints of the robot arm 104 is provided to the robot arm from the
surgeon console 112 via power cables. In the event of a power failure, it is known to use a
mechanical brake to hold the joints of the robot arm 104 in position, and for the surgical
instrument 106 to be removed from the patient manually.
wo 2021/214456 PCT/GB2021/050953
2
SUMMARY OF THE INVENTION
According to an aspect of the invention, there is provided a control system for a surgical
robotic system, the surgical robotic system comprising a remote surgeon console having a
surgeon input device, and a surgical robot arm comprising a series of joints extending from a
5 base to a terminal end for attaching to a surgical instrument, the surgical robot arm operable
in a full power mode in which the joints of the surgical robot arm are powered by a first power
source and a reduced power mode in which the joints of the surgical robot arm are powered
by a second power source, the control system configured to: whilst the surgical robot arm is
operating in the full power mode, control the surgical robot arm in a surgical mode by
10 converting inputs from the surgeon input device to control signals for moving joints of the
surgical robot arm; detect a power failure of the first power source; in response to detecting
the power failure, enable the reduced power mode, and control the surgical robot arm in a
locked mode by sending control signals to lock joints of the surgical robot arm; whilst in the
reduced power mode, detect a cessation of the power failure; and in response to detecting
15 the cessation of the power failure, disable the reduced power mode, re-enable the full power
mode, and control the surgical robot arm in the surgical mode.
The control system may be configured to in the surgical mode both prior to the power failure
and after cessation of the power failure, the control signals maintain an intersection between
20 the surgical instrument and a stored fulcrum.
25
30
The stored fulcrum may be a point about which the surgical instrument pivots when the
configuration ofthe surgical robot arm is altered whilst the surgical instrument is inside a port
in a patient's body.
The first power source may be a mains power supply.
The mains power supply may be provided to the surgical robot arm via the remote surgeon
console.
The second power source may comprise a battery.
wo 2021/214456 PCT/GB2021/050953
3
The battery may be rechargeable.
The second power source may comprise a further battery.
5 The further battery may be non-rechargeable.
The control system may, in response to detecting the cessation of the power failure:
determine whether there is greater than a threshold battery capacity available from the
second power source; and only control the surgical robot arm in the surgical mode on
10 determining that there is greater than the threshold battery capacity available from the
second power source.
15
The control system may maintain the surgical robot arm in a locked mode on determining
that there is less than the threshold battery capacity available from the second power source.
The control system may estimate the remaining battery capacity available from the second
power source from measurements of output voltage, current or power of the second power
source.
20 The control system may raise an alarm on the surgical robot arm in response to determining
that there is less than or the same as a second threshold battery capacity available from the
second power source.
The control system may send an alarm signal to the remote surgeon console in response to
25 determining that there is less than or the same as a second threshold battery capacity
available from the second power source.
The control system may, whilst in the reduced power mode, respond to an input to change to
a calibration mode by: determining whether a surgical instrument attached to the surgical
30 robot arm is located in a patient's body; and on determining that a surgical instrument
attached to the surgical robot arm is not located in the patient's body, controlling the surgical
robot arm in a calibration mode in which the control system responds to sensed external
wo 2021/214456 PCT/GB2021/050953
4
forces on the surgical robot arm by sending control signals to move joints of the surgical robot
arm to conform with the sensed external forces.
The control system may, on determining that a surgical instrument is located in the patient's
5 body, control the surgical robot arm so as to prevent movement of the surgical robot arm
which would cause the instrument to be inserted further into the port in the patient's body.
The control system may comprise a robot arm controller configured to detect power failures,
detect restoration of power following a power failure, and enable and disable the full power
10 mode and the reduced power mode.
The robot arm controller may be integrated in the surgical robot arm.
The surgical robot arm may be mounted on a support structure, and the robot arm controller
15 may be integrated into the support structure.
20
25
BRIEF DESCRIPTION OF THE FIGURES
The present invention will now be described by way of example with reference to the
accompanying drawings. In the drawings:
Figure 1 illustrates a surgical robotic system for performing a surgical procedure;
Figure 2 illustrates a surgical robot arm;
Figure 3 illustrates an exploded view of the joints of the surgical robot arm of figure 2;
Figure 4 is a schematic diagram illustrating the control system of a surgical robotic
system;
Figure 5 illustrates operating modes of a surgical robot arm and the transitions
permitted between them; and
Figures 6, 7, 8, 9, 10, 11 and 12 are flowcharts illustrating control methods of a robot
arm controller during a power failure.
30 DETAILED DESCRIPTION
The following describes a surgical robotic system of the type illustrated in figure 1. The
surgical robotic system comprises one or more surgical robot arm and surgical instrument,
5
wo 2021/214456 PCT/GB2021/050953
5
along with a remote surgeon console. The remote surgeon console is connected to the
surgical robot arm(s) via a control system. The control system includes a central controller
located remotely from the surgical robot arm(s). The control system may also include a robot
arm controller per surgical robot arm co-located with that surgical robot arm.
The control system and methods described in the following are done so with respect to a
surgical robot arm holding a surgical instrument having an end effector at its distal end for
manipulating tissue of a patient at a surgical site. The end effector may be, for example, a
pair of jaws, scalpel, suturing needle etc. However, the same surgical robot arm, control
10 system and methods apply equally to a surgical instrument which is an endoscope having a
camera at its distal end for capturing a video feed of a surgical site.
Figure 2 illustrates an exemplary surgical robot 200. The robot comprises a base 201 which is
fixed in place when a surgical procedure is being performed. Suitably, the base 201 is
15 mounted to a support structure. In figure 2, the support structure is a cart 210. This cart may
be a bedside cart for mounting the robot at bed height. Alternatively, the support structure
may be a ceiling mounted device, or a bed mounted device.
A robot arm 202 extends from the base 201 of the robot to a terminal end 203 for attaching
20 to a surgical instrument 204. The arm is flexible. It is articulated by means of multiple flexible
joints 205 along its length. In between the joints are rigid arm links 206. Suitably, the joints
are revolute joints. The robot arm has at least seven joints between the base and the terminal
end. The robot arm 200 illustrated in figure 2 has eight joints in total between the base 201
and the terminal end 203. The robot arm illustrated in figure 2 has only eight joints between
25 the base and the terminal end. The joints include one or more roll joints (which have an axis
of rotation along the longitudinal direction of the arm links on either side of the joint), one or
more pitch joints (which have an axis of rotation transverse to the longitudinal direction of
the preceding arm link), and one or more yaw joints (which also have an axis of rotation
transverse to the longitudinal direction of the preceding arm link and also transverse to the
30 rotation axis of a co-located pitch joint). In the example of figure 2: joints 205a, 205c, 205e
and 205h are roll joints; joints 205b, 205d and 205f are pitch joints; and joint 205g is a yaw
joint. The order of the joints sequentially from the base 201 of the robot arm to the terminal
wo 2021/214456 PCT/GB2021/050953
6
end 203 of the robot arm is: roll, pitch, roll, pitch, roll, pitch, yaw, roll. There are no
intervening joints in figure 2.
The joints of the surgical robot arm of figure 2 are illustrated on figure 3. The robot arm is
5 articulated by eight joints. Roll joint h 205a is adjacent to the base 201, and is followed by a
pitch joint h 205b. The pitch joint h has a rotation axis perpendicular to the rotation axis of
the roll joint h. Roll joint h 205c is adjacent to the pitch joint h and is followed by a pitch
joint J4 205d. The pitch joint J4 has a rotation axis perpendicular to the rotation axis of the
roll joint h Roll joint Js 205e is adjacent to the pitch joint J4, and is followed by a pitch joint
10 J6205f and a yaw joint h 205g, followed by a roll joint Js 205h. The pitch joint J6 and yaw joint
hform a compound joint, which may be a spherical joint. The pitch joint J6 and the yaw joint
h have intersecting axes of rotation.
The end of the robot arm distal to the base can be articulated relative to the base by
15 movement of one or more of the joints of the arm. The rotation axes of the set of distal joints
Js, J6, hand Js all intersect at a point on the surgical robot arm. Reference is made to a wrist.
Suitably, the wrist is a portion of the robot arm which rigidly couples to the distal end of an
instrument when that instrument is attached to the robot arm. The wrist has a position and
an orientation. For example, the position of the wrist may be the intersection of the rotation
20 axes of Js, J6, hand Js. Alternatively, the position of the wrist may be the intersection of one
or more rotation axes of joints of the instrument. Alternatively, the position of the wrist may
be the intersection of one or more rotation axes of the distal joints of the robot arm and one
or more rotation axes of joints of the instrument. The surgical robot arm illustrated in figures
2 and 3 has a redundant joint. For a given position of the wrist relative to the base of the
25 surgical robot arm, there is more than one configuration of the joints h to J4. Thus, the
surgical robot arm can adopt different poses whilst maintaining the same wrist position.
The surgical robot arm could be jointed differently to that illustrated in figures 2 and 3. For
example, the arm may have fewer than eight or more than eight joints. The arm may include
30 joints that permit motion other than rotation between respective sides of the joint, for
example a telescopic joint.
wo 2021/214456 PCT/GB2021/050953
7
Returning to figure 2, the surgical robot arm comprises a set of motors 207. Each motor 207
drives one or more of the joints 205. Each motor 207 is controlled by a joint controller. The
joint controller may be co-located with the motor 207. A joint controller may control one or
more of the motors 207. The robot arm comprises a series of sensors 208, 209. These sensors
5 comprise, for each joint, a position sensor 208 for sensing the position of the joint, and a
torque sensor 209 for sensing the applied torque about the joint's rotation axis. The torque
applied about a joint's rotation axis includes any one or combination of the following
components: torque due to gravity acting on the joint, torque due to inertia, and torque due
to an external force applied to the joint. One or both of the position and torque sensors for
10 a joint may be integrated with the motor for that joint. The outputs of the sensors are passed
to the control system.
The surgical instrument 204 attaches to a drive assembly at the terminal end ofthe robot arm
203. This attachment point is at all times external to the patient. The surgical instrument 204
15 has an elongate profile, with a shaft spanning between its proximal end which attaches to the
robot arm and its distal end which accesses the surgical site within the patient's body. The
surgical instrument may be configured to extend linearly parallel with the rotation axis of the
joint 205h of the arm. For example, the surgical instrument may extend along an axis
coincident with the rotation axis of the joint 205h of the arm.
20
The proximal end of the surgical instrument and the instrument shaft may be rigid with
respect to each other and rigid with respect to the distal end of the robot arm when attached
to it. An incision is made into the patient's body, through which a port is inserted. The surgical
instrument may penetrate the patient's body through the port to access the surgical site.
25 Alternatively, the surgical instrument may penetrate the body through a natural orifice of the
body to access the surgical site. At the proximal end ofthe instrument, the shaft is connected
to an instrument interface. The instrument interface engages with the drive assembly at the
distal end of the robot arm. Specifically, individual instrument interface elements of the
instrument interface each engage a respective individual drive assembly interface element of
30 the drive assembly. The instrument interface is releasably engageable with the drive
assembly. The instrument can be detached from the robot arm manually without requiring
wo 2021/214456 PCT/GB2021/050953
8
any tools. This enables the instrument to be detached from the drive assembly quickly and
another instrument attached during an operation.
At the distal end of the surgical instrument, the distal end of the instrument shaft is connected
5 to an end effector by an articulated coupling. The end effector engages in a surgical
procedure at the surgical site. The end effector may be, for example, a pair of jaws, a pair of
monopolar scissors, a needle holder, a fenestrated grasper, or a scalpel. The articulated
coupling comprises several joints. These joints enable the pose of the end effector to be
altered relative to the direction of the instrument shaft. The end effector itself may also
10 comprise joints. The end effector illustrated in figures 2 and 3 has a pair of opposing end
effector elements 307, 308. The joints of the end effector are illustrated on figure 3 as a pitch
joint 301, a yaw joint 302 and a pinch joint 303. The pitch joint 301 is adjacent to the shaft of
the instrument and rotates about an axis perpendicular to the longitudinal axis of the
instrument shaft. The yaw joint 302 has a rotation axis perpendicular to the rotation axis of
15 the pitch joint 301. The pinch joint 303 determines the spread of the end effector elements.
In practice, the pinch joint 303 may be another yaw joint which has the same rotation axis as
the yaw joint 302. Independent operation of the two yaw joints 302, 303 can cause the end
effector elements to yaw in unison, and/or to open and close with respect to each other.
20 Drive is transmitted from the robot arm to the end effector in any suitable manner. For
example, the joints of the instrument may be driven by driving elements such as cables, push
rods or push/pull rods. These driving elements engage the instrument interface at the
proximal end of the instrument. The drive assembly at the terminal end of the robot arm
comprises instrument drive joints which transfer drive from the surgical robot arm to the
25 instrument interface via the respective interface elements described above, and thereby to
the instrument joints. These instrument drive joints are shown on figure 3 as joints Jg, ho and
Jn. Figure 3 illustrates three instrument drive joints, each one of which drives one of the
three joints of the instrument.
30 Suitably, the instrument drive joints are the only means by which drive is transferred to the
instrument joints. The robot arm may have more or fewer than three instrument drive joints.
The surgical instrument may have more or fewer than three joints. The instrument drive
wo 2021/214456 PCT/GB2021/050953
9
joints may have a one-to-one mapping to the instrument joints that they drive, as shown in
figure 3. Alternatively, an instrument drive joint may drive more than one instrument joint.
The surgeon console is located remotely from the one or more surgical robot arms of the
5 surgical robotic system. The surgeon console comprises one or more surgeon input devices
and a display. Each surgeon input device enables the surgeon to provide a control input to
the control system. A surgeon input device may, for example, be a hand controller, a foot
controller such as a pedal, a touch sensitive input to be controlled by a finger or another part
of the body, a voice control input device, an eye control input device or a gesture control
10 input device. The surgeon input device may provide several inputs which the surgeon can
individually operate.
For example, the surgeon input device may be a hand controller connected to the surgeon
console, for example by a gimbal arrangement. This enables the hand controller to be moved
15 with three degrees of translational freedom with respect to the surgeon console. Such
movement may be used to command corresponding movement of the end effector of the
instrument. The hand controller may also be rotated with respect to the surgeon console.
Such movement may be used to command corresponding rotation of the end effector of the
instrument.
20
25
The surgeon console may comprise two or more surgeon input devices. Each surgeon input
device may be used to control a different surgical instrument. Thus, for example, a surgeon
may control one surgical instrument using a hand controller in his left hand, and control
another surgical instrument using a hand controller in his right hand.
A control system connects the surgeon console to the one or more surgical robots. Such a
control system is illustrated in figure 4. The surgeon console 401 is connected by a bidirectional
communications link to a central controller 402. Specifically, the surgeon input
device(s) of the surgeon console 401 are communicatively coupled to the central controller
30 402. The central controller 402 is connected by a bi-directional communications link to an
arm controller 403, 404, 405 of each surgical robot arm of the surgical robotic system. Each
arm controller is co-located with a surgical robot arm. The arm controller may be located in
wo 2021/214456 PCT/GB2021/050953
10
the surgical robot arm. Alternatively, the arm controller may be located in the support
structure which supports the surgical robot arm, for example in the cart of the arm. The
central controller is remotely located from at least one of the surgical robot arms. Suitably,
the central controller is remotely located from all the surgical robot arms in the surgical
5 robotic system. The central controller may be located at the surgeon console. Alternatively,
the central controller may be co-located with one of the arm controllers. The central
controller may be located remote from both the surgeon console and all the arm controllers.
The central controller comprises a processor 406 and a memory 407. The memory 407 stores,
10 in a non-transient way, software code that can be executed by the processor 406 to cause the
processor to control the surgeon console and the one or more surgical robot arms and
instruments in the manner described herein.
Each of the arm controllers comprises a processor 408 and a memory 409. The memory 409
15 stores, in a non-transient way, software code that can be executed by the processor 408 to
cause the processor to control the surgeon console and the one or more surgical robot arms
and instruments in the manner described herein.
The central controller 402 receives commands from the surgeon input device(s). The
20 commands from the surgeon input device indicate a change in the desired position and/or
pose of a distal end of a surgical instrument. The control system converts the commands
received from the surgeon input device to drive signals. This conversion is carried out by one
or a combination of the central controller and the surgical robot arm controller of the surgical
robot arm associated with the surgeon input device. The robot arm controller sends the drive
25 signals to the joint controllers of the surgical robot arm and/or surgical instrument associated
with the surgeon input device. Those joint controllers respond by driving the joint motors
accordingly. The joints are thereby driven to cause the end effector to adopt the desired
position and/or pose commanded by the surgeon input device. Manipulation of the surgical
instrument is thereby controlled by the control system in response to manipulation of the
30 surgeon input device.
wo 2021/214456 PCT/GB2021/050953
11
The control system receives inputs from the position and torque sensors on the joints of the
surgical robot arms. The control system determines the current configuration of a surgical
robot arm using the known sequence of joints and links in the arm, and the sensed joint
positions. From the current configuration of the surgical robot arm and the attached surgical
5 instrument, and the known mass and dimensions of the links and joints of the robot arm and
instrument, the control system determines the torque due to gravity acting on each joint. The
control system sends gravity compensating drive signals to the joint controllers of the robot
arm. The joint controllers respond by driving the joint motors so as to counteract the force
of gravity acting on each joint. In other words, each joint motor applies a torque which exactly
10 opposes the calculated gravitational force acting on the joint. In the absence of commands
from the surgeon input device and/or external forces (other than gravity) acting on the robot
arm, the robot arm is thereby held in position against gravity. It does not droop under the
force of gravity. In practice, each drive signal sent by the control system to a joint controller
for driving a joint motor may be resolved into a component which drives the joint in
15 accordance with the input received from the surgeon input device, and a component which
counteracts gravity. In some modes, as discussed below, the drive signal may also comprise
a component which drives the joint to conform with an external force applied to the robot
arm.
20 A surgical robot arm is operable in a number of different operating modes. Figure 5 illustrates
some exemplary operating modes of the surgical robot arm, and the transitions permitted
between those operating modes.
Figure 5 illustrates a calibration mode 501. In the calibration mode 501, the surgical robot
25 arm is driven to conform to external forces applied to the robot arm. Specifically, the torque
sensors 209 detect external forces applied to the robot arm. The external force may be, for
example, a member of the bedside team applying a force to the robot arm (for example by
pushing the robot arm). As described above, the sensed torque about a joint's rotation axis
includes any one or combination of the following components: torque due to gravity acting
30 on the joint, torque due to inertia, and torque due to an external force applied to the joint.
The control system deducts the torques due to gravity and inertia from the sensed torque
about a joint to determine the component of the torque about that joint due to an external
wo 2021/214456 PCT/GB2021/050953
12
force. The control system then determines drive signals to drive the joint so as to conform
with the external force. The control system sends the drive signals to the joint controller
controlling that joint. The joint controller controls the motor of that joint to drive the joint as
commanded by the control system. In this way, when an external force is applied to a joint,
5 that joint is driven to comply with that force. Thus, the robot arm is compliant to the force
applied to it by an operator.
In the calibration mode 501, the control system drives the robot arm to oppose the
gravitational torques acting on the robot arm as described above. Thus, in the calibration
10 mode 501, a member of the bedside team can manoeuvre the robot arm into position by
pushing or pulling any part of the robot arm in a desired position, and that part will stay in
that position notwithstanding the effect of gravity on it and on any parts depending from it.
In the calibration mode 501, the control system does not convert detected manipulation of
15 the surgeon input device(s) to drive signals for moving joints of the robot arm. Any inputs the
control system receives from the surgeon input device are not converted to movement of the
robot arm.
The calibration mode 501 is primarily used during setup of the surgical robotic system prior
20 to the beginning of an operation. For example, a surgical instrument may be attached to the
robot arm during the calibration mode 501 and a member of bedside staff may manoeuvre
the robot arm so as to insert the surgical instrument into the port in the patient's body along
the desired direction to reach the surgical site. Should a robot arm and its support structure
be moved, or relocated during an operation, the calibration mode 501 is used again to
25 manoeuvre the robot arm into position.
During setup of the surgical robotic system, the calibration mode is used to determine a
virtual pivot point. The virtual pivot point is the natural centre of rotation of an instrument
having a rigid shaft as that instrument moves in the patient's body. The virtual pivot point is
30 a fulcrum about which the surgical instrument pivots when the configuration of the surgical
robot arm is altered whilst inside the port in the patient's body. A port is inserted into the
abdominal wall of the patient. The port is of the order of 2-10cm long. The instrument is
wo 2021/214456 PCT/GB2021/050953
13
inserted into the patient's body through the port. The virtual pivot point lies along the length
of the port. The exact location of the virtual pivot point depends on the patient's anatomy,
and hence differs from patient to patient.
5 The virtual pivot point can be determined using the following method. With the instrument
located in the port, an operator moves the distal end of the robot arm in directions generally
transverse to the instrument shaft. This motion causes the port to exert a lateral force on the
instrument shaft where it passes through the port, with the result that the instrument applies
a torque to the joints of the arm - in this case joints J6 205f and h 205g- whose axes are
10 transverse to the longitudinal axis of the instrument shaft. The position of each arm joint is
measured by its associated position sensor 208, and this sensed position is output to the
control system. The torque at each arm joint is measured by its associated torque sensor 209,
and this sensed torque is output to the control system. Thus, as the operator moves the distal
end of the robot arm laterally the control system receives sensed inputs indicating the
15 position and forces on the arm joints. That information allows the control system to estimate:
(a) the position of the distal end of the robot relative to the fixed base and (b) the vector of
the instrument shaft relative to the distal end of the robot. Since the instrument shaft passes
through the passageway of the port, the passageway of the port must lie along that vector.
As the distal end of the robot arm is moved, the controller calculates multiple pairs of distal
20 end positions and instrument shaft vectors. Those vectors all converge, from their respective
distal end position, on the location of the virtual pivot point in the passageway of the port.
By collecting a series of those data pairs and then solving for the mean location where the
instrument shaft vectors converge, the control system determines the virtual pivot point
relative to the base.
25
Once the virtual pivot point is determined in the calibration mode 501, it is set for the
remainder ofthe modes illustrated on figure 5. The virtual pivot point is stored by the control
system. In each of the other modes illustrated in figure 5, the surgical robot arm is always
driven such that the longitudinal axis of the shaft of the attached surgical instrument
30 intersects the virtual pivot point (whether or not the instrument is actually attached to the
robot arm). The longitudinal axis of the shaft of the surgical instrument has a known
relationship to the longitudinal axis of the terminal end of the robot arm. For example, as
wo 2021/214456 PCT/GB2021/050953
14
shown in figure 2, the longitudinal axis of the shaft of the surgical instrument may be
coincident with the longitudinal axis of the terminal end of the robot arm.
From the calibration mode, the surgical robot arm can transition to the locked mode 502. In
5 the locked mode 502, the control system holds the surgical robot arm in a fixed position. That
fixed position is the position that the surgical robot arm was in at the time that it transitioned
from the calibration mode to the locked mode 502. In the locked mode, the control system
drives the joints of the robot arm to compensate for gravity (as described above). Otherwise,
the control system does not convert any manipulation ofthe surgeon input device or external
10 forces applied to the robot arm to drive signals for driving the joints of the robot arm.
From the locked mode 502, the surgical robot arm can transition to the instrument adjust
mode 503. In the instrument adjust mode 503, the control system drives the surgical robot
arm to conform to external forces applied to the robot arm (as described above with respect
15 to the calibration mode), whilst retaining the intersection of the longitudinal axis of the shaft
of the surgical instrument with the virtual pivot point determined in the calibration mode.
The instrument adjust mode 503 can be used to adjust the position of the instrument within
the patient's body. For example, the instrument adjust mode 503 may be used to enable a
member of the bedside team to push the instrument into the patient's body such that the
20 end effector reaches the surgical site, following setting of the virtual pivot point in the
calibration mode. In the instrument adjust mode 503, the control system drives the joints of
the robot arm to compensate for gravity (as described above). In the instrument adjust mode
503, the control system does not convert any manipulation of the surgeon input device to
drive signals for driving the joints of the robot arm.
25
From the instrument adjust mode 503, the surgical robot arm can transition to the surgical
mode 504 or the instrument change mode 505. In the surgical mode 504, the control system
responds to inputs received from a surgeon input device by converting those inputs to control
signals for controlling the motion of the surgical robot arm and/or surgical instrument
30 associated with that surgeon input device (as described above). The end effector of the
surgical instrument thereby moves as commanded by the surgeon input device. When
wo 2021/214456 PCT/GB2021/050953
15
performing the conversion, the control system maintains an intersection between the
longitudinal axis of the shaft of the surgical instrument and the virtual pivot point.
The surgical mode 504 may comprise a clutch mode. The clutch mode may be initiated by the
5 surgeon console, for example via an input on the surgeon input device. Alternatively, the
clutch mode may be initiated by an input on the surgical robot arm or the support to which
the surgical robot arm is mounted. In the clutch mode, manipulation of the surgeon input
device is temporarily disconnected from the robot arm. When receiving an input indicating
that the clutch mode has been engaged, the control system does not convert manipulation
10 of the surgeon input device to control signals for driving joints of the robot arm. The clutch
mode is used by the surgeon in order to move the surgeon input device to a more comfortable
location in the workspace of the surgeon input device without transferring that motion to the
end effector of the surgical instrument. The clutch mode is also used by the surgeon to
temporarily disengage one surgical instrument whilst the surgeon concentrates on a surgical
15 instrument being manipulated by another surgeon input device.
The surgical mode 504 may be a semi-compliant mode. In other words, the robot arm may
exhibit some compliant behaviour towards external force applied to the robot arm. For
example, in the surgical mode 504, the control system may respond to a sensed external force
20 applied proximal to the elbow joint 205d by controlling the motors driving the elbow joint
205d and the surrounding joints of the arm to drive those joints to comply with that sensed
external force. In this way, a member of the bedside team can push the elbow joint 205d or
a part of the arm proximal to the elbow joint out of the way to enable them to access the
patient during the surgical mode. In order to implement this, the control system may define
25 a permitted area/volume for one or more parts of the robot arm that are designated as
compliant such that movement of those parts in response to externally applied forces is
confined within the permitted area/volume. The permitted area/volume is defined such that
movements within that area/volume in response to externally applied forces do not cause
the configuration of the instrument to be affected. The robot arm is only semi-compliant in
30 the surgical mode 504 because the control system does not respond by conforming to an
external force applied to any part of the robot arm other than the parts designated as
compliant.
wo 2021/214456 PCT/GB2021/050953
16
From the surgical mode 504, the surgical robot arm can transition to the instrument adjust
mode 503 or to the instrument change mode 505. The instrument change mode 505 is
engaged in order to remove and/or insert the instrument from/into the patient's body. In the
5 instrument change mode 505, the control system drives the surgical robot arm to conform to
the component of a sensed external force applied to the robot arm along the longitudinal axis
of the surgical instrument towards or away from the surgical robot arm. Whilst in the
instrument change mode 505, the control system retains the intersection of the longitudinal
axis of the shaft of the surgical instrument with the virtual pivot point determined in the
10 calibration mode. The control system conforms to the sensed external force in the same
manner as described above with respect to the calibration mode, the only differences being
that (i) the control system only conforms to the component of the sensed force in the
specified directions (i.e. along the longitudinal axis of the surgical instrument towards or away
from the surgical robot arm), and (ii) the control system maintains intersection of the surgical
15 instrument with the virtual pivot point.
At the end of an operation when surgical instruments are being removed from the surgical
site, or mid-operation when a surgical instrument is being exchanged for another one, a
member of the bedside team uses the instrument change mode 505 to enable them to pull
20 the instrument out of the patient's body, and then insert another instrument into the
patient's body. In the instrument change mode 505, the control system prevents force
applied by the member of the bedside team in any direction other than the longitudinal axis
of the surgical instrument towards or away from the surgical robot arm from being converted
to corresponding movement of the surgical robot arm. Thus, no lateral force applied by the
25 member of the bedside team is converted to corresponding movement of the surgical robot
arm. This ensures that extraction ofthe surgical instrument is along the line of entry between
the port and the surgical site, thus avoiding damage to tissue away from this line.
In the instrument change mode 505, the control system limits the conversion of force applied
30 by the member of the bedside team along the longitudinal axis of the surgical instrument
towards the patient's body to corresponding movement of the surgical robot arm. This limit
is such that the end effector of the attached instrument cannot advance further into the
wo 2021/214456 PCT/GB2021/050953
17
patient's body than the end effector ofthe instrument at the time that the instrument change
mode was entered. This limit applies to the same instrument that was attached to the arm
at the time that the instrument change mode was entered during instrument extraction. This
limit also applies to the newly attached instrument which is inserted into the patient's body
5 following instrument change. This ensures that the surgical instrument cannot be pushed
further into the patient's body causing damage to the surgical site.
In the instrument change mode 505, the control system drives the joints of the robot arm to
compensate for gravity (as described above). In the instrument change mode 505, the control
10 system does not convert any manipulation of the surgeon input device to drive signals for
driving the joints of the robot arm.
15
From the instrument change mode 505, the surgical robot arm can transition to the
instrument adjust mode 503 or the surgical mode 504.
From each of the locked mode 502, instrument adjust mode 503, surgical mode 504 and
instrument change mode 505, the surgical robot arm can transition to a standby mode 506.
From that standby mode 506, the surgical robot arm can transition back to the one of the
locked mode, instrument adjust mode, surgical mode and instrument change mode that it
20 was previously in. From the standby mode 506, the surgical robot arm can also transition to
the calibration mode 501.
The surgical robot arm, or the support structure to which the robot arm is mounted, may
comprise one or more interfaces. These interfaces may be a button or set of buttons. The
25 interfaces can be actuated, for example by a member of the bedside team, to transition
between the operating modes described with respect to figure 5. The surgeon's console may
comprise one or more interfaces which can be actuated, for example by the surgeon, to
transition between the operating modes described with respect to figure 5.
30 Power is required by the surgical robot arm to power the joint motors to drive the joints, as
well as to power all the circuitry in the surgical robot arm including the robot arm controller
and the joint controllers. The surgical robot arm is generally operated in a full power mode
wo 2021/214456 PCT/GB2021/050953
18
in which it is powered by a primary power source. This primary power source is sufficient to
sustain the power requirements of the surgical robot arm throughout a surgical procedure.
For example, the primary power source may be an electrical supply such as an electrical mains
power supply. Power may be routed from the primary power source to the surgical robot
5 arm through the surgeon's console.
The surgical robot arm may also be operable in a reduced power mode in which it is powered
by a secondary power source. In this reduced power mode, fewer operating modes of the
surgical robot arm are available for use. Referring to figure 5, the locked mode 502,
10 instrument adjust mode 503, surgical mode 504 and instrument change mode 505 may only
be available in the full power mode. They are not available in the reduced power mode. The
calibration mode 501 and standby modes 506 may be fully available in the full power mode
and partially or fully available in the reduced power mode.
15 The secondary power source may comprise one or more batteries. These batteries may be
local to the surgical robot arm. For example, each ofthe one or more batteries may be located
in the surgical robot arm itself, or in the support structure to which the surgical robot arm is
mounted. The secondary power source may comprise two batteries. The first battery may
be a rechargeable battery and the second battery may be a non-rechargeable battery. The
20 first battery, when fully charged, can provide sufficient power to drive the motors of the
surgical robot arm to hold the position of the surgical robot arm against gravity for at least N
minutes. For example, 5 < N < 30. For example, N = 5. The second battery can provide
sufficient power to drive motors of the surgical robot arm (as described below) to hold the
surgical robot arm for at least T seconds. For example, 20 < T < 180. For example, T = 30. N
25 and Tare estimations of how long the batteries can provide the described power for. These
estimations may be based on typical discharge v. time graphs for the batteries, or
mathematical models of the ideal discharge of the batteries over time. The remaining battery
life of each battery may be estimated by measuring the voltage, current or power output of
the battery over time, and comparing those voltage/current/power readings against a typical
30 battery life graph of voltage v. battery capacity. The maximum capacity of the first battery
may be between 5000 and 6000 mAh. The maximum capacity of the second battery may be
between 300 and 600 mAh.
wo 2021/214456 PCT/GB2021/050953
19
A surgical robot arm may only be able to be powered up for use if it is connected to the
primary power source in the full power mode. A robot arm controller on the surgical robot
arm detects that sufficient power is being received from the primary power source to power
5 the functions of the surgical robot arm. On detecting a power failure of the primary power
source, the robot arm controller switches the surgical robot arm to the reduced power mode.
In the reduced power mode, the robot arm controller controls the surgical robot arm to be
powered from the secondary power source. For example, initially in the reduced power
mode, the robot arm controller may control the surgical robot arm to be powered from the
10 first battery. If the first battery becomes depleted, then the robot arm controller may control
the surgical robot arm to be powered from the second battery. The robot arm controller may
detect power failures, detect restoration of power following a power failure, and enable and
disable the full power mode and the reduced power mode.
15 Control methods which may be carried out by the control system in response to detection of
a power failure to a surgical robot arm are now explained with reference to figures 6 to 12.
Suitably, these control methods are performed by the robot arm controller of the surgical
robot arm which has lost power.
20 Starting with figure 6, at step 601, the surgical robot arm is being operated in a full power
mode with power being provided to the surgical robot arm by the primary power source. At
step 602, the control system operates the surgical robot arm in surgical mode. At step 603,
the control system determines whether a power failure to the surgical robot arm has been
detected. If no power failure has been detected, the control system returns to step 602 where
25 it continues to operate the surgical robot arm in the surgical mode. If a power failure has
been detected at step 603, then the control system responds by enabling a reduced power
mode at step 604 and entering a standby mode at step 605. The standby mode is a locked
mode in which the control system sends control signals to the joint controllers of the robot
arm commanding them to control the joint motors to drive the joints so as to hold the joints
30 of the surgical robot arm locked in place. The control method then moves on to step 606,
wherein it determines whether full power has been restored, i.e. whether the power failure
has ceased. If the answer is NO, then the control system retains the surgical robot arm in the
5
wo 2021/214456 PCT/GB2021/050953
20
standby mode 605. If the answer is YES, then the control system moves to step 607. At step
607, the control system responds to detecting the cessation of the power failure by disabling
the reduced power mode and re-enabling the full power mode. The control system then
returns to the surgical mode 602.
Steps 604 and 605 could be implemented in the order shown in figure 6, the other way
around, or concurrently. Step 607 could be implemented concurrently with a return to the
surgical mode 602.
10 Although described with respect to the surgical mode, the method of figure 6 applies to any
of the operating modes of the surgical robot arm described with respect to figure 5, i.e. the
locked mode, instrument adjust mode and instrument change mode.
The control method of figure 6 is useful for surgical robot arms which do not have a
15 mechanical brake, but are instead braked electrically. In the event of a loss of power from
the primary power source, the control method of figure 6 ensures that the surgical robot arm
is held locked in its current position in the standby mode. This prevents the surgical robot
arm from drooping under gravity, which would otherwise happen if the robot arm is not
powered to counteract the gravitational torques acting on the robot arm's joints. By holding
20 the robot arm in position on a back-up battery supply, time is provided for restoring full power
to the robot arm or removing the surgical instrument attached to the robot arm safely from
the patient's body.
The control method of figure 6 aids in setting up the operating theatre for a procedure and
25 tearing down the operating theatre after a procedure. Generally, several surgical robot arms
and other equipment needs to be appropriately located around the patient's bedside and
setup prior to a surgical operation commencing. The control method of figure 6 enables the
power cable to a surgical robot arm to be intentionally unplugged, so as to enable other
equipment to be wheeled past the surgical robot arm without having to be wheeled over the
30 power cable. The power cable can then be re-plugged in, and the surgical robot arm returned
to the operating mode it was previously in without having to re-perform any calibration
procedures. During the time that the power cable is unplugged, the robot arm is held in
wo 2021/214456 PCT/GB2021/050953
21
position. The control method of figure 6 is also useful mid-operation to enable other
components to be wheeled through the path of the power cable attached to the surgical
robot arm.
5 In order for the surgical robot arm to return to the surgical mode once full power is restored,
the virtual pivot point determined during the calibration mode is stored by the control system.
The virtual pivot point continues to be stored by the control system during the reduced power
mode. On returning to the surgical mode following the power failure, the virtual pivot point
is retrieved from memory by the control system and used by the control system in
10 determining the drive signals to send to the joint controllers to drive the joint motors of the
robot arm. In this way, no re-calibration is required following the power failure. In order for
no re-calibration to be required, the support structure of the surgical robot arm must remain
stationary during the standby mode. If the support structure moves, for example by unbraking
and re-braking the cart on which the robot arm is mounted, then the virtual pivot
15 point will change. Hence the stored virtual pivot point will no longer be valid for use following
restoration of full power to the surgical robot arm.
Figure 7 illustrates a modification to the control method of figure 6. Steps 601 to 606 are the
same as for figure 6. Following detecting that full power has been restored at step 606, the
20 control system moves on to step 701. At step 701, the control system determines whether
there is more than a threshold battery capacity available from the secondary power source.
For example, the control system may determine whether there are more than P seconds of
power available from the secondary power source. lfthere is more than the threshold battery
capacity available from the secondary power source, then the control system proceeds to
25 step 607, where the control system disables the reduced power mode and re-enables the full
power mode. From step 607, the control system returns to the surgical mode at step 602. If
there is less than the threshold battery capacity available from the secondary power source,
then the control system returns to the standby mode of step 605. If there is less than the
threshold battery capacity available from the secondary power source, then the control
30 system may raise an alarm at step 702. The control system may output an alarm signal as an
indicator on the surgical robot arm. For example, an audio alarm signal output from a speaker
on the robot arm and/or a visual indicator such as a flashing light on the robot arm. The
wo 2021/214456 PCT/GB2021/050953
22
control system may also send an alarm signal to the remote surgeon's console. This alarm
signal may be output on the surgeon's console as an audio alarm signal from a speaker on the
console or a visual indicator on the surgeon's console display screen.
5 The control method of figure 7 introduces an additional safety element beyond the control
method of figure 6. Specifically, the control method of figure 7 ensures that, on full power
being restored, there is still sufficient battery power available to hold the surgical robot arm
in position for at least P seconds before allowing the surgical robot arm to return to the
surgical mode. Thus, if full power is lost again, the surgical robot arm will be held in position
10 using power from the battery for long enough that the bedside team is able to remove the
instrument from the patient's body.
In the case that the secondary power source comprises a first rechargeable battery and a
second non-rechargeable battery as described above, P may be the same as T. In this case,
15 step 701 of figure 7 determines whether the first rechargeable battery was fully discharged
and the second non-rechargeable battery depleted to below T seconds of remaining power
for holding the surgical robot arm. If so, the only battery power available is the remaining
power of the second non-rechargeable battery which, if below T seconds, is not deemed long
enough to be able to safely remove the surgical instrument from the patient's body. If greater
20 than T seconds of power are remaining, then the second non-rechargeable battery and/or the
first rechargeable battery have sufficient power available to enable the bedside team to safely
remove the surgical instrument should another power failure of the primary power source
occur.
25 Figure 8 illustrates a control method in which the surgical robot arm enters the standby mode
605 as described with reference to steps 601 to 605 of figure 6. Having entered the standby
mode, at step 801, the control system determines whether a command has been received
from a user input to change to a calibration mode. The user input may be an interface located
on or adjacent to the surgical robot arm. For example, the interface may be located on the
30 surgical robot arm or its support structure. The user input may be an interface located on the
surgeon's console. In either case, the interface may take the form of a button, switch, slider,
touch sensitive input, voice control input, eye control input or a gesture control input.
wo 2021/214456 PCT/GB2021/050953
23
If at step 801, the control system determines that the user input has not been received, then
the control system returns to the standby mode at step 605. If at step 801, the control system
determines that the user input has been received, then the control method moves onto step
5 802. At step 802, the control system responds to the command from the user input by
transitioning control of the surgical robot arm from the standby mode to the calibration
mode.
The method of figure 8 allows the bedside team or surgeon to, upon detecting a power failure
10 of the primary power supply, safely end the surgical robot arm's part in the surgical
procedure. Upon receipt of the user input, the control system transitions the robot arm to a
calibration mode in which the robot arm is driven to comply with external force applied to
the robot arm. Thus, the bedside team can move the robot arm and its support structure out
of the way of the patient's bed.
15
Figure 9 illustrates a modification to the control method of figure 8. Steps 601 to 801 are the
same as for figure 8. Following detecting that a command has been received from a user
input to change to a calibration mode at step 801, the control method moves on to step 901.
At step 901, the control system determines whether there is more than a threshold battery
20 capacity available from the secondary power source. For example, the control system may
determine whether there are more than P seconds of power available from the secondary
power source. If there is more than the threshold battery capacity available from the
secondary power source, then the control method proceeds to step 902. At step 902, the
control system transitions control of the surgical robot arm from the standby mode to the
25 calibration mode. If at step 901, the control system determines that there is less than the
threshold battery capacity available from the secondary power source, then the control
method either returns to the standby mode of step 605 or transitions to step 903, where the
instrument is manually removed. If there is less than the threshold battery capacity available
from the secondary power source, then the control system may raise an alarm at step 904.
30 The control system may output an alarm signal as an indicator on the surgical robot arm as
described above with reference to figure 7. The control system may also send an alarm signal
to the remote surgeon's console as described above with reference to figure 7. In the case
wo 2021/214456 PCT/GB2021/050953
24
that the secondary power source comprises a first rechargeable battery and a second nonrechargeable
battery as described above, P may be the same as T.
At step 903, the bedside team may manually remove the instrument by detaching the
5 instrument from the robot arm, manually open the jaws of the instrument so as to release
any tissue grasped therebetween, manually straighten the instrument by manipulating the
instrument interface elements, then pull the instrument out of the patient. No tools are
required to perform this function.
10 Figure 10 illustrates a modification to the control method of figure 8. Steps 601 to 801 are
the same as for figure 8. Following detecting that a command has been received from a user
input to change to a calibration mode at step 801, the control method moves on to step 1001.
At step 1001, the control system determines whether there is a surgical instrument attached
to the surgical robot arm which is inside the patient's body. This condition is not satisfied if
15 either: (i) there is no surgical instrument attached to the surgical robot arm, or (ii) there is a
surgical instrument attached to the surgical robot arm but that surgical instrument has not
been inserted in a port in the patient's body. If the control system determines there is no
surgical instrument attached to the surgical robot arm that is located in the patient's body,
then at step 1002, the control system transitions from the standby mode to the calibration
20 mode. If at step 1001, the control system determines that there is a surgical instrument
attached to the surgical robot arm which is located in the patient's body, then the control
method moves either (i) to step 605 where the control system maintains the surgical robot
arm in the standby mode, or (ii) to step 1003 where the instrument is manually removed.
25 Figure 11 illustrates a modification to the control method of figure 8 including both the
modifications of figures 9 and 10. Steps 601 to 901 are the same as for figure 9. If, at step
901, the control system determines that less than the threshold battery capacity is available
from the second power source, then the control system either (i) maintains the surgical robot
arm in standby mode 605, or (ii) at step 1103 the instrument is manually removed. In either
30 case, an alarm may be raised at step 903.
wo 2021/214456 PCT/GB2021/050953
25
If, however, at step 901 the control system determines that more than the threshold battery
capacity is available from the second power source, then the control system moves to step
1101. At step 1101 the control system determines whether there is a surgical instrument
attached to the surgical robot arm which is inside the patient's body. If the control system
5 determines there is no surgical instrument attached to the surgical robot arm that is located
in the patient's body, then at step 1102, the control system transitions from the standby mode
to the calibration mode. If at step 1101, the control system determines that there is a surgical
instrument attached to the surgical robot arm which is located in the patient's body, then at
step 1103, the control system either (i) maintains the surgical robot arm in the standby mode
10 at step 605, or (ii) the instrument is manually removed at step 1103.

CLAIMS
1. A control system for a surgical robotic system, the surgical robotic system comprising
a remote surgeon console having a surgeon input device, and a surgical robot arm
comprising: (i) a series of joints extending from a base to a terminal end for attaching
to a surgical instrument, and (ii) a set of motors wherein each of the motors is
configured to drive one or more of the joints, the surgical robot arm operable in a full
power mode in which the motors driving the joints of the surgical robot arm are
powered by a first power source and a reduced power mode in which the motors
driving the joints of the surgical robot arm are powered by a second power source,
the control system configured to:
whilst the surgical robot arm is operating in the full power mode, control the
surgical robot arm in a surgical mode by converting inputs from the surgeon input
device to control signals for moving joints of the surgical robot arm using the motors
which are configured to drive those joints;
detect a power failure of the first power source;
in response to detecting the power failure, enable the reduced power mode,
and control the surgical robot arm in a locked mode by sending control signals to lock
joints of the surgical robot arm using the motors which are configured to drive those
joints;
whilst in the reduced power mode, detect a cessation ofthe power failure; and
in response to detecting the cessation of the power failure, disable the reduced
power mode, re-enable the full power mode, and control the surgical robot arm in the
surgical mode.
2. A control system as claimed in claim 1, configured to, in the surgical mode both prior
to the power failure and after cessation of the power failure, send control signals to
maintain an intersection between the surgical instrument and a stored fulcrum.
3. A control system as claimed in claim 2, wherein the stored fulcrum is a point about
which the surgical instrument pivots when the configuration of the surgical robot arm
is altered whilst the surgical instrument is inside a port in a patient's body.
wo 2021/214456 PCT/GB2021/050953
33
4. A control system as claimed in claim 1 or 2 wherein the control system is configured
to store the stored fulcrum in a memory during the reduced power mode and to
retrieve the stored fulcrum from the memory on returning to the surgical mode
following the power failure.
5. A control system as claimed in any preceding claim, wherein the first power source is
a mains power supply.
6. A control system as claimed in claim 5, wherein the mains power supply is provided to
the surgical robot arm via the remote surgeon console.
7. A control system as claimed in any preceding claim, wherein the second power source
comprises a battery.
8. A control system as claimed in claim 7, wherein the battery is rechargeable.
9. A control system as claimed in claim 7, wherein the second power source comprises a
further battery.
10. A control system as claimed in claim 9, wherein the further battery is nonrechargeable.
11. A control system as claimed in any preceding claim, configured to, in response to
detecting the cessation of the power failure:
determine whether there is greater than a threshold battery capacity available
from the second power source; and
only control the surgical robot arm in the surgical mode on determining that
there is greater than the threshold battery capacity available from the second power
source.
wo 2021/214456 PCT/GB2021/050953
34
12. A control system as claimed in claim 11, configured to maintain the surgical robot arm
in a locked mode on determining that there is less than the threshold battery capacity
available from the second power source.
13. A control system as claimed in claim 11 or 12, configured to estimate the remaining
battery capacity available from the second power source from measurements of
output voltage, current or power of the second power source.
14. A control system as claimed in any of claims 11 to 13, configured to raise an alarm on
the surgical robot arm in response to determining that there is less than or the same
as a second threshold battery capacity available from the second power source.
15. A control system as claimed in any of claims 11 to 14, configured to send an alarm
signal to the remote surgeon console in response to determining that there is less than
or the same as a second threshold battery capacity available from the second power
source.
16. A control system as claimed in any preceding claim, configured to, whilst in the
reduced power mode, respond to an input to change to a calibration mode by:
determining whether a surgical instrument attached to the surgical robot arm
is located in a patient's body; and
on determining that a surgical instrument attached to the surgical robot arm
is not located in the patient's body, controlling the surgical robot arm in a calibration
mode in which the control system responds to sensed external forces on the surgical
robot arm by sending control signals to move joints of the surgical robot arm to
conform with the sensed external forces.
17. A control system as claimed in claim 16, configured to, on determining that a surgical
instrument is located in the patient's body, controlling the surgical robot arm so as to
prevent movement of the surgical robot arm which would cause the instrument to be
inserted further into the port in the patient's body.
wo 2021/214456 PCT/GB2021/050953
35
18. A control system as claimed in any preceding claim, wherein the control system
comprises a robot arm controller configured to detect power failures, detect
restoration of power following a power failure, and enable and disable the full power
mode and the reduced power mode.
19. A control system as claimed in claim 18, wherein the robot arm controller is integrated
in the surgical robot arm.
20. A control system as claimed in claim 18, wherein the surgical robot arm is mounted
on a support structure, and the robot arm controller is integrated into the support
structure.