|
The FAQs |
|
|||
|
sci.engr.* FAQ on Failures: THERAC-25 |
||||
|
Copyright 1995-2000 by Ron Graham |
The THERAC-25 radiation treatment device was originally marketed by Atomic Energy of Canada, Ltd. (AECL) It had two modes of operation:
Cancer patients undergoing treatment in E mode were in a few cases subjected to accidental X-ray exposure (at 125 times the recommended radiation dose for their illnesses), and some died, due to a design flaw in the THERAC-25.
The accidental exposure came from the following sequence of events:
(The above sequence of events took eight seconds, or less.)
In one celebrated case, the radiological physicist and oncologist on duty could see nothing wrong with the device -- they ran it through a series of prescribed tests that showed nothing abnormal. And the patient injured by the X-ray had no visible sign of burns. But that patient, Voyne Ray Cox, died four months later.
Investigators later learned that AECL engineers didn't realize that steps 1-8 could be performed within eight seconds. Those steps evidently outraced the THERAC computer's duty cycle, retracting a protective tungsten target plate and resetting the mode from the technician's point of view, but leaving the power setting to maximum. There was no microswitch or mechanical verification of the computer's response.
Their initial fix of the problem was to tell users to SELLOTAPE over the backspace button.
References
Casey, S. Set
Phasers on Stun. Aegean Publishing, 1998.