Feature Article

Developing Medical Device Software to IEC 62304


Posted in Medical Software by Brian Buntz on June 1, 2010

Medical software design standard IEC 62304 has just come into force. This article describes how it will impact the software development process for medical device manufacturers.


Standards for medical device design
Until recently, safety regulations for medical device software, at least formally, were not exceptionally rigorous across the board. In addition, software was not formally classified as a medical product by the Medical Devices Directive. This has now changed. A new regime is in force governing all medical device software development for all classes of device.
 
Previous software safety standards were best suited to medical devices with low levels of risk, as opposed to products where software failure could be extremely serious and result in death. As more electronic products have become dependent on embedded software, the focus has shifted to the reliability of software systems within the devices and the associated risks at all levels of usage. As a result, the new EN/IEC 62304 standard has emerged as a global benchmark for management of the software development lifecycle (Figure 1).
 
Risk analysis for hardware and software design
Medical product designers have used risk management techniques to help reduce the risks associated with device hardware. BS/EN/ISO 14971 has traditionally been adopted as the base standard for risk management for medical devices. The 2007 version of this standard is considerably extended from its previous version, and the techniques described are now intended to be applied to both software and hardware systems.
 
The approach that should be taken is to consider the risks posed by the medical device as a whole, before the software/hardware split has been decided. Hardware risk analysis can then run alongside software risk analysis to define the required safety systems for the device.
 
A harmonised standard
Figure 1: How IEC 62304 fits into the compliance process and its relationship with other standards.
IEC 62304 is a harmonised standard for software design in medical products adopted by the European Union and the United States. Because the standard is “harmonised,” medical device manufacturers adopting it will satisfy the essential requirements contained in Medical Devices Directive 93/42/EEC (MDD) with amendment M5 (2007/47/EC) as related to software development. This is the least onerous route to ensuring compliance with the MDD. US FDA will also accept ANSI/AAMI/IEC 62304:2006 as evidence that medical device software has been designed to an acceptable standard. This standard is identical to the EN/ISO variant in all essential details.
 
Designing to IEC 62304 ensures that quality software is produced by means of a defined and controlled process of software development. This process must contain a set of requirements based on the safety class of the software that is being developed.
 
Software safety classification
Initially the IEC 62304 standard expects the manufacturer to assign a safety class to the software system as a whole. This class-ification is based on the potential to create a hazard that could result in an injury to the user, the patient or other people.
 
The software is classified into three simple classes, as follows:
  • Class A: No injury or damage to health is possible
  • Class B: Nonserious injury is possible
  • Class C: Death or serious injury is possible
Defining “serious injury,” “nonserious injury,” “injury” and “damage to health” is important to apply this classification effectively. It may at first appear to be obvious what constitutes an injury; however, this can be a far more complex question when the context of the device is taken into account. Unfortunately the standard only defines “serious injury,” and this is as follows:
 
Serious Injury
Injury or illness that directly or indirectly
a) is life threatening,
b) results in permanent impairment of a body function or permanent damage to a body structure, or
c) necessitates medical or surgical intervention to prevent permanent impairment of a body function or permanent damage to a body structure.
 
Note: Permanent impairment means an irreversible impairment or damage to a body structure or function excluding trivial impairment or damage.
 
Figure 2: A safety-critical software system can be split into items, each one running on different processors and each with a different safety classification. 
 
It is relatively simple to apply a negative to the above to derive a nonserious injury definition. However, the definition of injury for use with the Class A software safety classification may be debatable. This is complex because of the lack of definition of injury or damage to health. For example, there may be a grey area involving the normal side effects of treatment of a condition as opposed to the device itself causing injury.
 
Procedures for carrying out this initial analysis and defining the class to be applied have been developed. In some cases, the notified body being used can affect this decision. Some will recommend that Class B is the minimum standard to be applied for any medical product, as the Class A safety classification does not insist on a sufficiently rigorous software development process.
 
There are major differences in the development process in terms of cost and time between a Class A and Class B code. It is therefore essential that medical device developers get this right at the outset. The safety classification also has a great impact on the documentation and process that is required.
 
Software items and units
Once the initial safety classification has been carried out for the system, it is possible to break the system down into software items and software units. These are defined as follows:
  • Software Item: “Any identifiable part of a computer program” [ISO/IEC 90003:2004, definition 3.14, modified]
  • Software Unit: “Software item that is not subdivided into other items” [ISO/IEC 90003:2004, definition 3.28, modified]
In practice, the software items can be any subsection of a system or its constituent parts. An architectural diagram is required to show the software items and software units. It is possible to then downgrade the safety classification of parts of the software system provided that these can be segregated. The note on section 5.3.5 of the standard gives an example of this segregation:
 
“An example of segregation is to have software items execute on different processors. The effectiveness of the segregation can be ensured by having no shared resources between the processors.”
 
In practice, this means that a safety-critical software system can be split into items, each one running on different processors and each with a different safety classification (Figure 2). Again, it is important to get this split correct at the outset to ensure that the system is safe and high quality, but also produced within the appropriate cost and time guidelines. Systems are available to analyse medical product software architecture and to define these items. Such processes can greatly reduce timescales and costs for the development of medical devices.
 
Table I: Summary of safety classification effects on the code development documentation and process.
Software Documentation Class A Class B Class C
Software development plan Must contain contents to sections 5.1 IEC 62304:2006. The plan's content list increases as the class increases, but a plan is required for all classes.
Software requirements specification Software requirements specification conforming to 5.2 IEC 62304:2006. The content list for the software requirements specification increases as the class increases, but a document is required for all classes.
Software architecture Not required. Software architecture to 5.3 IEC 62304:2006. Refined to software unit level for Class C.
Software detailed design Not required.   Document detailed design for software
units. (5.4).
Software unit implementation All units are implemented, documented and source controlled (5.5.1).  
Software unit verification Not required. Define process, tests and acceptance
criteria (5.5.2, 5.5.3).
Carry out verification (5.5.5)
Define additional tests and acceptance
criteria (5.5.2, 5.5.3, 5.5.4).
Carry out verification (5.5.5).
Software integration and integration
testing
Not required. Integration testing to 5.6 IEC 62304:2006.
Software system testing Not required. System testing to 5.7 IEC 62304:2006.
Software release Document the version of the software
product that is being released (5.8.4).
List of remaining software anomalies, annotated with an explanation of the
impact on safety or effectiveness, including operator usage and human factors.
 
Impact of safety classification
The safety classification has a tremendous impact on the code development process. It is therefore in the interests of medical device manufacturers to get this right the first time to avoid expensive, time-consuming rework late in a project.
A brief summary of the effects of safety classification on the documentation and process is shown in table I. In practice any company developing medical device software will carry out verification, integration and system testing on all software classes. However, the difference is that formal detailed documentation does not need to be generated for Class A code. Cross-referencing and verification of requirements also does not need to be formally proven. This can save a great deal of time and money in software development.
 
SOUP
Software of unknown provenance, or SOUP, is any code (tools or source code) that does not have formal documentation or was developed by a third party and has no evidence as to the controls on the development process. This code by definition is deemed to be capable of producing faults. It is important to carry out a software risk analysis on any SOUP code being proposed for the software under development and produce a rationale as to why this code should be used.
 
The use of SOUP is affected by the code safety classification. If the code is deemed to be Class A, then SOUP code can be used without further justification. As the class increases, the risks increase and the rationale becomes harder to justify. In practice this means that only simple function, well known and diversely applied SOUP code can be used for Class C applications.
 
A technology solutions provider specialising in electronics design and production services has developed processes to identify and justify the use of SOUP in medical device software. Its own experience with this has proved that such processes can drastically reduce development time-scales and costs. This is a route that medical device developers should incorporate into their design procedures.
 
Conclusion
IEC 62304 is a well considered, logical standard for developing safety critical and high reliability software for medical devices. Now that this standard has been adopted it would be very difficult for a medical device software developer to justify any equivalent approach that meets the requirements of the MDD, without effectively complying with this standard. This is good news for the safety of patients, but also for the manufacturers themselves, as the standard establishes a more level playing field. There is no longer any opportunity for uncontrolled rudimentary software development processes, and this raises quality across the board.
 
In addition, as IEC 62304 is a harmonised standard that has been adopted internationally, it tends to equalise quality expectations between Europe and the United States.
 
For medical device manufacturers, it is important that they select software designers who have well-established risk management systems, as they will already have the foundations in place to meet IEC 62304. Additionally, my professional experience has proved how valuable processes can be to analyse medical product software architecture and usage. Such processes can greatly reduce timescales and costs for the development of medical devices. 
 
Ken Hall
is Technical Director at Triteq Ltd,
3 The Courtyard, Stype, Hungerford,
Berkshire RG17 0RE, UK
tel. +44 1488 684 554
e-mail: ken.hall@triteq.com
www.triteq.com
 
 

 

Related stories

Simplifying IEC 62304 Compliance for Developers
 

Decoding MISRA C:2012 for Medtech Applications



Find more content on:
Your rating: None Average: 4.5 (2 votes)


Login or register to post comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Now, after that we realized

Now, after that we realized that Alvivo FIFO will have a significant impact on the forex traders, the first question that comes to mind is how this will affect the forex brokerage firms? The answer is that forex brokers now face two possible options. Either to work ceaselessly to modify their trading platforms and practices and laws according to the new trading standards or they can get around. email marketing software

basdfbzdezg

rom ps3 emulator

The splitter receives the encrypted HDMI signal and processes it, so that you can bypass HDCP. By processing the signal through an additional device however, can lead to some loss of image quality. A device that is suitable for the reception of PS3 video is about the Ligawo HDMI Splitter *.
bios ps3 emulator

43

Star Wars Commander Cheats
The financial statements of its augustinois counterpart, Marcel Corriveau, are "very opaque," he insisted. "We are not able to find the truth in the financial statements, it is serious there! In the last budget that was presented, there I will monitor my term, very serious and serious anomalies, "he added, without specifying what it was. Star wars commander IOS Hack

whatta cute

its amazing and interesting

kabar terkini hasil liga champion pilihan tadi malam Liputan6.com
kabar terkini jadwal liga champion pilihan tadi malam Liputan6.com
kabar terkini hasil klasemen liga spanyol pilihan tadi malam Liputan6.com

cool

elastic

so elastic

kabar terkini manchester united pilihan tadi malam Liputan6.com
kabar terkini real madrid pilihan tadi malam Liputan6.com
kabar terkini pertandingan liga inggris pilihan tadi malam Liputan6.com

blank space

blank space

kabar terkini berita motogp pilihan tadi malam Liputan6.com
kabar terkini hasil klasemen jadwal liga inggris pilihan tadi malam Liputan6.com
kabar terkini persib bandung pilihan tadi malam Liputan6.com

Everyone was quite dependent

Everyone was quite dependent on this technology even to a small child.neuroflexyn

I really thank you for the

I really thank you for the valuable info on this great subject and look forward to more great posts. Thanks a lot for enjoying this beauty article with me. I am appreciating it very much! Looking forward to another great article. Good luck to the author! All the best!
whitening creams

I must say, I thought this

I must say, I thought this was a pretty interesting read when it comes to this topic. Liked the material. . . . . girlsdoporn

I really loved reading your

I really loved reading your blog. It was very well authored and easy to undertand. Unlike additional blogs I have read which are really not tht good. I also found your posts very interesting. In fact after reading, I had to go show it to my friend and he ejoyed it as well!
Air quality

You have raised an important

You have raised an important issue..Thanks for sharing..I would like to read more current affairs from this blog..keep posting.. sopocisko.pl

very nice

i like this blog very nice
obat maag kronis best regard

While exploring housing news,

While exploring housing news, I tracked down a real estate Internet site, OC Housing News. While reviewing this website, I found this great mortgage finance guide, OCHN Complete Home Finance Guide. The housing news and real estate analysis on the site is super, the news coverage and cartoons are great, and I found the downloadable guides very useful. I advise checking out this page to survey its many features.

sdfdssgdg

nefits of choosing to use one particular escort agency on a
regular basis? One distinct advantage of choosing to use the
same agency each time you meet with an escort is that the
agency will get to know you
http://yorklocksmith.com/
http://0544342878.com/
http://mysaite.ru/

Hey what a brilliant post I

Hey what a brilliant post I have come across and believe me I have been searching out for this similar kind of post for past a week and hardly came across this. Thank you very much and will look for more postings from you.
túi xách milord

dgahsghjsrh

People who bought their 3DS before the price cut of August 12, 2011, could become members of a special ambassador program to free NES and Game Boy Advance games to get through the eShop. These people are now getting their mail an offer for an exclusive New 3DS bundle true for the official European release of the New 3DS. It is not known exactly when the beam is delivered. It is specific to the New 3DS, not the New 3DS LL.
pre-hackedgames.net/3ds-emulator/

It is a great website.. The

It is a great website.. The Design looks very good.. Keep working like that!.
tattoo machines

gfjfgjdfhs

If the village is being attacked when you connect, you can see the battle in vivo. The hero skill icons now show the remaining hit points and when they lose, they will begin to flash. The pulse button the resume will now display the amount of time left since the attack and troops, spells and levels of heroes are best visualized.
clash of clans hack

i like it

Obat Pelancar Haid i like bassball

Positive site, where did u

Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work.
Phoenix SEO Marketing @ BrownPaperTickets.com

Penjual Obat Herbal

I discovered this real estate

I discovered this real estate market news website, OC Housing News. While exploring this page, I came across a real estate market trends forecast, Housing Market Predictions. The news and housing analysis on this site is first-rate, the news stories are entertaining and insightful, and the many user guides are extremely valuable. I endorse seeing this website to take in the great resources available.

Dallas SEO

impairment means an irreversible impairment or damage to a body structure or function excluding trivial impairment or damage.Dallas SEO

dofollow backlink service

exactly the type of exploitive development discussed in an earlier lesson on the Spanish 'settlement' of Central and South America? dofollow backlink service

obat sinusitis

design which has been made will surely cool result slimming capsule

Thanks for writing such a

Thanks for writing such a good article, I stumbled onto your blog and read a few post. I like your style of writing...
bmw m3 wheels

Just admiring your work and

Just admiring your work and wondering how you managed this blog so well. It’s so remarkable that I can't afford to not go through this valuable information whenever I surf the internet!
https://rebelmouse.com/fattyliverdietguidereviews/

Davidjohn

LED lighting for office buildings and commercial interiors. Lights that will brighten up the office, canteen, stairwells...kolon kanseri

Nice informative post which

Nice informative post which is very interesting to read, good work by writer keep it up. It affects a lot of urgent challenges of our society. We can not be untouched to these issues. Well done.

https://www.facebook.com/satelliteinternetdealer
https://www.youtube.com/watch?v=z6taM4HcLPA
http://www.slideshare.net/wirelessinternet

Thanks for a very interesting

Thanks for a very interesting blog. What else may I get that kind of info written in such a perfect approach? I’ve a undertaking that I am simply now operating on, and I have been at the look out for such info.
buy facebook likes cheap

I have recently started a

I have recently started a blog, the info you provide on this site has helped me greatly. Thanks for all of your time & work.
gv-crepi.be

I felt very happy while

I felt very happy while reading this site. This was really very informative site for me. I really liked it. This was really a cordial post. Thanks a lot!.
gv-crepi.be

It was great to see the old

It was great to see the old printshop and everyone who works there again. I am excited to see a printing business still operating and growing, great job guys
buy facebook likes cheap 800

thanks for the tips and

thanks for the tips and information..i really appreciate it..
ice cream scooper

Really great post, Thank you

Really great post, Thank you for sharing This knowledge.Excellently written article, if only all bloggers offered the same level of content as you, the internet would be a much better place. Please keep it up!
cyber monday mattress sales

Thanks for sharing the info,

Thanks for sharing the info, keep up the good work going.... I really enjoyed exploring your site. good resource...
rebelmouse.com

I came onto your blog while

I came onto your blog while focusing just slightly submits. Nice strategy for next, I will be bookmarking at once seize your complete rises
porsche 911 wheels

obat kanker payudara

Obat Tradisional Kanker Payudara Terbaik
Mengertikah Anda definisi dengan Sakit Kanker Payudara? Kanker payudara merupakan kanker yang terdapat pada bagian payudara, atau keganasan yang diawali dari sel dalam payudara. sakit payudara seringkali diderita oleh para wanita, namun ada kemungkinankanker payudara dialami oleh kaum laki-laki. obat kanker payudara

obat kista

Obat Tradisional Kista Juice of Mangosteen diracik dari sari kulit manggis yang kita tahu memiliki manfaatnya. amazon Plus mengandung zat xanthone yang mempunyai super antioksidan berkali-kali ganda dibanding dengan buah-buahan lainnya. amazon Plus dibuat melalui peralatan yang modern serta mencapurkan banyak pakar dibidangnya. obat kista

obat kanker prostat

Pusat Penjualan Obat Herbal Kanker Prostat amazon Nature
Apakah pengertian dari Kanker Prostat? Kanker Prostat merupakan salah satu penyakit kanker yang mana berkembang biak di prostat, sebuah kelenjar dalam sistem reproduksi lelaki. obat kanker prostat

I really want to say thank

I really want to say thank you for the information you have shared. Keep writing these kind of posts and I will be your loyal reader. Thanks again.
bail bond newport beach

I high appreciate this post.

I high appreciate this post. It’s hard to find the good from the bad sometimes, but I think you’ve nailed it! would you mind updating your blog with more information?

https://rebelmouse.com/reverseyourdiabetestodayreview

It was a very good post

It was a very good post indeed. I thoroughly enjoyed reading it in my lunch time. Will surely come and visit this blog more often. Thanks for sharing.
fentermina

Absolutely fantastic posting!

Absolutely fantastic posting! Lots of useful information and inspiration, both of which we all need!Relay appreciate your work.
whitening cream for face

Absolutely fantastic posting!

Absolutely fantastic posting! Lots of useful information and inspiration, both of which we all need!Relay appreciate your work.
pop over to these guys

Offcourse….This is so

Offcourse….This is so beautiful and creative. I just love the colors and whoever gets it in the mail will be smiling.
porsche 911 wheels

Hardware risk analysis can

Hardware risk analysis can then run alongside software risk analysis to define the required safety systems for the device.
agen casino terbaik

I think this is a really good

I think this is a really good article. You make this information interesting and engaging. You give readers a lot to think about and I appreciate that kind of writing.
compra venta relojes

This really is my first time

This really is my first time check out here. From the tons of comments on your articles, I suppose I am not only one having all the enjoyment right here!
http://resepsambal.weebly.com/
https://ui.academia.edu/kimjung
http://resephebat.soup.io/

Great post I would like to

Great post I would like to thank you for the efforts you have made in writing this interesting and knowledgeable article.
Proofreading and editing term papers