Feature Article

Developing Medical Device Software to IEC 62304


Posted in Medical Software by Brian Buntz on June 1, 2010

Medical software design standard IEC 62304 has just come into force. This article describes how it will impact the software development process for medical device manufacturers.


Standards for medical device design
Until recently, safety regulations for medical device software, at least formally, were not exceptionally rigorous across the board. In addition, software was not formally classified as a medical product by the Medical Devices Directive. This has now changed. A new regime is in force governing all medical device software development for all classes of device.
 
Previous software safety standards were best suited to medical devices with low levels of risk, as opposed to products where software failure could be extremely serious and result in death. As more electronic products have become dependent on embedded software, the focus has shifted to the reliability of software systems within the devices and the associated risks at all levels of usage. As a result, the new EN/IEC 62304 standard has emerged as a global benchmark for management of the software development lifecycle (Figure 1).
 
Risk analysis for hardware and software design
Medical product designers have used risk management techniques to help reduce the risks associated with device hardware. BS/EN/ISO 14971 has traditionally been adopted as the base standard for risk management for medical devices. The 2007 version of this standard is considerably extended from its previous version, and the techniques described are now intended to be applied to both software and hardware systems.
 
The approach that should be taken is to consider the risks posed by the medical device as a whole, before the software/hardware split has been decided. Hardware risk analysis can then run alongside software risk analysis to define the required safety systems for the device.
 
A harmonised standard
Figure 1: How IEC 62304 fits into the compliance process and its relationship with other standards.
IEC 62304 is a harmonised standard for software design in medical products adopted by the European Union and the United States. Because the standard is “harmonised,” medical device manufacturers adopting it will satisfy the essential requirements contained in Medical Devices Directive 93/42/EEC (MDD) with amendment M5 (2007/47/EC) as related to software development. This is the least onerous route to ensuring compliance with the MDD. US FDA will also accept ANSI/AAMI/IEC 62304:2006 as evidence that medical device software has been designed to an acceptable standard. This standard is identical to the EN/ISO variant in all essential details.
 
Designing to IEC 62304 ensures that quality software is produced by means of a defined and controlled process of software development. This process must contain a set of requirements based on the safety class of the software that is being developed.
 
Software safety classification
Initially the IEC 62304 standard expects the manufacturer to assign a safety class to the software system as a whole. This class-ification is based on the potential to create a hazard that could result in an injury to the user, the patient or other people.
 
The software is classified into three simple classes, as follows:
  • Class A: No injury or damage to health is possible
  • Class B: Nonserious injury is possible
  • Class C: Death or serious injury is possible
Defining “serious injury,” “nonserious injury,” “injury” and “damage to health” is important to apply this classification effectively. It may at first appear to be obvious what constitutes an injury; however, this can be a far more complex question when the context of the device is taken into account. Unfortunately the standard only defines “serious injury,” and this is as follows:
 
Serious Injury
Injury or illness that directly or indirectly
a) is life threatening,
b) results in permanent impairment of a body function or permanent damage to a body structure, or
c) necessitates medical or surgical intervention to prevent permanent impairment of a body function or permanent damage to a body structure.
 
Note: Permanent impairment means an irreversible impairment or damage to a body structure or function excluding trivial impairment or damage.
 
Figure 2: A safety-critical software system can be split into items, each one running on different processors and each with a different safety classification. 
 
It is relatively simple to apply a negative to the above to derive a nonserious injury definition. However, the definition of injury for use with the Class A software safety classification may be debatable. This is complex because of the lack of definition of injury or damage to health. For example, there may be a grey area involving the normal side effects of treatment of a condition as opposed to the device itself causing injury.
 
Procedures for carrying out this initial analysis and defining the class to be applied have been developed. In some cases, the notified body being used can affect this decision. Some will recommend that Class B is the minimum standard to be applied for any medical product, as the Class A safety classification does not insist on a sufficiently rigorous software development process.
 
There are major differences in the development process in terms of cost and time between a Class A and Class B code. It is therefore essential that medical device developers get this right at the outset. The safety classification also has a great impact on the documentation and process that is required.
 
Software items and units
Once the initial safety classification has been carried out for the system, it is possible to break the system down into software items and software units. These are defined as follows:
  • Software Item: “Any identifiable part of a computer program” [ISO/IEC 90003:2004, definition 3.14, modified]
  • Software Unit: “Software item that is not subdivided into other items” [ISO/IEC 90003:2004, definition 3.28, modified]
In practice, the software items can be any subsection of a system or its constituent parts. An architectural diagram is required to show the software items and software units. It is possible to then downgrade the safety classification of parts of the software system provided that these can be segregated. The note on section 5.3.5 of the standard gives an example of this segregation:
 
“An example of segregation is to have software items execute on different processors. The effectiveness of the segregation can be ensured by having no shared resources between the processors.”
 
In practice, this means that a safety-critical software system can be split into items, each one running on different processors and each with a different safety classification (Figure 2). Again, it is important to get this split correct at the outset to ensure that the system is safe and high quality, but also produced within the appropriate cost and time guidelines. Systems are available to analyse medical product software architecture and to define these items. Such processes can greatly reduce timescales and costs for the development of medical devices.
 
Table I: Summary of safety classification effects on the code development documentation and process.
Software Documentation Class A Class B Class C
Software development plan Must contain contents to sections 5.1 IEC 62304:2006. The plan's content list increases as the class increases, but a plan is required for all classes.
Software requirements specification Software requirements specification conforming to 5.2 IEC 62304:2006. The content list for the software requirements specification increases as the class increases, but a document is required for all classes.
Software architecture Not required. Software architecture to 5.3 IEC 62304:2006. Refined to software unit level for Class C.
Software detailed design Not required.   Document detailed design for software
units. (5.4).
Software unit implementation All units are implemented, documented and source controlled (5.5.1).  
Software unit verification Not required. Define process, tests and acceptance
criteria (5.5.2, 5.5.3).
Carry out verification (5.5.5)
Define additional tests and acceptance
criteria (5.5.2, 5.5.3, 5.5.4).
Carry out verification (5.5.5).
Software integration and integration
testing
Not required. Integration testing to 5.6 IEC 62304:2006.
Software system testing Not required. System testing to 5.7 IEC 62304:2006.
Software release Document the version of the software
product that is being released (5.8.4).
List of remaining software anomalies, annotated with an explanation of the
impact on safety or effectiveness, including operator usage and human factors.
 
Impact of safety classification
The safety classification has a tremendous impact on the code development process. It is therefore in the interests of medical device manufacturers to get this right the first time to avoid expensive, time-consuming rework late in a project.
A brief summary of the effects of safety classification on the documentation and process is shown in table I. In practice any company developing medical device software will carry out verification, integration and system testing on all software classes. However, the difference is that formal detailed documentation does not need to be generated for Class A code. Cross-referencing and verification of requirements also does not need to be formally proven. This can save a great deal of time and money in software development.
 
SOUP
Software of unknown provenance, or SOUP, is any code (tools or source code) that does not have formal documentation or was developed by a third party and has no evidence as to the controls on the development process. This code by definition is deemed to be capable of producing faults. It is important to carry out a software risk analysis on any SOUP code being proposed for the software under development and produce a rationale as to why this code should be used.
 
The use of SOUP is affected by the code safety classification. If the code is deemed to be Class A, then SOUP code can be used without further justification. As the class increases, the risks increase and the rationale becomes harder to justify. In practice this means that only simple function, well known and diversely applied SOUP code can be used for Class C applications.
 
A technology solutions provider specialising in electronics design and production services has developed processes to identify and justify the use of SOUP in medical device software. Its own experience with this has proved that such processes can drastically reduce development time-scales and costs. This is a route that medical device developers should incorporate into their design procedures.
 
Conclusion
IEC 62304 is a well considered, logical standard for developing safety critical and high reliability software for medical devices. Now that this standard has been adopted it would be very difficult for a medical device software developer to justify any equivalent approach that meets the requirements of the MDD, without effectively complying with this standard. This is good news for the safety of patients, but also for the manufacturers themselves, as the standard establishes a more level playing field. There is no longer any opportunity for uncontrolled rudimentary software development processes, and this raises quality across the board.
 
In addition, as IEC 62304 is a harmonised standard that has been adopted internationally, it tends to equalise quality expectations between Europe and the United States.
 
For medical device manufacturers, it is important that they select software designers who have well-established risk management systems, as they will already have the foundations in place to meet IEC 62304. Additionally, my professional experience has proved how valuable processes can be to analyse medical product software architecture and usage. Such processes can greatly reduce timescales and costs for the development of medical devices. 
 
Ken Hall
is Technical Director at Triteq Ltd,
3 The Courtyard, Stype, Hungerford,
Berkshire RG17 0RE, UK
tel. +44 1488 684 554
e-mail: ken.hall@triteq.com
www.triteq.com
 
 

 

Related stories

Simplifying IEC 62304 Compliance for Developers
 

Decoding MISRA C:2012 for Medtech Applications



Find more content on:
Your rating: None Average: 4.5 (2 votes)


Login to post comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

I read this article. I think

I read this article. I think You put a lot of effort to create this article. I appreciate your work.
free

I have recently started a

I have recently started a blog, the info you provide on this site has helped me greatly. Thanks  for all of your time & work.  
weldinghelmetstore.com

Thanks for a very interesting

Thanks for a very interesting blog. What else may I get that kind of info written in such a perfect approach? I’ve a undertaking that I am simply now operating on, and I have been at the look out for such info.
camaras de seguridad

I must say, I thought this

I must say, I thought this was a pretty interesting read when it comes to this topic. Liked the material. . . . .
Los Angeles Personal Injury Attorney

I simply want to tell you

I simply want to tell you that I am new to weblog and definitely liked this blog site. Very likely I’m going to bookmark your blog . You absolutely have wonderful stories. Cheers for sharing with us your blog.
Daycare

what I liked If you've ever

what I liked If you've ever wondered, "Why can't I get a girl to go out with me?", you're not alone. It happens to every guy at some point in his life-you meet an amazing woman who instantly captures your interest. The only problem is, she doesn't feel the same way. Please click here website: http://a-gift-of-love.com/why-cant-i-get-a-girl-to-go-out-with-me/

http://rebelmouse.com/gettheg

http://rebelmouse.com/getthegirlcodereviews Get The Girl Code: Michael Fiore And Miss X Reveal A 3-Step, Scientifically Proven Evolutionary "Cheat Code" To Get Any Girl You Want Quickly, Easily, And Without Having To Lie, Manipulate, Or Play A Single Ridiculous Mind Game. Written for consumers by a consumer, this site includes a fun and informative Get The Girl Code review and buyers guide that provides an insider's look at the program and answers frequently asked questions about Michael Fiore and Marni Kinrys' unique and highly popular system for helping you bring out the very best parts of yourself to attract, date, and seduce absolutely any and every woman you want. Learn everything you need to know about the program so you can decide if the Get The Girl Code is the right choice for you before you buy it. Click here our webpage: https://www.rebelmouse.com/getthegirlcodereviews/ ...

This has now changed. A new

This has now changed. A new regime is in force governing all medical device software development for all classes of device. Potluck Wording

voyance telephone

Nice knowledge gaining article. This post is really the best on this valuable topic.voyance telephone

whitehatseo1

Get The Girl Code: Michael Fiore And Miss X Reveal A 3-Step, Scientifically Proven Evolutionary "Cheat Code" To Get Any Girl You Want Quickly, Easily, And Without Having To Lie, Manipulate, Or Play A Single Ridiculous Mind Game. Written for consumers by a consumer, this site includes a fun and informative Get The Girl Code review and buyers guide that provides an insider's look at the program and answers frequently asked questions about Michael Fiore and Marni Kinrys' unique and highly popular system for helping you bring out the very best parts of yourself to attract, date, and seduce absolutely any and every woman you want. Please click here website: http://www.gosocialsignals.co.uk/product/linkedin/

This program is a diet plan

This program is a diet plan with a whole-food approach to weight loss and overall healthy life style

http://www.youtube.com/watch?v=Sv4EgHT-P5A

I like this post,And I guess

I like this post,And I guess that they having fun to read this post,they shall take a good site to make a information,thanks for sharing it to me.
visitez site officiel

Graphic Designing

nice

I definitely enjoy every

I definitely enjoy every little bit of it and I have you bookmarked to check out new stuff on your blog

fumigation

Thanks for a wonderful share.

Thanks for a wonderful share. Your article has proved your hard work and experience you have got in this field. Brilliant .i love it reading.
www.soloya.be

This is a great inspiring

This is a great inspiring article.I am pretty much pleased with your good work.You put really very helpful information...
abc6 com

I really appreciate this

I really appreciate this wonderful post that you have provided for us. I assure this would be beneficial for most of the people. Hemorrhoid No More Review

The 2007 version of this

The 2007 version of this standard is considerably extended from its previous version, and the techniques described are now intended to be applied to both software and hardware systems.
obat kuat herbal

All the contents you

All the contents you mentioned in post is too good and can be very useful. I will keep it in mind, thanks for sharing the information keep updating, looking forward for more posts.Thanks

voyance en direct

I definitely enjoying every

I definitely enjoying every little bit of it. It is a great website and nice share. I want to thank you. Good job! You guys do a great blog, and have some great contents. Keep up the good work. high pr backlinks

I recently came across your

I recently came across your blog and have been reading along. I thought I would leave my first comment. I don't know what to say except that I have enjoyed reading. Nice blog. I will keep visiting this blog very often.

Victorino Noval Los Angeles

Nice to be visiting your blog

Nice to be visiting your blog again, it has been months for me. Well this article that i've been waited for so long. I need this article to complete my assignment in the college, and it has same topic with your article. Thanks, great share.
Note to recipient(s)

Excellent .. Amazing .. I’ll

Excellent .. Amazing .. I’ll bookmark your blog and take the feeds also…I’m happy to find so many useful info here in the post, we need work out more techniques in this regard, thanks for sharing.

small memory foam dog beds

Wonderful illustrated

Wonderful illustrated information. I thank you about that. No doubt it will be very useful for my future projects. Would like to see some other posts on the same subject!
rebelmouse com

Excellent .. Amazing .. I’ll

Excellent .. Amazing .. I’ll bookmark your blog and take the feeds also…I’m happy to find so many useful info here in the post, we need work out more techniques in this regard, thanks for sharing.

Certified Legal Translation

Excellent article. Very

Excellent article. Very interesting to read. I really love to read such a nice article. Thanks! keep rocking.

Learn More

This is very interesting

This is very interesting content! I have thoroughly enjoyed reading your points and have come to the conclusion that you are right about many of them. You are great.

www.probyggecenter.dk

Awesome blog. I enjoyed

Awesome blog. I enjoyed reading your articles. This is truly a great read for me. I have bookmarked it and I am looking forward to reading new articles. Keep up the good work!
Жизнь в Монако

voyance pas cher

voyance pas cher Voyance-amour-eternel.com met à votre disposition une équipe complète de voyantes et médiums au 0892 22 20 22. Votre vie sentimentale vous interroge ? Vous avez des doutes sur l'avenir de votre couple ? Votre travail ou vos finances vous inquiètent ? Demandez des réponses à votre voyante, posez-lui les questions que vous désirez élucider. Grâce à la voyance par telephone pas cher, elle sera à même de vous apporter des réponses précises, des solutions claires et ainsi de vous libérer de cette appréhension qui vous angoisse. Car la voyance est porteuse de vérité et d'espoir, n'hésitez pas y avoir recours lorsque vous en ressentez le besoin. http://voyance-amour-eternel.com/ ...

https://www.rebelmouse.com/theBetaSwitchReviewhq/

If you take nothing else from this review, simply start using this odd fat-burning trick today, and you can expect your jeans to fit looser in as little as one week. https://www.rebelmouse.com/theBetaSwitchReviewhq/

Should there be another

Should there be another persuasive post you can share next time, I’ll be surely waiting for it.
http://numerologyreview.com

I think this is an

I think this is an informative post and it is very useful and knowledgeable. therefore, I would like to thank you for the efforts you have made in writing this article.
http://www.textyourexback2.com

Interesting and amazing how

Interesting and amazing how your post is! It Is Useful and helpful for me That I like it very much, and I am looking forward to Hearing from your next..
Ratings on Ultrasonic Aromatherapy Diffusers by ECVISION

Superbly written article, if

Superbly written article, if only all bloggers offered the same content as you, the internet would be a far better place..
going here

Fantastic blog! Do you have

Fantastic blog! Do you have any tips and hints for aspiring writers? I’m planning to start my own website soon but I’m a little lost on everything. Would you propose starting with a free platform like WordPress or go for a paid option? There are so many options out there that I’m completely overwhelmed .. Any suggestions? Many thanks!

creating backlinks

From the point of the action

From the point of the action of experts, this is, of course, only involves a question of education. And, in fact, the room of Replica Designer Belts, has much more than a question of education, http://www.alessandrocadario.com/lvbelts.php

Great Article it its really

Great Article it its really informative and innovative keep us posted with new updates. its was really valuable. thanks a lot.
GirlfriendActivation system

previous version, and the

previous version, and the techniques described are now intended to be applied to both software and hardware systems. author

Most of the time I don't make

Most of the time I don't make comments on websites, but I'd like to say that this article really forced me to do so. Really nice post! different sources of backlinks

I have read your article, it

I have read your article, it is very informative and helpful for me.I admire the valuable information you offer in your articles. Thanks for posting it..
get the girl every guy wants

This is a great inspiring

This is a great inspiring article.I am pretty much pleased with your good work.You put really very helpful information. Keep it up. Keep blogging. Looking to reading your next post.

locksmith royal oak mi

get your ex back and keep her

get your ex back and keep her A collection of top tweets about the Michael Fiore Text Your Ex Back 2.0 system. Includes PDF reviews, download information, and texting tips and examples. Please click here my website: https://twitter.com/textyourexback2 ...

Im no expert, but I believe

Im no expert, but I believe you just made an excellent point. You certainly fully understand what youre speaking about, and I can truly get behind that.
chaturbatetokengenerator.org

made an excellent point. You

made an excellent point. You certainly fully understand what youre speaking about, and I can truly get behind that. do follow backlinks

wallens

Thank you very much for writing such an interesting article on this topic. This has really made me think and I hope to read more.
business news

Understanding how to produce

Understanding how to produce a good dissertation will start by means of understanding how to examine essays compiled by people. professional plumbing

Thanks you very much for

Thanks you very much for sharing these links. Will definitely check this out..
loft conversion design ideas

Thanks for the nice blog. It

Thanks for the nice blog. It was very useful for me. I'm happy I found this blog. Thank you for sharing with us,I too always learn something new from your post.
Watch Kidnapping Mr. Heineken Online

I have found the opportunity

I have found the opportunity to peruse in my life. It's a satisfying thing to peruse posts like this one drug rehab treatment