Feature Article

Developing Medical Device Software to IEC 62304


Posted in Medical Software by Brian Buntz on June 1, 2010

Medical software design standard IEC 62304 has just come into force. This article describes how it will impact the software development process for medical device manufacturers.


Standards for medical device design
Until recently, safety regulations for medical device software, at least formally, were not exceptionally rigorous across the board. In addition, software was not formally classified as a medical product by the Medical Devices Directive. This has now changed. A new regime is in force governing all medical device software development for all classes of device.
 
Previous software safety standards were best suited to medical devices with low levels of risk, as opposed to products where software failure could be extremely serious and result in death. As more electronic products have become dependent on embedded software, the focus has shifted to the reliability of software systems within the devices and the associated risks at all levels of usage. As a result, the new EN/IEC 62304 standard has emerged as a global benchmark for management of the software development lifecycle (Figure 1).
 
Risk analysis for hardware and software design
Medical product designers have used risk management techniques to help reduce the risks associated with device hardware. BS/EN/ISO 14971 has traditionally been adopted as the base standard for risk management for medical devices. The 2007 version of this standard is considerably extended from its previous version, and the techniques described are now intended to be applied to both software and hardware systems.
 
The approach that should be taken is to consider the risks posed by the medical device as a whole, before the software/hardware split has been decided. Hardware risk analysis can then run alongside software risk analysis to define the required safety systems for the device.
 
A harmonised standard
Figure 1: How IEC 62304 fits into the compliance process and its relationship with other standards.
IEC 62304 is a harmonised standard for software design in medical products adopted by the European Union and the United States. Because the standard is “harmonised,” medical device manufacturers adopting it will satisfy the essential requirements contained in Medical Devices Directive 93/42/EEC (MDD) with amendment M5 (2007/47/EC) as related to software development. This is the least onerous route to ensuring compliance with the MDD. US FDA will also accept ANSI/AAMI/IEC 62304:2006 as evidence that medical device software has been designed to an acceptable standard. This standard is identical to the EN/ISO variant in all essential details.
 
Designing to IEC 62304 ensures that quality software is produced by means of a defined and controlled process of software development. This process must contain a set of requirements based on the safety class of the software that is being developed.
 
Software safety classification
Initially the IEC 62304 standard expects the manufacturer to assign a safety class to the software system as a whole. This class-ification is based on the potential to create a hazard that could result in an injury to the user, the patient or other people.
 
The software is classified into three simple classes, as follows:
  • Class A: No injury or damage to health is possible
  • Class B: Nonserious injury is possible
  • Class C: Death or serious injury is possible
Defining “serious injury,” “nonserious injury,” “injury” and “damage to health” is important to apply this classification effectively. It may at first appear to be obvious what constitutes an injury; however, this can be a far more complex question when the context of the device is taken into account. Unfortunately the standard only defines “serious injury,” and this is as follows:
 
Serious Injury
Injury or illness that directly or indirectly
a) is life threatening,
b) results in permanent impairment of a body function or permanent damage to a body structure, or
c) necessitates medical or surgical intervention to prevent permanent impairment of a body function or permanent damage to a body structure.
 
Note: Permanent impairment means an irreversible impairment or damage to a body structure or function excluding trivial impairment or damage.
 
Figure 2: A safety-critical software system can be split into items, each one running on different processors and each with a different safety classification. 
 
It is relatively simple to apply a negative to the above to derive a nonserious injury definition. However, the definition of injury for use with the Class A software safety classification may be debatable. This is complex because of the lack of definition of injury or damage to health. For example, there may be a grey area involving the normal side effects of treatment of a condition as opposed to the device itself causing injury.
 
Procedures for carrying out this initial analysis and defining the class to be applied have been developed. In some cases, the notified body being used can affect this decision. Some will recommend that Class B is the minimum standard to be applied for any medical product, as the Class A safety classification does not insist on a sufficiently rigorous software development process.
 
There are major differences in the development process in terms of cost and time between a Class A and Class B code. It is therefore essential that medical device developers get this right at the outset. The safety classification also has a great impact on the documentation and process that is required.
 
Software items and units
Once the initial safety classification has been carried out for the system, it is possible to break the system down into software items and software units. These are defined as follows:
  • Software Item: “Any identifiable part of a computer program” [ISO/IEC 90003:2004, definition 3.14, modified]
  • Software Unit: “Software item that is not subdivided into other items” [ISO/IEC 90003:2004, definition 3.28, modified]
In practice, the software items can be any subsection of a system or its constituent parts. An architectural diagram is required to show the software items and software units. It is possible to then downgrade the safety classification of parts of the software system provided that these can be segregated. The note on section 5.3.5 of the standard gives an example of this segregation:
 
“An example of segregation is to have software items execute on different processors. The effectiveness of the segregation can be ensured by having no shared resources between the processors.”
 
In practice, this means that a safety-critical software system can be split into items, each one running on different processors and each with a different safety classification (Figure 2). Again, it is important to get this split correct at the outset to ensure that the system is safe and high quality, but also produced within the appropriate cost and time guidelines. Systems are available to analyse medical product software architecture and to define these items. Such processes can greatly reduce timescales and costs for the development of medical devices.
 
Table I: Summary of safety classification effects on the code development documentation and process.
Software Documentation Class A Class B Class C
Software development plan Must contain contents to sections 5.1 IEC 62304:2006. The plan's content list increases as the class increases, but a plan is required for all classes.
Software requirements specification Software requirements specification conforming to 5.2 IEC 62304:2006. The content list for the software requirements specification increases as the class increases, but a document is required for all classes.
Software architecture Not required. Software architecture to 5.3 IEC 62304:2006. Refined to software unit level for Class C.
Software detailed design Not required.   Document detailed design for software
units. (5.4).
Software unit implementation All units are implemented, documented and source controlled (5.5.1).  
Software unit verification Not required. Define process, tests and acceptance
criteria (5.5.2, 5.5.3).
Carry out verification (5.5.5)
Define additional tests and acceptance
criteria (5.5.2, 5.5.3, 5.5.4).
Carry out verification (5.5.5).
Software integration and integration
testing
Not required. Integration testing to 5.6 IEC 62304:2006.
Software system testing Not required. System testing to 5.7 IEC 62304:2006.
Software release Document the version of the software
product that is being released (5.8.4).
List of remaining software anomalies, annotated with an explanation of the
impact on safety or effectiveness, including operator usage and human factors.
 
Impact of safety classification
The safety classification has a tremendous impact on the code development process. It is therefore in the interests of medical device manufacturers to get this right the first time to avoid expensive, time-consuming rework late in a project.
A brief summary of the effects of safety classification on the documentation and process is shown in table I. In practice any company developing medical device software will carry out verification, integration and system testing on all software classes. However, the difference is that formal detailed documentation does not need to be generated for Class A code. Cross-referencing and verification of requirements also does not need to be formally proven. This can save a great deal of time and money in software development.
 
SOUP
Software of unknown provenance, or SOUP, is any code (tools or source code) that does not have formal documentation or was developed by a third party and has no evidence as to the controls on the development process. This code by definition is deemed to be capable of producing faults. It is important to carry out a software risk analysis on any SOUP code being proposed for the software under development and produce a rationale as to why this code should be used.
 
The use of SOUP is affected by the code safety classification. If the code is deemed to be Class A, then SOUP code can be used without further justification. As the class increases, the risks increase and the rationale becomes harder to justify. In practice this means that only simple function, well known and diversely applied SOUP code can be used for Class C applications.
 
A technology solutions provider specialising in electronics design and production services has developed processes to identify and justify the use of SOUP in medical device software. Its own experience with this has proved that such processes can drastically reduce development time-scales and costs. This is a route that medical device developers should incorporate into their design procedures.
 
Conclusion
IEC 62304 is a well considered, logical standard for developing safety critical and high reliability software for medical devices. Now that this standard has been adopted it would be very difficult for a medical device software developer to justify any equivalent approach that meets the requirements of the MDD, without effectively complying with this standard. This is good news for the safety of patients, but also for the manufacturers themselves, as the standard establishes a more level playing field. There is no longer any opportunity for uncontrolled rudimentary software development processes, and this raises quality across the board.
 
In addition, as IEC 62304 is a harmonised standard that has been adopted internationally, it tends to equalise quality expectations between Europe and the United States.
 
For medical device manufacturers, it is important that they select software designers who have well-established risk management systems, as they will already have the foundations in place to meet IEC 62304. Additionally, my professional experience has proved how valuable processes can be to analyse medical product software architecture and usage. Such processes can greatly reduce timescales and costs for the development of medical devices. 
 
Ken Hall
is Technical Director at Triteq Ltd,
3 The Courtyard, Stype, Hungerford,
Berkshire RG17 0RE, UK
tel. +44 1488 684 554
e-mail: ken.hall@triteq.com
www.triteq.com
 
 

 

Related stories

Simplifying IEC 62304 Compliance for Developers
 

Decoding MISRA C:2012 for Medtech Applications



Find more content on:
Your rating: None Average: 4.5 (2 votes)


Login or register to post comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

http://www.sleepjunkie.org/get-the-best-memory-foam-mattress-for

I should say only that its awesome! The blog is informational and always produce amazing things.
best memory foam mattress

hsrhstjdsr

Free psn codes
EH BILDU recalled yesterday that on Saturday presented "the 100 steps that will change Navarra", which includes "the main lines of the proposals for change that is unstoppable in Navarre".
psn code generator

memyfriends Me My Friends is

memyfriends Me My Friends is a daily blog that offers relationship tips and online dating trends to help singles make more meaningful connections. Please click here my webpage: http://memyfriends.com/ ...

http://www.sgdatingweb.com/gf

http://www.sgdatingweb.com/gfas-review-how-the-girlfriend-activation-system-attracts-women/ GFAS Review – How The Girlfriend Activation System Attracts Women. But those fast-talking pickup lines used in bars don't usually attract the highest quality women. A different approach... http://sgdatingweb.com/gfas-review-how-the-girlfriend-activation-system-... ...

website Kiii-TV 3 News is the

website Kiii-TV 3 News is the South Texas news leader for over 40 years, providing local news, weather and sports from the people you know and trust. Click here webpage: http://www.kiiitv.com/story/27971908/girlfriend-activation-system-review... ...

website

website voyance-retour-amour.com vous permet de contacter une équipe de voyantes et voyants au 0892 30 00 19. Disponibles 24h/24, nous vous parlons de votre sentimental, de votre amour, votre travail ou vos finances. A bientôt. Se il vous plaît visitez le site Web: http://voyance-retour-amour.com/ ...

bsfhjsfrhsr

fifa 15 ultimate team coins
Specifically, are aimed at middleweight riders to be upbeat rhythms without neglecting damping in these shoes is remarkable thanks to PWRGRID + midsole.

randevu bayan Escort Bayan

randevu bayan Escort Bayan Modeller ve Escort Randevu Telefon Hizmeti...

courtisane.co.uk Courtisane

courtisane.co.uk Courtisane is a high class agency offering some of the most beautiful and alluring model and high class London escorts to our discerning clientèle. visit website: http://www.courtisane.co.uk ...

Adult dating

Adult dating Xxxadultmarket.com offers a wide range of choices to find the best free live sex cam, free adult dating communities, penis enlargement products and porn video series. We have the best available for you...all in one! Please click here site http://www.xxxadultmarket.com/ ...

putra

visit ayam mantap sangat
sekarang made sikit lagi
kapan lagi dibaca hampir jumpa
kunjungi made ini dia

helen

thank for sharing

kunjungi fried, masih hangat
kunjungi mami , agak hangat
kunjungi origin mulai dingin
kunjungi nasi goeng masih mendingan

badcvabae

Free psn codes
Users of applications Tapbots lately may be in luck: its developers, always criticized for abandoning his job despite charging high prices, have been stepping updating Tweetbot for iOS and announcing the Yosemite version of Tweetbot for Mac Y. that, as we have seen today is not everything.
psn code generator

Auto Binary Signals Scam Auto

Auto Binary Signals Scam Auto Binary Signals is the next generation of automated Binary Options trading. Auto Binary Signals is a unique way of making money online through binary options. Auto Binary Signals is with 80-100 accuracy rate and you can try it for 10 days before buying to test by yourself. Auto Binary Signals is the shortest way to earn $236,708.43 in just 30 days with binary options. http://www.autobinarysignalss.com/ ...

binary options trading

binary options trading signals With Binary Options Trading Signals, Trading Just Got Easier! If you have already tried your hand at trading binary options, you may already know how difficult it. Binary Options Trading Signals is now so easy with 10 years experience franco trader and you will receive live streaming charts every single day helping you to trade binary options and profiting 8000$ per week or more. http://www.binaryoptionstradingsignalss.com/ ...

voyance en direct Il ne vous

voyance en direct Il ne vous donne pas de nouvelles ? Votre ex va-t-il revenir ? Une histoire peut-elle recommencer ? Voyance amour au 0892 22 20 22. Grâce au tarot, à la numérologie, à l'astrologie et avec la voyance pure, ils sauront vous apporter des réponses efficaces et claires, 24h sur 24. http://voyance-amour-eternel.com/ ...

where you all would be able

where you all would be able to get the dragon city hack tool from the given site at free of cost.... opt online email

gaahwsgqw

clash of clans hack
The 'startup' Catalan Geenapp what has been measured in a comprehensive study (CPI Wars) reveals wide differences ecosystem (iOS vs Android) or countries. It is a guide that details the price war declared by developers to promote their apps in the Store worldwide. Here are some key findings:
clash of clans hack gems

Positive site, where did u

Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work.
seo fort worth texas

www.rebelmouse.com Unlock Her

www.rebelmouse.com Unlock Her Legs: Bobby Rio And Rob Judge Reveal How To Use "The Scrambler" To Get That Smoking Hot Girl Everyone Has Their Eye On Flirting With You And Begging To Go Back To Your Place... Written for consumers by a consumer, this fan site includes a fun and informative Unlock Her Legs review, ebook FAQ, and PDF download guide that provides an insider's look at the program and answers frequently asked questions about Rob Judge And Bobby Rio's unique and highly popular seduction guide.

Mobile Phone App Creator It

Mobile Phone App Creator It looks like I am raking in money now, but the truth is that it was not always like that! Just 6 months ago I was completely struggling. I had no programming skills, no team and no money. The only thing I had was a great desire to create the game of my dreams. http://03dd4gqsm6tr0yebio1bnhhsxg.hop.clickbank.net/?tid=PHXDAN ...

How to Hack Clash of ClansOne

How to Hack Clash of ClansOne of the options to make sure to see the children, it was to move the family to Ottawa. I had a choice to make and for me it was important that they keep their bearings, their friends, I could not impose that then I told myself that it was up to me to make the sacrifice, "says the now mayor of Montreal.
Clash of Clans Cheats

adhsfhsd

Clash of clans hack
Companies that use the Enterprise version of Windows can not upgrade to Windows 10, as opposed to "normal" users.
clash of clans hack gems

Excellent site you have

Excellent site you have here.. It's difficult to find high-quality writing like yours these days. I really appreciate people like you! Take care!! μεταφορικη εταιρεια

Nice to read your article! I

Nice to read your article! I am looking forward to sharing your adventures and experiences.
facebook.com/SheontySultan

through a rescue course he

through a rescue course he received at school that he was able to help the young Marko Viljanac. He said schools should provide a mandatory course in first aid, as many are helpless. email opt in marketing

Star Wars Commander IOS

Star Wars Commander IOS Hack
He stressed that it was through a rescue course he received at school that he was able to help the young Marko Viljanac. He said schools should provide a mandatory course in first aid, as many are helpless in the face of such situations. Star Wars Commander Cheat

Good

someday this device is very important for human being

Info nonton film online gratis? Hanya di vidio . Lets be famous

yjeyjeyjeyj

Soyez prêt à pirater, télécharger gratuitement les clans qui s’affrontent. Pourquoi Free l’enfer? Voulez-vous être un noob et payer pour cela? Je ne crois pas.
clash of clans triche gemmes
clash of clans triche gemmes

The 2007 version of this

The 2007 version of this standard is considerably extended from its previous version, and the techniques described are now intended to be applied to both software and hardware systems.
teddy sagi

wf32

hack clash of clans

Alors que les lignes Moto Moto X et G ont été actualisées à la fin de 2014, le Moto E doit encore suivre une mise à jour, jusqu'à maintenant. Out of the blue, il semble que Best Buy a énuméré le Moto E 2ème génération, malgré le fait que Motorola n'a pas encore l'annoncer.
clash of clans android hack

Hardware risk analysis can

Hardware risk analysis can then run alongside software risk analysis to define the required safety systems for the device.code for sustainable homes

This blog is so nice to me. I

This blog is so nice to me. I will keep on coming here again and again. Visit my link as well..
rebelmouse.com

Are you having a hard time

Are you having a hard time concentrating at work, learning new things or remembering the names of your colleagues? Maybe it’s time to do something about that, check out this review of Neuroflexyn!neuroflexyn

We Are Offering 55 Manual

We Are Offering 55 Manual DoFollow Blog Comments From Actual Page Rank 6 TO 3 !! For Only $ 5 $. Try Our Service Once, And You Would Never Want To Go To Any Other Blog Commenting Provider.
Backlinks

I am happy to find this post

I am happy to find this post very useful for me, as it contains lot of information. I always prefer to read the quality content and this thing I found in you post. Thanks for sharing.
only available here

fsFa323

http://astucejeux.net/boom-beach-hack-illimites-gemmes/

L'intrigue de Boom Plage tourne autour d'un archipel composé de plusieurs îles. Le joueur doit mettre en place base dans un d'eux, tandis que le Blackguard a mis en place des bases dans les autres. Le joueur doit développer une armée pour détruire l'Blackguard dans les autres îles. En faisant cela, les indigènes des îles sont libérés et ils aident le joueur à se débarrasser de la Blackguard mal des autres îles, en donnant l'or.
boom beach triche

This is such a great resource

This is such a great resource that you are providing and you give it away for free. I love seeing blog that understand the value of providing a quality resource for free.
nachtkleding online

over creation and after that

over creation and after that in excess of improvement of replica watches for mariners. idaho falls carpet cleaning

Wow i can say that this is

Wow i can say that this is another great article as expected of this blog.Bookmarked this site..
inspectors in arlington tx

made to organize any designs

made to organize any designs or you can create use of significantly more affordable choices. loft conversions north london

Now, after that we realized

Now, after that we realized that Alvivo FIFO will have a significant impact on the forex traders, the first question that comes to mind is how this will affect the forex brokerage firms? The answer is that forex brokers now face two possible options. Either to work ceaselessly to modify their trading platforms and practices and laws according to the new trading standards or they can get around. email marketing software

basdfbzdezg

rom ps3 emulator

The splitter receives the encrypted HDMI signal and processes it, so that you can bypass HDCP. By processing the signal through an additional device however, can lead to some loss of image quality. A device that is suitable for the reception of PS3 video is about the Ligawo HDMI Splitter *.
bios ps3 emulator

43

Star Wars Commander Cheats
The financial statements of its augustinois counterpart, Marcel Corriveau, are "very opaque," he insisted. "We are not able to find the truth in the financial statements, it is serious there! In the last budget that was presented, there I will monitor my term, very serious and serious anomalies, "he added, without specifying what it was. Star wars commander IOS Hack

whatta cute

its amazing and interesting

kabar terkini hasil liga champion pilihan tadi malam Liputan6.com
kabar terkini jadwal liga champion pilihan tadi malam Liputan6.com
kabar terkini hasil klasemen liga spanyol pilihan tadi malam Liputan6.com

cool

elastic

so elastic

kabar terkini manchester united pilihan tadi malam Liputan6.com
kabar terkini real madrid pilihan tadi malam Liputan6.com
kabar terkini pertandingan liga inggris pilihan tadi malam Liputan6.com

blank space

blank space

kabar terkini berita motogp pilihan tadi malam Liputan6.com
kabar terkini hasil klasemen jadwal liga inggris pilihan tadi malam Liputan6.com
kabar terkini persib bandung pilihan tadi malam Liputan6.com

willaim

This content is written very well. Your use of formatting when making your points makes your observations very clear and easy to understand. Thank you.
Clash of clans hack android

Everyone was quite dependent

Everyone was quite dependent on this technology even to a small child.neuroflexyn

I really thank you for the

I really thank you for the valuable info on this great subject and look forward to more great posts. Thanks a lot for enjoying this beauty article with me. I am appreciating it very much! Looking forward to another great article. Good luck to the author! All the best!
whitening creams