High-Confidence Medical Device Software Development

The design of bug-free and safe medical device software is challenging, especially in complex implantable devices. This is due to the device\u27s closed-loop interaction with the patient\u27s organs, which are stochastic physical environments. The life-critical nature and the lack of existing industry standards to enforce software validation make this an ideal domain for exploring design automation challenges for integrated functional and formal modeling with closed-loop analysis. The primary goal of high-confidence medical device software is to guarantee the device will never drive the patient into an unsafe condition even though we do not have complete understanding of the physiological plant. There are two major differences between modeling physiology and modeling man-made systems: first, physiology is much more complex and less well-understood than man-made systems like cars and airplanes, and spans several scales from the molecular to the entire human body. Secondly, the variability between humans is orders of magnitude larger than that between two cars coming off the assembly line. Using the implantable cardiac pacemaker as an example of closed-loop device, and the heart as the organ to be modeled, we present several of the challenges and early results in model-based device validation. We begin with detailed timed automata model of the pacemaker, based on the specifications and algorithm descriptions from Boston Scientific. For closed-loop evaluation, a real-time Virtual Heart Model (VHM) has been developed to model the electrophysiological operation of the functioning and malfunctioning (i.e., during arrhythmia) hearts. By extracting the timing properties of the heart and pacemaker device, we present a methodology to construct timed-automata models for formal model checking and functional testing of the closed-loop system. The VHM\u27s capability of generating clinically-relevant response has been validated for a variety of common arrhythmias. Based on a set of requirements, we describe a framework of Abstraction Trees that allows for interactive and physiologically relevant closed-loop model checking and testing for basic pacemaker device operations such as maintaining the heart rate, atrial-ventricle synchrony and complex conditions such as avoiding pacemaker-mediated tachycardia. Through automatic model translation of abstract models to simulation-based testing and code generation for platform-level testing, this model-based design approach ensures the closed-loop safety properties are retained through the design toolchain and facilitates the development of verified software from verified models. This system is a step toward a validation and testing approach for medical cyber-physical systems with the patient-in-the-loop

A Smartphone-Based Tool for Rapid, Portable, and Automated Wide-Field Retinal Imaging.

Purpose:High-quality, wide-field retinal imaging is a valuable method for screening preventable, vision-threatening diseases of the retina. Smartphone-based retinal cameras hold promise for increasing access to retinal imaging, but variable image quality and restricted field of view can limit their utility. We developed and clinically tested a smartphone-based system that addresses these challenges with automation-assisted imaging. Methods:The system was designed to improve smartphone retinal imaging by combining automated fixation guidance, photomontage, and multicolored illumination with optimized optics, user-tested ergonomics, and touch-screen interface. System performance was evaluated from images of ophthalmic patients taken by nonophthalmic personnel. Two masked ophthalmologists evaluated images for abnormalities and disease severity. Results:The system automatically generated 100° retinal photomontages from five overlapping images in under 1 minute at full resolution (52.3 pixels per retinal degree) fully on-phone, revealing numerous retinal abnormalities. Feasibility of the system for diabetic retinopathy (DR) screening using the retinal photomontages was performed in 71 diabetics by masked graders. DR grade matched perfectly with dilated clinical examination in 55.1% of eyes and within 1 severity level for 85.2% of eyes. For referral-warranted DR, average sensitivity was 93.3% and specificity 56.8%. Conclusions:Automation-assisted imaging produced high-quality, wide-field retinal images that demonstrate the potential of smartphone-based retinal cameras to be used for retinal disease screening. Translational Relevance:Enhancement of smartphone-based retinal imaging through automation and software intelligence holds great promise for increasing the accessibility of retinal screening

Process of designing robust, dependable, safe and secure software for medical devices: Point of care testing device as a case study

This article has been made available through the Brunel Open Access Publishing Fund.Copyright © 2013 Sivanesan Tulasidas et al. This paper presents a holistic methodology for the design of medical device software, which encompasses of a new way of eliciting requirements, system design process, security design guideline, cloud architecture design, combinatorial testing process and agile project management. The paper uses point of care diagnostics as a case study where the software and hardware must be robust, reliable to provide accurate diagnosis of diseases. As software and software intensive systems are becoming increasingly complex, the impact of failures can lead to significant property damage, or damage to the environment. Within the medical diagnostic device software domain such failures can result in misdiagnosis leading to clinical complications and in some cases death. Software faults can arise due to the interaction among the software, the hardware, third party software and the operating environment. Unanticipated environmental changes and latent coding errors lead to operation faults despite of the fact that usually a significant effort has been expended in the design, verification and validation of the software system. It is becoming increasingly more apparent that one needs to adopt different approaches, which will guarantee that a complex software system meets all safety, security, and reliability requirements, in addition to complying with standards such as IEC 62304. There are many initiatives taken to develop safety and security critical systems, at different development phases and in different contexts, ranging from infrastructure design to device design. Different approaches are implemented to design error free software for safety critical systems. By adopting the strategies and processes presented in this paper one can overcome the challenges in developing error free software for medical devices (or safety critical systems).Brunel Open Access Publishing Fund

Exploring individual user differences in the 2D/3D interaction with medical image data

User-centered design is often performed without regard to individual user differences. In this paper, we report results of an empirical study aimed to evaluate whether computer experience and demographic user characteristics would have an effect on the way people interact with the visualized medical data in a 3D virtual environment using 2D and 3D input devices. We analyzed the interaction through performance data, questionnaires and observations. The results suggest that differences in gender, age and game experience have an effect on people’s behavior and task performance, as well as on subjective\ud user preferences

A Minority of Patients with Type 1 Diabetes Routinely Downloads and Retrospectively Reviews Device Data.

BackgroundIn type 1 diabetes (T1D), periodic review of blood glucose and insulin dosing should be performed, but it is not known how often patients review these data on their own. We describe the proportion of patients with T1D who routinely downloaded and reviewed their data at home.Materials and methodsA cross-sectional survey of 155 adults and 185 caregivers of children with T1D at a single academic institution was performed. "Routine Downloaders" (downloaded four or more times in the past year) were also considered "Routine Reviewers" if they reviewed their data most of the time they downloaded from devices. Logistic regression was used to identify factors associated with being a Routine Reviewer.ResultsOnly 31% of adults and 56% of caregivers reported ever downloading data from one or more devices, whereas 20% and 40%, respectively, were considered Routine Downloaders. Only 12% of adults and 27% of caregivers were Routine Reviewers. Mean hemoglobin A1c was lower in Routine Reviewers compared with non-Routine Reviewers (7.2±1.0% vs. 8.1±1.6% [P=0.03] in adults and 7.8±1.4% vs. 8.6±1.7% [P=0.001] in children). In adjusted analysis of adults, the odds ratio of being a Routine Reviewer of one or more devices for every 10-year increase in age was 1.5 (95% confidence interval, 1.1, 2.1 [P=0.02]). For every 10 years since diabetes diagnosis, the odds ratio of being a Routine Reviewer was 1.7 (95% confidence interval, 1.2, 2.4 [P=0.01]). For caregivers, there were no statistically significant factors associated with being a Routine Reviewer.ConclusionsA minority of T1D patients routinely downloads and reviews data from their devices on their own. Further research is needed to understand obstacles, provide better education and tools for self-review, and determine if patient self-review is associated with improved glycemic control

Smart vest for respiratory rate monitoring of COPD patients based on non-contact capacitive sensing

In this paper, a first approach to the design of a portable device for non-contact monitoring of respiratory rate by capacitive sensing is presented. The sensing system is integrated into a smart vest for an untethered, low-cost and comfortable breathing monitoring of Chronic Obstructive Pulmonary Disease (COPD) patients during the rest period between respiratory rehabilitation exercises at home. To provide an extensible solution to the remote monitoring using this sensor and other devices, the design and preliminary development of an e-Health platform based on the Internet of Medical Things (IoMT) paradigm is also presented. In order to validate the proposed solution, two quasi-experimental studies have been developed, comparing the estimations with respect to the golden standard. In a first study with healthy subjects, the mean value of the respiratory rate error, the standard deviation of the error and the correlation coefficient were 0.01 breaths per minute (bpm), 0.97 bpm and 0.995 (p < 0.00001), respectively. In a second study with COPD patients, the values were -0.14 bpm, 0.28 bpm and 0.9988 (p < 0.0000001), respectively. The results for the rest period show the technical and functional feasibility of the prototype and serve as a preliminary validation of the device for respiratory rate monitoring of patients with COPD.Ministerio de Ciencia e Innovación PI15/00306Ministerio de Ciencia e Innovación DTS15/00195Junta de Andalucía PI-0010-2013Junta de Andalucía PI-0041-2014Junta de Andalucía PIN-0394-201

Medical Cyber-Physical Systems Development: A Forensics-Driven Approach

The synthesis of technology and the medical industry has partly contributed to the increasing interest in Medical Cyber-Physical Systems (MCPS). While these systems provide benefits to patients and professionals, they also introduce new attack vectors for malicious actors (e.g. financially-and/or criminally-motivated actors). A successful breach involving a MCPS can impact patient data and system availability. The complexity and operating requirements of a MCPS complicates digital investigations. Coupling this information with the potentially vast amounts of information that a MCPS produces and/or has access to is generating discussions on, not only, how to compromise these systems but, more importantly, how to investigate these systems. The paper proposes the integration of forensics principles and concepts into the design and development of a MCPS to strengthen an organization's investigative posture. The framework sets the foundation for future research in the refinement of specific solutions for MCPS investigations.Comment: This is the pre-print version of a paper presented at the 2nd International Workshop on Security, Privacy, and Trustworthiness in Medical Cyber-Physical Systems (MedSPT 2017

Patient-specific image-based computer simulation for theprediction of valve morphology and calcium displacement after TAVI with the Medtronic CoreValve and the Edwards SAPIEN valve

AIMS: Our aim was to validate patient-specific software integrating baseline anatomy and biomechanical properties of both the aortic root and valve for the prediction of valve morphology and aortic leaflet calcium displacement after TAVI. METHODS AND RESULTS: Finite element computer modelling was performed in 39 patients treated with a Medtronic CoreValve System (MCS; n=33) or an Edwards SAPIEN XT (ESV; n=6). Quantitative axial frame morphology at inflow (MCS, ESV) and nadir, coaptation and commissures (MCS) was compared between multislice computed tomography (MSCT) post TAVI and a computer model as well as displacement of the aortic leaflet calcifications, quantified by the distance between the coronary ostium and the closest calcium nodule. Bland-Altman analysis revealed a strong correlation between the observed (MSCT) and predicted frame dimensions, although small differences were detected for, e.g., Dmin at the inflow (mean±SD MSCT vs. MODEL: 21.6±2.4 mm vs. 22.0±2.4 mm; difference±SD: -0.4±1.3 mm, p<0.05) and Dmax (25.6±2.7 mm vs. 26.2±2.7 mm; difference±SD: -0.6±1.0 mm, p<0.01). The observed and predicted calcium displacements were highly correlated for the left and right coronary ostia (R2=0.67 and R2=0.71, respectively p<0.001). CONCLUSIONS: Dedicated software allows accurate prediction of frame morphology and calcium displacement after valve implantation, which may help to improve outcome

Improving the clinical value and utility of CGM systems: issues and recommendations : a joint statement of the European Association for the Study of Diabetes and the American Diabetes Association Diabetes Technology Working Group

The first systems for continuous glucose monitoring (CGM) became available over 15 years ago. Many then believed CGM would revolutionise the use of intensive insulin therapy in diabetes; however, progress towards that vision has been gradual. Although increasing, the proportion of individuals using CGM rather than conventional systems for self-monitoring of blood glucose on a daily basis is still low in most parts of the world. Barriers to uptake include cost, measurement reliability (particularly with earlier-generation systems), human factors issues, lack of a standardised format for displaying results and uncertainty on how best to use CGM data to make therapeutic decisions. This scientific statement makes recommendations for systemic improvements in clinical use and regulatory (pre- and postmarketing) handling of CGM devices. The aim is to improve safety and efficacy in order to support the advancement of the technology in achieving its potential to improve quality of life and health outcomes for more people with diabetes