4 ms·

The developer here did a good job putting this together so quickly, and it's hopefully beneficial to the hospital staff and the patients themselves. I hope they

The developer here did a good job putting this together so quickly, and it's hopefully beneficial to the hospital staff and the patients themselves. I hope they keep working to improve it, and consider open sourcing it. The circumstances are pretty exceptional, two things shocked me a bit: 1. The manufacturer already produces remote monitoring software for the device but its _too expensive_ 2. Software like this is usually classed as a medical device, which comes with regulations (e.g. https://www.gov.uk/government/publications/medical-devices-software-applications-apps https://www.gov.uk/government/publications/medical-devices-s... in the UK)

et2o 6y ago
Software that merely displays data is not typically a medical device, as long as it doesn’t transform or otherwise alter the data.
- fhsm 6y ago
  US only knowledge but in the US... This is (possibly depending on use) a biomedical device. These are regulated such that we pull separate cat5/6 and put up chain link in network closets. The Cisco switch in one side of that fence just vanilla corporate IT with email, EHR, Netflix etc; the same switch on the other side and all the stuff connected to it - from the bedside monitor out through the central alarm station - is a medical device. That isolation is the presumption referenced in the recent GE vulnerability [0] and the challenges of getting bio med chocolate in the corporate (ehr) peanut butter presents significant challenges [1]. [0] https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-ge-healthcare-clinical-information-central-stations-and https://www.fda.gov/medical-devices/safety-communications/cy... [1] https://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfStandards/detail.cfm?standard__identification_no=36409 https://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfStandar...

et2o 6y ago

Software that merely displays data is not typically a medical device, as long as it doesn’t transform or otherwise alter the data.

fhsm 6y ago
US only knowledge but in the US... This is (possibly depending on use) a biomedical device. These are regulated such that we pull separate cat5/6 and put up chain link in network closets. The Cisco switch in one side of that fence just vanilla corporate IT with email, EHR, Netflix etc; the same switch on the other side and all the stuff connected to it - from the bedside monitor out through the central alarm station - is a medical device. That isolation is the presumption referenced in the recent GE vulnerability [0] and the challenges of getting bio med chocolate in the corporate (ehr) peanut butter presents significant challenges [1]. [0] https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-ge-healthcare-clinical-information-central-stations-and https://www.fda.gov/medical-devices/safety-communications/cy... [1] https://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfStandards/detail.cfm?standard__identification_no=36409 https://www.accessdata.fda.gov/scripts/cdrh/cfdocs/cfStandar...