Departmental Papers (CIS)

Date of this Version


Document Type

Conference Paper


32nd International Conference on Computer Safety, Reliability and Security (SAFECOMP 2013), Toulouse, France, September 24-27, 2013.


A realistic user interface is rigorously developed for the US Food and Drug Administration (FDA) Generic Patient Controlled Analgesia (GPCA) pump prototype. The GPCA pump prototype is intended as a realistic workbench for trialling development methods and techniques for improving the safety of such devices. A model-based approach based on the use of formal methods is illustrated and implemented within the Prototype Verification System (PVS) verification system. The user interface behaviour is formally specified as an executable PVS model. The specification is verified with the PVS theorem prover against relevant safety requirements provided by the FDA for the GPCA pump. The same specification is automatically translated into executable code through the PVS code generator, and hence a high fidelity prototype is then developed that incorporates the generated executable code.

Subject Area

CPS Medical

Publication Title

Lecture Notes in Computer Science: Computer Safety, Reliability, and Security



First Page


Last Page




Permission Statement

The final publication is available at Springer via


Formal methods, Model-based development, Medical devices, User interface prototyping


Date Posted: 06 September 2013

This document has been peer reviewed.