Closed-loop Verification of Medical Devices With Model Abstraction and Refinement

Thumbnail Image
Penn collection
Real-Time and Embedded Systems Lab (mLAB)
Degree type
Medical Devices
Implantable Pacemaker
Software Verification
Cyber-Physical Systems
Model Abstraction and Refinement
Computer Engineering
Grant number
Copyright date
Related resources

The design and implementation of software for medical devices is challenging due to the closed-loop interaction with the patient, which is a stochastic physical environment. The safety-critical nature and the lack of existing industry standards for verification, make this an ideal domain for exploring applications of formal modeling and closed-loop analysis. The biggest challenge is that the environment model(s) have to be both complex enough to express the physiological requirements, and general enough to cover all possible inputs to the device. In this effort, we use a dual chamber implantable pacemaker as a case study to demonstrate verification of software specifications of medical devices as timed-automata models in UPPAAL. The pacemaker model is based on the specifications and algorithm descriptions from Boston Scientific. The heart is modeled using timed automata based on the physiology of heart. The model is gradually abstracted with timed simulation to preserve properties. A manual Counter-Example-Guided Abstraction and Refinement (CEGAR) framework has been adapted to refine the heart model when spurious counter-examples are found. To demonstrate the closed-loop nature of the problem and heart model refinement, we investigated two clinical cases of Pacemaker Mediated Tachycardia and verified their corresponding correction algorithms in the pacemaker. Along with our tools for code generation from UPPAAL models, this effort enables model-driven design and certification of software for medical devices.

Date Range for Data Collection (Start Date)
Date Range for Data Collection (End Date)
Digital Object Identifier
Series name and number
Publication date
Journal title
Volume number
Issue number
Publisher DOI
Journal Issue
@article{vhm_sttt13, year={2013}, issn={1433-2779}, journal={International Journal on Software Tools for Technology Transfer}, doi={10.1007/s10009-013-0289-7}, title={Closed-loop verification of medical devices with model abstraction and refinement}, url={}, publisher={Springer Berlin Heidelberg}, keywords={Medical devices; Implantable pacemaker; Software verification; Cyber-physical systems; Model abstraction and refinement; CEGAR}, author={Jiang, Zhihao and Pajic, Miroslav and Alur, Rajeev and Mangharam, Rahul}, pages={1-23}, language={English} }
Recommended citation