Bombarda Andrea, Bonfanti Silvia, Galbiati Cristiano, Gargantini Angelo, Pelliccione Patrizio, Riccobene Elvinia, Wada Masayuki
Department of Management, Information and Production Engineering, University of Bergamo, Bergamo, Italy.
Princeton University, Princeton, NJ, USA.
Inf Softw Technol. 2022 Dec;152:107061. doi: 10.1016/j.infsof.2022.107061. Epub 2022 Sep 3.
During the first wave of the COVID-19 pandemic, an international and heterogeneous team of scientists collaborated on a social project to produce a mechanical ventilator for intensive care units (MVM). MVM has been conceived to be produced and used also in poor countries: it is open-source, no patents, cheap, and can be produced with materials that are easy to retrieve.
The objective of this work is to extract from the experience of the MVM development and software certification a set of lessons learned and then guidelines that can help developers to produce safety-critical devices in similar emergency situations.
We conducted a case study. We had full access to source code, comments on code, change requests, test reports, every deliverable (60 in total) produced for the software certification (safety concepts, requirements specifications, architecture and design, testing activities, etc.), notes, whiteboard sketches, emails, etc. We validated both lessons learned and guidelines with experts.
We contribute a set of validated lessons learned and a set of validated guidelines, together with a discussion of benefits and risks of each guideline.
In this work we share our experience in certifying software for healthcare devices produced under emergency, i.e. with strict and pressing time constraints and with the difficulty of establishing a heterogeneous development team made of volunteers. We believe that the guidelines will help engineers during the development of critical software under emergency.
在新冠疫情的第一波期间,一个由国际科学家组成的多元化团队合作开展了一个社会项目,旨在生产一种用于重症监护病房的机械呼吸机(MVM)。MVM的设计初衷是在贫困国家也能生产和使用:它是开源的,没有专利,成本低廉,并且可以使用易于获取的材料进行生产。
这项工作的目的是从MVM开发和软件认证的经验中提取一系列经验教训,进而得出能够帮助开发者在类似紧急情况下生产安全关键设备的指导方针。
我们进行了一项案例研究。我们可以全面获取源代码、代码注释、变更请求、测试报告以及为软件认证(安全概念、需求规格说明、架构与设计、测试活动等)生成的每一份交付物(总共60份)、笔记、白板草图、电子邮件等。我们与专家一起对经验教训和指导方针进行了验证。
我们贡献了一系列经过验证的经验教训和一套经过验证的指导方针,并对每条指导方针的益处和风险进行了讨论。
在这项工作中,我们分享了在紧急情况下为医疗设备软件进行认证的经验,即在严格且紧迫的时间限制下,以及在组建由志愿者组成的多元化开发团队存在困难的情况下。我们相信这些指导方针将在紧急情况下关键软件的开发过程中帮助工程师。