Modeling and verification of a dual chamber implantable pacemaker


Conference Paper

The design and implementation of software for medical devices is challenging due to their rapidly increasing functionality and the tight coupling of computation, control, and communication. The safety-critical nature and the lack of existing industry standards for verification, make this an ideal domain for exploring applications of formal modeling and analysis. In this study, we use a dual chamber implantable pacemaker as a case study for modeling and verification of control algorithms for medical devices in UPPAAL. We begin with detailed models of the pacemaker, based on the specifications and algorithm descriptions from Boston Scientific. We then define the state space of the closed-loop system based on its heart rate and developed a heart model which can non-deterministically cover the whole state space. For verification, we first specify unsafe regions within the state space and verify the closed-loop system against corresponding safety requirements. As stronger assertions are attempted, the closed-loop unsafe state may result from healthy open-loop heart conditions. Such unsafe transitions are investigated with two clinical cases of Pacemaker Mediated Tachycardia and their corresponding correction algorithms in the pacemaker. Along with emerging tools for code generation from UPPAAL models, this effort enables model-driven design and certification of software for medical devices. © 2012 Springer-Verlag Berlin Heidelberg.

Full Text

Duke Authors

Cited Authors

  • Jiang, Z; Pajic, M; Moarref, S; Alur, R; Mangharam, R

Published Date

  • April 9, 2012

Published In

Volume / Issue

  • 7214 LNCS /

Start / End Page

  • 188 - 203

Electronic International Standard Serial Number (EISSN)

  • 1611-3349

International Standard Serial Number (ISSN)

  • 0302-9743

International Standard Book Number 13 (ISBN-13)

  • 9783642287558

Digital Object Identifier (DOI)

  • 10.1007/978-3-642-28756-5_14

Citation Source

  • Scopus