ANSI TIR80001-2-3-2012 Application of risk management for IT-networks incorporating medical devices - Part 2-3 Guidance for Wireless Networks.pdf

1、ANSI/AAMI/IEC TIR80001-2-3:2012Technical Information ReportApplication of risk management for IT-networks incorporating medical devices Part 2-3: Guidance for wireless networksAn ANSI Technical Report prepared by AAMI ANSI/AAMI/IEC TIR80001-2-3:2012 Application of risk management for IT-networks inc

2、orporating medical devices Part 2-3: Guidance for wireless networks Approved 20 July 2012 by Association for the Advancement of Medical Instrumentation Approved 2 September 2012 by American National Standards Institute, Inc. Abstract: Supports the Healthcare Delivery Organizations (HDO) in the risk

3、management of medical IT-networks that incorporate one or more wireless links. Keywords: medical device, risk management, information technology, interoperability, wireless networks Published by Association for the Advancement of Medical Instrumentation 4301 N. Fairfax Drive, Suite 301 Arlington, VA

4、 22203-1633 www.aami.org 2012 by the Association for the Advancement of Medical Instrumentation All Rights Reserved This publication is subject to copyright claims of ISO, ANSI, and AAMI. No part of this publication may be reproduced or distributed in any form, including an electronic retrieval syst

5、em, without the prior written permission of AAMI. All requests pertaining to this document should be submitted to AAMI. It is illegal under federal law (17 U.S.C. 101, et seq.) to make copies of all or any part of this document (whether internally or externally) without the prior written permission

6、of the Association for the Advancement of Medical Instrumentation. Violators risk legal action, including civil and criminal penalties, and damages of $100,000 per offense. For permission regarding the use of all or any part of this document, complete the reprint request form at www.aami.org or cont

7、act AAMI, 4301 N. Fairfax Drive, Suite 301, Arlington, VA 22203-1633. Phone: +1-703-525-4890; Fax: +1-703-525-1067. Printed in the United States of America ISBN 1570204535 AAMI Technical Information Report A technical information report (TIR) is a publication of the Association for the Advancement o

8、f Medical Instrumentation (AAMI) Standards Board that addresses a particular aspect of medical technology. Although the material presented in a TIR may need further evaluation by experts, releasing the information is valuable because the industry and the professions have an immediate need for it. A

9、TIR differs markedly from a standard or recommended practice, and readers should understand the differences between these documents. Standards and recommended practices are subject to a formal process of committee approval, public review, and resolution of all comments. This process of consensus is

10、supervised by the AAMI Standards Board and, in the case of American National Standards, by the American National Standards Institute. A TIR is not subject to the same formal approval process as a standard. However, a TIR is approved for distribution by a technical committee and the AAMI Standards Bo

11、ard. Another difference is that, although both standards and TIRs are periodically reviewed, a standard must be acted onreaffirmed, revised, or withdrawnand the action formally approved usually every five years but at least every 10 years. For a TIR, AAMI consults with a technical committee about fi

12、ve years after the publication date (and periodically thereafter) for guidance on whether the document is still usefulthat is, to check that the information is relevant or of historical value. If the information is not useful, the TIR is removed from circulation. A TIR may be developed because it is

13、 more responsive to underlying safety or performance issues than a standard or recommended practice, or because achieving consensus is extremely difficult or unlikely. Unlike a standard, a TIR permits the inclusion of differing viewpoints on technical issues. CAUTION NOTICE: This AAMI TIR may be rev

14、ised or withdrawn at any time. Because it addresses a rapidly evolving field or technology, readers are cautioned to ensure that they have also considered information that may be more recent than this document. All standards, recommended practices, technical information reports, and other types of t

15、echnical documents developed by AAMI are voluntary, and their application is solely within the discretion and professional judgment of the user of the document. Occasionally, voluntary technical documents are adopted by government regulatory agencies or procurement authorities, in which case the ado

16、pting agency is responsible for enforcement of its rules and regulations. Comments on this technical information report are invited and should be sent to AAMI, Attn: Standards Department, 4301 N. Fairfax Drive, Suite 301, Arlington, VA 22203-1633. ANSI Technical Report This AAMI TIR has been registe

17、red by the American National Standards Institute as an ANSI Technical Report. Publication of this ANSI Technical Report has been approved by the accredited standards developer (AAMI). This document is registered as a Technical Report series of publications according to the Procedures for the Registr

18、ation of Technical Reports with ANSI. This document is not an American National Standard and the material contained herein is not normative in nature. Comments on this technical information report are invited and should be sent to AAMI, Attn: Standards Department, 4301 N. Fairfax Drive, Suite 301, A

19、rlington, VA 22203-1633. Contents Page Glossary of equivalent standards . vii Committee representation . x FOREWORD . xii INTRODUCTION xiv 1 Scope and object 1 1.1 Scope 1 1.2 Objective . 1 1.3 HDO scalability 2 2 Normative references 2 3 Terms and definitions 3 4 Wireless MEDICAL IT-NETWORK: An int

20、roduction 13 4.1 Basics 13 4.2 Enterprise MEDICAL IT-NETWORK 14 4.3 Use of VLANs and SSIDs . 14 4.4 Wide area MEDICAL IT-NETWORK 15 4.5 Smart phone applications . 16 4.5.1 General 16 4.5.2 Application clinical functionality 16 4.5.3 Cellular networks . 16 4.5.4 Smart phone coexistence . 17 4.5.5 Wir

21、eless data security 17 4.6 DISTRIBUTED ANTENNA SYSTEMS . 17 5 Wireless MEDICAL IT-NETWORKS: Planning and design 18 5.1 Clinical systems and their impact on the wireless network 18 5.1.1 Defining the clinical SLA 18 5.1.2 Creating partnerships . 18 5.1.3 Geographical location 18 5.1.4 Clinical use ca

22、se 19 5.2 MEDICAL DEVICE wireless capabilities 19 5.3 MEDICAL DEVICE capabilities and networking traffic profile . 19 5.4 Network performance requirements 19 5.5 QoS mechanisms . 20 5.6 Receiver capabilities 20 5.7 Received signal strength and SNR versus data rates . 21 5.8 Capacity versus coverage

23、versus AP density . 22 5.9 Deterministic versus non-deterministic wireless access protocol 23 5.10 Planning and design summary . 23 6 Wireless MEDICAL IT-NETWORKS: Deployment and configuration . 23 6.1 RISKS versus benefit of a wireless communications system 23 6.2 Licensed versus unlicensed spectru

24、m 24 Background of AAMI adoption of IEC/TR 80001-2-3:2012 . xi 6.3 Interference sources 24 6.4 Spectrum usage and allocation 24 6.4.1 Device coexistence 24 6.4.2 Spectrum management 24 6.4.3 Capacity management 25 6.5 Wireless network configuration (802.11 specific) 25 6.5.1 General 25 6.5.2 VLAN an

25、d SSID 25 6.5.3 Authentication and encryption 26 6.5.4 Vendor proprietary extensions 26 6.5.5 Cellular and proprietary networks . 26 6.5.6 Network availability 27 6.6 VERIFICATION testing . 27 6.6.1 General 27 6.6.2 Pre GO-LIVE VERIFICATION testing 27 6.6.3 GO-LIVE VERIFICATION testing 27 7 Wireless

26、 MEDICAL IT-NETWORKS: Management and support 28 7.1 General 28 7.2 Network and application management 28 7.3 Policies and procedures . 28 7.4 Change control 29 8 General RISK CONTROL measures . 29 8.1 General 29 8.2 Determining baseline networking performance . 29 8.3 Designing for coverage signal s

27、trength 30 8.4 Segregating traffic and data types 30 8.5 Environmental and physical changes . 30 8.6 Maintaining a clean RF environment 30 8.7 Capacity planning 31 8.7.1 General 31 8.7.2 5 GHz and DYNAMIC FREQUENCY SELECTION (DFS) . 31 8.7.3 Security measures and planning . 31 8.8 RF spectrum use 32

28、 8.9 Device and application classification 32 8.10 Guest or smart phone access . 33 8.11 WLAN infrastructure configuration 33 8.12 External partnering with both MEDICAL DEVICE and networking manufacturer . 33 8.13 Redundancy . 33 Annex A (informative) Clinical use cases and network traffic profiles

29、35 Annex B (informative) Questions to consider 37 Bibliography 42 Figure 2 HDO MEDICAL IT-NETWORK . 15 Figure 3 Wireless WAN connectivity . 16 Figure 4 SIGNAL TO NOISE RATIO . 21 Table A.1 Example clinical use cases and network traffic profiles . 36 Table A.2 Network profile parameters . 36 Figure 1

30、 Focus of technical report . xvi 2012 Association for the Advancement of Medical Instrumentation ANSI/AAMI/IEC TIR80001-2-3:2012 vii Glossary of equivalent standards International Standards adopted in the United States may include normative references to other International Standards. For each Inter

31、national Standard that has been adopted by AAMI (and ANSI), the table below gives the corresponding U.S. designation and level of equivalency to the International Standard. NOTE: Documents are sorted by international designation. The code in the US column, “(R)20xx” indicates the year the document w

32、as officially reaffirmed by AAMI. E.g., ANSI/AAMI/ISO 10993-4:2002/(R)2009 indicates that 10993-4, originally approved and published in 2002, was reaffirmed without change in 2009. Other normatively referenced International Standards may be under consideration for U.S. adoption by AAMI; therefore, t

33、his list should not be considered exhaustive. International designation U.S. designation Equivalency IEC 60601-1:2005 ANSI/AAMI ES60601-1:2005/(R)2012 Major technical variations IEC 60601-1:2005/A1:2012 ANSI/AAMI ES60601-1:2005/A1:2012 A1 identical IEC Technical Corrigendum 1 and 2 ANSI/AAMI ES60601

34、-1:2005/C1:2009/(R)2012 (amdt) C1 identical to Corrigendum 1 any IEC National Committee interested in the subject dealt with may participate in this preparatory work. International, governmental and non-governmental organizations liaising with the IEC also participate in this preparation. IEC collab

35、orates closely with the International Organization for Standardization (ISO) in accordance with conditions determined by agreement between the two organizations. 2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international consensus of opinion on

36、 the relevant subjects since each technical committee has representation from all interested IEC National Committees. 3) IEC Publications have the form of recommendations for international use and are accepted by IEC National Committees in that sense. While all reasonable efforts are made to ensure

37、that the technical content of IEC Publications is accurate, IEC cannot be held responsible for the way in which they are used or for any misinterpretation by any end user. 4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications transparently to th

38、e maximum extent possible in their national and regional publications. Any divergence between any IEC Publication and the corresponding national or regional publication shall be clearly indicated in the latter. 5) IEC itself does not provide any attestation of conformity. Independent certification b

39、odies provide conformity assessment services and, in some areas, access to IEC marks of conformity. IEC is not responsible for any services carried out by independent certification bodies. 6) All users should ensure that they have the latest edition of this publication. 7) No liability shall attach

40、to IEC or its directors, employees, servants or agents including individual experts and members of its technical committees and IEC National Committees for any personal injury, property damage or other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) a

41、nd expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC Publications. 8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is indispensable for the correct application of this publication.

42、9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of patent rights. IEC shall not be held responsible for identifying any or all such patent rights. The main task of IEC technical committees is to prepare International Standards. However, a

43、 technical committee may propose the publication of a technical report when it has collected data of a different kind from that which is normally published as an International Standard, for example “state of the art“. IEC 80001-2-3, which is a technical report, has been prepared by a Joint Working G

44、roup of subcommittee 62A: Common aspects of electrical equipment used in medical practice, of IEC technical committee 62: Electrical equipment in medical practice and ISO technical committee 215: Health informatics. 2012 Association for the Advancement of Medical Instrumentation ANSI/AAMI/IEC TIR800

45、01-2-3:2012 xiii The text of this technical report is based on the following documents: Enquiry draft Report on voting 62A/784/DTR 62A/804/RVC Full information on the voting for the approval of this technical report can be found in the report on voting indicated in the above table. This publication

46、has been drafted in accordance with the ISO/IEC Directives, Part 2. Terms used throughout this technical report that have been defined in Clause 3 appear in SMALL CAPITALS. The committee has decided that the contents of this publication will remain unchanged until the stability date indicated on the

47、 IEC web site under “http:/webstore.iec.ch“ in the data related to the specific publication. At this date, the publication will be reconfirmed, withdrawn, replaced by a revised edition, or amended. A bilingual version of this publication may be issued at a later date. IMPORTANT The “color inside” lo

48、go on the cover page of this publication indicates that it contains colors which are considered to be useful for the correct understanding of its contents. Users should therefore print this document using a color printer. xiv 2012 Association for the Advancement of Medical Instrumentation ANSI/AAMI/

49、IEC TIR80001-2-3:2012 INTRODUCTION 0.1 Background Wireless communications has been a key technology enabling the connectivity of MEDICAL DEVICES for decades. Early examples of the use of wireless technologies and MEDICAL DEVICES include ambulatory cardiac monitoring systems in hospitals and telemetry systems used by paramedics over wide area wireless networks. While these solutions were based on proprietary technology, the advent of off-the-shelf standards-based approaches has resulted in increasingly ubiquitous wireless communications systems bot