Integrate Mixed - Criticality Components with Formalized Architectural Patterns

Example 1: After major surgery, a patient is allowed to operate an infusion pump with potentially lethal pain killers (patient controlled analgesia (PCA)). When pain is severe, the patient can push a button to get more painrelieving medication, e.g., morphine sulfate. This is an example of a safety critical device operated by an impossible to verify component, the patient. Nevertheless, the PCA system as a whole needs to be certifiably safe in spite of a patient’s unsafe actions.