This is the Continuous Integration Build of FHIR (will be incorrect/inconsistent at times).
See the Directory of published versions 
Responsible Owner: Work Group Orders and Observations & Devices ![]() | Standards Status: Informative |
Note to Balloters for Ballot5:
Non-substantive
- Elaborated common use cases with detailed example scenarios and intended use FHIR-54472
.
Changes since 6.0.0-ballot5:
- FHIR-58277
- Added descriptions for DeviceAlert, DeviceMetric, and DeviceRequest.
- FHIR-58276
- Removed the unsupported remote device settings control use case.
- FHIR-58273
- Clarified that implementation guides define linkage to originating orders for DeviceAssociation.
- FHIR-58270
- Clarified Observation status guidance for suspected device-related quality concerns.
- FHIR-58237
- Added DeviceAssociation context to the Device instance workflow.
- FHIR-58235
- Clarified the distinction between Device and DeviceDefinition.
Note to Implementers: This module page describes the context and usage of the Devices and related resources. HL7 seeks specific feedback on the usefulness of this module page and the implementability of the referenced resources.
This module is concerned with "devices" and how to use the various device-related FHIR resources to address common use cases. Within FHIR a "device" can represent a wide range of equipment including such diverse things as MRIs, beds, tongue depressors, bandages, stents and implants, blood pressure monitors, weight scales, infusion pumps, clinical decision support software, continuous glucose monitors, and bedside monitors. Because of the range of possible devices and the range of uses, systems may choose to implement a subset of device-related resources.
Device-related resources include:
When considering the use of FHIR for the integration of device information and services, many resources may be involved in even the simplest application. Additionally, given the robust nature of FHIR resources, a single basic capability will have many potential solutions all using valid FHIR resource configurations. The following diagram captures some of the key device-related FHIR resources and representative relationships. It is recommended that readers review the respective resources for all valid relationships.
Looking into the details of each of the resources on this diagram, though, will reveal a significant amount of detail that can often lead to confusion as to the high-level purposes they are intended to address. Only the most comprehensive applications will require integration of all the model components. Most will require only a subset. To sort this out, the following examples are provided to help understand the key concepts and rationale for their implementation.
Resources: Device, Device Definition
When working with a specific INSTANCE of a device (that can be uniquely identified for example: Company Z Super Ventilator, model SV, serial #123xyz456), a Device resource is used. A Device may reference a single DeviceDefinition when additional definitional information about the device is necessary to exchange.
Device represents a physical or virtual device instance. DeviceDefinition represents the catalog-level definition of a device type or product model.
In many clinical workflows, the Device resource is used together with DeviceAssociation to capture the time-bounded relationship between a specific device instance and a patient, location, practitioner or another device.
The following detailed use cases illustrate common device workflows and the resources most often involved:
| Section | Details |
|---|---|
| Title | Tracking Defective Device Usage Across Patients (Inpatient Blood Pressure Monitor) |
| Scope | Inpatient ward / Reusable spot-check vital signs device (communicating blood pressure monitor) |
| Scenario / Storyboard | Nurse Lisa notices that a blood pressure device on the ward is defective and is producing incorrect measurement values. The same device has been used to take spot measurements on several patients over the previous days. After discussing the issue with her colleagues, the biomedical engineering team is asked to determine which patients had measurements taken with this device since its last technical inspection. Using the device's unique identifier, the team queries the patient records to find every encounter in which the device was used, along with the measurements it produced. The affected measurements are then labeled as suspicious or erroneous in each patient's record, and clinicians are notified so that new measurements can be taken. The captured device-to-patient linkage and the time-bounded usage records make it possible to support future safety reviews, equipment recalls, and quality investigations. |
| Primary Goal / Problem Statement | Provide reliable, time-bounded traceability between a specific device instance and every patient on whom it was used, so that erroneous data can be identified, flagged, and remediated, and so that patient safety follow-up actions can be executed. |
| Operational / Additional Requirements |
|
| Interoperability Considerations |
|
| Implementation Guidance |
|
| Example Artifacts / References | |
| Data Requirements |
|
| Core FHIR Resources | Device, DeviceAssociation, DeviceUsage, Observation, Patient (optional: Practitioner, DeviceDefinition) |
| Section | Details |
|---|---|
| Title | Tracking Device Settings During Measurement (ICU Ventilator Settings Review) |
| Scope | Inpatient ICU / Communicating ventilator with configurable operating modes and continuously streamed measurements |
| Scenario / Storyboard | Patient Josh is sedated and ventilated in the ICU. During a case review, doctor Sarah notices that Josh's respiration rate was unexpectedly low for a few minutes during the previous shift. To investigate whether the ventilator settings were the cause, Sarah retrieves the device settings that were active in the period starting one hour before and ending one hour after the abnormal readings. By correlating the time-stamped settings records with the measurement timeline, Sarah discovers that the ventilation mode was changed during that window and then reverted a few minutes later. This insight allows her to attribute the anomalous readings to the transient mode change rather than a clinical deterioration, and to document the finding for the clinical team and for equipment governance review. |
| Primary Goal / Problem Statement | Enable retrospective correlation of device operating settings with clinical measurement values over a specified time window, so that clinicians can determine whether an anomalous measurement was caused by a device configuration change rather than a change in the patient's clinical state. |
| Operational / Additional Requirements |
|
| Interoperability Considerations |
|
| Implementation Guidance |
|
| Example Artifacts / References | |
| Data Requirements |
|
| Core FHIR Resources | Observation, DeviceMetric, Device (optional: DeviceAssociation, Patient, Practitioner) |
| Section | Details |
|---|---|
| Title | Tracking Alarm Settings During a Device Alarm (Cardiology Telemetry Monitor - Heart Rate Thresholds) |
| Scope | Inpatient cardiology ward / Communicating portable telemetry monitor with configurable alarm thresholds and continuous EKG measurement |
| Scenario / Storyboard | Patient Helen is recovering from heart failure in the cardiology ward. She wears a portable telemetry monitor around the clock that continuously measures her EKG. During the night shift, nurse Frank receives a tachycardia alarm from Helen's monitor. Helen's current heart rate is 97 bpm, which Frank does not consider clinically concerning based on his experience. He checks on Helen, confirms she is comfortable, and returns to the nurses' station. Wanting to understand why the alarm triggered at such a low heart rate, Frank queries the alarm record to determine which tachycardia threshold was active at the time the alarm fired. He discovers the limit was configured at 90 bpm - significantly below the typical clinical range of 120-140 bpm. This finding prompts a review of the device's alarm configuration, ensuring thresholds are corrected and appropriate for Helen's care plan going forward. |
| Primary Goal / Problem Statement | Enable clinicians to retrospectively determine the exact alarm threshold values that were active on a device at the moment a specific alarm fired, so that clinically inappropriate configurations can be identified, corrected, and documented as part of patient safety and equipment governance processes. |
| Operational / Additional Requirements |
|
| Interoperability Considerations |
|
| Implementation Guidance |
|
| Example Artifacts / References | |
| Data Requirements |
|
| Core FHIR Resources | DeviceAlert, Device, Patient (optional: DeviceMetric, Observation, Practitioner) |
| Section | Details |
|---|---|
| Title | Tracking Device Management - Allocation, Dispense, and Return (Home Ventilator Stock) |
| Scope | Outpatient / home care / Reusable durable medical equipment (home ventilator) managed by a hospital contractor |
| Scenario / Storyboard | Maria works for the outpatient service contractor of her town's hospital and is responsible for managing the stock of home ventilators. While reviewing the device inventory, she notices a ventilator with an unknown status. To investigate, she queries the device's historical records in the system. The records show that the ventilator was assigned and dispensed to a patient the previous year and was returned to the storage room two weeks ago. However, the device has not yet been administratively unassigned from that patient, leaving its status ambiguous. After physically confirming that the device is present in the storage room and is in operative condition, Maria updates the device's association record to reflect that it has been returned and is now available for the next outpatient. |
| Primary Goal / Problem Statement | Provide a complete, accurate, and up-to-date lifecycle record of a reusable device - covering allocation, dispensing, active use, and return - so that administrative staff can determine the true current availability of any device in the inventory and ensure it is correctly assigned or released for re-use. |
| Operational / Additional Requirements |
|
| Interoperability Considerations |
|
| Implementation Guidance |
|
| Example Artifacts / References | |
| Data Requirements |
|
| Core FHIR Resources | Device, DeviceAssociation, DeviceDispense, Patient (optional: Practitioner, Location) |
| Section | Details |
|---|---|
| Title | Controlling Device Management - Ordering Continuous Patient Monitoring for 72 Hours (General Ward Bedside Monitor) |
| Scope | Inpatient general ward / Bedside monitor with continuous EKG, SpO2, and periodic blood pressure measurement capabilities |
| Scenario / Storyboard | Lizzy is the attending physician in a general ward. She has an elderly patient with pulmonary edema who recently experienced an acute cardiorespiratory event. Given the patient's risk of rapid deterioration, Lizzy decides that continuous monitoring is necessary. Through the hospital's EHR, Lizzy submits a monitoring order specifying continuous EKG and SpO2 surveillance and periodic blood pressure measurements for the next 72 hours. The order is communicated to the nursing staff and, where the infrastructure supports it, to the biomedical equipment management system so that an appropriate bedside monitor can be allocated and associated with the patient. The resulting device assignment, any dispense event, and the observations produced during the monitoring period are all traceable back to the original order. |
| Primary Goal / Problem Statement | Enable a clinician to place a structured order for device-based monitoring, ensure the required device is allocated and associated with the correct patient, and maintain traceability between the clinical order, the device assignment, and the observations produced during the monitoring period. |
| Operational / Additional Requirements |
|
| Interoperability Considerations |
|
| Implementation Guidance |
|
| Example Artifacts / References | |
| Data Requirements |
|
| Core FHIR Resources | Patient, ServiceRequest (optional: DeviceRequest, DeviceDefinition, Device, DeviceAssociation, DeviceDispense, Observation, Practitioner) |
The following are the core device-related resources:
| Name | Description/Relationship |
|---|---|
| Device |
A type of a manufactured item that is used in the provision of healthcare without being substantially changed through that activity. The device may be a medical or non-medical device, and might or might not be capable of communicating. A device may be a physical object or virtual, such as software. An instrument, apparatus, implement, machine, appliance, implant, reagent for in vitro use, software, material or other similar or related article, intended by the manufacturer (3.33) to be used, alone or in combination, for human beings, for one or more specific medical purpose(s). |
| Device Alert | Represents an alert or alarm condition detected by a health device and requiring awareness or action. |
| Device Association | Record of association or dissociation of the device with patient or other device, or a practitioner, group, location. This is a more precise record of association with a patient. |
| Device Definition | The DeviceDefinition provides a description of all instances of a particular model of device. |
Device Dispense
|
Record of allocation of the device to a patient |
| Device Metric | Describes a measurable, calculable, or configurable device channel, setting, or metric. |
| Device Request | Represents a request that a patient use or be provided with a device. |
Device Usage
|
Record of use by patient, whereas DeviceAssociation is more record of association or dissociation of the device with patient. DeviceUsage has details about how it was used; DeviceAssociation does not. |
The following are the secondary resources that are used in many device related activities:
| Name | Module(s) | Description/Relationship |
|---|---|---|
| Patient | Administration | |
| Location | Administration | |
| Service Request | Clinical, Workflow | |
| Procedure | Clinical |
|
| Observation | Diagnostics | |
| Endpoint | Administration | |
| Bundle | Foundation |
The Device-related resources typically represent patient-specific data, and as such are susceptible to data breaching. Necessary privacy and security provisions must be in place when searching and fetching this information. For more general considerations, see the the Security and Privacy module.
Device data must be treated securely across all three aspects that include confidentiality, integrity, and availability. Furthermore, proper confidentiality, integrity and availability protections must be applied across the entire ecosystem that delivers the data from the device to personal health or point of care services. Device data privacy must also be considered to ensure that patient identifiable data is not compromised and made public. The ecosystem delivering the device data must not publicly associate device data with the patient or user to which that data belongs. In addition, access to device data must be restricted to those who need to know in clinical and consumer settings and to those who are allowed access by the user or patient.
It is highly recommended that a proper methodology is used to assess the security vulnerabilities and associated threats of any such architecture and to apply proper mitigation techniques based on the risks exposed by such threats. To that end, it is recommended that security methods are constructed based on the IEEE 11073-40101
and IEEE 11073-40102
standards that provide the framework for device cybersecurity vulnerability analysis and risk mitigation. Such analysis will enable application of transport-specific mitigation techniques such as the Bluetooth Authorization Control Service
and Profile
specifications.
| Name | Maturity Level | Known changes | |
|---|---|---|---|
| Device | The Device resource has undergone substantial change since R5, to include removing core elements. The Device.owner has been moved to DeviceAssociation.relationship to indicate the .subject of the association is an owner. The following core elements: mode, cycle, duration, gateway and endpoint have been moved to extensions (note: the extensions will not be available in R6 Comment Only #3 ballot). | ||
| Device Alert | |||
| Device Association | |||
| Device Definition | |||
Device Dispense
|
|||
| Device Metric | |||
| Device Request | |||
Device usage
|
O&O welcomes feedback to show if the resource designs have made a solution that works, and is implementable, for users across a range of domains.
The resources and guidance provided in this module are the combined work of a joint project between the HL7 Orders and Observations and Health Care Devices Work Groups.
This module reflects collaboration between the Health Care Devices Work Group, which provides device-specific domain expertise, and the Orders and Observations Work Group, which sponsors and manages the FHIR specification content for the module.