Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Biotech Software

Writing Open Source Medical and Nursing Apps? 45

SteamedPenguin asks: "I am writing a Fick Cardiac Index calculator. It isn't quite finished, but it is almost done. I am bitten by the bug. Writing software, even simple software, in the health care field is fun. I see a good number of Slashdot readers who are either health care practitioners, or claim to be, so I am curious if there are are other nursing and medical tools out there that are written using Open Source languages, and/or are Open Source themselves. Google gives a good number. I am specifically interested in Open Source applications though. I am also interested to hear from people who are writing such software. Can these applications be released under the GPL? Are the algorithms proprietary? What resources are there for people who want to implement these small helper applications?"
This discussion has been archived. No new comments can be posted.

Writing Open Source Medical and Nursing Apps?

Comments Filter:
  • "Open Source languages", "algorithms proprietary", some people really shouldn't string words together.
    • Re:Sigh (Score:3, Informative)

      by s88 ( 255181 )
      Exactly what, pray tell, do you think is wrong with the phrase: "Are the algorithms proprietary?"? Proprietary algorithms are fairly prevalent in the medical community.

      And yes, there certainly is such a thing as an "Open Source Language" (Perl) and a non-open source language (C#).

  • by peripatetic_bum ( 211859 ) on Wednesday April 07, 2004 @09:39PM (#8799436) Homepage Journal
    Being one of authors, I will plug a good resource. Call the Linux Medicine How to. If you see any problems with the how-to, let me know and I will fix it.

    It can be read at Linux Medicine How-to [tldp.org]

    Comments are appreciated
    • If you see any problems with the how-to, let me know and I will fix it.

      Cool, a colleague has been asking about something like this. How about links to the tar ball? Or cross links between the one-chapter-per-page version and the the monolithic version?

      My work style may change again, but for right now having a monolithic version for easy download is a big bonus. Not much use getting on the train, boat, airplane and discovering that I only got a portion of the material and probably won't make time l

  • OpenEMR (Score:5, Informative)

    by bentfork ( 92199 ) on Wednesday April 07, 2004 @09:49PM (#8799501)
    I have some MD friends, and I help them with their softwhere on occasion. A couple weeks ago I came across OpenEMR.

    It is a OpenSource ( I couldn't find the license, but probably its GPL'd) Electronic Medical Record system. It looks great, I will probably be demoing it for some Doctors in the near future. ( once I get some time to install it myself, check the code etc... )

    from the site: www.openemr.net [openemr.net]
    OpenEMR is a Free, Open Source medical clinic practice management and electronic medical record application. OpenEMR offers

    • 1. Practice Management features for patient scheduling, patient demographics;
    • 2. Electronic Medical Records, creating an on-line record of your encounters;
    • 3. Ability to enter CPT and ICD codes at the end of a patient encounter;
    • 4. Advanced reporting capabilities with phpMyAdmin, which is now packaged with OpenEMR;
    • 5. Prescription writing capability with ability to email or print prescriptions;
    • 6. HL7 support to parse HL7 messages; and
    • 7. HIPAA compliance.
    • How is it HIPAA compliant?

      Do you care to elaborate?

      HIPAA compliance is really not something that can be said about software. It can be non-compliant (ie, no user tracking, no admin logs, etc..) but the implementation is beyond software capabilities (generally, unless it's using biometric devices to verify users). So a office may be HIPAA compliant or not regardless of whether they use this software.
      • All that I know is
        HIPAA = Health Insurance Portability and Accountability Act
        If anyone knows anything about complience I would be interested.
        • It might be better to talk about "HIPAA Capable" or "HIPAA Ready". As another poster said, HIPAA compliance is a much more complicated matter than just software. It is no more correct to say that a piece of software is "HIPAA compliant" than it is to say it is "ISO-9000 compliant". Both are broad standards that cover a range of practices well beyond the scope of any possible software.

          HIPAA has three sections: Transactions, Privacy, and Security. I'm more familiar with the Privacy and Security regs than Tra
  • Freemed (Score:5, Informative)

    by BrynM ( 217883 ) * on Wednesday April 07, 2004 @09:52PM (#8799530) Homepage Journal
    Freemed [freemed.org] is good. You'll have to dedicate a machine to running it, but all of the people in the office use it from a web browser. It's also heading torward FULL HIPAA compliance. Good luck.
  • Test the software very well, especially if anyone's life might depend on the output.

    Just making sure...
    • by RMH101 ( 636144 ) on Thursday April 08, 2004 @05:39AM (#8801520)
      ...for any system that records electronic records of patient data, you're required by law to document, validate and formally test it to within an inch of its life. i do this for a living - this is not the kind of thing you can knock up in your back room and use in a medical setting for very long without getting sued/closed down by the FDA/etc.

      If you don't know what 21CFR-11, validation, ER/ES etc are, then you should not be doing this.

      • Since I wrote the app for my own edification I don't see how the FDA gets involved. At best I have no control over who uses the application.

        Most importantly though: a Cardiac Index can be calculated by hand or by using a pocket calculator. Does the FDA regulate pocket calculator outputs in hospitals?
        • by Anonymous Coward
          No. But if your tool is being used to decide treatment/diagnosis, and it has a flaw which can cause inappropriate treatment/diagnosis to be made, you can and will be held responsible.

          If the doctor makes a math error in doing the calculation, it's their responsibility. If they trust your tool not to make math errors, it's yours. If you don't do thorough testing and documentation, distribute your app at your own risk.
        • well, you can't sell it. trust me on this, this is what i do for a living. and yes, the FDA would regulate pocket calculator output if it was being used for clinical submission data. seriously.
          • Why would I want to sell it? It is an algorithm not written by me. My only effort was a simple implementation in PHP and XHTML.

            You say the FDA would regulate pocket calculator output. Ok fair enough, I'll bite. Calculators are used on a daily basis for clinical data submission. Tabulating I&Os, figuring out dosages, etc.

            What about PDAs? Are they to be regulated as well?

            What about the choice of software you use in your computer systems? Some hospitals use Windows in a clinical setting. As an insecure
            • i'm not getting at you personally, but from professional experience, you have to be 100 percent nailed on it.
              sure, we use windows, but we validate it right down to the little rubber feet on the bottom of the PC. exact patch levels, precise build instructions with no permitted deviations...
      • this is not the kind of thing you can knock up in your back room
        Not to be pedantic, but I believe that the phrase used to describe hurriedly putting something together is "knock out".

        Although, I'm certain that there is quite a bit of knocking-up done in back room medical settings...
      • Bzzzzt! Wrong!

        I work for a pharma company and I do know CFR 21 Part 11, and you are wrong.
        Developers can write anything they want, it's the implementation that must be validated. If a company says their software is CFR 21 Part 11 certified, they are lying. If you write software for a regulated industry, you won't be sued or shut down no matter how crappy it is. The company that implemented and used your software won't be so lucky, but it's up to them to perform the needed due diligence, not the SW dev.

        No

        • nope. i work for a pharma company too, and i design, implement and support networks used for clinical data capture, trial submission data and dosage control. we use 3rd party software and they *do* have a due diligence they have to do. you can't consider your whole implementation validated without doing your own exhaustive tests, but the vendor *does* need to be audited and shown to be compliant, using version control and formal system tests. this is just The Way It Is.
          • Yes, but *you* audit them, not the FDA, and then the FDA audit you. This is a big distinction and removes (fortunately) the liability from the developer and places it on the implementor. This is fortunate because on the implementing company can asses the fitness ofthe software within their environment.
            • ...agreed (we're getting a bit geeky, here, aren't we ) - we audit the software company to make sure they're supplying the audited software in a way which is in itself compliant (in the UK, ISO 9001 for starters, can demonstrate ER/ES compliance, auditing, document control, etc) then you can use their system without having to completely reverse engineer it to show repeatability.
              if the developer *couldn't* show this level of assured quality - say they don't use any version control or make any alterations
              • Our systems even specify exact driver versions, BIOS firmware, hardware revisions etc. to ensure full compliance.

                Yup, and we often reject critical security patches as too much trouble to apply and re-validate.A convoluted change management process means less work for me also, because the paperwork is so daunting, most users give up and work around the existing bug or mis-configuration. Seems kind of silly and conter-productive, but I would rather do silly for a salary, than elegant for the unemployed.

                • you know, i thought i was the only person on here who had to deal with all this kind of stuff.
                  currently wading through a stack of paper around 3 feet high to prepare our preprod boxes for user acceptance testing, and it's *hell*. still, as you say, it pays the mortgage.
                  • Yeah, this week I've gotta write an IQ for a new Solaris box. The system it will run is not to be validated, but every bit of HW going into our server room must be IQ'd. Why? I think my boss just feels more comfortable when surrounded by stacks of white binders full of 3 hole punched printouts no one will ever read.

                    I must continually fight the temptation to include stuff like a page that says "This page intentionally left blank to see if anyone ever reads this stuff" or "Help, I'm trapped in this printer b

      • 21CFR11 is relevant to systems used for documenting drug development, but really does represent good practices fo any software. However, there is actually no such specific standard for general health care. Hipaa Privacy, and soon, hipaa security, cop out to vaguely defined, non specific quasi standards that give way too much wiggle room. They took the teeth even out of electronic signatures in the final version. Writ your software, sell it for millions, don't worry: the eula promises nothing to the custome
  • Um... (Score:3, Insightful)

    by ObviousGuy ( 578567 ) <ObviousGuy@hotmail.com> on Wednesday April 07, 2004 @10:18PM (#8799721) Homepage Journal
    Forgive me if this is covered somewhere on your site, but why do you use PHP to implement this?

    If your server goes down, the tool is completely useless.

    If, OTOH, you had used Javascript to process all this locally, then the webpage could be kept on a local machine and have the results immediately instead of having to load a second page.

    As far as your program goes, you need to label the text boxes with the units measurements.
    • I am never sure if the IT department is going to turn JavaScript off at the terminals. Most importantly though, I use PHP because I like it, and to teach myself. I am generally not disposed to learning languages that I can turn off at the browser and whose implementations vary from browser to browser. It is bad enough with markup languages. If the server goes down the Nurses can calculate the Fick CI by hand as they usually do. This is is just a calculator. At some point it is likely that the application
      • I think this calculator would work best by using a java applet. Or even a small flash program using actionscript. The problem with these solutions is that they need client plugins, but the computers should hane these plugins easy.
        • I absolutely refuse to use Flash. It could be the best thing since sliced bread, but I don't give a rats ass.

          Java is only marginally better, neither Java nor Flash are Open Source and as such I don't care to learn them unless I specifically get paid for it.

          More importantly though, I don't know if hospital terminals have Java support or Flash support. In any case, I do not consider it acceptable that terminals that are supposed to be secure have secondary software installed just for a small application lik
    • Re:Um... (Score:3, Informative)

      by peacefinder ( 469349 ) *
      Server-centric operation will be helpful for compliance with the HIPAA security standard. (Not required, just helpful.)

      The less you need to transmit Electronic Personally-identifiable Healthcare Information, the simpler your security problem will be.

      Storing ePHI on the local machines raises all sorts of complications regarding physical security of (and data destruction upon) the point-of-use devices that are a real pain in the arse. If the end user gets the ePHI through a browser, it's a much simpler matt
  • linux med news (Score:4, Informative)

    by Cyn ( 50070 ) <cyn.cyn@org> on Thursday April 08, 2004 @02:17AM (#8800883) Homepage
    Linux Med News covers just about everything you're wondering about in this area - check them out, you'll find enough material to chew on for a while searching their archives. I'm sure more happens in the field than they track, but they centrally track more than I've seen elsewhere.

    http://www.linuxmednews.com/
  • open Source Health (Score:4, Informative)

    by Karora ( 214807 ) on Thursday April 08, 2004 @05:15AM (#8801458) Homepage

    Open source has some amazing examples in the medical field.

    "Vista" is the system used to run a couple of hundred hopsitals - particularly the veteran's administration. It's open source (public domain), and nowadays can run on a completely open-source (GPL) stack, as well.

    Or there's Care 2000 (probably Care 2k by now) which runs a few European hospitals.

    Debian has a sub-distribution for Medical software (debian-med) which includes more "focused" stuff.

    And, as someone else points out, linuxmednews will give you regular gossip for the sector.

    Be happy! Be healthy!

  • by WSSA ( 27914 )
    Freshmeat has an entire section of medical apps:

    http://freshmeat.net/browse/266/ [freshmeat.net]

  • Medical Manager (Score:3, Interesting)

    by i.r.id10t ( 595143 ) on Thursday April 08, 2004 @08:53AM (#8802327)
    A few of my former coworkers and fellow students now work for this little company called Medical Manager. Last I spoke with one of the people doing programming, they do like to use various OSS tools and languages, like Python.

    As far as F/OSS software itself, dunno. Like others have posted, there is TONS of testing to do when someones life or lab results are on the line.
  • You may find an almost complete list of Open Source and of commercial Linux applications for different medical purposes in the Linux-Medicine-HOWTO [tldp.org].
  • Be careful trying to use what you design in the USA. Some software is classified as a medical device [fda.gov] in the US and needs FDA approval before it can be used. Outside USA, other countries have their own approval procedures.
  • I am in the middle actually, of replacing a application called LyTEC, rebuilding it using a Java Tomcat MySQL.

    -Hack

What is research but a blind date with knowledge? -- Will Harvey

Working...