Wearable Health Patch
Table
| Subsystem | Failure Mode | Effect | Severity | Likelihood | Detection | RPN | Mitigation |
|---|---|---|---|---|---|---|---|
| USB / patient electrodes | USB connected while electrodes contact patient | Leakage current through patient-applied parts | 10 | 4 | 4 | 160 | Battery-only sensing policy, hardware electrode disconnect, USB detect, leakage testing, medical isolation if sensing while charging. |
| LiPo battery | Overcharge/thermal rise near skin | Burn, cell damage, unsafe operation | 9 | 3 | 4 | 108 | Protected cell, BQ24074 TS/NTC, conservative charge current, thermal testing, firmware cutoff. |
| Charger input | Noncompliant USB supply/ESD surge | Damage, overheating, unsafe ground path | 8 | 4 | 5 | 160 | VBUS ESD, input current limit, charger OVP, test with chargers/cables, no patient sensing on USB. |
| BLE security | Unauthenticated data access/update | Privacy/cybersecurity failure | 8 | 4 | 5 | 160 | BLE bonding/encryption, signed firmware, debug lock, key management. |
| ECG AFE | Motion/electrode artifact interpreted as physiological signal | False heart-rate/rhythm data | 7 | 6 | 5 | 210 | Contact quality, lead-off detection, signal-quality index, algorithm validation. |
| PPG | Ambient light/motion/poor contact | Incorrect HR/SpO2-like data | 7 | 7 | 5 | 245 | Optical baffle, contact-pressure compensation, accelerometer artifact rejection, no SpO2 claim until validated. |
| Electrochemical glucose/lactate | Sweat/ISF signal poorly correlated to blood analyte | Incorrect biomarker claim | 9 | 7 | 7 | 441 | Research-only positioning, calibration, pH/sweat-rate/temp compensation, chemistry validation, clinical study before claims. |
| Pressure sensor | Contact/pulse signal used as BP without validation | Incorrect BP claim | 9 | 6 | 7 | 378 | Treat as contact/pressure signal only; cuffless BP requires separate clinical validation. |
| Flex PCB | Copper crack or solder fatigue in bend region | Intermittent readings, sensor failure | 7 | 5 | 5 | 175 | Rigid islands, no vias/components in bend zones, strain relief, flex-cycle testing. |
| Moisture/sweat ingress | Corrosion/leakage on high-impedance nodes | Drift/noise/failure | 8 | 6 | 5 | 240 | Encapsulation, guarded high-Z traces, compatible finishes/materials, environmental testing. |
| RF antenna | Detuned by skin/battery/copper | Poor BLE range, data loss | 5 | 5 | 4 | 100 | Edge antenna placement, keepout, on-body RF validation. |
| Firmware | Patient switch not disabled on USB attach | Unsafe electrode path | 10 | 3 | 4 | 120 | Hardware interlock, fail-safe default, USB attach interrupt, startup self-test. |
Scope
Failure Mode Table
Risk Priority Actions
Open Items
2026-07-27 FMEA Update