한국어

Chapter 8: WIA-MEDICAL-IOT Standard

Complete Technical Specification with 4-Phase Implementation Architecture

8.1 Standard Overview

The WIA-MEDICAL-IOT standard provides a comprehensive framework for implementing secure, interoperable Internet of Medical Things systems. Built on the WIA 4-phase architecture (Data, API, Protocol, Integration), this standard enables seamless connectivity between medical devices, remote monitoring platforms, clinical systems, and analytics applications.

Guided by the principle of 弘益人間 (Hongik Ingan) - "Benefit All Humanity" - this standard aims to make connected health technologies accessible globally, enabling continuous care and early intervention regardless of geographic or economic barriers.

4
Architecture Phases
15
Core Data Models
32
API Endpoints
100%
FHIR Compatible

8.2 WIA 4-Phase Architecture

The WIA-MEDICAL-IOT standard implements the WIA 4-phase architecture pattern:

Architecture Philosophy

The 4-phase architecture separates concerns into distinct layers: Phase 1 (Data) defines device and observation models compatible with FHIR; Phase 2 (API) provides RESTful endpoints for device management and data access; Phase 3 (Protocol) enables device communication via BLE, MQTT, and web protocols; Phase 4 (Integration) connects with EHR, analytics, and clinical systems.

Phase Name Purpose Components
Phase 1 Data Layer Information modeling Device, Observation, Patient models
Phase 2 API Layer Programmatic access FHIR APIs, device management, alerts
Phase 3 Protocol Layer Device communication BLE PHD, MQTT, IEEE 11073
Phase 4 Integration Layer External connectivity EHR, RPM platforms, analytics

8.3 Phase 1: Data Layer Specification

The Data Layer defines core information models aligned with FHIR and IEEE 11073 standards:

Core Data Models

Device Model

{
  "resourceType": "Device",
  "id": "string (UUID)",
  "identifier": [{
    "system": "urn:ietf:rfc:3986",
    "value": "UDI (Unique Device Identifier)"
  }],
  "status": "active | inactive | entered-in-error",
  "manufacturer": "string",
  "deviceName": [{
    "name": "string",
    "type": "udi-label-name | user-friendly-name | patient-reported-name"
  }],
  "modelNumber": "string",
  "serialNumber": "string",
  "type": {
    "coding": [{
      "system": "urn:iso:std:iso:11073:10101",
      "code": "device type code"
    }]
  },
  "patient": { "reference": "Patient/123" },
  "owner": { "reference": "Organization/456" }
}

Observation Model

{
  "resourceType": "Observation",
  "id": "string (UUID)",
  "status": "final | preliminary",
  "category": [{
    "coding": [{
      "system": "http://terminology.hl7.org/CodeSystem/observation-category",
      "code": "vital-signs"
    }]
  }],
  "code": {
    "coding": [{
      "system": "http://loinc.org",
      "code": "LOINC code",
      "display": "Measurement type"
    }]
  },
  "subject": { "reference": "Patient/123" },
  "effectiveDateTime": "2025-01-15T10:30:00Z",
  "device": { "reference": "Device/456" },
  "valueQuantity": {
    "value": 120,
    "unit": "mmHg",
    "system": "http://unitsofmeasure.org",
    "code": "mm[Hg]"
  }
}

Alert Model

{
  "alertId": "string (UUID)",
  "patientId": "string",
  "deviceId": "string",
  "alertType": "threshold | trend | missing-data | device-issue",
  "severity": "critical | high | medium | low",
  "condition": {
    "parameter": "string (e.g., 'systolic_bp')",
    "operator": "gt | lt | eq | trend_up | trend_down",
    "value": "number",
    "duration": "ISO 8601 duration"
  },
  "triggerObservation": { "reference": "Observation/789" },
  "status": "active | acknowledged | resolved",
  "timestamp": "datetime",
  "assignedTo": { "reference": "Practitioner/321" }
}

8.4 Phase 2: API Layer Specification

The API Layer provides RESTful endpoints for device management and data access:

API Endpoints Overview

Category Endpoint Method Description
Devices /api/v1/devices GET List devices (filtered)
/api/v1/devices/{id} GET Get device details
/api/v1/devices/{id}/assign POST Assign device to patient
Observations /fhir/Observation GET Query observations
/fhir/Observation POST Submit observation
/api/v1/observations/aggregate GET Get aggregated data
Alerts /api/v1/alerts GET Query active alerts
/api/v1/alerts/{id}/acknowledge POST Acknowledge alert
/api/v1/alert-rules POST Configure alert rules
Programs /api/v1/programs GET List RPM programs
/api/v1/programs/{id}/enroll POST Enroll patient

Authentication

APIs use OAuth 2.0 with JWT tokens. Scopes include: devices:read, devices:manage, observations:read, observations:write, alerts:manage, programs:admin. SMART on FHIR enables EHR-launched applications with context-aware authorization.

8.5 Phase 3: Protocol Layer Specification

The Protocol Layer defines communication standards for device connectivity:

Supported Protocols

Protocol Use Case Standard
Bluetooth PHD Personal health devices IEEE 11073-20601, GATT profiles
MQTT IoT messaging MQTT 3.1.1/5.0 over TLS
HTTP/REST Gateway to cloud HTTPS, FHIR REST
WebSocket Real-time streaming WSS for live data
CoAP Constrained devices CoAP over DTLS

MQTT Topic Structure

// Device telemetry
wia/iomt/{org_id}/devices/{device_id}/telemetry

// Device status
wia/iomt/{org_id}/devices/{device_id}/status

// Alerts
wia/iomt/{org_id}/patients/{patient_id}/alerts

// Commands to device
wia/iomt/{org_id}/devices/{device_id}/commands

// Example message payload
{
  "device_id": "bp-monitor-123",
  "timestamp": "2025-01-15T10:30:00Z",
  "measurements": [
    { "type": "systolic_bp", "value": 120, "unit": "mmHg" },
    { "type": "diastolic_bp", "value": 80, "unit": "mmHg" },
    { "type": "pulse", "value": 72, "unit": "bpm" }
  ]
}

8.6 Phase 4: Integration Layer Specification

The Integration Layer connects IoMT systems with healthcare ecosystem:

Integration Patterns

System Integration Method Data Exchanged
EHR FHIR API, SMART on FHIR Observations, devices, care plans
RPM Platform REST API, webhooks Device data, alerts, programs
Analytics Event streaming, batch export Time-series data, outcomes
Patient App Mobile SDK, push notifications Readings, education, reminders
Billing ADT events, charge capture RPM codes, transmission days

✓ Implementation Best Practices

8.7 Security Framework

Security requirements across all phases:

Layer Requirements Implementation
Device Secure boot, authentication Certificates, secure elements
Transport Encryption in transit TLS 1.3, DTLS, BLE encryption
API Authentication, authorization OAuth 2.0, JWT, RBAC
Data Encryption at rest AES-256, key management

8.8 Compliance Mapping

Framework Standard Elements Coverage
HL7 FHIR Device, Observation, Patient R4 aligned
IEEE 11073 PHD profiles, nomenclature Full support
HIPAA Privacy, security Encryption, access control
FDA SaMD, cybersecurity Audit, traceability

📌 Key Takeaways

📝 Review Questions

  1. Describe the four phases of the WIA architecture and their purpose in medical IoT systems.
  2. How do the Device and Observation models relate to FHIR standards?
  3. Design an API workflow for enrolling a patient in an RPM program and submitting device readings.
  4. Explain the MQTT topic structure for IoMT messaging and when to use each topic type.
  5. How does the Integration Layer connect IoMT systems to hospital EHR?
  6. What security requirements apply at each layer of the WIA-MEDICAL-IOT framework?

弘益人間 (Hongik Ingan) - Benefit All Humanity

The WIA-MEDICAL-IOT standard embodies the principle of benefiting all humanity by democratizing access to connected health technologies. Through standardized, interoperable systems, we can extend continuous monitoring and early intervention to patients everywhere—enabling proactive care that improves outcomes while reducing costs and healthcare disparities.

Korea Digital Transformation Detailed Mapping

Korea operates digital transformation through a comprehensive governance system. Digital Government: Digital Platform Government Committee (established September 2022, under the President)·Ministry of the Interior and Safety Digital Government Bureau·e-Government Support Center·Gov.kr·National Citizen Service·KDIS (Korea Digital Information Society)·NIA (National Information Society Agency)·MOIS (Ministry of the Interior and Safety). K-DNS Infrastructure: Korea Internet & Security Agency (KISA) Korea Internet Center·KISA DNS Root Server·KRNIC (Korea Network Information Center)·BGP Korea·National Cyber Security Center (NCSC)·KCC (Korea Communications Commission)·MSIT (Ministry of Science and ICT)·NIA·NIPA. Korean Cloud Infrastructure: KT Cloud·NAVER Cloud (NCloud)·Samsung SDS Cloud·LG U+ Cloud·NHN Cloud·Kakao Enterprise Cloud·SK Telecom Cloud·KISA Cloud Security Assurance Program (CSAP)·KCMVP-validated cloud·ISMS-P (Information Security & Personal Information Management System). Korean Security Certifications: KISA ISMS-P certification·KCMVP (Korean Cryptographic Module Validation Program)·NIS (National Intelligence Service) "National Cryptographic Technology Operation Standards"·NCSC "National Cyber Security Strategy 2024-2028"·CC (Common Criteria) Korean evaluation bodies·EAL4·EAL5·KS X ISO/IEC 15408·19790·24759 Korean Profile. Korean Data Standards: NIA AI Hub·National Data Standardization Committee·Statistics Korea (KOSTAT)·MyData 4 Designated Combination Specialists (Samsung SDS, KICI, KOSTAT, KFTC)·National Institute of Korean Language·National Law Information Center·National Spatial Information Platform·National Spatial Data Center·Korean Spatial Information Standards. Finance and Fintech Standards: FSC (Financial Services Commission)·FSS (Financial Supervisory Service)·FIU (Financial Intelligence Unit)·BOK (Bank of Korea)·FSEC (Financial Security Institute)·KFTC (Korea Financial Telecommunications)·KSD (Korea Securities Depository)·KRX (Korea Exchange) 8-agency cooperation. 5G/6G Communications Infrastructure: 5G subscribers 35 million (2024)·5G base stations 350,000·6G commercialization target 2028·5G dedicated networks 16 operators·6G Acceleration Council (MSIT, 2024). K-Content: KOCCA (Korea Creative Content Agency)·MCST (Ministry of Culture, Sports and Tourism)·KCA (Korea Communications Agency)·Korea Culture Information Service Agency·Korean Film Archive·Korea Publishing Industry Promotion Agency. Data 3 Acts (Personal Information Protection Act·Credit Information Act·Telecommunications Network Act, 2020 enforcement)·Data Industry Act (2021)·Public Data Act (2013)·AI Framework Act (2026)·Digital Platform Government Framework Act (2024 proposed) — Korea digital transformation core legislation.

Korea Industrial, Research, Education Infrastructure Mapping

Korea operates its industrial ecosystem and standardization system through the following core infrastructure. Korea Top 5 Groups: Samsung, Hyundai Motor, LG, SK, Lotte. Each group operates standardization committees and ISO/IEC TC Korean secretariats. Samsung Electronics (semiconductors, displays, home appliances, telecom)·Hyundai Motor (automobiles, mobility)·LG Electronics (home appliances, displays, OLED)·SK hynix (memory)·LG Energy Solution·Samsung SDI (batteries)·POSCO Future M (materials)·Hyundai Mobis (parts). Korean IT Big Tech: NAVER (search, cloud, AI HyperCLOVA)·Kakao (messenger, payment, mobility, banking)·Coupang (e-commerce, logistics)·Karrot Market·Toss·Woowa Brothers. Korea Telcos: SK Telecom·KT·LG U+. 5G·5G dedicated networks·B2B cloud·AI businesses operating. Korea Top 7 Research Universities: Seoul National University·KAIST·POSTECH·Yonsei University·Korea University·UNIST·DGIST·GIST. All serve as standardization R&D bases and ISO/IEC/IEEE Korean chairs. Korea Government-affiliated National Research Institutes (26): KIST, KAERI, KIMM, KIER, KFRI, KRICT, KRIBB, KARI, KASI, KIGAM, KICT, KISTI, KETI, ETRI, NIMS, KIMS, KISDI, KOTRA, STEPI, KOEN, KICCE, KIET, KIPF, KIHASA, KICJ, KLRI. Korea Industrial Complexes / Tech Valleys: Pangyo Techno Valley·Dongtan·Gwanggyo·Songdo IBD·Yeouido·Gangnam·Sihwa·Banwol·Gumi·Ulsan·Changwon·Geoje·Yeosu·Onsan·Cheongju·Iksan·Gwangyang·POSCO Gwangyang Steel Mill·Asan Bay·Seosan·Songdo·Incheon Airport·Sejong·Cheongna·Geomdan. Korea Trade and Finance Infrastructure: Korea International Trade Association (KITA)·Korea Trade-Investment Promotion Agency (KOTRA)·Export-Import Bank of Korea (KEXIM)·Bank of Korea·Kookmin Bank·Shinhan·Hana·Woori·NH Nonghyup·IBK Industrial Bank·SC First Bank·Citi Bank Korea·HSBC Korea·DBS Korea — 14 Korean major banks and foreign banks. Korea K-POP / K-Content: HYBE·SM·YG·JYP 4 major entertainment companies·CJ ENM·tvN·MBC·KBS·SBS·EBS·YTN·Yonhap News TV·JTBC Korean broadcasting·NETFLIX Korea·Disney Plus·TVING·Wavve·Watcha·Coupang Play. Korea Gaming Industry: Nexon·NCsoft·Krafton·Netmarble·Kakao Games·Pearl Abyss·Com2uS·Gamevil·NHN·Smilegate·Webzen. Korea Automotive / Battery: Hyundai Motor·Kia·Genesis·LG Energy Solution·Samsung SDI·SK On·POSCO Future M·EcoPro·L&F battery cathode material suppliers. Korea Semiconductor: Samsung Electronics (HBM3E·HBM4)·SK hynix (HBM3E 12-Hi)·DB HiTek·SK siltron·SK Enpulse·Dongjin Semichem·Seoul Semiconductor·Simmtech·Samsung Display·LG Display.

Korea Industrial Cluster, National Strategic Technologies, Workforce Development

Korea operates a comprehensive industrial cluster system. Korea Top 12 National Strategic Technologies (5th Science and Technology Master Plan 2023-2027): (1) Semiconductors and Displays (2) Secondary Batteries (3) Advanced Mobility (autonomous driving, UAM) (4) Next-Generation Nuclear (SMR) (5) Advanced Bio (6) Aerospace and Marine (7) Hydrogen (8) Cybersecurity (9) Artificial Intelligence (10) Next-Generation Communications (11) Advanced Robotics and Manufacturing (12) Quantum. 12 fields receive direct investment of 5 trillion KRW annually, cumulative 30 trillion KRW by 2030. Korea Major Industrial Clusters: Pangyo IT Cluster (1,300+ companies, 100 trillion KRW revenue), Gangnam Fintech (200+ companies), Songdo BT Bio Cluster, Daegu Medical Cluster, Ulsan Industry (shipbuilding, petrochemicals, automotive), Changwon Machinery, Changwon National Industrial Complex, Siheung and Banwol (SME manufacturing), Yeosu Petrochemicals, Pyeongtaek Semiconductor (Samsung Electronics Pyeongtaek Campus), Icheon and Cheongju Semiconductor (SK hynix Icheon and Cheongju Campuses), Asan Display (Samsung Display Asan Campus), Gumi Mobile (Samsung Gumi Campus), Pohang Steel (POSCO Pohang Steel Mill), Gwangyang Steel (POSCO Gwangyang Steel Mill), Dangjin Steel (Hyundai Steel Dangjin), Ulsan Automotive (Hyundai Motor Ulsan Plant), Asan Automotive (Hyundai Asan Plant), Kia Gwangju and Sohari, POSCO Gwangyang and Pohang Steel Mills, SK hynix Icheon and Cheongju, Samsung Electronics Hwaseong, Giheung, Pyeongtaek, Onyang, Cheonan, Asan Semiconductor Facilities. Major Industrial Complexes and Techno Valleys: Pangyo Techno Valley (1st 800 companies, 2nd 600 companies, 3rd 1,200 companies), Dongtan Techno Valley, Gwanggyo Techno Valley, Songdo IBD, Yeouido Financial District, Gangnam Teheran-ro Valley, Sihwa, Banwol, Gumi, Ulsan, Changwon, Geoje, Yeosu, Ulsan Mipo, Onsan, Cheongju, Iksan, Gwangyang, Yeosu, POSCO Gwangyang Steel Mill, Asan Bay, Seosan, Songdo, Incheon Airport, Sejong, Cheongna, Geomdan, Pyeongtaek Automotive Industrial Complex, Giheung Semiconductor Complex, Icheon Semiconductor Complex, Asan Display Complex, Gumi Mobile Complex, Changwon National Industrial Complex, Ulsan Mipo National Industrial Complex, Yeosu National Industrial Complex, Onsan National Industrial Complex. Korea Workforce Statistics: STEM undergraduate students 700,000 (26% of all university students), STEM graduate students 170,000, PhD researchers 140,000, STEM doctorates conferred 8,000 annually (Seoul National University 1,200, KAIST 800, POSTECH 400, Yonsei University 700, Korea University 600, UNIST 250, DGIST 100, GIST 200, KISTI 50, KIST and ETRI postdoctoral programs 1,000), information security experts 300,000 (KISA-trained and private), AI experts 50,000 (NIA, IITP, NIPA, Samsung, LG, SK, NAVER, Kakao trained), semiconductor experts 260,000 (Samsung Electronics 60,000, SK hynix 30,000, DB HiTek, SK siltron). National R&D Project Operation: National R&D projects 100,000+ annually (MSIT 35,000, MOTIE 25,000, MSS 20,000, MOE 15,000, others 5,000), R&D participating institutions 25,000+, R&D participating researchers 530,000, National R&D output (papers, patents) 540,000 annually. Korea Corporate R&D Investment Top 10 (2024): Samsung Electronics 28 trillion KRW, LG Electronics 9 trillion KRW, SK hynix 8 trillion KRW, Hyundai Motor 6 trillion KRW, Kia 4 trillion KRW, LG Chem 3.5 trillion KRW, LG Display 3.2 trillion KRW, POSCO 3 trillion KRW, Samsung SDI 2.7 trillion KRW, SK Innovation 2.5 trillion KRW.

📐 시뮬레이터 패널 2