Isolating untrusted third-party drivers from core patient safety algorithms.
Hardware MPUs divide physical RAM into isolated memory domains. The algorithm determining cardiac defibrillation shock delivery operates in a strictly read-only parameter space with exclusive execution privileges.
If a Wi-Fi stack suffers a buffer overflow, the MPU instantly triggers a bus fault exception that restarts only the networking thread, while the vital signs monitoring core continues uninterrupted.