JP2018007944A - Medical management device, medical image diagnostic apparatus and degraded operation program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent processing efficiency from decreasing due to a fault.SOLUTION: A main storage circuit 16 stores a function/resource association table 161 and a resource use status table 162. The function/resource association table 161 is a table which associates a processing function of each of a plurality of medical image diagnostic apparatuses 3 with resource information on a hardware resource required for the processing function. The resource use status table 162 is a table which registers use status information on hardware resources owned by each of the plurality of medical image diagnostic apparatuses 3. A communication circuit 13 receives a fault notice of a fault device of the plurality of medical image diagnostic apparatuses 3. A CPU11 determines a substitution device which executes an unrecoverable function, substituting for the fault device by using the function/resource association table 161 and the resource use status table 162. The communication circuit 13 transmits to the fault device a request to transmit data necessary for execution of the unrecoverable function to the substitution device.SELECTED DRAWING: Figure 2

Description

  Embodiments described herein relate generally to a medical management apparatus, a medical image diagnostic apparatus, and a degenerate operation program.

  The entire apparatus may not function due to a failure (including failure) of hardware resources included in the medical image diagnostic apparatus. Prolonging the time required for recovery (downtime) greatly affects patients and doctors who need the device. There is a need to reduce downtime due to failure or to prevent failure.

  When a faulty hardware resource is detected in the medical image diagnostic apparatus, a degenerate operation is performed in which the faulty hardware resource is stopped and operated. However, a processing function that uses the stopped hardware resource cannot be executed.

  Technologies that do not generate, reduce or reduce downtime include fault tolerant systems, periodic inspections, failure diagnosis, and failure prediction. Fault tolerant systems are designed with no faults in mind. However, the fault-tolerant system requires various dedicated mechanisms for multiplexing, fault isolation and replacement, and the device itself is complicated and expensive. In periodic inspections, periodic maintenance inspections are performed. If an abnormality can be detected during inspection, early replacement is possible. However, if an abnormality cannot be detected during the inspection, the abnormality will occur after the inspection. In the failure diagnosis, the failure location is specified. Downtime can be shortened by promoting the removal and replacement of identified faults. Many products have built-in failure diagnosis functions, but it is difficult to reduce the time from failure detection to repair. In failure prediction, the state of the apparatus is monitored, and failure is predicted from the tendency of the state. Since it is possible to replace a part that may fail before it fails, downtime can be prevented from occurring. A method of predicting with big data is being studied, but research elements are high and it is difficult to establish a prediction method.

Japanese Patent Laid-Open No. 10-187638 JP 2005-185788 A Japanese Patent Laid-Open No. 2004-240697

  An object of the embodiment is to provide a medical management apparatus, a medical image diagnosis apparatus, and a degenerate operation program that can suppress a decrease in processing efficiency due to a failure.

  The medical management apparatus according to the present embodiment is a medical management apparatus connected to a plurality of medical image diagnostic apparatuses via a network, and includes processing functions and processing functions of each of the plurality of medical image diagnostic apparatuses. A correspondence table that associates resource information of resources, a storage unit that stores usage information of hardware resources of each of the plurality of medical image diagnostic apparatuses, and a first of the plurality of medical image diagnostic apparatuses From the receiving unit that receives the failure notification of the medical image diagnostic apparatus and the first processing function executed by the first medical image diagnostic apparatus, the correspondence table and the usage status information are used to obtain the first information. A determination unit that determines a second medical image diagnostic apparatus that executes the first processing function instead of the medical image diagnostic apparatus, and executes the first processing function for the first medical image diagnostic apparatus Do And a transmitting unit for transmitting a transmission request to the second medical image diagnostic apparatus of the data required in order.

FIG. 1 is a diagram showing a configuration of an in-hospital network system including a medical management apparatus and a plurality of medical image diagnosis apparatuses connected via an in-hospital network according to the present embodiment. FIG. 2 is a diagram showing a configuration of the medical management apparatus of FIG. FIG. 3 is a diagram showing an example of a function / resource correspondence table used by the CPU of FIG. FIG. 4 is a diagram showing an example of a resource usage status table used by the CPU of FIG. FIG. 5 is a diagram showing a configuration of the medical image diagnostic apparatus of FIG. FIG. 6 is a diagram schematically showing an outline of the operation of the hospital network system according to the present embodiment. FIG. 7 is a diagram showing a typical flow of operations of the medical management apparatus and the medical image diagnostic apparatus included in the in-hospital network system according to the present embodiment. FIG. 8 is a diagram showing changes in the menu screen triggered by failure detection, which is performed by the medical image diagnostic apparatus A after step SA in FIG. FIG. 9 is a diagram illustrating an example of a selection screen W1 for selecting whether or not to restrict operation, which is displayed by the medical image diagnostic apparatuses B and C in step SS of FIG. FIG. 10 is a diagram showing a typical flow of alternative device determination processing performed by the CPU of the medical management apparatus in step SD. FIG. 11 is a diagram schematically illustrating the processing of steps SD1, SD2, and SD3 in FIG. FIG. 12 is a diagram showing an example of alternative configuration information recorded in step SD3 of FIG. FIG. 13 is a diagram showing a menu screen for instructing execution of the restoration function, which is performed by the medical image diagnostic apparatus A in step SE of FIG. FIG. 14 is a diagram illustrating a typical flow of processing performed by the medical management apparatus and the medical image diagnostic apparatus according to the recovery management function of FIG. FIG. 15 is a diagram showing an example of the recovery notification selection window displayed in step SE2 of FIG. FIG. 16 is a diagram showing an example of a display window for recovery notification standby information displayed in step SE3 of FIG. FIG. 17 is a diagram showing an example of a preparation completion notification window according to the present embodiment. FIG. 18 is a diagram showing a typical flow of emergency use response processing performed by the medical image diagnostic apparatus (alternative apparatus) B according to the present embodiment. FIG. 19 is a diagram showing a typical flow of power supply control processing performed by the medical image diagnostic apparatus (alternative apparatus) B according to the present embodiment.

  Hereinafter, a medical management apparatus, a medical image diagnostic apparatus, and a degenerate operation program according to the present embodiment will be described with reference to the drawings.

  FIG. 1 is a diagram showing a configuration of an in-hospital network system including a medical management apparatus 1 and a plurality of medical image diagnosis apparatuses 3 connected via an in-hospital network according to the present embodiment. As shown in FIG. 1, the medical management apparatus 1 is a computer that manages a plurality of medical image diagnostic apparatuses 3. Each medical image diagnostic apparatus 3 is a medical modality that collects medical images by medical imaging of patients and the like. Examples of the medical image diagnostic apparatus 3 include an X-ray computed tomography apparatus, an X-ray diagnostic apparatus, a magnetic resonance imaging apparatus, and an ultrasonic diagnostic apparatus. The medical image diagnostic apparatus 3 may be another medical modality such as a PET apparatus or a SPECT apparatus.

  The medical image diagnostic apparatus 3 according to the present embodiment has a failure detection function for hardware resources to be mounted. When a failure is detected, the medical image diagnostic apparatus 3 shifts to a degenerate operation mode in which the failed hardware resource is stopped and the operation of other hardware resources is continued. Then, the medical image diagnostic apparatus 3 transmits a notification that the hardware resource has failed (hereinafter referred to as a failure notification) to the medical management apparatus 1. Hereinafter, the medical image diagnostic apparatus 3 that has transmitted the failure notification is referred to as a failure device, and the processing function executed by the failed hardware resource is referred to as an unrecoverable function. When the medical management apparatus 1 receives a failure notification, the medical management apparatus 1 replaces the failure apparatus 3 with the medical image diagnosis apparatus 3 that executes the unrecoverable function, and includes a plurality of medical image diagnosis apparatuses included in the in-hospital network system according to the present embodiment. 3 is determined. Hereinafter, the determined medical image diagnostic apparatus 3 will be referred to as an alternative apparatus. The failed device transmits data required for the unrecoverable function (hereinafter referred to as necessary data) to the substitute device, and the substitute device executes the unrecoverable function based on the necessary data.

  Hereinafter, the configurations of the medical management apparatus 1 and the medical image diagnostic apparatus 3 for realizing the above processing will be described in order.

  FIG. 2 is a diagram illustrating the configuration of the medical management apparatus 1. As shown in FIG. 2, the medical management apparatus 1 includes a CPU (central processing unit) 11, a memory 12, a communication circuit 13, a display circuit 14, an input circuit 15, and a main memory circuit 16. The CPU 11, the memory 12, the communication circuit 13, the display circuit 14, the input circuit 15, and the main memory circuit 16 are connected to each other via a bus.

  The CPU 11 is a hardware resource that functions as the center of the medical management apparatus 1. The CPU 11 executes various processes described later in cooperation with the memory 12. The CPU 11 implements an alternative device determination function 111, a recovery management function 113, and a buffer operation function 115 by reading and executing the management program according to the present embodiment.

  In the alternative device determination function 111, the CPU 11 uses the function / resource correspondence table 161 and the resource usage status table 162 from the identification information of the failed device and the identification information of the unrecoverable function executed by the failed device, Instead, an alternative device that performs the unrecoverable function is determined. The function / resource correspondence table 161 and the resource usage status table 162 are stored in, for example, the main memory circuit 16. The identification information of the failed device may be any information as long as the failed device can be identified uniquely. For example, the failure device identification information includes the failure device ID, device name, network address, and the like. Similarly, the identification information of the unrecoverable function may be any information as long as the unrecoverable function can be uniquely identified. For example, the identification information of the unrecoverable function includes the ID and name of the processing function.

  FIG. 3 is a diagram illustrating an example of the function / resource correspondence table 161. As shown in FIG. 3, the function / resource correspondence table 161 is a lookup table that associates the processing functions of each medical image diagnostic apparatus 3 with the hardware resource information (hereinafter referred to as resource information) required for the processing functions. It is. The processing function registered in the function / resource correspondence table 161 is a medical processing function that can be executed by each medical image diagnostic apparatus 3, and can be replaced with another medical image diagnostic apparatus 3 in terms of performance or function. It is. Examples of the processing function include image reconstruction, image storage, and image processing. Specific examples of the image processing include three-dimensional rendering, segment processing, image measurement, image analysis, and annotation addition. Examples of the resource information according to the present embodiment include the type of hardware resource that executes each processing function, the usage amount or the usage rate of the hardware resource. Examples of hardware resources according to this embodiment include a CPU, a semiconductor memory (MEMORY), a hard disk (HD), a magnetic disk, a GPU (graphical processing unit), a GPGPU (general purpose computing on GPU), and a reconfiguration. Any existing hardware resource such as a board is applicable. For example, as shown in FIG. 3, the hardware resources required for the function FuncA of the device SystemA are CPU and MEMORY, the usage rate of the CPU is 10%, and the usage amount of MEMORY is 32 MB. Information regarding the processing function and resource information of each medical image diagnostic apparatus 3 is transmitted from the medical image diagnostic apparatus 3.

  FIG. 4 is a diagram illustrating an example of the resource usage status table 162. As shown in FIG. 4, the resource usage status table 162 is a lookup table that indicates the usage status of the hardware resources of each medical image diagnostic apparatus 3. Specifically, the resource usage status table 162 is a time schedule of the usage amount or usage rate of the hardware resources that each of the medical image diagnostic apparatuses 3 has. For example, as shown in FIG. 4, the device SystemA has a CPU usage rate of 80%, a MEMORY usage amount of 10 GB, and an HD usage amount of 100 GB in the time zone from the present to one hour later. In the time period from 3 hours to 3 hours later, the CPU usage rate is 80%, the MEMORY usage is 10 GB, and the HD usage is 100 GB. In the time period from 3 hours to 4 hours later, The CPU usage rate is 10%, the MEMORY usage is less than 1 GB, and the HD usage is less than 1 GB. Information regarding the usage status of each medical image diagnostic apparatus 3 is transmitted from the medical image diagnostic apparatus 3.

  The recovery management function 113 is executed by the CPU 11 when receiving a recovery management request from the failed device. The faulty device transmits a request for executing the unrecoverable function to the alternative device, but transmits a recovery management request to the medical management device 1 when receiving a rejection notice from the alternative device. In the recovery management function 113, the CPU 11 manages the recovery from the rejection state of the alternative device and the subsequent replacement execution of the unrecoverable function.

  The buffer operation function 115 is executed by the CPU 11 when a buffer operation request is received from a failure device or an alternative device. When the failure device transfers necessary data for executing the unrecoverable function to the substitute device, if the substitute device cannot execute the unrecoverable function due to emergency use, the failure device or the substitute device sends a buffer operation request to the medical management device 1. Send to. In the buffer operation function 115, the CPU 11 receives necessary data from the failed device, and temporarily saves the received necessary data in hardware resources such as the main storage circuit 16 of the medical management device 1.

  The memory 12 is typically a hardware resource such as a random access memory (RAM) that can read and write data.

  The communication circuit 13 is a hardware resource that performs data communication with a plurality of medical image diagnostic apparatuses 3 included in the in-hospital network system according to the present embodiment via wired or wireless (not shown).

  The display circuit 14 displays various information. Specifically, the display circuit 14 includes a display interface circuit and a display device. The display interface circuit is a hardware resource that converts data representing a display target into a video signal. The display signal is supplied to the display device. The display device is a hardware resource that displays a video signal representing a display target. As the display device, for example, a CRT display, a liquid crystal display, an organic EL display, an LED display, a plasma display, or any other display known in the art can be used as appropriate.

  Specifically, the input circuit 15 includes an input device and an input interface circuit. The input device is a hardware resource that receives various commands from the user. As an input device, a keyboard, a mouse, various switches, and the like can be used. The input interface circuit is a hardware resource that supplies an output signal from an input device to the CPU 11 via a bus.

  The main storage circuit 16 is a hardware resource such as a hard disk drive (HDD), a solid state drive (SSD), or an integrated circuit storage device that stores various information. Further, the main storage circuit 16 may be a drive unit that reads and writes various information with a portable storage medium such as a CD-ROM drive, a DVD drive, or a flash memory.

  FIG. 5 is a diagram showing a configuration of each medical image diagnostic apparatus 3. As illustrated in FIG. 5, the medical image diagnostic apparatus 3 includes a basic component 31, a medical imaging unit 32, a reconstruction apparatus 33, an image storage HDD 34, an image processing apparatus 35, a power supply circuit 36, and a power supply control circuit 37.

  The basic component 31 is a basic component as a computer of the medical image diagnostic apparatus 3. The basic component 31 is the center of the medical image diagnostic apparatus 3 and is not a hardware resource that can be replaced by an alternative apparatus.

  The medical imaging unit 32 is equipped with an imaging mechanism corresponding to the modality type of each medical image diagnostic apparatus 3. The medical imaging unit 32 performs medical imaging on a patient and collects raw data. For example, when the medical image diagnostic apparatus 3 is an X-ray computed tomography apparatus, the medical imaging unit 32 transmits an X-ray tube to a patient while rotating a rotating frame holding the X-ray tube and the X-ray detector at high speed. The X-rays are irradiated and the X-rays transmitted through the patient are detected by an X-ray detector. The medical imaging unit 32 collects raw data corresponding to the X-rays detected by the X-ray detector using a data acquisition circuit. When the medical image diagnostic apparatus 3 is a magnetic resonance imaging apparatus, the medical imaging unit 32 irradiates an RF pulse from an RF coil, for example, to excite target nuclei existing in a patient placed in a static magnetic field. The MR signal generated from the target nucleus is collected by the RF coil. The medical imaging unit 32 collects raw data by performing signal processing on the MR signals collected by the RF coil by a receiving circuit. It is assumed that the medical imaging unit 32 does not correspond to a hardware resource that can be replaced by another medical image diagnostic apparatus 3.

  The reconstruction device 33 performs reconstruction processing on the raw data collected by the medical imaging unit 32 to reconstruct a medical image related to the patient. For example, the reconfiguration device 33 has a dedicated semiconductor substrate that is optimally designed for the reconfiguration process, that is, a reconfiguration board, as a hardware resource. Note that image reconstruction can be executed not only by the reconstruction board but also by a general-purpose CPU, a processor such as GPU, GPGPU, or the like. Therefore, the reconfiguration device 33 may include a processor such as a general-purpose GPU or GPGPU and a memory such as a ROM or a RAM instead of the reconfiguration board. The reconstruction board, processor (for example, GPU or GPGPU), memory (for example, ROM or RAM), etc. included in the reconstruction apparatus 33 correspond to hardware resources that can be replaced by other medical image diagnostic apparatuses. .

  The image storage HDD 34 is a dedicated storage device for storing medical images. The image storage HDD 34 includes an HD (hard disk), a semiconductor memory, a magnetic disk, and the like as hardware resources. Storage devices such as HDs, semiconductor memories, and magnetic disks included in the image storage HDD 34 correspond to hardware resources that can be replaced by other medical image diagnostic apparatuses.

  The image processing device 35 performs various image processes on the medical image. For example, the image processing device 35 performs three-dimensional rendering, segment processing, image measurement, image analysis, annotation addition, and the like on a medical image as image processing. The image processing apparatus 35 includes a processor such as GPU or GPGPU and a memory such as ROM or RAM as hardware resources. Note that the image processing can also be executed by a processor such as a general-purpose CPU. The processor (for example, GPU or GPGPU), the memory (for example, ROM or RAM), and the like included in the image processing apparatus 35 correspond to hardware resources that can be replaced by other medical image diagnostic apparatuses.

  The power supply circuit 36 supplies power to hardware resources such as the basic components 31, the medical imaging unit 32, the reconstruction device 33, the image storage HDD 34, the image processing device 35, and the power supply control circuit 37 that are mounted on the medical image diagnostic apparatus 3. Supply. It is assumed that the power supply circuit 36 does not correspond to a hardware resource that can be replaced by another medical image diagnostic apparatus 3.

  The power supply control circuit 37 switches between energization and shutdown (shutdown) of the power supply circuit 36. It is assumed that the power supply control circuit 37 does not correspond to a hardware resource that can be replaced by another medical image diagnostic apparatus 3.

  As shown in FIG. 5, the basic component 31 includes a CPU 311, a memory 312, a communication circuit 313, a display circuit 314, an input circuit 315, and a main memory circuit 316. The CPU 311, the memory 312, the communication circuit 313, the display circuit 314, the input circuit 315, and the main memory circuit 316 are connected to each other via a bus.

  The CPU 311 is a hardware resource that functions as the center of the medical image diagnostic apparatus 3. The CPU 311 executes various processes described later in cooperation with the memory 312. The CPU 311 has a failure detection function 3111, a function / resource table creation function 3113, a degenerate operation function 3115, and an alternative operation function 3117.

  In the failure detection function 3111, the CPU 311 detects a failure of hardware resources included in the medical imaging unit 32, the reconstruction device 33, the image storage HDD 34, and the image processing device 35.

  In the function / resource table creation function 3113, the CPU 311 creates function / resource information that associates the processing function of the own apparatus with the resource information of the hardware resource required for the processing function at a predetermined timing such as installation. The function / resource information related to the own apparatus is transmitted to the medical management apparatus 1 in order to create the function / resource correspondence table 161.

  The degenerate operation function 3115 is realized by the CPU 311 executing a degenerate operation program. In the degenerate operation function 3115, the CPU 311 stops the hardware resource in which the failure is detected. Then, the CPU 311 requests the other medical image diagnosis apparatus (alternative apparatus) 3 connected to the hospital network to perform an alternative execution of the processing function (non-recoverable function) executed by the stopped hardware resource. The degenerate operation program is stored in the main memory circuit 316 or the like.

  The alternative operation function 3117 is realized by the CPU 311 executing the alternative operation program. In the alternative operation function 3117, the CPU 311 prepares to execute a processing function (non-recoverable function) executed by another medical image diagnostic apparatus (failed device) 3 connected to the in-hospital network instead of the failed device, and Allocate unrecoverable functions to hardware resources. The alternative operation program is stored in the main memory circuit 316 or the like.

  The memory 312 is typically a hardware resource such as a random access memory (RAM) that can read and write data.

  The communication circuit 313 is a hardware resource that performs data communication between the medical management apparatus 1 and the plurality of other medical image diagnosis apparatuses 3 included in the in-hospital network system according to the present embodiment via wired or wireless (not shown). It is.

  The display circuit 314 displays various information. Specifically, the display circuit 314 includes a display interface circuit and a display device. The display interface circuit is a hardware resource that converts data representing a display target into a video signal. The display signal is supplied to the display device. The display device is a hardware resource that displays a video signal representing a display target. As the display device, for example, a CRT display, a liquid crystal display, an organic EL display, an LED display, a plasma display, or any other display known in the art can be used as appropriate.

  Specifically, the input circuit 315 includes an input device and an input interface circuit. The input device is a hardware resource that receives various commands from the user. As an input device, a keyboard, a mouse, various switches, and the like can be used. The input interface circuit is a hardware resource that supplies an output signal from an input device to the CPU 311 via a bus.

  The main storage circuit 316 is a hardware resource such as a hard disk drive (HDD), a solid state drive (SSD), or an integrated circuit storage device that stores various information. Further, the main memory circuit 316 may be a drive device that reads and writes various information from and to a portable storage medium such as a CD-ROM drive, a DVD drive, or a flash memory.

  Details of the hospital network system according to the present embodiment will be described below.

  FIG. 6 is a diagram schematically showing an outline of the operation of the hospital network system according to the present embodiment. As shown in FIG. 6, an X-ray computed tomography apparatus, a magnetic resonance imaging apparatus, and an angiography X-ray diagnosis apparatus, that is, an X-ray angio apparatus, are provided as the medical image diagnosis apparatus 3 included in the hospital network system. Suppose that It is assumed that the X-ray computed tomography apparatus has a reconstruction device 33 and an image storage HDD 34, the magnetic resonance imaging apparatus has a reconstruction device 33, and the X-ray angio apparatus has an image storage HDD 34. In such a hospital network system, it is assumed that the CPU 311 of the X-ray computed tomography apparatus detects a failure between the reconstruction device 33 and the image storage HDD 34 in the X-ray computed tomography apparatus. In this case, the medical management device 1 (not shown in FIG. 6) determines an alternative device for image reconstruction of CT images and an alternative device for saving CT images. For example, as shown in FIG. 6, a magnetic resonance imaging apparatus reconstruction apparatus 33 is determined as an alternative apparatus for CT image reconstruction, and an X-ray angio apparatus is used as an alternative apparatus for CT image image storage. Assume that the image storage HDD 34 is determined. In this case, the X-ray computed tomography apparatus transmits a CT reconstruction program and raw patient data collected by the CT scan to the magnetic resonance imaging apparatus for image reconstruction of the CT image. The reconstruction device 33 of the magnetic resonance imaging apparatus installs the received CT reconstruction program, performs CT reconstruction processing on the received raw data, and reconstructs a CT image related to the patient. The magnetic resonance imaging apparatus transmits the reconstructed CT image to the X-ray angio apparatus for image storage. The image storage HDD 34 of the X-ray angio apparatus stores the received CT image. Then, the X-ray angio apparatus transmits a CT image to the X-ray computed tomography apparatus for image display. The X-ray computed tomography apparatus displays the received CT image. Thereafter, the user of the X-ray computed tomography apparatus can observe the CT image, and the image processing apparatus of the X-ray computed tomography apparatus can execute image processing on the CT image.

  As described above, according to the in-hospital network system according to the present embodiment, even if the reconstruction device of the X-ray computed tomography apparatus and the image storage HDD fail, the CT image is obtained by the reconstruction device of the magnetic resonance imaging apparatus. The CT image can be stored by the image storage HDD of the X-ray angio apparatus. Thereby, it is possible to suppress a decrease in processing efficiency due to a failure between the reconstruction device of the X-ray computed tomography apparatus and the image storage HDD.

  Next, operations of the medical management apparatus 1 and the medical image diagnostic apparatus 3 included in the in-hospital network system according to the present embodiment will be described with reference to FIG.

  FIG. 7 is a diagram showing a typical flow of operations of the medical management apparatus 1 and the medical image diagnostic apparatus 3 included in the in-hospital network system according to the present embodiment. In the following description, it is assumed that there are three medical image diagnostic apparatuses 3, medical image diagnostic apparatus A, medical image diagnostic apparatus B, and medical image diagnostic apparatus C.

  As shown in FIG. 7, the medical image diagnostic apparatuses A, B, and C associate a processing function that can be executed by the apparatus with resource information of hardware resources required to execute the processing function at a predetermined timing. / Create resource information and send it to the medical management apparatus 1. The creation / transmission of the function / resource information need only be performed once if the configuration in the apparatus does not change. The predetermined timing is set, for example, at the time of installation, version upgrade, system installation, or upgrade of each device A, B, and C. When there is no change in the processing function and resource information at the time of version upgrade, system installation, and upgrade, the medical image diagnostic apparatuses A, B, and C do not have to create and transmit function / resource information. . The CPU 11 of the medical management apparatus 1 registers the function / resource information received from the medical image diagnostic apparatuses A, B, and C in the function / resource correspondence table 161 and stores it in the main storage circuit 16. In the devices A, B, and C, a copy of the function / resource information transmitted by the device itself may be stored in the main memory circuit 316.

  The CPU 311 of each of the medical image diagnostic apparatuses A, B, and C executes a failure detection function 3111 during activation. The failure detection may be performed by a known method. Specifically, the CPUs 311 of the devices A, B, and C detect a hardware resource physical failure or a communication error as a failure. For example, when detecting an HD sector access abnormality, the CPU 311 determines that the HD has failed. Further, when a communication failure with the reconstruction device 33 or the image processing device 35 is detected, the CPU 311 determines that the reconstruction device 33 or the image processing device 35 has failed.

  As shown in FIG. 7, it is assumed that a failure is detected in the medical image diagnostic apparatus A (step SA). When a failure is detected, the CPU 311 of the device A transmits a failure notification to the medical management device 1 via the communication circuit 313. The failure notification includes information on the fact that a failure has been detected in the device A, the type of the failed hardware resource, and the type of processing function (unrecoverable function) executed by the failed hardware resource. The unrecoverable function includes a processing function that is executed by the hardware resource at the time when a failure is detected and a processing function that is scheduled to be executed by the hardware. There may be one or more non-recoverable functions. This embodiment is applicable to any case.

  When the failure is detected, the medical image diagnostic apparatus A performs the degenerate operation (step SB). Specifically, the CPU 311 of the medical image diagnostic apparatus A reads out the degenerate operation program stored in the main memory circuit 316 when the failure is detected, and executes the degenerate operation function 3115. In the degraded operation function 3115, the CPU 311 stops the hardware resource in which the failure is detected, and stops the processing function (unrecoverable function) related to the hardware resource. The stoppage of the unrecoverable function is notified to the user, for example, by displaying a menu button related to the unrecoverable function on the menu screen of the processing function in an unselectable manner.

  FIG. 8 is a diagram illustrating changes in the menu screen triggered by failure detection. FIG. 8 shows a menu screen related to image storage as an example of a menu screen for processing functions. As shown on the left side of FIG. 8, before stopping the function, the CPU 311 sets all the menu buttons displayed on the menu screen to be selectable. When a failure of the image storage HDD 34 is detected, the CPU 311 stops the function of the image storage HDD 34 and sets all menu buttons related to the processing functions related to image storage to be unselectable.

  For example, when an HD having an image database fails, the CPU 311 stops medical imaging, image reconstruction, printing, media storage, transfer storage, and the like, which are processing functions using the HD. In this case, the CPU 311 displays the menu screen and menu buttons related to medical imaging, image reconstruction, printing, media storage, and transfer storage on the display circuit 314 with a visual effect different from that before stopping the function. For example, the display circuit 314 displays a menu screen and menu buttons after the function stop darker than before the function stop. Thereby, the CPU 311 can notify the user that the processing function related to image storage is stopped.

  On the other hand, when the failure notification is received, the medical management apparatus 1 transmits a failure notification of the medical image diagnostic apparatus A that is the transmission source of the failure notification to the other medical image diagnostic apparatuses B and C. The CPU 311 of the medical image diagnostic apparatuses B and C reads out the alternative operation program stored in the main memory circuit 316 and executes the alternative operation function 3117 when the failure notification is received. In some cases, when the medical management apparatus A transmits a failure notification to the apparatuses B and C, at least one of the apparatuses B and C is not turned on. In this case, the CPU 11 of the medical management apparatus 1 temporarily stores the failure notification of the medical image diagnostic apparatus A in the main memory circuit 16 or the like, and when the medical image diagnostic apparatus B or C is turned on, the apparatus B or C The CPU 311 may inquire of the medical image diagnostic apparatus A whether there is a failure notification. When the failure notification to be notified to the inquiry source device B or C is stored in the main memory circuit 16 or the like, the CPU 11 of the medical image diagnostic apparatus A sends the failure notification to the inquiry source device via the communication circuit 13. Send to B or C. In the alternative driving function 3117, the CPUs 311 of the medical image diagnostic apparatuses B and C first perform a process for determining whether or not to restrict operation (step SC).

  In step SC, when receiving the failure notification, the CPU 311 of the devices B and C determines whether or not to execute the hardware resource operation limitation of the own device in order to replace the failed device A via the input circuit 315. Select according to user instructions. Specifically, the CPU 311 displays on the display circuit 314 a selection screen for selecting whether or not operation restriction is possible (hereinafter referred to as an operation restriction availability selection screen).

  FIG. 9 is a diagram illustrating an example of the operation restriction availability selection screen W1. As shown in FIG. 9, the operation restriction permission / inhibition selection screen W1 has a message field for prompting selection of permission / inhibition of operation restriction, a Yes button B1 for selecting permission of operation restriction, and a No button for selecting rejection of operation restriction. B2. In the message column, for example, a message “Do you want to implement operational restrictions for faulty machine operation?” Is displayed. In the message column, a hardware resource usage rate or usage rate limit rate such as “50%” is displayed. The hardware resource subject to the operation restriction may be a hardware resource related to the unrecoverable function or may be a hardware resource set in advance. The limiting rate may be set to an arbitrary value via the input circuit 315, or may be set to a value according to the faulty device A or a faulty hardware resource.

  When the Yes button B1 is selected via the input circuit 315 or the like, the CPU 311 shifts from the normal processing mode to the resource amount restriction mode. In the resource amount restriction mode, the CPU 311 restricts the usage rate or usage amount of the hardware resource subject to operation restriction with the restriction rate displayed on the selection screen W1. By restricting the operation, it is possible to secure in advance the usage rate or amount of hardware resources necessary for the alternative execution of the unrecoverable function.

  When the No button B2 is selected via the input circuit 315 or the like, the CPU 311 maintains the normal processing mode. In the normal processing mode, the CPU 311 does not limit the usage rate or usage amount of hardware resources.

  In the following description, it is assumed that the operation is restricted in the medical image diagnostic apparatuses B and C. When the operation is restricted, the CPU 311 of the medical image diagnostic apparatuses B and C transmits usage status information to the medical management apparatus 1. As shown in FIG. 4, the usage status information is information relating to the usage rate or usage schedule of each hardware resource included in each of the devices B and C. The CPU 311 may transmit the usage status information to the medical management apparatus 1 by limiting to the same type of hardware resources as the failed hardware resource, or medical management of the usage status information regarding all hardware resources of the own apparatus. You may transmit to the apparatus 1. The usage status information is created by the following procedure, for example. First, the CPU 311 collects the usage schedule of its own device managed by the patient reservation system from the patient reservation system. Next, the CPU 311 creates usage status information regarding hardware resources that are the same as or similar to the faulty hardware resources based on the collected usage schedule. Note that the usage status information may include not only the usage rate or usage amount of hardware resources, but also information related to power shutdown or energization. The CPU 11 of the medical management apparatus 1 registers the received usage status information in the resource usage status table 162 and stores it in the main storage circuit 16.

  In the above description, it is assumed that the medical image diagnostic apparatuses B and C that have received the failure notification create and transmit usage status information. However, this embodiment is not limited to this. For example, all medical image diagnostic apparatuses connected to the in-hospital network may periodically create usage status information and send it to the medical management apparatus 1 before receiving a failure notification. In this case, the usage status information may be created for all hardware resources of the own device.

  When the operation restriction permission determination process SC is performed, the medical management apparatus 1 performs an alternative device determination process (step SD). In step SD, the CPU 11 of the medical management apparatus 1 executes the alternative device determination function 111.

  FIG. 10 is a diagram illustrating a typical flow of alternative device determination processing performed by the CPU 11 of the medical management apparatus 1 in step SD. FIG. 11 is a diagram schematically illustrating the processing of steps SD1, SD2, and SD3 in FIG. As shown in FIG. 10, the CPU 11 first specifies resource information necessary for executing the unrecoverable function using the function / resource correspondence table 161 (step SD1). More specifically, the CPU 11 inputs the device name of the failed device and the function name of the unrecoverable function included in the failure notification as keywords into the function / resource correspondence table 161, and the device of the failed device in the function / resource correspondence table 161. The resource information associated with the name and the function name of the unrecoverable function is specified. For example, as shown in FIG. 11, it is assumed that the failed device is SystemA and the unrecoverable function is FuncB. In this case, the CPU 11 searches the function / resource correspondence table 161 using the failed device: SystemA and the unrecoverable function: FuncB as keywords, and necessary resource information associated with the keyword, that is, “usage of CPU 10%, MEMORY. “Use amount 128 MB, HD use amount 10 GB” is specified.

  When step SD1 is performed, the CPU 11 specifies resource information candidates that satisfy the necessary resource information using the resource usage status table 162 (step SD2). More specifically, the CPU 11 inputs the required resource information specified in step SD1 as a keyword to the resource usage status table 162, and specifies a device associated with the required resource information in the resource usage status table 162 as a candidate.

  In step SD2, the CPU 11 first performs a complete satisfaction test. In the full sufficiency check, a device that satisfies the necessary resource information related to all hardware resources required for the unrecoverable function is specified. For example, in the case of FIG. 11, the resource usage status table 162 is searched using the required resource information “CPU: usage rate 10%, MEMORY: usage amount 128 MB, HD: usage amount 10 GB” as keywords. SystemB satisfies all necessary resource information of CPU, MEMORY, and HD required for the unrecoverable function FuncB. Therefore, SystemB is specified as the first candidate.

  After the complete satisfaction inspection, the CPU 11 performs a partial satisfaction inspection. In the partial satisfaction inspection, a device that satisfies the necessary resource information is specified for each hardware resource required for the unrecoverable function. For example, among the necessary resource information “CPU: usage rate 10%, MEMORY: usage amount 128 MB, HD: usage amount 10 GB”, “CPU: usage rate 10%” and “MEMORY: usage amount 128 MB” also satisfy SystemC, “HD: Usage 10 GB” is not satisfied by SystemC. In this case, for example, as shown in FIG. 11, SystemC is specified for CPU and MEMORY, and SystemB is specified for HD as alternative candidates. Alternatively, SystemC may be specified as an alternative candidate for MEMORY, and SystemB may be specified as an alternative candidate for CPU and HD, and SystemB may be specified as an alternative candidate for CPU, MEMORY, and HD. When multiple devices satisfy the required resource information for each hardware resource, which device is given priority as a candidate depends on the usage rate or remaining capacity of each hardware resource, the congestion of the usage schedule, etc. It is good to be identified. In addition, when an alternative candidate is specified in the complete satisfaction inspection, the partial satisfaction inspection may not necessarily be performed.

  When step SD2 is performed, the CPU 11 records the specified alternative candidate and necessary resource information as alternative configuration information (step SD3). The alternative configuration information is stored in the main memory circuit 16 of the medical management apparatus 1 or the like.

  FIG. 12 is a diagram illustrating an example of alternative configuration information. As shown in FIG. 12, the alternative configuration information is information in which alternative candidates for failed hardware resources are associated with each unrecoverable function. For example, the alternative candidate for the unrecoverable function FuncA is SystemB, the alternative candidate for the unrecoverable function FuncB is SystemC for CPU, SystemC for MEMORY, and SystemB for HD.

  When step SD3 is performed, the CPU 11 determines whether or not candidates have been specified for all unrecoverable functions (step SD4). If the CPU 11 determines that no replacement candidate is specified for all unrecoverable functions, the CPU 11 repeats steps S1, S2, and S3 for the unrecoverable function for which no replacement candidate is specified.

  If it is determined in step SD4 that alternative candidates have been specified for all unrecoverable functions (step SD4: YES), the CPU 11 notifies the faulty device A of alternative configuration information (step SD5). The failed device A receives the transmitted alternative configuration information. The received alternative configuration information is stored in the main memory circuit 316.

  Thus, the alternative device determination process in step SD ends.

  As shown in FIG. 7, when the alternative configuration information is received from the medical management apparatus 1, the faulty apparatus A performs a recovery function execution instruction process (step SE). In step SE, the CPU 11 of the faulty device A waits for an instruction to execute the unrecoverable function. The execution instruction of the non-recoverable function is issued by a user instruction via the input circuit 15 or the like on the menu screen related to the non-recoverable function or automatically.

  FIG. 13 is a diagram showing a menu screen for the execution instruction SE of the unrecoverable function. As shown in the left diagram of FIG. 13, all menu buttons on the menu screen are displayed in an unselectable state before the alternative configuration information is received. After receiving the alternative configuration information, the CPU 11 restores the menu screen based on the alternative configuration information.

  When the non-recoverable function is executed in the alternative device B, all the capabilities of the hardware resources that execute the non-recoverable function may not be spent on the non-recoverable function. For this reason, the CPU 11 of the failure device A sets a selectable menu button according to the alternative configuration information. Specifically, menu buttons that can be selected using a look-up table (hereinafter referred to as a necessary resource table) that associates the usage rate or usage amount of hardware resources required for each processing function corresponding to each menu button. Is set. The CPU 11 inputs alternative configuration information to the necessary resource table, specifies a processing function that satisfies the alternative configuration information, and sets a menu button corresponding to the specified processing function to be selectable. As shown in FIG. 13, the menu button set to be selectable is displayed by the display circuit 14 so as to be visually distinguished from the menu button set to be non-selectable. For example, as shown in FIG. 13, a menu button set to be selectable is displayed brighter than a menu button set to be non-selectable. The necessary resource table may be stored in the main memory circuit 16 or the like.

  For example, when the image storage HDD of the failure apparatus A fails, the image storage function can be replaced with the system disk of the alternative apparatus B or the like. Since the system disk has a longer writing time than the image storage HDD, high-speed writing cannot be performed. In addition, since the system disk has a smaller storage capacity than the image storage HDD, a large amount of images cannot be stored. For example, as shown in FIG. 13, if the slice thickness is less than 5.0, the number of shots increases, and a huge storage capacity is required. Therefore, only a slice thickness of 5.0 or more can be displayed in a selectable manner. . Similarly, when the slice pitch is small, an enormous storage capacity is required, so it is preferable that only a relatively large slice pitch be displayed in a selectable manner. Further, as shown in FIG. 13, a plurality of reconfigurations may be prohibited by restricting only a single axial tab to be selectable. In addition, since real-time reconstruction and high-definition reconstruction require processing time and consume a huge amount of storage capacity, it is preferable that menu buttons corresponding to real-time reconstruction and high-definition reconstruction be displayed in an unselectable manner. As a result, even when the image storage HDD of the faulty device A is out of order, the minimum image storage is possible.

  For example, when the reconfiguration board of the failure device A fails, the reconfiguration function can be replaced by the CPU of the alternative device B. The CPU has a lower processing speed than the reconfigurable board. In addition, a high-definition reconstruction function requires a lot of processing time. Therefore, on the shooting condition setting screen, a menu button corresponding to real-time reconstruction and a menu button corresponding to a high-definition reconstruction function are preferably displayed so as not to be selected. As a result, even if the reconstruction board of the failure device A fails, the minimum image reconstruction is possible.

  For example, when the GPGPU board of the failure device A fails, the rendering function can be replaced by the CPU of the replacement device B. Since the processing speed of the CPU is lower than that of the GPGPU board, real-time display cannot be performed, and much processing time is required for high-definition rendering. Accordingly, the menu button corresponding to continuous display such as cine display in the three-dimensional SVR display may be set to be unselectable, or display in the high definition mode may be prohibited. As a result, even if the GPGPU board of the failure apparatus A fails, a minimum three-dimensional display is possible.

  When an instruction to execute the non-recoverable function is issued, the CPU 311 of the faulty device A displays an alternative candidate selection screen. Then, the user of the faulty device A selects an alternative candidate for making an alternative configuration request via the input circuit 315.

  As shown in FIG. 7, when an alternative candidate is selected, the CPU 11 of the faulty device A makes a hardware resource configuration request (hereinafter referred to as an alternative configuration request) as the alternative candidate via the communication circuit 13. Send. For example, it is assumed that the medical image diagnostic apparatus B is selected as an alternative candidate.

When the alternative configuration request is received, the CPU 311 of the alternative device B displays on the display circuit 314 a selection screen for determining whether or not to execute the alternative process. The user of the alternative device B may refuse the alternative execution due to emergency use or the like. In this case, the user of the alternative device B selects not to execute the alternative process via the input circuit 315. When it is selected not to execute the substitution process, the CPU 311 of the substitution apparatus B transmits a rejection notice to the malfunction apparatus A and the medical management apparatus 1 via the communication circuit 313. When the substitute device B cannot execute the substitute process as in the case of emergency use, the rejection notification may be transmitted as a status notification to the medical management device 1 before the rejection notification is transmitted to the failed device A.
When the rejection notification is received, the CPU 11 of the medical management apparatus 1 registers the rejection notification. Further, when receiving the rejection notification, the CPU 311 of the malfunctioning apparatus A displays that fact on the display circuit 314 and prompts an alternative configuration request for the next alternative candidate. The alternative configuration request and the selection of whether or not the alternative execution is possible are repeated until the alternative candidate medical image diagnostic apparatus selects to execute the alternative process.

  When the user of the alternative device B selects that the execution is to be performed via the input circuit 315, the CPU 311 of the alternative device B transmits a resource securing notification to the faulty device A via the communication circuit 313. When the resource securing notification is received, the CPU 311 of the failed device A reads the necessary data for the unrecoverable function from the main memory circuit 316 and transmits it to the alternative device B. For example, when the unrecoverable function is image storage, the medical image to be stored is transmitted to the alternative device B as necessary data. When the unrecoverable function is image reconstruction, the reconstruction program and the raw data to be reconstructed are transmitted as necessary data to the alternative device B.

  The substitute device B that has received the necessary data executes a substitute process for the unrecoverable function (step SF). In step SF, the CPU 311 of the alternative device B provides necessary data to the alternative hardware resource and instructs the alternative execution of the unrecoverable function. The substitute hardware resource that has received the substitute execution instruction substitutes the unrecoverable function based on the provided necessary data. For example, when the unrecoverable function is image storage, a medical image is provided to the image storage HDD 34, and the medical image is stored in the HD or the like by the image storage HDD 34. When the unrecoverable function is image reconstruction, a reconstruction program and raw data are provided to the reconstruction device 33, and the reconstruction program is installed in the reconstruction device 33. Then, the reconstruction device 33 reconstructs the medical image by performing reconstruction processing on the raw data according to the reconstruction program. The reconfiguration program may be provided when the system is installed. In this case, a reconstruction program name and raw data are provided to the reconstruction device B, and the reconstruction device 33 installs a reconstruction program corresponding to the provided program name and reconstructs the raw data according to the reconstruction program. Processing will be performed. When the unrecoverable function is image processing, an image processing program and a medical image are provided to the image processing device 35, and the image processing program is installed in the image processing device 35. Then, the image processing device 35 performs image processing on the medical image according to the image processing program. The image processing program may be provided when the system is installed. In this case, an image processing program name and a medical image are provided to the image processing device 35, and the image processing device 35 installs an image processing program corresponding to the provided program name, and performs image processing on the medical image according to the image processing program. Will be applied. After the substitution process is completed, the CPU 311 of the substitution apparatus B transmits the processing result to the fault apparatus A via the communication circuit 313.

  The description of the flow of operations of the medical management apparatus 1 and the medical image diagnosis apparatus 3 included in the in-hospital network system according to the present embodiment is thus completed.

  In the present embodiment, when a hardware resource of a certain medical image diagnostic apparatus 3 fails, the failed hardware resource is replaced with a hardware resource of another medical image diagnostic apparatus 3. However, this embodiment is not limited to this. For example, when a hardware resource of a certain medical image diagnostic apparatus 3 fails, the failed hardware resource may be replaced by another hardware resource of the medical image diagnostic apparatus 3. For example, when the image storage HDD 34 of the medical image diagnostic apparatus A fails, the image storage function executed by the image storage HDD 34 may be executed by the system disk of the medical image diagnostic apparatus A or the like. Further, when a reconstruction board included in the reconstruction device 33 of the medical image diagnostic apparatus A fails, the image reconstruction function executed by the reconstruction board may be alternatively executed by the CPU of the medical image diagnostic apparatus A or the like. . Further, when the GPGPU board included in the image processing device 35 of the medical image diagnostic apparatus A fails, the CPU of the medical image diagnostic apparatus A or the like may alternatively execute image processing functions such as rendering executed by the GPGPU board. .

  Next, the recovery management function 113 of the medical management apparatus 1 will be described with reference to FIG. FIG. 14 is a diagram showing a typical flow of processing performed by the medical management apparatus 1 and the medical image diagnostic apparatus 3 related to the recovery management function 113. FIG. 14 shows a flow when all the alternative candidates reject the alternative process in response to the alternative configuration request after the restoration function execution instruction SE of FIG. FIG. 14 illustrates a case where the alternative candidate is only the medical image diagnostic apparatus B. Further, the medical image diagnostic apparatus 3 shown in FIG. 14 is assumed to be medical image diagnostic apparatuses A, B, and C as in FIG.

  As shown in FIG. 14, when the alternative configuration request is received, the CPU 311 of the alternative device B displays a selection screen as to whether or not to execute the alternative process on the display circuit 314. The user of the alternative device B may refuse the alternative process due to emergency use or the like. In this case, the user is selected not to execute the substitute process via the input circuit 315. When it is selected not to execute the substitution process, the CPU 311 of the substitution apparatus B transmits a rejection notice to the malfunction apparatus A and the medical management apparatus 1 via the communication circuit 313.

  When the rejection notices are received from all the alternative candidates, the CPU 311 of the medical management apparatus 1 performs notification confirmation during recovery (step SE2). In step SE <b> 2, the CPU 311 displays on the display circuit 314 a selection window for determining whether or not to perform recovery notification (hereinafter referred to as a recovery notification selection window). The notification at the time of recovery is a function in which the medical management apparatus 1 notifies the malfunctioning apparatus A that the alternative apparatus B is ready to execute an alternative process.

  FIG. 15 is a diagram illustrating an example of the recovery notification selection window W2. As shown in FIG. 15, the recovery notification selection window W2 does not request a recovery notification button B3 for selecting that a replacement configuration request is rejected, a recovery notification button B3 for selecting a recovery notification, and a recovery notification. There is a cancel button B4 for selecting the effect. For example, if the unrecoverable function is image reconstruction, a message such as “Image reconstruction cannot be executed because another device is in use” is displayed in the message column.

  When the cancel button B4 is selected via the input circuit 315 or the like, the CPU 311 does not transmit a recovery notification request to the medical management apparatus 1. In this case, the series of processes in FIG.

  When the recovery time notification button B3 is selected via the input circuit 315 or the like, the CPU 311 transmits a recovery time notification request to the medical management apparatus 1 via the communication circuit 13.

  When the recovery notification request is received, the CPU 11 of the medical management apparatus 1 executes the recovery management function 113. In the recovery management function 113, the CPU 11 performs status monitoring (step SE3). In step SE3, the CPU 11 monitors the status notification of the alternative device B by associating the recovery configuration notification request with the alternative configuration information. Further, the CPU 11 of the medical management apparatus 1 registers the recovery time notification request in a lookup table (hereinafter referred to as a recovery time notification standby table) that associates the device under the recovery time notification request with the unrecoverable function. The recovery notification notification table is stored in the main memory circuit 316, for example. For example, when the faulty device A makes an alternate configuration request for the C function to System A and makes an alternate configuration request for the Y function to System X, the recovery notification notification table indicates that “System A is the C function and waits for recovery notification. ”And“ System X is Y function standby for recovery notification ”and the like (hereinafter referred to as recovery time notification standby information).

  Similarly to the medical management apparatus 1, the CPU 311 of the malfunctioning apparatus A also creates a recovery notification waiting table. The CPU 311 of the faulty device A displays the recovery notification standby information on the display circuit 314 from the time after requesting the recovery notification to the time before receiving the recovery notification.

  FIG. 16 is a diagram illustrating an example of the display window W3 for recovery notification standby information. As shown in FIG. 16, the display window W3 has a display column C1 in which recovery notification waiting information is shown for each unrecoverable function that is waiting for recovery notification. As recovery standby information, information indicating that the non-recoverable function that requested the alternative configuration request is in a standby state and the elapsed time from when the rejection notification was received for the alternative configuration request are displayed. For example, as shown in FIG. 16, “C function is in a standby state (5 minutes have elapsed)” and “A function is in a standby state (15 minutes have elapsed)” are displayed as standby information notification recovery information. Thus, the CPU 311 displays the recovery status from the rejection status of the alternative device on the display circuit 314 in real time.

  As shown in FIG. 14, when the CPU 11 of the medical management apparatus 1 receives a status notification (that is, a completion notification) indicating that preparation for replacement processing is ready from the replacement device B, the CPU 11 of the medical management device 1 A notification at the time of recovery is transmitted to the faulty device A. The notification at the time of recovery includes the identification information of the alternative device that has transmitted the completion notification and the identification information of the unrecoverable function requested to the alternative device. When the recovery notification is received, the CPU 11 of the faulty device A displays on the display circuit 14 a display window (hereinafter referred to as a preparation completion notification window) W4 indicating that preparation for executing the unrecoverable function is complete.

  FIG. 17 is a diagram illustrating an example of the preparation completion notification window W4. As shown in FIG. 17, the display circuit 14 displays a preparation completion notification window W4 on the display screen. The preparation completion notification window W4 displays a message that the preparation for execution of the unrecoverable function is complete, an execution button B5, and a cancel button B6. As the message, for example, “the image reconstruction function is ready for execution” or the like is displayed.

  When the cancel button B6 is selected via the input circuit 315 or the like, the CPU 311 does not transmit the alternative configuration request to the alternative device B, and ends the series of processes in FIG.

  When the execution button B5 is selected via the input circuit 315 or the like, the CPU 311 transmits an alternative configuration request for the alternative execution of the unrecoverable function ready for execution to the alternative device B via the communication circuit 13. . After that, as in FIG. 7, the resource securing notification from the alternative device B to the faulty device A, transmission of necessary data from the faulty device A to the alternative device B, the alternative processing SF by the alternative device B, and the faulty device A from the alternative device B The processing result is transmitted to.

  This is the end of the description of the processing performed by the medical management apparatus 1 and the medical image diagnostic apparatus 3 related to the recovery management function 113.

  When the failure device A transfers the necessary data for executing the unrecoverable function to the alternative device B, the transfer destination alternative device B may not be able to execute the unrecoverable function due to emergency use. In this case, the faulty device A or the alternative device B transmits necessary data to the medical management device 1. The CPU 11 of the medical management apparatus 1 executes the buffer operation function 115 when the necessary data is received. In the buffer operation function 115, the CPU 11 temporarily saves the received necessary data in hardware resources such as the main storage circuit 16 of the medical management apparatus 1. The substitute apparatus B transmits a completion notification to the medical management apparatus 1 when the emergency use is finished. The CPU 11 of the medical management apparatus 1 that has received the completion notification transmits necessary data to the alternative apparatus B via the communication circuit 313. The alternative device B that has received the necessary data executes the unrecoverable function based on the received necessary data. As described above, when the necessary data cannot be processed by the transfer destination alternative apparatus B due to emergency use or the like, the medical management apparatus 1 can serve as a buffer area for the necessary data.

  Next, an emergency use response performed by the medical image diagnostic apparatus (alternative apparatus) B will be described with reference to FIG. FIG. 18 is a diagram showing a typical flow of emergency use response processing performed by the medical image diagnostic apparatus (alternative apparatus) B. As shown in FIG. 18, the alternative device B receives the emergency use request from the failed device A (step SG1).

  When step SG1 is performed, the CPU 311 of the alternative device B determines whether or not medical imaging is performed by the medical imaging unit 32 of the own device (step SG2).

  When it is determined that medical imaging is not performed (step SG3: NO). The CPU 311 determines whether or not the device itself is scheduled for emergency use (step SG3).

  If it is determined in step SG3 that there is no emergency use plan (step SG3: NO), the CPU 311 preferentially assigns a task related to the unrecoverable function from the faulty device A (step SG4). That is, if there is no medical imaging and no emergency use is planned, the unrecoverable function of the faulty device A is preferentially processed over the processing function executed by the own device.

  When step SG4 is performed, the CPU 311 causes the hardware resource corresponding to the unrecoverable function to perform substitution processing for the unrecoverable function according to the task assigned in step SG4 (step SG5). That is, if there is no medical imaging and no emergency use is planned, the hardware resource corresponding to the non-recoverable function cannot recover the failed device A compared to the processing function being executed for the own device. Prioritize functions.

  On the other hand, if it is determined in step SG2 that medical imaging is being performed (step SG2: YES) or if it is determined in step SG3 that there is a plan for emergency use (step SG3: YES), the CPU 311 can execute an alternative. The notification and the scheduled processing completion time are transmitted to the faulty device A (step SG6). The CPU 311 of the malfunctioning apparatus A displays the received alternative executable notification and the scheduled processing completion time on the display circuit 314. As a result, the user of the faulty device A can know that the alternative device B cannot be executed at the present time but can be executed at the scheduled processing completion time.

  When step SG6 is performed, the CPU 311 waits for completion of medical imaging or emergency processing (step SG7).

  When the medical imaging or the emergency process is completed (step SG7: YES), the CPU 311 causes the hardware resource corresponding to the unrecoverable function to perform a substitute process for the unrecoverable function (step SG8).

  This is the end of the description of the emergency use response process performed by the medical image diagnostic apparatus (alternative apparatus) B.

  Next, power supply control processing performed by the medical image diagnostic apparatus (alternative apparatus) B will be described with reference to FIG. FIG. 19 is a diagram showing a typical flow of power supply control processing performed by the medical image diagnostic apparatus (alternative apparatus) B. First, the user of the alternative device B instructs the shutdown of the own device via the input circuit 315. The CPU 311 of the alternative device B receives a shutdown instruction from the user via the input circuit 315 (step SH1).

  When step SH1 is performed, the power supply control circuit 37 determines whether or not an alternative process for the unrecoverable function is being executed (step SH2). The determination result is notified to the CPU 311.

  If it is determined in step SH2 that the substitute process is being executed (step SH2: NO), the CPU 311 displays on the display circuit 314 that shutdown is not possible (step SH3). Thereby, the user observing the display circuit 314 can know that the shutdown process cannot be performed because the alternative process is currently being executed.

  When step SH3 is performed, the power supply control circuit 37 waits for the substitution process to end (step SH4). During this time, the shutdown is suppressed, and the substitute processing of the unrecoverable function is continuously performed by the hardware resources of the own device.

  When it is determined in step SH4 that the substitution process has been completed (step SH4: YES), the power supply control circuit 37 controls the power supply circuit 36 to perform shutdown. As a result, the power supply control circuit 37 can automatically shut down the power supply circuit 36 without the user giving another shutdown instruction after the substitution process is completed.

  This is the end of the description of the power supply control process performed by the medical image diagnostic apparatus (alternative apparatus) B.

  As described above, the medical management apparatus 1 according to the present embodiment is connected to a plurality of medical image diagnostic apparatuses 3 via a hospital network. The medical management apparatus 1 includes at least a main memory circuit 16, a communication circuit 13, and a CPU 11. The main memory circuit 16 stores a function / resource correspondence table 161 and a resource usage status table 162. The function / resource correspondence table 161 is a table in which processing functions of each of the plurality of medical image diagnostic apparatuses 3 are associated with resource information of hardware resources required for the processing functions. The resource usage status table 162 is a table in which usage status information of hardware resources possessed by each of the plurality of medical image diagnostic apparatuses 3 is registered. The communication circuit 13 receives a failure notification of a failure device among the plurality of medical image diagnostic devices 3. The CPU 11 uses the function / resource correspondence table 161 and the resource usage status table 162 from the unrecoverable function executed by the failed device to determine an alternate device that performs the unrecoverable function instead of the failed device. The communication circuit 13 transmits a transmission request to the alternative device for necessary data for executing the unrecoverable function to the failed device.

  Conventionally, when a hardware resource has failed, there has been a degeneration function that stops the hardware resource, but it is not possible to execute an unrecoverable function until the hardware resource is restored, that is, in downtime. It was.

  However, the medical management apparatus 1 according to the present embodiment has a processing function in place of a faulty device when a faulty device with a hardware resource fault occurs in a plurality of medical image diagnostic apparatuses connected to the hospital network. Determine an alternate device to perform. As a result, the non-recoverable function related to the hardware resources that cannot be used due to the degeneration can be executed by another medical image diagnostic apparatus on the hospital network even during downtime. Therefore, the minimum operation can be maintained even during downtime.

  Thus, according to the present embodiment, it is possible to suppress a decrease in processing efficiency due to a failure.

  Although several embodiments of the present invention have been described, these embodiments are presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and changes can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

  DESCRIPTION OF SYMBOLS 1 ... Medical management apparatus, 3 ... Medical diagnostic imaging apparatus, 11 ... CPU, 12 ... Memory, 13 ... Communication circuit, 14 ... Display circuit, 15 ... Input circuit, 16 ... Main memory circuit, 31 ... Basic component, 32 ... Medical imaging unit, 33 ... reconstruction device, 34 ... image storage HDD, 35 ... image processing device, 36 ... power supply circuit, 37 ... power supply control circuit, 111 ... alternative device determination function, 113 ... recovery management function, 115 ... buffer operation Functions 161 ... Function / resource correspondence table 162 ... Resource usage status table 311 ... CPU 312 ... Memory 313 ... Communication circuit 314 ... Display circuit 315 ... Input circuit 316 ... Main memory circuit 3111 ... Failure detection Function, 3113 ... Function / resource table creation function, 3115 ... Alternative operation function, 3117 ... Alternative operation function.

Claims (21)

A medical management apparatus connected to a plurality of medical image diagnostic apparatuses via a network,
A correspondence table associating processing functions possessed by each of the plurality of medical image diagnostic apparatuses with resource information of hardware resources required for the processing functions, and utilization status information of hardware resources possessed by each of the plurality of medical image diagnostic apparatuses. A storage unit for storing;
A receiving unit for receiving a failure notification of a first medical image diagnostic device among the plurality of medical image diagnostic devices;
From the first processing function executed by the first medical image diagnostic apparatus, the first processing function is used instead of the first medical image diagnostic apparatus by using the correspondence table and the usage status information. A determination unit for determining a second medical image diagnostic apparatus for executing
A transmission unit that transmits a transmission request to the second medical image diagnostic apparatus for data necessary to execute the first processing function, with respect to the first medical image diagnostic apparatus;
A medical management apparatus comprising:   The medical management apparatus according to claim 1, wherein the resource information includes a type of hardware resource required for a corresponding processing function, and a usage rate or usage amount of the hardware resource.   The transmission unit, when receiving the failure notification from the first medical image diagnostic apparatus, notifies the first medical image diagnostic apparatus that the first medical image diagnostic apparatus has failed, among the plurality of medical image diagnostic apparatuses. The medical management apparatus according to claim 1, wherein the medical management apparatus transmits to another apparatus other than the one medical image diagnostic apparatus. The receiving unit receives identification information of the first processing function together with the failure notification from the first medical image diagnostic apparatus;
The determination unit uses the correspondence table from the identification information of the first medical image diagnostic apparatus and the identification information of the first processing function to determine the first hardware resource required for the first processing function. The second medical information that identifies the first resource information and executes the first processing function in place of the first medical image diagnostic apparatus using the usage status information from the first resource information Determine diagnostic imaging equipment,
The medical management apparatus according to claim 1.   The medical management apparatus according to claim 4, wherein the determination unit determines the second medical image diagnostic apparatus for each of the first processing functions. The first processing function requires a plurality of first hardware resources,
The determining unit determines, as the second medical image diagnostic apparatus, a medical image diagnostic apparatus that satisfies a plurality of pieces of first resource information related to the plurality of first hardware resources in a single unit;
The medical management apparatus according to claim 4. The first processing function requires a plurality of first hardware resources,
The determination unit identifies a medical image diagnostic apparatus that satisfies first resource information for each of the plurality of first hardware resources, and sets a combination of the identified plurality of medical image diagnostic apparatuses to the second medical resource. Identify as diagnostic imaging device,
The medical management apparatus according to claim 4. A storage unit for storing data;
The data transmitted from the first medical image diagnostic apparatus instead of the second medical image diagnostic apparatus when the receiving unit receives a notification to the effect of emergency use from the second medical image diagnostic apparatus. And a control unit that causes the storage unit to evacuate,
The medical management apparatus according to claim 1. Hardware resources to perform medical processing functions;
A receiving unit that receives notification that the medical image diagnostic apparatus connected to the network is malfunctioning;
A selection unit that selects whether or not to limit the operation of the hardware resources in order to replace the failed medical image diagnostic apparatus, according to a user instruction via an input device;
When it is selected to execute the operation restriction, a restriction unit that restricts a usage rate or usage amount of the hardware resource;
A medical image diagnostic apparatus comprising:   When it is selected that the operation restriction is to be executed, the usage information indicating the usage rate or usage schedule of the hardware resource is managed by the network device connected to the network and the malfunctioning medical image diagnostic device. The medical image diagnostic apparatus according to claim 9, further comprising: a transmission unit that transmits the medical management apparatus. When the receiving unit receives an alternative processing request for the first processing function from the malfunctioning medical image diagnostic apparatus, a selection screen for selecting whether to reject the alternative execution of the first processing function is displayed. Further comprising a display unit,
When the rejection of the alternative execution is selected via the input device, the transmission unit transmits the standby instruction for the alternative execution to the faulty medical image diagnostic apparatus, and the alternative execution is performed via the input device. When is selected, a data transmission request for the first processing function is transmitted to the malfunctioning medical image diagnostic apparatus.
The medical image diagnostic apparatus according to claim 10.   When the receiving unit receives an emergency use request for the first processing function from the malfunctioning medical image diagnostic apparatus, the hardware resource has priority over the second processing function executed for the own apparatus. The medical image diagnostic apparatus according to claim 9, further comprising an assigning unit that causes the hardware resource to execute the first processing function. A medical imaging unit for performing medical imaging;
A determination unit that determines whether or not the medical imaging unit is performing medical imaging when the receiving unit receives an emergency use request for the first processing function from the malfunctioning medical image diagnostic apparatus;
When the allocation unit determines that the medical imaging is not being performed, the allocation unit causes the hardware resource to execute the first processing function in preference to the second processing function.
The medical image diagnostic apparatus according to claim 12. A medical imaging unit for performing medical imaging;
A determination unit that determines whether or not the medical imaging unit is performing medical imaging when the receiving unit receives an emergency use request for the first processing function from the malfunctioning medical image diagnostic apparatus;
A transmission unit that transmits a predicted time until the end of the medical imaging to the malfunctioning medical image diagnostic device when it is determined that the medical imaging is being performed;
The medical image diagnostic apparatus according to claim 12. A power supply circuit for supplying power to the hardware resources;
When the shutdown of the power supply circuit is instructed, when the hardware resource is not executing the first processing function, the hardware circuit waits for the shutdown of the power supply circuit, and the execution of the first processing function is completed A power control unit that automatically shuts off the power circuit.
The medical image diagnostic apparatus according to claim 11. A hardware resource connected to the medical management apparatus and a plurality of other medical image diagnostic apparatuses via a network to execute medical processing functions, and communication between the medical management apparatus and the other medical image diagnostic apparatuses A medical image diagnostic apparatus having a communication circuit for performing
A detection function for detecting a failure of the hardware resource;
When the failure is detected, a failure notification function for transmitting a failure notification of the failed hardware resource to the medical management device via the communication circuit;
The identification information of the first medical image diagnostic apparatus that is executed in place of the first processing function performed by the failed hardware resource among the plurality of other medical image diagnostic apparatuses via the communication circuit. A data transmission function for transmitting data required for the first processing function to the first medical image diagnostic apparatus via the communication circuit when received from the medical management apparatus;
Degenerate operation program that realizes When receiving the identification information, further comprising a request transmission function for transmitting a request for an alternative process of the first processing function to the first medical image diagnostic apparatus via the communication circuit,
The data transmission function receives data required for the first processing function from the first medical image diagnostic apparatus via the communication circuit when the replacement notification is received via the communication circuit. Transmitting to the first medical image diagnostic apparatus;
The degenerate operation program according to claim 16.   When the rejection notification of the alternative process is received from the first medical image diagnostic apparatus via the communication circuit, a recovery notification indicating that preparation for executing the alternative process is ready is performed in the first medical image diagnostic apparatus. The reduced operation program according to claim 17, further comprising a selection screen display function for causing a display device to display a selection screen for selecting whether or not to receive from a user via an input device.   A recovery status display function for displaying the recovery status of the first medical image diagnostic apparatus received from the medical management apparatus via the communication circuit in real time on the display device when it is selected to receive the recovery notification; The degenerate operation program according to claim 18, further comprising: A button display function for displaying a plurality of buttons for execution instructions of a plurality of processing functions on a display device;
When the failure is detected, a display that controls the display device so as to visually distinguish a button corresponding to a processing function related to the failed hardware resource from the plurality of buttons and another button. A control function;
The degenerate operation program according to claim 16.   A restriction function for restricting selectable buttons among the plurality of buttons in accordance with a usage amount or usage rate of hardware resources of the first medical image diagnostic apparatus usable for the first processing function; The degenerate operation program according to claim 20, further comprising: