CN111258975A

CN111258975A - Method, apparatus, device and medium for locating abnormality in image archiving communication system

Info

Publication number: CN111258975A
Application number: CN202010336279.6A
Authority: CN
Inventors: 郭华源; 刘敏超; 何昆仑
Original assignee: Chinese PLA General Hospital
Current assignee: Chinese PLA General Hospital
Priority date: 2020-04-26
Filing date: 2020-04-26
Publication date: 2020-06-09
Anticipated expiration: 2040-04-26
Also published as: CN111258975B

Abstract

The application discloses a method, a device, equipment and a medium for locating the abnormity of an image filing communication system. The image archiving communication system is a PACS system of a plurality of image archiving communication PACS server-side architectures, and the method comprises the following steps: receiving medical digital imaging and communication DICOM log files from a plurality of image archiving communication PACS server terminals respectively; parallelly calling a pre-constructed log information model to process the DICOM log file; writing the processed DICOM log file into a log database; and analyzing based on the log database to obtain an abnormal analysis result of the PACS system with the multi-server-side architecture. According to the technical scheme of the embodiment of the application, the DICOM log is subjected to parallelization processing according to the log information model, so that the efficiency of abnormal positioning of the PACS system with a multi-PACS server-side architecture is effectively improved.

Description

Method, apparatus, device and medium for locating abnormality in image archiving communication system

Technical Field

The present application relates generally to the field of data analysis technologies, and in particular, to a method, an apparatus, a device, and a medium for locating an anomaly in an image archiving communication system.

Background

The PACS (Picture Archiving and Communication System) is a System applied to a hospital image department. The PACS system plays an important role in transmitting data among various image devices and organizing and storing data. The large-scale PACS system has the characteristics of multiple network nodes, frequent data interaction, long log files, various abnormal types and the like. Aiming at a single PACS server, data filtering analysis can be carried out through network bypass or port interception and the like, but the method has huge requirements on network transmission, data storage, analysis and calculation and is not suitable for a large PACS system with a multi-PACS server architecture.

Therefore, the realization of performance detection and abnormal positioning of a large-scale PACS system is an important problem to be urgently solved for improving the system maintenance and technical guarantee working quality at present.

Disclosure of Invention

In view of the above-mentioned drawbacks and deficiencies of the prior art, it is desirable to provide a method, an apparatus, a device and a medium for locating an abnormality in an image archiving communication system, which can improve the accuracy of locating an abnormality in a large-scale image archiving communication system.

In a first aspect, an embodiment of the present application provides a method for locating an anomaly in a picture archiving communication system, where the picture archiving communication system is a PACS system of a multiple-picture archiving communication PACS server side architecture, and the method includes:

respectively receiving medical digital imaging and communication DICOM log files from a plurality of image archiving communication PACS server terminals;

parallelly calling a pre-constructed log information model to process the DICOM log file;

writing the processed DICOM log file into a log database;

and analyzing based on the log database to obtain an abnormal analysis result of the PACS system.

In a second aspect, an embodiment of the present application provides an anomaly positioning system for a picture archiving communication system, where the picture archiving communication system includes multiple PACS systems of PACS server-side architecture and at least one log parsing server, and the log parsing server includes:

the receiving unit is used for respectively receiving the digital imaging in medicine and the communication DICOM log file from a plurality of image archiving communication PACS server terminals;

the parallel processing unit is used for calling a pre-constructed log information model in parallel and processing the DICOM log file;

the writing unit is used for writing the processed DICOM log file into a log database;

and the analysis unit is used for obtaining an abnormal analysis result of the PACS based on the log database analysis.

In a third aspect, embodiments of the present application provide a computer device, including a memory, a processor, and a computer program stored on the memory and executable on the processor, the processor implementing the method as described in embodiments of the present application when executing the program.

In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored, the computer program being configured to:

which when executed by a processor implements a method as described in embodiments of the present application.

The embodiment of the application provides an image filing communication system abnormity positioning method, device, equipment and medium. The image archiving communication system is a PACS system of a plurality of image archiving communication PACS server-side architectures, and the method comprises the following steps: respectively receiving medical digital imaging and communication DICOM log files from a plurality of image archiving communication PACS server terminals; parallelly calling a pre-constructed log information model to process the DICOM log file; writing the processed DICOM log file into a log database; and analyzing based on the log database to obtain an abnormal analysis result of the PACS system. According to the technical scheme of the embodiment of the application, the DICOM log is subjected to parallelization processing according to the log information model, so that the efficiency of abnormal positioning of the PACS system with a multi-PACS server-side architecture is effectively improved.

Drawings

Other features, objects and advantages of the present application will become more apparent upon reading of the following detailed description of non-limiting embodiments thereof, made with reference to the accompanying drawings in which:

FIG. 1 is a flow chart illustrating an anomaly locating method for an image archiving communication system according to an embodiment of the present application;

FIG. 2 is a flow chart illustrating a method for locating anomalies in an image archiving communication system according to yet another embodiment of the present application;

FIG. 3 shows a schematic structural diagram of a log information model constructed by an embodiment of the present application;

FIG. 4 is a flow chart illustrating a method for locating anomalies in an image archiving communication system according to yet another embodiment of the present application;

FIG. 5 is a schematic diagram illustrating a performance comprehensive testing interface of a PACS system with a multi-server architecture according to an embodiment of the present application;

FIG. 6 is a diagram illustrating the anomaly location of a PACS system with a multi-server architecture according to an embodiment of the present application;

FIG. 7 is a schematic structural diagram of an anomaly locating system of an image archiving communication system according to an embodiment of the present application;

FIG. 8 illustrates a schematic structural diagram of a computer system suitable for use in implementing a server according to embodiments of the present application.

Detailed Description

The present application will be described in further detail with reference to the following drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the relevant disclosure and are not limiting of the disclosure. It should be further noted that, for the convenience of description, only the portions relevant to the disclosure are shown in the drawings.

It should be noted that the embodiments and features of the embodiments in the present application may be combined with each other without conflict. The present application will be described in detail below with reference to the embodiments with reference to the attached drawings.

Referring to fig. 1, fig. 1 is a schematic flowchart illustrating an anomaly locating method of an image archiving communication system according to an embodiment of the present application. The image archiving communication system is a PACS system of a plurality of image archiving communication PACS server-side architectures. The method may be executed by a PACS server or a log parsing server, as shown in fig. 1, and includes:

step 101, receiving medical digital imaging and communication DICOM log files from a plurality of image archiving and communication PACS servers respectively.

And 102, parallelly calling a pre-constructed log information model and processing the DICOM log file.

And 103, writing the processed DICOM log file into a log database.

And 104, analyzing based on the log database to obtain an abnormal analysis result of the PACS system with the multi-server-side architecture.

In the above steps, the PACS server side is used for the PACS server to store and manage digital image data captured with the diagnosis target part of the patient as the subject.

Digital Imaging and Communications in Medicine (DICOM), an international standard that specifies the format of Digital medical images and related information and the method of information exchange therewith. The DICOM standard can be divided into two major parts: file format specification and information and communication specification. The DICOM image file is complex in format and content, contains a large amount of information, and mainly comprises medical institution information, equipment manufacturer information, patient information, examination parameters, image pixel description information and the like.

The DICOM log refers to log records of information interaction between a DICOM client and a DICOM server (namely a PACS server). The PACS server side may store these DICOM log data. The DICOM protocol adopts a C/S mode to describe network transmission, wherein a service end in the DICOM is SCP (service Class provider), and a client is SCU (service Class user). Establishing DICOM connection, wherein the SCU sends a connection request message to the SCP, and the message mainly describes DICOM service expected by the SCU in the connection and related settings; then, SCP checks the connection request message sent by SCU, confirms whether it supports the relevant service requested by client and feeds back the response information. The response information is mainly classified into the following categories: 1) if the server side supports some services requested by the client side, the server side sends confirmation information (Association information) to indicate that the connection is completed; 2) otherwise, sending an Association Reject (Association Reject) message to inform the client (SCU) of the connection failure. After the SCU establishes a connection with the SCP, the SCU begins transmitting image data to the SCP. The SCP receives the image data of SCU and then feeds back a response message for indicating the reception or non-reception. The information interaction between the SCU and SCP will generate a large number of DICOM log files. At the SCP end, which is the server end of a large PACS, DICOM log files are generated at a rate of millions per day.

The plurality of image archiving communication PACS server terminals respectively upload medical digital imaging and communication DICOM log files to the log analysis server, and the log analysis server analyzes the DICOM log files uploaded by the plurality of PACS server terminals. For example, storage paths of DICOM log files of a plurality of PACS servers may be acquired in advance, and log files of specified dates on the respective PACS servers may be acquired by using a remote file sharing technique.

After the DICOM log file is acquired, a pre-constructed log information model is called in parallel to process the DICOM log file, and the log information model is based on the incidence relation among all key fields of log data acquired by the log file. For example, a complete piece of log data is divided into a sequence of several fields. Such as time information, IP address, file path, memory address, etc. And specially processing the fields with the stability characteristics in the log word segmentation process.

Extracting a log information model based on massive historical log data, and performing structured processing on the text log through the log information model to remove a large amount of redundant data, for example, extracting field information with high occurrence frequency of DICOM log files by using an FT-tree algorithm.

And writing the processed DICOM log file into a log database, wherein the log database is a relational database. Writing the formatted DICOM log data into a relational database, and querying, manipulating, defining and controlling the log data by using a Structured Query Language (SQL).

The log record data stored in the log database is analyzed, and the abnormal analysis result of the PACS system with the multi-server architecture can be obtained. The abnormal analysis result can accurately detect various system operation abnormalities such as DICOM service downtime, image file transmission (uploading, retrieving and forwarding) abnormalities of each server and each client of the PACS, network connection interruption, disk space occupation and the like, and can be comprehensively and visually displayed through a visualization technology.

The embodiment of the application analyzes the DICOM log files generated by the PACS system with a plurality of PACS server-side architectures in parallel to obtain the abnormal analysis result, can effectively position the abnormal operation of the PACS server, and solves the problem that the abnormal operation of the system cannot be accurately positioned for a large-scale PACS system in the related technology.

Further, an embodiment of the present application further provides an anomaly locating method for an image archiving communication system, please refer to fig. 2, and fig. 2 shows a schematic flow chart of the anomaly locating method for the image archiving communication system according to another embodiment of the present application. The method may be performed by a PACS server side or a log resolution server. As shown in fig. 2, the method includes:

step 201, receiving medical digital imaging and communication DICOM log files from a plurality of image archiving and communication PACS servers respectively.

Step 202, storing DICOM logs contained in the DICOM log file into a data temporary storage array;

and step 203, parallelly calling a pre-constructed log information model to carry out standardized processing on the data in the data temporary storage array to obtain a log data record corresponding to each DICOM log.

Step 204, writing the processed DICOM log file into a log database;

step 205, obtaining the abnormal analysis result of the PACS system with the multi-server architecture based on the log database analysis.

In the above steps, after the DICOM log file is obtained, the DICOM log file may be stored in a temporary data storage array, and then a pre-constructed log information model is called in parallel to perform standardized processing on data in the temporary data storage array. The log information model is built based on the above semantic features of the DICOM log file. The context semantic features refer to the association relationship existing between key fields with high occurrence frequency in the log file generation process. As shown in fig. 3, fig. 3 is a schematic structural diagram of a log information model constructed according to an embodiment of the present application. On a log analysis server, by analyzing the context semantic features of the DICOM log file in the free text format, the semantic rule of the log file can be obtained, and a log information model is further established, wherein the semantic rule mainly comprises the following steps: the log data block comprises key fields which are high-frequency and relatively fixed in each log data block, and the key fields can sequentially comprise contents such as client names, IP addresses, transmission starting time, operation types, data byte numbers, transmission time consumption, sock file names and the like according to occurrence time sequences. The DICOM logs of the PACS system constructed by a plurality of PACS server sides have the problems of large number of files, large data volume of single file logs and the like. The parallel computing technology can be adopted to accelerate log analysis, shorten time consumption and improve the data processing efficiency.

The parallel calling of the pre-constructed log information model to perform standardized processing on the data in the data temporary storage array to obtain the log data record corresponding to each DICOM log may include:

step 2031, calling the main thread to read DICOM log from the temporary data storage array by row unit;

step 2032, the main thread and the plurality of additional threads are called to cooperatively perform standardized processing on the DICOM log read each time according to the log information model, so as to obtain the log data record corresponding to the DICOM log read each time.

The DICOM log read at each time is cooperatively processed by calling the main thread and a plurality of additional threads in the steps, which can be realized by the following steps,

calculating the total number LineNum of data lines of the log file and the total number ModlstepNum of model steps;

reading all log files stored on a log analysis server into a log line data temporary storage array t2_ originTemp;

setting a log data block counter RecordCt =0;

setting a model step counter ModelStepCt =0;

acquiring the number of CPU cores int ncpus = omp _ get _ max _ reads ();

setting OpenMP parallel thread number omp _ set _ num _ threads (ncpus);

then, the following codes are called to perform parallel processing on each row of data in the data temporary storage array t2_ originTemp:

#pragma omp parallel for firstprivate(LineNum) shared(t2_OriginTemp)lastprivate(iline)

for ( iline=0; iline<LineNum; iline++ ){

reading a row of log data from the data temporary storage array and storing the log data into the character array;

judging whether the row of log data is abnormal data or not;

while(ModelStepCt<ModelStepNum){

extracting each field from the character array from left to right in sequence by using character string shifting;

judging the corresponding position of the field data in the log information model according to the field characteristics;

ModelStepCt ++;

}

all extracted values of the row of log data are spliced as required, and the result is written into a log database;

ModelStepCt=0;

RecordCt ++;

}

extracting the content corresponding to each field from the character array according to the log information model, wherein the content corresponding to a plurality of key log features contained in each DICOM log is extracted based on the context semantic features. The context semantic features are as shown in fig. 3, a semantic relationship among a plurality of key log features is constructed, and according to the direction indicated by an arrow, content corresponding to the key log features is extracted from each DICOM log, that is, a value is extracted.

And then, splicing the contents corresponding to the key log features according to a pre-established reading sequence to obtain a log data record corresponding to each DICOM log. The log data record is in compliance with the format requirements of a relational database.

The log information model can be realized by an FT-tree algorithm, and can also be obtained by carrying out statistical analysis on a large number of DICOM log files. After acquiring the historical DICOM log file, extracting historical context semantic features of the historical DICOM log file, wherein the historical DICOM log file comprises a plurality of historical DICOM logs. Then, extracting a plurality of key log features contained in each historical DICOM log based on historical context semantic features; and finally, determining the reading sequence of the key log features and establishing a log information model according to the reading sequence.

According to the embodiment of the application, the DICOM logs are processed in parallel, so that the data processing time is effectively shortened, and the data processing efficiency is improved.

Further, the embodiment of the application also provides an image filing communication system abnormity positioning method, which is used for calculating daily system key performance index set data based on the log database, ensuring that daily average increment of the database is appropriate, realizing long-term online of key log information and being beneficial to system abnormity positioning and analysis. Referring to fig. 4, fig. 4 is a schematic flowchart illustrating an abnormality locating method for an image archiving communication system according to another embodiment of the present application. The method may be performed by a PACS server side or a log resolution server. As shown in fig. 4, the method includes

Step 301, receiving digital imaging in medicine and communication DICOM log files from multiple PACS servers.

Step 302, storing DICOM logs contained in the DICOM log file into a data temporary storage array;

step 303, parallelly calling a pre-constructed log information model to perform standardized processing on the data in the data temporary storage array, and obtaining a log data record corresponding to each DICOM log.

Step 304, writing the processed DICOM log file into a log database;

step 305, calculating a first operation performance index corresponding to each PACS server according to the time granularity, wherein the first operation performance index is used for representing a numerical value of processing the image file at each PACS server within the time granularity; the value of processing the image files at each PACS server side within the time granularity may preferably be the number of image files that perform various SOP operations (e.g., STORE-SCP, STORE-SCU, etc.) daily at each PACS server side per minute/minute.

Step 306, calculating a second operation performance index corresponding to each PACS server according to each DICOM client, wherein the second operation performance index is used for expressing the numerical value of the interactive image file between each DICOM client and each PACS server; the number of the interactive image files between each DICOM client and each PACS server may preferably be the number of the image files for each client and each PACS server to perform various SOP operations (such as STORE-SCP, STORE-SCU, etc.) daily.

And 307, generating a visual image based on the first operation performance index and the second operation performance index, wherein the visual image is used for positioning and displaying an abnormal analysis result of the PACS system with the multi-server-side architecture.

In the above steps, it is considered that the DICOM log records generated by a large PACS system daily are up to millions, which results in the increment of the database server being too fast to analyze the overall change trend of the system performance. According to the method and the device, the structured log records are processed again, so that the overall change trend of the performance of the PACS server side system can be reflected, and meanwhile, the newly-added speed of the database records is effectively slowed down.

In the above step, the calculating of the first operation performance index corresponding to each PACS server according to the time granularity may include obtaining a preset time granularity, and counting the number of the image files received, forwarded, and retrieved by each PACS server according to the time granularity. Wherein the time granularity may be in terms of per hour, or per 30 minutes. The smaller the time granularity, the larger the amount of data calculated, the longer the calculation time spent, and the more accurate the time location of the anomaly. In case of time and efficiency trade-offs, it is preferred to have units of hours.

The number of image files received, forwarded and retrieved by each PACS server (namely, the DICOM server) per day can be counted by each DICOM client to serve as a second operation performance index.

And performing multi-angle analysis on the first operation performance index and the second operation performance index to show the operation performance of each PACS server. For example, the operating performance of each PACS server can be displayed layer by layer for each PACS server according to a plurality of time levels such as date, hour, minute and the like by adopting a longitudinal comparison mode.

For example, a horizontal comparison mode can be adopted, such as accurate comparison of the operation performance of each PACS server side in the same time period on different dates.

For another example, the comprehensive comparison mode may be a mode combining different SOP server types and different time granularities, and the number of the image files received, forwarded and retrieved by multiple PACS server sides every day is used as the operation performance index for comprehensive display. And the dial plate control can also be used for showing the percentage value of the overall performance and the historical peak performance of each PACS server on the same day.

In the visual image, determining the wave crest and the wave trough contained in the visual image based on the first operation performance index or the second operation performance index, wherein the time granularity interval corresponding to the wave crest suddenly reduced to the wave trough represents the abnormal time interval of the PACS server side contained in the PACS system. For example, when the first operation performance index or the second operation performance index is visually displayed by adopting a bar chart or a multi-dimensional line chart, the average time period of peaks and troughs appearing in the visual image can be counted; then, in daily detection work, once abnormal conditions such as sudden reduction of the peak/trough numerical value or forward and backward deviation of the corresponding time value occur, the method can help to judge key information such as the occurrence time of system abnormality, the name of the related client/server equipment and the like.

The visualization performance presented in the present application demonstrates the results as will be understood below in conjunction with fig. 5-6. Fig. 5 is a schematic diagram illustrating a performance comprehensive testing interface of a PACS system with a multi-server-side architecture according to an embodiment of the present application. As shown in fig. 5, the comprehensive detection interface may show that the comprehensive analysis of the performance of receiving, retrieving, forwarding, etc. of the image files of multiple servers every day is performed according to the classification manner corresponding to different clients and different time periods, and show the comprehensive analysis according to the chart. As shown in fig. 5, srv1, srv2, srv4 and srv35 receive histograms of the number of video files from the device side, each histogram corresponding to each hour, so as to visually display the performance status of each server through a performance index diagram.

Fig. 6 shows an anomaly locating schematic diagram of a PACS system with a multi-server architecture according to an embodiment of the present application. As shown in fig. 6, the broken line drawn by the PACS server according to the number of received image files per hour at 4/6/2020 is shown as a black solid line, and the broken line drawn by the PACS server according to the number of received image files per hour at 4/5/2020 is shown as a black dot-and-dash line, which corresponds to a peak value at 2 am and is used to indicate that an abnormality may occur in the PACS system at this time.

The calculation of the operation performance index provided by the embodiment of the application can realize accurate analysis and display of the overall performance of a plurality of PACS servers, has the characteristics of high calculation speed, accurate abnormal positioning and the like, and effectively improves the daily maintenance capacity of a large-scale PACS system of a multi-server architecture.

It should be noted that while the operations of the disclosed methods are depicted in the drawings in a particular order, this does not require or imply that these operations must be performed in this particular order, or that all of the illustrated operations must be performed, to achieve desirable results. Rather, the steps depicted in the flowcharts may change the order of execution. Additionally or alternatively, certain steps may be omitted, multiple steps combined into one step execution, and/or one step broken down into multiple step executions.

Referring to fig. 7, fig. 7 is a schematic structural diagram illustrating an abnormality locating system of an image archiving communication system according to an embodiment of the present application. The image archiving communication system comprises a PACS system 501 of a plurality of image archiving communication PACS server-side architectures and at least one log analysis server 502, wherein the log analysis server 502 comprises:

a receiving unit 5021, configured to receive digital imaging in medicine and communication DICOM log files from multiple image archiving and communication PACS servers respectively;

the parallel processing unit 5022 is used for calling a pre-constructed log information model in parallel and processing the DICOM log file;

a writing unit 5023, configured to write the processed DICOM log file into a log database;

and the analysis unit 5024 is used for obtaining an abnormal analysis result of the PACS system with the multi-server-side architecture based on log database analysis.

The parallel processing unit further includes:

the storage subunit is used for storing the DICOM logs contained in the DICOM log file into a data temporary storage array, and the data temporary storage array stores the DICOM logs according to rows;

and the calling subunit is used for calling the pre-constructed log information model in parallel to carry out standardized processing on the data in the data temporary storage array so as to obtain the log data record corresponding to each DICOM log.

A calling subunit further configured to: calling a main thread to read a DICOM log from the data temporary storage array in a row unit;

and calling the main thread and the plurality of additional threads to cooperatively perform standardized processing on the DICOM logs read each time according to a log information model to obtain log data records corresponding to the DICOM logs read each time.

Optionally, the log information model is established based on context semantic features of the DICOM log file, and the calling subunit is configured to:

extracting contents corresponding to a plurality of key log features contained in each DICOM log based on the context semantic features;

and splicing the contents corresponding to the key log features according to a pre-established reading sequence to obtain a log data record corresponding to each DICOM log.

The analysis unit further includes:

and the first calculating subunit is used for calculating a first operation performance index corresponding to each PACS server according to the time granularity, wherein the first operation performance index is used for expressing the numerical value of processing the image file at each PACS server in the time granularity.

And the second calculating subunit is used for calculating a second operation performance index corresponding to each PACS server according to each DICOM client, and the second operation performance index is used for expressing the numerical value of the interactive image file between each DICOM client and each PACS server.

And the image generation subunit is used for generating a visual image based on the first operation performance index and the second operation performance index, wherein the visual image is used for positioning and displaying the abnormal analysis result of the PACS system of the multi-server-side architecture.

An image generation subunit further configured to:

marking peaks and troughs contained in the visual image based on the first operation performance index or the second operation performance index;

and determining that the time granularity interval corresponding to the peak dip to the trough represents the abnormal time interval of the PACS server side contained in the PACS system.

The embodiment of the application provides a PACS system which can realize the accurate analysis and display of the overall performance and the operation abnormity of a multi-server-side framework, has the characteristics of high analysis speed, good analysis effect, visual abnormity positioning and the like, and effectively improves the daily maintenance capacity of a large PACS system of the multi-server-side framework.

It should be understood that the units or modules described by the log resolution server correspond to the various steps in the method described with reference to fig. 1. Thus, the operations and features described above for the method are also applicable to the log parsing server and the units included therein, and are not described herein again. Corresponding units in the log parsing server can be matched with units in the electronic equipment to realize the scheme of the embodiment of the application.

The division into several modules or units mentioned in the above detailed description is not mandatory. Indeed, the features and functionality of two or more modules or units described above may be embodied in one module or unit, according to embodiments of the present disclosure. Conversely, the features and functions of one module or unit described above may be further divided into embodiments by a plurality of modules or units.

Referring now to FIG. 8, shown is a block diagram of a computer system suitable for use in implementing a server according to embodiments of the present application.

As shown in fig. 8, the computer system includes a Central Processing Unit (CPU)601, which can perform various appropriate actions and processes in accordance with a program stored in a Read Only Memory (ROM) 602 or a program loaded from a storage section 608 into a Random Access Memory (RAM) 603. In the RAM 603, various programs and data necessary for system operation are also stored. The CPU601, ROM 602, and RAM 603 are connected to each other via a bus 604. An input/output (I/O) interface 605 is also connected to bus 604.

The following components are connected to the I/O interface 605: an input portion 606 including a keyboard, a mouse, and the like; an output portion 607 including a display such as a Cathode Ray Tube (CRT), a Liquid Crystal Display (LCD), and the like, and a speaker; a storage section 608 including a hard disk and the like; and a communication section 609 including a network interface card such as a LAN card, a modem, or the like. The communication section 609 performs communication processing via a network such as the internet. The driver 610 is also connected to the I/O interface 605 as needed. A removable medium 611 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, or the like is mounted on the drive 610 as necessary, so that a computer program read out therefrom is mounted in the storage section 608 as necessary.

In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart fig. 1 may be implemented as a computer software program. For example, embodiments of the present disclosure include a computer program product comprising a computer program embodied on a machine-readable medium, the computer program comprising program code for performing the method illustrated in the flow chart. In such an embodiment, the computer program may be downloaded and installed from a network through the communication section 609, and/or installed from the removable medium 611. The above-described functions defined in the system of the present application are executed when the computer program is executed by the Central Processing Unit (CPU) 601.

It should be noted that the computer readable media shown in the present disclosure may be computer readable signal media or computer readable storage media or any combination of the two. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples of the computer readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the present disclosure, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. In contrast, in the present disclosure, a computer-readable signal medium may include a propagated data signal with computer-readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, fiber optic cable, RF, etc., or any suitable combination of the foregoing.

The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

The units or modules described in the embodiments of the present application may be implemented by software or hardware. The described units or modules may also be provided in a processor, and may be described as: a processor includes a receiving unit, a parallel processing unit, a writing unit, and an analyzing unit. The names of these units or modules do not in some cases constitute a limitation on the units or modules themselves, for example, the receiving unit may also be described as "a unit for receiving digital imaging in medicine and communication DICOM log files, respectively, from a plurality of picture archiving communication PACS server sides".

As another aspect, the present application also provides a computer-readable storage medium, which may be included in the electronic device described in the above embodiments; or may be separate and not incorporated into the electronic device. The computer readable storage medium stores one or more programs which, when executed by one or more processors, perform the method for locating anomalies in an image archiving communication system as described herein.

For example, a computer device may implement the following as shown in fig. 1: step 101, receiving medical digital imaging and communication DICOM log files from a plurality of image archiving and communication PACS servers respectively. And 102, parallelly calling a pre-constructed log information model and processing the DICOM log file. And 103, writing the processed DICOM log file into a log database. And 104, analyzing based on the log database to obtain an abnormal analysis result of the PACS system with the multi-server-side architecture.

The above description is only a preferred embodiment of the application and is illustrative of the principles of the technology employed. It will be appreciated by those skilled in the art that the scope of the disclosure herein is not limited to the particular combination of features described above, but also encompasses other arrangements formed by any combination of the above features or their equivalents without departing from the spirit of the disclosure. For example, the above features may be replaced with (but not limited to) features having similar functions disclosed in the present application.

Claims

1. An abnormality positioning method for a picture archiving communication system, wherein the picture archiving communication system is a PACS system of a server-side architecture of a plurality of picture archiving communications PACS, the method comprising:

writing the processed DICOM log file into a log database;

and analyzing to obtain an abnormal analysis result of the PACS based on the log database.

2. The method of claim 1, wherein the concurrently invoking a pre-built log information model to process the DICOM log file comprises:

storing the DICOM logs contained in the DICOM log file into a data temporary storage array, wherein the DICOM logs are stored by the data temporary storage array according to rows;

and parallelly calling a pre-constructed log information model to carry out standardized processing on the data in the data temporary storage array to obtain a log data record corresponding to each DICOM log.

3. The method of claim 2, wherein the concurrently invoking a pre-built log information model to normalize the data in the scratch array comprises:

calling a main thread to read the DICOM log from the data temporary storage array in a row unit;

and calling the main thread and the plurality of additional threads to cooperatively carry out standardization processing on the DICOM log read each time according to the log information model so as to obtain a log data record corresponding to the DICOM log read each time.

4. The method of claim 3, wherein the log information model is established based on context semantic features of the DICOM log file, and the invoking the main thread and the plurality of additional threads cooperatively perform standardized processing on the DICOM log for each reading according to the log information model, comprising:

5. The method of claim 1, wherein the log information model is constructed by:

acquiring a historical DICOM log file;

extracting historical context semantic features of the historical DICOM log file;

extracting a plurality of key log features contained in each historical DICOM log based on the historical context semantic features;

determining a reading sequence of the plurality of key log features as the log information model.

6. The method of claim 1, wherein said obtaining an anomaly analysis result of said PACS system based on said log database analysis comprises:

calculating a first operation performance index corresponding to each PACS server according to time granularity, wherein the first operation performance index is used for expressing a numerical value of processing an image file at each PACS server in the time granularity;

calculating a second operation performance index corresponding to each PACS server according to each DICOM client, wherein the second operation performance index is used for expressing the numerical value of an interactive image file between each DICOM client and each PACS server;

and generating a visual image based on the first operation performance index and the second operation performance index, wherein the visual image is used for positioning and displaying the abnormal analysis result of the PACS system of the multi-server-side architecture.

7. The method of claim 6, wherein said locating and displaying the results of the anomaly analysis of the PACS system of the multi-server architecture comprises:

8. An anomaly locating system for a picture archiving communication system, said picture archiving communication system comprising a PACS system constructed by a plurality of PACS server-side systems and at least one log resolution server, said log resolution server comprising:

and the analysis unit is used for obtaining an abnormal analysis result of the PACS system based on the log database analysis.

9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the method according to any of claims 1-7 when executing the program.

10. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the method according to any one of claims 1-7.