Abstract:
In the case of a medical device with several electronic components, a possibility must be provided for enabling the components to be rapidly matched to each other, in order to guarantee the functional correctness of the medical device. In particular in the case when, for example, an item of operating software is modified for one individual component only, it can occur that this component no longer interoperates with the other components in a desired way. In this context, at a particular point in time, for each of the electronic components of a apparatus data for the component is copied and the copied data is stored outside the storage facility of the component, making it possible at a later point in time, which can be defined, for the copied data for each component to be stored in its storage facility.

Description:
CROSS REFERENCE TO RELATED APPLICATIONS 
       [0001]    This application claims priority of German application No. 10 2009 014 621.0 filed Mar. 24, 2009, which is incorporated by reference herein in its entirety. 
       FIELD OF THE INVENTION 
       [0002]    The invention relates to a method for operating an apparatus with electronic components, in particular of a medical device, a method for integrating an electronic component into such an apparatus, and to a medical device with a communication facility, a central storage device and at least one further electronic component in accordance with the claims. 
       BACKGROUND OF THE INVENTION 
       [0003]    Large medical devices for investigating or operating on patients may incorporate several computers, microprocessors or control units which, within the medical device, monitor and control individual parts of the medical device. By means of a communication network inside the device, these individual electronic components of the medical device can exchange items of data, by which means the components enhance each other&#39;s functionality. An example of such a complex medical device is the applicant company&#39;s Artis Zee multi-purpose system. 
         [0004]    During the operation of such a medical device, it is consistently necessary to carry out maintenance work on the individual components. For example, it can happen that the manufacturer of a control unit built into the medical device makes available an improved version of a control program, or that a program for a computer which is built into the medical device is replaced by a version of it which has been further developed. 
         [0005]    Such maintenance can also change such functions of a component which are used by another component of the medical device. Thus, for example, a computer makes available items of control data which are called up by a control unit and, for example, used to control an x-ray unit in the medical device. 
         [0006]    When making a change to such functions of a component, which are used by other components, it is always necessary to avoid a component being no longer able, after a maintenance action, to receive items of data from another component, because it is unable to call up the data appropriately to the other component&#39;s new mode of operation. It is equally essential to avoid the interoperation between the components being disrupted after maintenance work, e.g. by an incorrectly installed program. 
         [0007]    Malfunctions which arise in conjunction with an incompatible or faulty mode of operation by individual components in a medical device would, namely, very probably only become apparent when a component of the medical device wishes to use the doubtful function. However, at this point in time it would then be difficult and time-consuming to find out exactly which function is causing the malfunction. Also, it would then often no longer be clear which component must be adjusted in order to eliminate the malfunction, without in doing so causing malfunctions in other places. 
         [0008]    Similar problems arise for a medical device if a component is defective and must be replaced by a new component. It is then very time-consuming to match the new component to the other components in the medical device in such a way that the medical device as a whole returns to fault-free functioning. 
         [0009]    The down times of the medical device arising in conjunction with fault location and the mutual rematching of the components of a medical device are unacceptable. Due to the high procurement cost, such a device is often planned for investigations or operations around the clock. It may also be that such a device must, for example, be constantly available for emergencies. 
         [0010]    In relation to a reconstruction of data which has been deleted from a storage facility in a computer against the user&#39;s wishes, the known method is to store a copy of important data items from the storage facility at regular intervals in a second storage facility, where they are protected against any intervention by the user. Such a copy is also referred to as a backup of the data. If needed, the copied data can then be made available to the user. This procedure is also called a restore or reconstruction. 
       SUMMARY OF THE INVENTION 
       [0011]    The object of the present invention is to create the possibility, for an apparatus, in particular a medical device with several electronic components, of being able rapidly to match a plurality of the components to each other in such a way that the functional integrity of the apparatus is guaranteed. 
         [0012]    This object is achieved by a method of operating an apparatus, by a method for integrating an electronic component, and by a medical device as claimed in the claims. 
         [0013]    With the method in accordance with the invention for operating an apparatus, it is possible to operate an apparatus in which at least two electronic components interoperate, and a method of working for each component which determines the interoperation is defined by data items which are stored in a storage facility of the component in each instance. The apparatus is preferably a medical device. If the electronic component in this case is a computer, the data items might then be, for example, the operating software and configuration data on the computer&#39;s hard disk. However, the data items might also be parameter values for a configurable control unit, e.g. for a digital x-ray device or a positionable patient table. 
         [0014]    In accordance with the method, when a particular configuration state exists for the apparatus, the data for a component is copied for each of the components and the copied data is stored outside the component&#39;s storage facility, thus making it possible at a definable later point in time to store the copied data items for each component into the storage facility. Here, a configuration state of the apparatus is determined by the totality of the data items which are stored in the components&#39; storage facilities and by which the ways of working of the individual components are defined. Overall, the mode of operation of the apparatus itself is also defined by the totality of the data items. Correspondingly, the configuration state is modified by storing new data, e.g. new software or new parameter values, in at least one storage facility of one of the electronic components. 
         [0015]    This method in accordance with the invention gives the advantage that the apparatus can at any time be put into a state in which the apparatus has already been once before and in which the components function in a desired way. For this purpose, according to the method a point in time is first determined at which the apparatus is in a desired state. At this point in time, the data items are then read out from all the components, and saved. Indirectly, therefore, the state of the apparatus itself is thereby recorded. This state can be restored by writing the saved data back into the storage units of the individual components of the apparatus. 
         [0016]    Here, the copying of the data items need not take place at exactly the one and same time. The copying of the data can take place over a time interval during which the apparatus is unchanged in the particular configuration state which is to be made restorable by the copying of the data items and the storage of the copied data items. 
         [0017]    An advantageous development of the method is given by the following additional steps:
   detect an operating state of the apparatus,   depending on the operating state which has been detected, if necessary interrupt the interoperation of all the components and for each component store the copied data items in the storage facility.   
 
         [0020]    By this development of the method it is possible to achieve the effect that the apparatus functions once more in an acceptable way after the apparatus had got into an undesired operating state. The detection of the operating state will preferably take place automatically. 
         [0021]    However, it is very difficult in the case of a complex system, consisting for example of several computers, to automatically detect an operating state of the device. Here, an advantageous development of the method results if the actuation of an operating element effects for all the components the storage of the copied data items in the storage facility. By this means, an operator is afforded in an advantageous way a possibility for manually restoring a state of the apparatus represented by the copied data items. 
         [0022]    A further advantageous development of the method results if the copied data items for the components are stored externally in a common central store. This central store makes available in an advantageous way a facility in which are stored all those items of data which are necessary for putting the apparatus into a particular state. 
         [0023]    The method is, furthermore, developed in an advantageous way if a memory map of a storage medium in the storage facility is created for the purpose of copying the items of data. Preferably, the storage facility concerned will be a hard disk. A corresponding memory map is then referred to as a “disk image” (hard disk storage map or hard disk map). This development of the method gives the advantage that it is possible to copy the data items independently of the structure in which the data items are held on the storage medium. Apart from this, it is advantageous that the data items can be written back even if the storage medium has not yet been prepared, for example by formatting, for having data written to it. 
         [0024]    A further advantageous development of the method results if the way in which the components work can be defined in addition by conveying to the components instructional data, via a communication network, and in order for each component to effect storage of the copied data in the storage facility instructional data is initially conveyed to the component, defining the mode of operation of the component in such a way that the component stores the copied data in its storage facility. 
         [0025]    This gives the advantage that the writing back of the copied data items into the individual components&#39; storage units can be controlled centrally. For example, a component with which the apparatus is provided might be a central control unit which, if a fault occurs, conveys the instructional data to the other components and then prompts the components prepared in this way to call up the copied data from a central store and to store it in the storage facility of the component concerned. 
         [0026]    A further advantage results when the data items or the instructional data include program codes. This makes it advantageously possible also to use the method for any apparatuses in which a computer network comprising several computers is a component of the apparatus. 
         [0027]    Finally, the method is advantageously developed in that the step which includes the copying of the data and the storage of the copied data is
   a) repeated at prescribed points in time, or   b) carried out after or before a change, in particular each change, is made to data in at least one of the storage facilities.   
 
         [0030]    In that the state of the apparatus is, in accordance with sub-step a), regularly detected and saved, and indeed preferably automatically, data items will be saved while the apparatus is in different states. Preferably, several sets of detected data will be stored, where a set of detected data includes the data items detected at a particular point in time. If a malfunction of the apparatus occurs the different sets of recorded data then advantageously make available a choice of states into which the apparatus can be put. Automatic saving of the data items achieves the additional effect that the saving of the data does not require an operator to initiate it. Sub-step b) gives the advantage that any change to the data in the components&#39; storage facilities can be reversed at any time. 
         [0031]    A solution to the object is also given by a method in accordance with the invention for integrating an electronic component into a medical device. This method can be used for an electronic component for which a method of working can be defined by data where the data is stored in a storage facility for the component. Here again, an example of such a component is a computer, on which software can be stored on the hard disk as the storage facility. The method includes the steps:
   linking the component to the medical device,   transmitting the data from a central store on the medical device to the component and store the data in the component&#39;s storage facility.   
 
         [0034]    This method in accordance with the invention gives the advantage that a new component can be matched to the other components of the apparatus in a simple way. 
         [0035]    The method is developed in an advantageous way in that the data is copied from another electronic component&#39;s storage facility and is stored in the central store, and the other component is removed and replaced by the component which is to be integrated into the device. 
         [0036]    In an advantageous way, the new component of the apparatus which is to be integrated thereby automatically provides those functions which were made available by the other components before its removal. In other words, the effort involved when a defective component is replaced by a new component can be reduced. 
         [0037]    This is especially advantageous when the data includes program codes. It even permits a computer in a system to be exchanged without the new computer needing to be equipped in some special way with software for operation within the apparatus. 
         [0038]    The other developments, described in connection with the inventive method for operating an apparatus, are of course also transferable in an appropriate way to the inventive method for integrating an electronic component. Correspondingly, the advantages described in connection with the development concerned, of the method for operating an apparatus, also apply. 
         [0039]    The invention also covers a medical device with a control unit, a communication facility, a central storage device and at least one other electronic component. In the case of the device in accordance with the invention, a mode of operation of the component can also be defined by data if this data is stored in a storage facility for the component. In addition, the component is linked to the communication facility via one of several connections. In addition, data to define different modes of operation of a component are stored in the device, in the central storage device. In the case of the inventive medical device, the control unit is embodied to effect the transmission of data, defining a method of working, from the central store to the component, as a function of which one of the connections connects the component to the communication facility. 
         [0040]    In the case of the medical device in accordance with the invention, the mode of operation of the other electronic components can advantageously be adjusted virtually automatically. By reference to the connection via which the component is connected to the communication facility, the functions which the component should provide in the device are recognized. Correspondingly, its mode of operation is defined by storing appropriate data in the component&#39;s storage facility. 
         [0041]    With the inventive medical device, it is also advantageously possible to carry out the two inventive methods and their developments. Correspondingly, the advantages described in connection with the method concerned and its developments also result for the medical device if it is designed to carry out the appropriate form of embodiment of one of the methods. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0042]    The invention is described in more detail below, by reference to the following exemplary embodiments. Shown in this connection are: 
           [0043]      FIG. 1  a plan of a communication network as it is constructed from computers installed in a medical multi-purpose system, in a medical multi-purpose system which conforms to one form of embodiment of the inventive medical device, and 
           [0044]      FIG. 2  the plan as shown in  FIG. 1  highlighting operations, which take place in the integration of a new computer into the multi-purpose system, in accordance with one form of embodiment of the inventive method for integrating an electronic component into the multi-purpose system. 
       
    
    
     DETAILED DESCRIPTION OF THE INVENTION 
       [0045]    The exemplary embodiments represent preferred forms of embodiment of the invention. 
         [0046]      FIG. 1  illustrates a plan for a medical multi-purpose system  10 , where several computers  12 ,  14 ,  16 ,  18  are components of the multi-purpose system  10 . In the multi-purpose system  10 , the computers  12 ,  14 ,  16 ,  18  are linked together to form a local area network (LAN). For this purpose they are connected to a common network facility  20  of the multi-purpose system  10 . In the present case the network facility  20  conforms to the Ethernet standard. 
         [0047]    In the example shown in  FIG. 1 , the computer  12  provides a central control system for the multi-purpose system  10 . An operating state, for example, of the multi-purpose system  10  can be indicated to an operator via the computer  12 . Apart from this, provision can be made that the operator effects settings for the multi-purpose system  10  via the computer  12 . In doing so, control instructions are conveyed from the computer  12  to the other computers  14 ,  16 ,  18 . An operator can also be given the capability to install software in one of the computers  12 ,  14 ,  16 ,  18 , via the computer  12 . 
         [0048]    The computer  14  is used to control an x-ray C-arm, not shown in  FIG. 1 , of the multi-purpose system  10 , through which the digital medical image data can be obtained. This is then transmitted to the computer  16 . 
         [0049]    The image data obtained by means of the x-ray C-arm can then be observed by a user of the multi-purpose system  10  on a screen of the computer  16 , not shown in  FIG. 1 . What cannot be seen from  FIG. 1  is that the computer  16  is accommodated in a different room from that in which the x-ray C-arm of the multi-purpose system  10  is standing. In spite of this, the computer  16  is a component of the multi-purpose system. 
         [0050]    The computer  18  belongs to an operating unit which is located directly adjacent to a patient table of the multi-purpose system  10 , not shown in  FIG. 1 . Not shown in  FIG. 1  is a screen for the computer  18  with a touch-sensitive surface (a touchscreen), through which the user can move the patient table and the x-ray C-arm. In doing this, control instructions are transmitted from the computer  18  to the computer  14 . 
         [0051]    The structure of the multi-purpose system just described is only chosen as an example, to enable the elements which are essential for an explanation of the invention to be better visualized in what follows. 
         [0052]    Each of the computers  12 ,  14 ,  16 ,  18  of the multi-purpose system  10  provides a hard disk  22 ,  24 ,  26 ,  28  as a storage unit on which is stored in each case a file system with an operating system and other software for the computer  12 ,  14 ,  16 ,  18  concerned. The operating system and the other software make possible the functionalities of the individual computers  12 ,  14 ,  16 ,  18 , described above. The software, including the operating system, which is stored on a hard disk  22 ,  24 ,  26 ,  28  represents data which defines the way in which the computers  12 ,  14 ,  16 ,  18  work. The operating system and the other software of any of the computers  12 ,  14 ,  16 ,  18  are matched to the operating system and the other software of any of the other computers  12 ,  14 ,  16 ,  18 , so that image data and control data can be exchanged rapidly and without difficulty between the computers  12 ,  14 ,  16 ,  18 . 
         [0053]    Also connected to the network facility  20  is a central file server  30 , e.g. an NAS (Network Attached Storage). In the file server are held files which are used by the computers  12 ,  14 ,  16 ,  18  which must not be lost even if, for example, one of the hard disks  22 ,  24 ,  26 ,  28  should become functionally incompetent. Instead of the central file server  30 , it is also possible to provide for the files in the computer  12  to be held in a storage device which is designed for that purpose or to make available another computer with storage capacity appropriate for holding the files. 
         [0054]    Stored on each hard disk  22 ,  24 ,  26 ,  28 , in the example in  FIG. 1  in a partition  32 ,  34 ,  36 ,  38 , is the file system with the operating system it contains and the other software it contains. Each computer  12 ,  14 ,  16 ,  18  has transmitted a copy of the relevant partition  32 ,  34 ,  36 ,  38  on its hard disk  22 ,  24 ,  26 ,  28  to the file server  30 , where they are stored as a hard disk image  32 ′,  34 ′,  36 ′,  38 ′ on a hard disk array  40  (RAID—Redundant Array of Inexpensive Discs) in the file server  30 . In  FIG. 1 , the procedure of transmitting the hard disk images  32 ′,  34 ′,  36 ′,  38 ′ of the partitions  32 ,  34 ,  36 ,  38  to the file server  30  is indicated by arrows. The hard disk images  32 ′,  34 ′,  36 ′,  38 ′ can be created using software known from the prior art, which can be a component of the software installed as on the computer concerned. 
         [0055]    The time point at which the computers  12 ,  14 ,  16 ,  18  create the relevant hard disk images  32 ′,  34 ′,  36 ′,  38 ′ and transmit them to the file server  30  can, for example, be defined in advance by an operator at computer  12 . At the time point thus prescribed, the computer  12  then autonomously transmits an appropriate signal via the network facility  20  to the other computers  14 ,  16 ,  18 , to prompt the latter to create the hard disk images  32 ′,  34 ′,  36 ′,  38 ′ and to transmit them to the file server  30 . The operator can also be given the option, by the computer  12 , to initiate the creation of hard disk images by directly calling up an appropriate function of some control software on the computer  12 . 
         [0056]    It is also possible to store on the file server several hard disk images of each hard disk  22 ,  24 ,  26 ,  28 . In this case, an operator can be given an overview via the computer  12  of the images which can be called up on the file server  30 . 
         [0057]    The image data, for example obtained by means of an x-ray C-arm, can be called up from outside the multi-purpose system  10  via the computer  12 , through a network connection  42  of the multi-purpose system  10 . For this purpose, the image data is stored in the computer  12  on a hard disk array (RAID), not shown in  FIG. 1 . It is also possible to enable the storage of the hard disk images  32 ′,  34 ′,  36 ′,  38 ′, in a file server which is not directly connected to the network facility  20 , via the network connection  42 . 
         [0058]    A plan of the multi-purpose system  10  described in conjunction with  FIG. 1  is shown once again in  FIG. 2 . For this reason the same reference marks are used in  FIG. 2  for those elements which correspond to elements shown in  FIG. 1 . Furthermore, elements which have already been explained in conjunction with  FIG. 1  are not explained again. 
         [0059]    The way in which a defective computer in the multi-purpose system  10  is replaced by a new one, and the latter is configured for operation within the multi-purpose system  10  is explained below by reference to  FIG. 2 . 
         [0060]    In the situation shown in  FIG. 2 , the computer  18  shown in  FIG. 1  has been removed from the multi-purpose system  10  and has been replaced by a new computer  44 . In this example, a hard disk  46  on the new computer  44  contains absolutely no data. In other words, the hard disk  46  has not yet been partitioned or formatted. 
         [0061]    After the multi-purpose system  10  is switched on, the operating system is loaded into a working store in each of the computers  12 ,  14 ,  16  which is already in working order and the computers  12 ,  14 ,  16  are thereby put on stand-by. In the case of the new computer  44 , the necessary data for doing this is missing from the unwritten hard disk  46 . For this reason, a network card  48  in the new computer  44  here generates a signal conforming to a data protocol (BOOTP—Bootstrap Protocol) intended for the purpose. This signal is transmitted to the computer  12  which has the control system. In  FIG. 2  this is indicated by an arrow for a transmission, T 1 . 
         [0062]    The computer  12  thereupon transmits, in a transmission T 2 , an auxiliary operating system  50  to the new computer  44 , which is then put in a position to provide simple functions by means of the auxiliary operating system  50 . The program code of the auxiliary operating system here represents instructional data. 
         [0063]    In addition, by means of an appropriate piece of server software (DHCPD—Dynamic Host Configuration Protocol Daemon), the computer  12  assigns to the new computer  44  a network address, which is here an IP address (IP—Internet Protocol) because the network facility  20  is a facility conforming to the Ethernet standard. The network address which is assigned to the new computer  44  is determined as a function of the connection  52  via which the new computer  44  is linked with the network facility  20 . As a result, the new computer  44  in the example is given the same network address as had previously been given to the defective computer  18  which has been removed. The particular connection  52 ,  54 ,  56 ,  58 ,  60  to the network facility  20 , to which the new computer  44  is connected, is notified to the computer  20  by a switch, not shown in  FIG. 2 , in the network facility  20 . 
         [0064]    The auxiliary operating system  50  requests from the file server  30  the hard disk image  38 ′ which had been stored by the computer  18  which was previously connected to the connection  52 . The request for the transmission of the hard disk image  38 ′ is identified in.  FIG. 2  as the transmission T 3 . 
         [0065]    The file server  30  thereupon transmits the hard disk image  38 ′ to the new computer  44 , which stores the hard disk image  38 ′ on its hard disk  46 . The transmission procedure is identified in  FIG. 2  as the transmission T 4 . 
         [0066]    The storage of the hard disk image  38 ′ on the hard disk  46  automatically produces on the hard disk  46  a partition with a file system, and contained therein an operating system together with the additional software, as was also present on its hard disk  28  in the case of the defective computer  18 . Hence, after a restart of the new computer  44  it makes available the same functions as did previously the computer  18 . The integration of the new computer  44  into the multi-purpose system  10  is thereby completed. 
         [0067]    In the case of the multi-purpose system  10 , provision can be made for the partitions of the hard disks on all the computers  12 ,  14 ,  16 ,  44  to be overwritten simultaneously with each of their hard disk images, as stored on the file server  30 . For this purpose, provision can be made for a user of the multi-purpose system  10  to select an appropriate function on the computer  12  to initiate the writing back of the hard disk images  32 ′,  34 ′,  36 ′,  38 ′ by the data server  30  to the hard disks of the computers. In this connection, provision can be made that there is a piece of software installed on each computer  12 ,  14 ,  16 ,  44 , by means of which a computer is first restarted, or more precisely stated rebooted, and is then operated with an auxiliary operating system similar to the auxiliary operating system  50 . For these auxiliary operating systems it is here possible to define in advance data about which hard disk image they should each call up from the data server  30  and should store on the hard disk of the computer concerned. 
         [0068]    When all the hard disks have been rewritten with the appropriate hard disk images, the multi-purpose system  10  is restarted. The multi-purpose system  10  is then in the operating state as defined by the hard disk images  32 ′,  34 ′,  36 ′,  38 ′. All the changes to the software of the multi-purpose system  10 , which had been made in the period between the creation of the hard disk images  32 ′,  34 ′,  36 ′,  38 ′ and the writing back of these to the hard disks of the computers from which they originated, are thereby undone. In particular, in the case that a malfunction of the multi-purpose system results from one of the changes, resetting the multi-purpose system enables its functional correctness to be reestablished rapidly and with little work. 
         [0069]    In summary, the example shows that the invention enables the computers of the multi-purpose system to be rapidly matched to each other in such a way that the functional correctness of the multi-purpose system is guaranteed.