Method and apparatus for multi-domain anomaly pattern definition and detection
First Claim
1. A method of performing multi-domain surveillance, the method comprising:
- analyzing, via a computer processor, first streamed data to identify healthcare transaction signatures in the first streamed data;
based on the first streamed data, creating a database of signature patterns across multiple domains of biosurveillance activity according to at least one region and based on time;
analyzing, via a computer processor, second streamed data to identify healthcare transaction signature anomalies in the second streamed data, wherein the signature anomalies are identified by comparing healthcare transaction data contained in the second streamed data to the signature patterns in the database to yield a comparison;
accessing data in the database from the multiple domains to identify a plurality of anomalies based on the comparison of the signature patterns;
collecting the plurality of anomalies into a case for management, the case comprising a general container for the plurality of anomalies, sub-threshold and super-threshold scores in one of a single domain and multiple domains; and
using corroborating evidence across the multiple domains to adjust a likelihood that an event associated with the case should be investigated.
3 Assignments
0 Petitions
Accused Products
Abstract
Disclosed herein is a multi-domain anomaly pattern definition and detection module. The module receives raw data from different kinds of anomalies from a variety of detection algorithms and generates scores associated with the data. If one or more scores exceed a threshold, then the algorithm gathers further information which may include counts or listings of detailed data for a geographic region which may include such information as emergency department and lab department data related to a particular health concern such as a respiratory syndrome. Summaries are provided which may identify anomalies and numbers of events according to geographic region and utilizing probability algorithms. Other databases such as animal data collected under the Department of Agriculture may also be utilized. The data is presented in a familiar form such as a map or a table such that a subject matter expert may determine whether to further investigate an anomaly as a potential risk, for example, a health risk.
47 Citations
7 Claims
-
1. A method of performing multi-domain surveillance, the method comprising:
-
analyzing, via a computer processor, first streamed data to identify healthcare transaction signatures in the first streamed data; based on the first streamed data, creating a database of signature patterns across multiple domains of biosurveillance activity according to at least one region and based on time; analyzing, via a computer processor, second streamed data to identify healthcare transaction signature anomalies in the second streamed data, wherein the signature anomalies are identified by comparing healthcare transaction data contained in the second streamed data to the signature patterns in the database to yield a comparison; accessing data in the database from the multiple domains to identify a plurality of anomalies based on the comparison of the signature patterns; collecting the plurality of anomalies into a case for management, the case comprising a general container for the plurality of anomalies, sub-threshold and super-threshold scores in one of a single domain and multiple domains; and using corroborating evidence across the multiple domains to adjust a likelihood that an event associated with the case should be investigated. - View Dependent Claims (2, 3, 4)
-
-
5. A system for performing multi-domain surveillance, the system comprising:
-
a processor; a first module configured to control the processor to analyze streamed data and identify healthcare transaction signatures in first streamed data; a second module configured to control the processor, based on the first streamed data, to create a database of signature patterns across multiple domains of biosurveillance activity according to at least one region and based on time; a third module configured to control the processor to analyze second streamed data to identify healthcare transaction signature anomalies in the second streamed data, wherein the signature anomalies are identified by comparing healthcare transaction data contained in the second streamed data to the signature patterns in the database to yield a comparison; a fourth module configured to control the processor to access data in the database from the multiple domains to identify a plurality of anomalies from the signature patterns; a fifth module configured to control the processor to collect the plurality of anomalies into a case for management, the case comprising a general container for the plurality of anomalies, sub-threshold and super-threshold scores in one of a single domain or multiple domains; and a sixth module configured to control the processor to use corroborating evidence across the multiple domains to adjust a likelihood that an event associated with the case should be investigated. - View Dependent Claims (6, 7)
-
Specification