# US 12,111,956 B2 · Methods and systems for access controlled spaces for data analytics and visualization

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,111,956 B2
- Document ID: US12111956B2
- Status: Granted
- Kind: B2
- Application number: 17/748,964
- Filed: 2022-05-19
- Published: 2022-09-01
- Granted: 2024-10-08
- Earliest claimed: 2018-12-19
- Assignees: Elasticsearch B.V.
- Applicants: Elasticsearch B.V.
- Inventors: Courtney Ewing
- Web page: https://patentgrep.com/patent/US12111956B2

## CPC

- G06F 21/629: {to features or functions of an application}
- G06F 9/451: Execution arrangements for user interfaces
- G06F 21/31: User authentication
- G06F 21/604: {Tools and structures for managing or administering access control systems}
- H04L 63/102: {Entity profiles}
- G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Methods and systems for enabling organization and control of dashboards, visualizations, and other saved data objects into spaces. An exemplary method includes, based on at least one role of a user, controlling the user's access to a default space and to other spaces of a plurality of spaces, such that the only spaces that the user can access are the default space and the one or more other spaces. Each space can contain a number of saved objects such as dashboards, visualizations, or other objects. The method can provide a graphical user interface for enabling the user to select, as a current space, the default space or one of the other spaces; and in response to the selection, automatically saving new objects generated by the user into the current space; wherein each of the spaces is configured to provide access to certain data objects only or access to certain applications only.

## Claims

### Claim 1

A computer-implemented method for providing access controlled spaces configured for data analytics and visualization, the method comprising:
establishing a default space for a user, the default space being a secure container;
selecting one or more other spaces for the user from a plurality of spaces;
creating and storing a unique identifier for each space of the plurality of spaces other than the default space, wherein the unique identifier is stored on objects saved in the respective space of the plurality of spaces, wherein absence of the unique identifier for saved object indicates the saved objects belongs to the default space;
based on at least one role of the user, controlling access by a user to the default space and to the one or more other spaces of the plurality of spaces, such that the user can access the default space and the one or more other spaces;
automatically placing some or all of the user's saved data objects that existed before the default space was generated, into the default space, the saved data objects being stored in the default space, the saved data objects including configuration data comprising a plurality of index patterns to indicate which search engine indices to explore;
providing a user interface for enabling the user to select, as a current space, the default space or one of the one or more other spaces;
enabling the user to upload data, analyze data, develop visualized charts and dashboards within the current space and collaborate with other users that have access to the current space;
in response to the user selecting the current space, automatically saving new objects generated by the user into the current space; and
generating visualizations and dashboards using the saved data objects, wherein the visualizations and dashboards comprise histograms, line graphs, pie charts, or sunbursts.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1, further comprising automatically generating the default space for a user.

### Claim 3 (depends on 1)

The computer-implemented method of claim 1, wherein at least some of the plurality of spaces are organized around a common purpose, wherein a plurality of teams belong to the at least some of the plurality of spaces organized around the common purpose.

### Claim 4 (depends on 3)

The computer-implemented method of claim 3, wherein the common purpose is a production website.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1, wherein at least some of the plurality of spaces are organized around a common purpose and at least some of the plurality of spaces are organized around a particular team of a plurality of teams in a company.

### Claim 6 (depends on 5)

The computer-implemented method of claim 5, wherein the plurality of teams comprise engineering, sales, executive, and marketing.

### Claim 7 (depends on 1)

The computer-implemented method of claim 1, wherein each of the plurality of spaces is a secure container.

### Claim 8 (depends on 1)

The computer-implemented method of claim 1, further comprising, in response to the user logging in, presenting a user interface that filters the plurality of spaces for showing only ones of the spaces that the user is permitted to access.

### Claim 9 (depends on 8)

The computer-implemented method of claim 8, further comprising providing another user interface wherein access to particular ones of the plurality of spaces can be designated as read-only for one or more users.

### Claim 10 (depends on 9)

The computer-implemented method of claim 9, wherein access to other particular ones of the plurality of spaces can be designated as full access for the one or more users via the user interface.

### Claim 11 (depends on 1)

The computer-implemented method of claim 1, wherein the particular one of the plurality of spaces that the user can access is determined by selections from an administrator based on the user's roles or attributes for the user.

### Claim 12 (depends on 1)

The computer-implemented method of claim 1, wherein each of the plurality of spaces is independent, such that the saved objects unique to one of the spaces do not appear in any of the other ones of the plurality of spaces.

### Claim 13 (depends on 1)

The computer-implemented method of claim 1, wherein access is configured such that, if the user does not have access to a particular space of the plurality of spaces, the inaccessible particular space will not be visible or selectable by the user.

### Claim 14 (depends on 1)

The computer-implemented method of claim 1, further providing a user interface for selectively deleting a first space of the plurality of spaces, wherein in response to the selectively deleting, cascading the deletion selection to all saved objects within the first space.

### Claim 15 (depends on 2)

The computer-implemented method of claim 2, wherein settings from the default space are automatically copied to a new space in response to the new space being created by the user or an administrator.

### Claim 16 (depends on 1)

The computer-implemented method of claim 1, comprising providing a user interface for selecting which ones of a plurality of applications are available to ones of the users having access to a particular space of the plurality of spaces.

### Claim 17

A system comprising:
a processor, and
a memory communicatively coupled to the processor, the memory storing instructions executable by the processor to perform a method, the method comprising:
establishing a default space for a user, the default space being a secure container;
selecting one or more other spaces for the user from a plurality of spaces;
creating and storing a unique identifier for each space of the plurality of spaces other than the default space, wherein the unique identifier is stored on objects saved in the respective space of the plurality of spaces, wherein absence of the unique identifier for saved object indicates the saved objects belongs to the default space;
based on at least one role of the user, controlling access by a user to the default space and to the one or more other spaces of the plurality of spaces, such that the user can access the default space and the one or more other spaces;
automatically placing some or all of the user's saved data objects that existed before the default space was generated, into the default space, the saved data objects being stored in the default space, the saved data objects including configuration data comprising a plurality of index patterns to indicate which search engine indices to explore;
providing a user interface for enabling the user to select, as a current space, the default space or one of the one or more other spaces;
enabling the user to upload data, analyze data, develop visualized charts and dashboards within the current space and collaborate with other users that have access to the current space;
in response to the user selecting the current space, automatically saving new objects generated by the user into the current space; and
generating visualizations and dashboards using the saved data objects, wherein the visualizations and dashboards comprise histograms, line graphs, pie charts, or sunbursts.

### Claim 18

A system comprising:
means for establishing a default space for a user, the default space being a secure container;
means for selecting one or more other spaces for the user from a plurality of spaces;
means for creating and storing a unique identifier for each space of the plurality of spaces other than the default space, wherein the unique identifier is stored on objects saved in the respective space of the plurality of spaces, wherein absence of the unique identifier for saved object indicates the saved objects belongs to the default space;
based on at least one role of the user, means for controlling access by a user to the default space and to the one or more other spaces of the plurality of spaces, such that the user can access the default space and the one or more other spaces;
means for automatically placing some or all of the user's saved data objects that existed before the default space was generated, into the default space, the saved data objects being stored in the default space, the saved data objects including configuration data comprising a plurality of index patterns to indicate which search engine indices to explore;
means for providing a user interface for enabling the user to select, as a current space, the default space or one of the one or more other spaces;
means for enabling the user to upload data, analyze data, develop visualized charts and dashboards within the current space and collaborate with other users that have access to the current space;
in response to the user selecting the current space, means for automatically saving new objects generated by the user into the current space; and
means for generating visualizations and dashboards using the saved data objects, wherein the visualizations and dashboards comprise histograms, line graphs, pie charts, or sunbursts.