Managing search queries using encrypted cache data

A system comprising:

• a processor;
• and
• a computer-readable storage medium communicatively coupled to the processor and storing program instructions which, when executed by the processor, cause the processor to perform a method comprising:
• sending, by a server of an enterprise search platform, an encrypted cache data table to a search client device, wherein the encrypted cache data table comprises one or more accessibility determinations for enterprise data that was previously verified using an access control list in response to a prior search query from the search client device;
• receiving a new search query and the encrypted cache data table from the search client device;
• searching one or more indices comprising a listing of target data that matches the new search query;
• decrypting, using an encryption key that is inaccessible by the search client device, the encrypted cache data table, wherein the one or more accessibility determinations for the enterprise data that was previously verified using the access control list from the decrypted cache data table is collated with the target data to ascertain a first accessibility determination to a first enterprise data of the target data;
• querying a data source server to ascertain a second accessibility determination to a second enterprise data of the target data that is not collated with the decrypted cache data table, wherein the second enterprise data is verified against the access control list to ascertain the second accessibility determination to the second enterprise data;
• receiving, in response to the querying, the second accessibility determination from the data source server;
• preparing a result list by removing a third enterprise data from the target data in response to at least one of the first accessibility determination and the second accessibility determination indicating that the third enterprise data is inaccessible by the search client device;
• updating the decrypted cache data table to indicate that the third enterprise data of the target data is inaccessible to the search client device;
• encrypting the updated cache data table using the encryption key;
• and
• sending the result list and the encrypted updated cache data table to the search client device, wherein the encrypted updated cache data table is stored on the search client device.

A computer program product comprising a computer-readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform a method comprising:

• sending, by a server of an enterprise search platform, an encrypted cache data table to a search client device, wherein the encrypted cache data table comprises one or more accessibility determinations for enterprise data that was previously verified using an access control list in response to a prior search query from the search client device;
• receiving a new search query and the encrypted cache data table from search client device;
• searching one or more indices comprising a listing of target data that matches the new search query;
• decrypting, using an encryption key that is inaccessible by the search client device, the encrypted cache data table, wherein the one or more accessibility determinations for the enterprise data that was previously verified using the access control list from the decrypted cache data table is collated with the listing of target data to ascertain a first accessibility determination to a first enterprise data of the target data;
• querying a data source server to ascertain a second accessibility determination to a second enterprise data of the target data that is not collated with the decrypted cache data table, wherein the second enterprise data is verified against the access control list to ascertain the second accessibility determination to the second enterprise data;
• receiving, in response to the querying, the second accessibility determination from the data source server;
• and
• preparing a result list by removing a third enterprise data from the target data in response to at least one of the first accessibility determination and the second accessibility determination indicating that the third enterprise data is inaccessible by the search client device;
• updating the decrypted cache data table to indicate that the third enterprise data of the target data is inaccessible to the search client device;
• encrypting the updated cache data table using the encryption key;
• and
• sending the result list and the encrypted updated cache data table to the search client device, wherein the encrypted updated cache data table is stored on the search client device.