Utilizing probability data structures to improve access control of documents across geographic regions

A non-transitory computer-readable storage medium comprising instructions that, when executed by a processor, cause a computer device to carry out operations comprising:

• generating an access control block for a digital document that indicates access permissions for user identities associated with the digital document, wherein the digital document is stored in a first geographic region;
• generating, in the first geographic region, an access control probabilistic data structure for the digital document by using encoding to remove the user identities from the access control block, wherein the access control probabilistic data structure corresponds to permissions associated with the digital document without including user identifiers;
• and
• providing the access control probabilistic data structure to a second geographic region, wherein the second geographic region uses the access control probabilistic data structure to locally deny access to the digital document stored in the first geographic region for unauthorized users using the access control probabilistic data structure provided to the second geographic region.

A system, comprising:

• a processing system having a processor;
• and
• a computer memory including instructions that, when executed by the processing system, cause the system to carry out operations comprising:
• generating an access control block for a digital document that indicates access permissions for user identities associated with the digital document, wherein the digital document is stored in a first geographic region;
• generating, in the first geographic region, an access control probabilistic data structure for the digital document by using encoding to remove the user identities from the access control block, wherein the access control probabilistic data structure corresponds to permissions associated with the digital document without including user identifiers;
• and
• providing the access control probabilistic data structure to a second geographic region, wherein the second geographic region uses the access control probabilistic data structure to locally determine whether to deny user access to the digital document stored in the first geographic region using the access control probabilistic data structure provided to the second geographic region.