Providing access control for public and private document fields
AssigneeInternational Business Machines Corporation
InventorsAndreas Arning, Andrea E. Baader, Thomas Schulze, Sascha Schwarze
Life of this patent
Estimating the term…
Abstract
A computer determines, based on a degree of authorization of a user, that a user has authorization to view a type of field. Based on the degree of authorization of the user, the computer generates a modified list of search terms by adding additional search terms to a list of search terms. The computer executes a search using the modified list of search terms. The computer identifies a search result that includes the first type of field which further includes a search term that is included in the modified list of search terms.
Claims18
A computer program product to control access to information, the computer program product comprising:
- one or more computer-readable storage devices and program instructions stored on the one or more computer-readable storage devices, the program instructions comprising:
- program instructions to determine that a first type of field of a document has restricted access, based on a degree of authorization of the user;
- program instructions to generate a modified list of index terms by encrypting tokens occurring in the first type of field using a first set of encryption settings;
- program instructions to execute an indexing step using the modified list of index terms;
- program instructions to determine whether a user has authorization to view a first type of field, based on a degree of authorization of the user;
- program instructions to respond to a determination that the user has authorization to view a first type of field by generating a modified list of search terms by adding additional search terms to a list of search terms, wherein the additional search terms are encrypted search terms created using the first set of encryption settings;
- and
- program instructions to respond to the determination that the user has authorization to view a first type of field by executing a search using the modified list of search terms such that the document is identified as a search result when either an unencrypted or an encrypted version of a given search term is found in the index terms associated with that document.
A computer system to control access to information, the computer system comprising:
- one or more computer processors;
- one or more computer readable storage devices;
- program instructions stored on the computer readable storage medium for execution by at least one of the one or more processors, the program instructions comprising:
- program instructions to determine that a first type of field of a document has restricted access, based on a degree of authorization of the user;
- program instructions to generate a modified list of index terms by encrypting tokens occurring in the first type of field using a first set of encryption settings;
- program instructions to execute an indexing step using the modified list of index terms;
- program instructions to determine whether a user has authorization to view a first type of field, based on a degree of authorization of the user;
- program instructions to respond to a determination that the user has authorization to view a first type of field by generating a modified list of search terms by adding additional search terms to a list of search terms, wherein the additional search terms are encrypted search terms created using the first set of encryption settings;
- and
- program instructions to respond to the determination that the user has authorization to view a first type of field by executing a search using the modified list of search terms such that the document is identified as a search result when either an unencrypted or an encrypted version of a given search term is found in the index terms associated with that document.
Dependencies are inferred from the claim text.