US 9,177,171 B2 · Access control for entity search

Abstract

Method, system, and computer program product for access control for entity search are provided. The method includes: representing entity-relationship data in a conceptual model; representing entities in a search system as documents containing the entity's searchable content and metadata; defining authorization rules for searchers over entities and their relationships; and extending an entity document to include searchable tokens defining the authorization rules. Defining authorization rules may include: identifying query predicate constraints for entity search; and defining searchable tokens as paths for query predicates and permissible searchers; wherein the permissible searchers are permitted access to data based on a query that contains the predicate. Defining authorization rules may further include: defining searchable document files for a free-text predicate with a field name as a token of permissible searchers and the field value as the searchable content.

Claims11

Dependent claims

A method of searching for entities matching a query, including:

providing an inverted index of documents representing entities, the documents including:
searchable content;
and
one or more permission tokens, at least one of the tokens including an identification of a permissible and a copy of a sub-portion of the searchable content of the document, including the entire searchable content of the entity that the identified permissible is allowed to search and not including the content of the document that the permissible is not allowed to search;
receiving a free-text query for entity search with a searcher identification;
re-writing the query as a combination of the free-text and of one or more tokens of the searcher identification, the tokens including:
the searcher identification;
and
a content field having the free-text as its value;
and
searching the inverted index for documents having both:
searchable content matching the query free-text, and
a permission-token matching at least one of the one or more tokens of the rewritten query including the free-text.

10 more elements

Dependencies are inferred from the claim text.

Access control for entity search

Life of this patent

Access control for entity search

Life of this patent

Abstract

Claims11