Multi-user access controls in electronic simultaneously editable document editor

• US 10,235,533 B1
• Filed: 12/01/2017
• Issued: 03/19/2019
• Est. Priority Date: 12/01/2017
• Status: Active Grant

• Current Assignee: Palantir Technologies Incorporated
• Original Assignee: Palantir Technologies Incorporated
• Inventors: Thoren, Paul, Gazzard, Benjamin, Meiklejohn, David, Ng, Kevin, Fedderly, Matthew, Brett-Bowen, Rhys
• Primary Examiner(s): Henning, Matthew T
• Application Number:
  US15/829,654
• Time in Patent Office: 473 Days
• Field of Search: 726 28
• CPC Class Codes: G06F 16/252 between a Database Management System and a front-end application
• CPC Class Codes: G06F 16/26 Visual data mining; Browsing structured data
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control

Abstract

A system with an interactive user interface for a plurality of users to author an electronic document simultaneously is described. The system displays visual feedback on the interface to prevent the users from interfering with one another. The system displays data from a remote database linked into the document based on unique identifiers. The data is displayed as an “artifact.” The system monitors and tracks each user'"'"'s access category level, as well as the access category level of each piece of data pulled from the remote database. The system compares a user'"'"'s category level to the data from the database to make visible only the portions of the document the user has the appropriate access category level to view and/or modify. The portions of the document that have a higher category level than the user will be hidden from the user either in part or completely. Also, there may be an indicator to the user of such redacted or hidden content from the user'"'"'s viewer.

Claims

1. A computing system for dynamically generating an electronic visualization interface with multi-user access and control, the system comprising:

one or more computer readable storage devices configured to store a plurality of computer executable instructions; and

one or more hardware computer processors in communication with the one or more computer readable storage devices and configured to execute the plurality of computer executable instructions to cause the computing system to;

generate an electronic visualization interface, wherein

the electronic visualization interface is configured to be accessible by a plurality of users simultaneously,

the plurality of users are each associated with respective access category levels,

the computing system enables differing access category levels for the plurality of users,

the electronic visualization interface is configured to display a document depicting a plurality of interactive artifacts, and

the document and the depicted artifacts are differently viewable by each of the plurality of users based on the access category levels of each of the users and access category levels of each of the plurality of interactive artifacts;

determine an access category level of a first user accessing the document via the electronic visualization interface;

determine an access category level of a second user accessing the document via the electronic visualization interface;

determine an access category level of a first artifact of the plurality of interactive artifacts depicted in the document;

compare, by a first comparison, the access category level of the first user with the access category level of the first artifact;

provide the electronic visualization interface for viewing by the first user such that the first artifact is viewable by the first user in the document based at least in part on the first comparison;

compare, by a second comparison, the access category levels of the first user and the second user with the access category level of the first artifact; and

provide the electronic visualization interface for viewing by the second user such that the first artifact is viewable by the second user in the document based at least in part on the second comparison, wherein the first artifact is differently viewable for the second user than for the first user.

2. The computing system of claim 1, wherein the one or more hardware computer processors are further configured to execute the plurality of computer executable instructions to cause the computer system to:

access a second electronic database to obtain pre-programmed instructions to enable determination of how to render the first artifact.

3. The computing system of claim 1, wherein the first artifact comprises a plurality of database-linked objects, each database-linked object comprising its own access category level.

4. The computing system of claim 3, wherein the access category level of the first artifact is based at least in part on the access category levels of the plurality of database-linked objects.

5. The computing system of claim 4, wherein access category level of the first artifact is the highest of all access category levels of the plurality of database-linked objects.

6. The computing system of claim 1, wherein the first artifact is viewable and modifiable by the user if the user has a higher access category level than the access category level of the first artifact.

7. The computing system of claim 1, wherein the first artifact is not viewable by the user with a lower access category level than the access category level associated with the first artifact.

8. The computing system of claim 7, wherein a placeholder artifact appears in place of the first artifact, wherein the placeholder artifact retains the same size and formatting of the first artifact so that appearance of the dynamic document is not changed.

9. The computing system of claim 8, wherein a symbol appears in place of the first artifact.

10. The computing system of claim 8, wherein the access category level required to view the first artifact appears on the electronic visualization interface.

11. The computing system of claim 8, wherein identifying information pertaining to the user that created the first artifact is displayed on the electronic visualization interface.

12. The computing system of claim 1, wherein the one or more hardware computer processors are further configured to execute the plurality of computer executable instructions to cause the computer system to:

track modifications to the document over time; and

present the tracked modifications to the user.

13. The computing system of claim 1, wherein the second user accesses the document simultaneously with the first user.