Protected search

• US 10,599,663 B1
• Filed: 03/02/2017
• Issued: 03/24/2020
• Est. Priority Date: 12/14/2016
• Status: Active Grant

• Current Assignee: Palantir Technologies Incorporated
• Original Assignee: Palantir Technologies Incorporated
• Inventors: Mark, Alexander, Richbourg, Christopher, Lu, James, Zavilla, Joshua
• Primary Examiner(s): Gofman, Alex
• Application Number:
  US15/448,173
• Time in Patent Office: 1,118 Days
• Field of Search: None
• CPC Class Codes: G06F 16/24575 using context
• CPC Class Codes: G06F 16/2471 Distributed queries
• CPC Class Codes: G06F 16/248 Presentation of query results
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Systems and methods are provided for protected search. A search query to be performed using at least one data store is received from a computing device of a user. The user is not authorized to access the at least one data store. One or more search results that are responsive to the search query from the at least one data store are determined. The one or more search results are aggregated based on one or more categories. At least a subset of the aggregated search results is provided to the computing device of the user.

Claims

1. A system comprising:

one or more processors; and

memory storing instructions that, when executed by the one or more processors, cause the system to perform;

receiving, from a computing device of a user, a search query to be performed using at least one data store, the user not being authorized to access the at least one data store, wherein the search query includes one or more search terms;

determining one or more search results that are responsive to the search query from the at least one data store, wherein the search query is performed using a system account that is authorized to access the at least one data store;

aggregating the one or more search results based on one or more categories;

providing at least a subset of the aggregated search results to the computing device of the user in response to the search query, at least one search result of the subset of the aggregated search results including a plurality of account usernames, each of the plurality of account usernames corresponding to a different authorized account capable of accessing one or more details of the at least one search result of the subset of the aggregated search results, the different authorized accounts being different from the system account, wherein the providing at least a subset of the aggregated search results to the computing device of the user further comprises providing aggregation numbers associated with the one or more categories, each aggregation number indicating a number of matches of the search query in a corresponding category of the one or more categories;

providing, based on the aggregation numbers associated with the one or more categories, at least one histogram that plots the aggregation numbers indicating the number of matches of the search query in the corresponding category of the one or more categories;

receiving, from the computing device of the user, a selection of a particular account username of the plurality of account usernames; and

contacting, based on the particular account username of the plurality of account usernames, at least one user associated with the authorized account corresponding to the particular account username to obtain the one or more details of the at least one search result of the subset of the aggregated search results.

2. The system of claim 1, wherein the system account is defined in the instructions.

3. The system of claim 1, wherein the one or more categories are pre-defined, and wherein a category corresponds to an object property value.

4. The system of claim 1, wherein providing at least the subset of the aggregated search results to the computing device of the user comprises providing names of the one or more categories.

5. The system of claim 4, wherein providing at least the subset of the aggregated search results to the computing device of the user further comprises providing at least the subset of the aggregated search results based on a page size defined in the instructions.

6. The system of claim 1, wherein the one or more identifiers of the one or more authorized account comprise one or more user names of the one or more authorized accounts.

7. A method being implemented by a computing system including one or more physical processors and storage media storing machine-readable instructions, the method comprising:

receiving, from a computing device of a user, a search query to be performed using at least one data store, the user not being authorized to access the at least one data store, wherein the search query includes one or more search terms;

determining one or more search results that are responsive to the search query from the at least one data store, wherein the search query is performed using a system account that is authorized to access the at least one data store;

aggregating the one or more search results based on one or more categories;

providing at least a subset of the aggregated search results to the computing device of the user in response to the search query, at least one search result of the subset of the aggregated search results including a plurality of account usernames, each of the plurality of account usernames corresponding to a different authorized account capable of accessing one or more details of the at least one search result of the subset of the aggregated search results, the different authorized accounts being different from the system account, wherein the providing at least a subset of the aggregated search results to the computing device of the user further comprises providing aggregation numbers associated with the one or more categories, each aggregation number indicating a number of matches of the search query in a corresponding category of the one or more categories;

providing, based on the aggregation numbers associated with the one or more categories, at least one histogram that plots the aggregation numbers indicating the number of matches of the search query in the corresponding category of the one or more categories;

receiving, from the computing device of the user, a selection of a particular account username of the plurality of account usernames; and

contacting, based on the particular account username of the plurality of account usernames, at least one user associated with the authorized account corresponding to the particular account username to obtain the one or more details of the at least one search result of the subset of the aggregated search results.

8. The method of claim 7, wherein the system account is defined in the instructions.

9. The method of claim 7, wherein the one or more categories are pre-defined, and wherein a category corresponds to an object property value.

10. The method of claim 7, wherein providing at least the subset of the aggregated search results to the computing device of the user comprises providing names of the one or more categories.

11. The method of claim 10, wherein providing at least the subset of the aggregated search results to the computing device of the user further comprises providing at least the subset of the aggregated search results based on a page size defined in the instructions.

12. The method of claim 7, wherein the one or more identifiers of the one or more authorized account comprise one or more user names of the one or more authorized accounts.

13. A non-transitory computer readable medium comprising instructions that, when executed, cause one or more processors to perform:

receiving, from a computing device of a user, a search query to be performed using at least one data store, the user not being authorized to access the at least one data store, wherein the search query includes one or more search terms;

determining one or more search results that are responsive to the search query from the at least one data store, wherein the search query is performed using a system account that is authorized to access the at least one data store;

aggregating the one or more search results based on one or more categories;

providing at least a subset of the aggregated search results to the computing device of the user in response to the search query, at least one search result of the subset of the aggregated search results including a plurality of account usernames, each of the plurality of account usernames corresponding to a different authorized account capable of accessing one or more details of the at least one search result of the subset of the aggregated search results, the different authorized accounts being different from the system account, wherein the providing at least a subset of the aggregated search results to the computing device of the user further comprises providing aggregation numbers associated with the one or more categories, each aggregation number indicating a number of matches of the search query in a corresponding category of the one or more categories;

providing, based on the aggregation numbers associated with the one or more categories, at least one histogram that plots the aggregation numbers indicating the number of matches of the search query in the corresponding category of the one or more categories;

receiving, from the computing device of the user, a selection of a particular account username of the plurality of account usernames; and

contacting, based on the particular account username of the plurality of account usernames, at least one user associated with the authorized account corresponding to the particular account username to obtain the one or more details of the at least one search result of the subset of the aggregated search results.