SEARCH RESULT PRESENTATION

• US 20110265177A1
• Filed: 04/26/2010
• Published: 10/27/2011
• Est. Priority Date: 04/26/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: SOKOLAN, Patrick, Radcliffe, William, Doherty, Dennis, Duguay, Claude, Bourassa, Virgil
• Granted Patent: US 8,429,740 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 16/248 Presentation of query results
• CPC Class Codes: G06F 16/972 Access to data in other repository systems, e.g. legacy data or dynamic Web page generation
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

A data presentation system for a search engine may use classified or tagged elements in a resulting document to create a search result document that has portions redacted, modified, or changed based on the tags or classifications of elements within the document. The document may be rebuilt from the search engine database at presentation time with one or more elements changed or modified. The permission settings for a user or other factors may be used to determine which elements within the document are permitted to be accessed.

Claims

1. A system comprising:

a database comprising tagged data;

an information retrieval system that;

receives a search request from a user, said search request comprising search terms;

searches for said search terms in said database to identify a plurality of search results, said search results comprising references to documents;

a presentation engine that;

identifies a first document to present to said user;

determines a first set of data tags for which said user does not have access from an access policy;

analyzes said database for said first document to identify a first data tag being one of said first set of data tags;

identifies first data associated with said first data tag;

changes said first data to a second data;

creates a response comprising data from said database for said first document, said response comprising said second data in place of said first data; and

transmits said response.

2. The system of claim 1, said user having credentials, said presentation engine that further:

presents said credentials to an authentication service; and

authenticates said user based on a response from said authentication service.

3. The system of claim 1, said second data being an obfuscated version of said first data.

4. The system of claim 1, said second data being a blanked version of said first data.

5. The system of claim 1, said second data being a concatenated version of said first data.

6. The system of claim 1, said second data being an identifier, said presentation engine that further:

stores said identifier and said first data in a lookup database; and

said lookup database being unavailable to said user.

7. The system of claim 1, said presentation engine that further:

identifies said first document to present to a second user;

reads said access policy defining a second set of data tags for which said user does not have access, said second set of data tags not including said first data tag;

creates a second response comprising data from said database for said first document, said second response comprising said first data; and

transmits said second response.

8. The system of claim 1, said first set of data tags being defined by a category of data tags.

9. The system of claim 1 further comprising:

a federated authentication relationship with a data source system, said data source system being a data provider for said database.

10. A method comprising:

analyzing a document from a data source to identify data within said document and create tags associated with said data;

storing at least a portion of said document and said tags in a document database;

creating a search database comprising metadata from said document;

receiving a search request from a user, said search request comprising search terms;

searching said search database with said search terms to identify said document;

determining access permissions for said user from an access policy, said access policy defining a first set of tags for which said user does not have permission;

for each of said first set of tags, identifying current data and creating changed data; and

creating a representation of said document from said document database, said representation comprising said changed data in place of said current data for each of said first set of tags.

11. The method of claim 10, said document database comprising at least text from said document.

12. The method of claim 11, said document database not including formatting for said text.

13. The method of claim 11, said text being determined through optical character recognition of said document.

14. The method of claim 10, said first set of tags comprising personally identifiable information.

15. The method of claim 10, said document database comprising a link to said document in said data source, said link being presented to said user.

16. The method of claim 15, said data source comprising an authentication mechanism and said access policy.

17. A system comprising:

a document database comprising tagged data derived from a plurality of documents obtained from a data source;

a search database comprising metadata derived from said plurality of documents and comprising references to said document database;

an information retrieval system that;

receives a search request from a user, said search request comprising search terms;

searches for said search terms in said search database to identify a plurality of search results, said search results comprising said references to documents in said document database;

a presentation engine that;

identifies a first document to present to said user;

determining a first set of data tags for which said user does not have access from an access policy;

analyzes said database for said first document to identify a first data tag being one of said first set of data tags;

identifies first data associated with said first data tag;

changes said first data to a second data;

creates a response comprising data from said database for said first document, said response comprising said second data in place of said first data; and

transmits said response.

18. The system of claim 17, said access policy defining said first set of data tags.

19. The system of claim 17, said presentation engine that further:

receives credentials from said user;

presents said credentials to said data source; and

receives said access policy from said data source.

20. The system of claim 17 further comprising:

an authentication system being a federated authentication system with said data source.