Access controlled search results

• US 7,600,263 B1
• Filed: 11/05/2004
• Issued: 10/06/2009
• Est. Priority Date: 11/05/2004
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Nguyen, Phuong Binh, Moss, Michael T., Haugh, Eric D.
• Primary Examiner(s): Chai; Longbit
• Application Number:
  US10/982,407
• Time in Patent Office: 1,796 Days
• Field of Search: 726/27
• US Class Current: 726/27
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

Serving a search result that includes an access controlled document includes obtaining a persistent access token that permits the verification of access to an access controlled document. The access controlled document is found in an index that includes an access controlled document and the persistent access token is used to verify authorization to access the access controlled document.

Claims

1. A method of serving a search result that includes an access controlled document comprising:

receiving a query from a computing device;

searching an index on one or more servers to obtain results to the query, wherein the index includes publicly accessible documents and access controlled documents;

obtaining a persistent access token that permits the verification of access to one or more of the access controlled documents;

ranking the results but subjecting only a subset of the results to an authorization check;

using the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked result, wherein an access controlled document is a document that is not publicly accessible; and

continuing to evaluate lower ranked access controlled documents, if needed based on the authorization check, to return a result list to the computing device.

2. The method of claim 1 wherein the persistent access token is a cookie.

3. The method of claim 1 further comprising serving the result including one or more of the access controlled documents if it is determined that the persistent access token authorizes access to one or more of the access controlled documents.

4. The method of claim 1 wherein using the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results includes submitting an HTTP HEAD request.

5. The method of claim 1 wherein the persistent access token is issued by a single sign on server.

6. The method of claim 1 wherein using the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results includes submitting an HTTP GET request.

7. The method of claim 1 wherein using the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results includes submitting an HTTP GET request including range headers.

8. The method of claim 1 further comprising testing whether the persistent access token is expired.

9. The method of claim 1 further comprising checking whether authorization to access an access controlled document is cached in an authorization cache.

10. The method of claim 9 wherein the authorization cache is configured to enable an administrator to purge the authorization cache.

11. The method of claim 1 wherein the persistent access token is a cookie and the cookie is also used by a user to access an access controlled document included in the result list.

12. The method of claim 1 wherein the persistent access token is obtained from a user.

13. The method of claim 1 wherein the persistent access token is issued to a search appliance using a user'"'"'s credentials.

14. The method of claim 1 wherein the persistent access token is issued to a search appliance using a user'"'"'s credentials and stored with the user.

15. A system for serving a search result that includes an access controlled document comprising:

an interface configured to receive a query from a computing device and to obtain a persistent access token that permits the verification of access to one or more access controlled documents; and

a processor configured to search an index on one or more servers to obtain results to the query, wherein the index includes publicly accessible documents and access controlled documents, to rank the results but subject only a subset of the results to an authorization check, to use the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results, wherein an access controlled document is a document that is not publicly accessible, and to continue to evaluate lower ranked access controlled documents, if needed based on the authorization check, to return a result list to the computing device.

16. The system of claim 15 wherein the persistent access token is a cookie.

17. The system of claim 15 wherein the processor is further configured to serve the result list including one or more of the access controlled documents if it is determined that the persistent access token authorizes access to one or more of the access controlled documents.

18. The system of claim 15 wherein the processor is further configured to use the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results by submitting an HTTP HEAD request.

19. The system of claim 15 wherein the processor is further configured to communicate with a single sign on server.

20. The system of claim 15 wherein the processor is further configured to use the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results by submitting an HTTP GET request.

21. The system of claim 15 wherein the processor is further configured to use the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results by submitting an HTTP GET request including range headers.

22. The system of claim 15 wherein the processor is further configured to test whether the persistent access token is expired.

23. The system of claim 15 further comprising an authorization cache configured to cache authorization to access an access controlled document.

24. The system of claim 23 wherein the authorization cache is further configured to enable an administrator to purge the authorization cache.

25. The system of claim 15 wherein the persistent access token is a cookie and the cookie is also used by a user to access an access controlled document included in the result list.

26. The system of claim 15 wherein the persistent access token is obtained from a user.

27. The system of claim 15 wherein the processor is configured to obtain a persistent access token using a user'"'"'s credentials.

28. The system of claim 15 wherein the processor is configured to obtain a persistent access token using a user'"'"'s credentials and to store the obtained persistent access token with the user.

29. A computer program product for serving a search result that includes an access controlled document, the computer program product being embodied in a tangible computer readable storage medium and comprising computer instructions for:

receiving a query from a computing device;

searching an index on one or more servers to obtain results to the query, wherein the index includes publicly accessible documents and access controlled documents;

obtaining a persistent access token that permits the verification of access to one or more of the access controlled documents;

ranking the results but subjecting only a subset of the results to an authorization check;

using the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results, wherein an access controlled document is a document that is not publicly accessible; and

continuing to evaluate lower ranked access controlled documents, if needed based on the authorization check, to return a result list to the computing device.

30. The computer program product of claim 29 wherein the persistent access token is a cookie.

31. The computer program product of claim 29 further including instructions for serving the result list including one or more of the access controlled documents if it is determined that the persistent access token authorizes access to one or more of the access controlled documents.

32. The computer program product of claim 29 wherein using the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results includes submitting an HTTP HEAD request.

33. The computer program product of claim 29 wherein the persistent access token is issued by a single sign on server.

34. The computer program product of claim 29 wherein using the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results includes submitting an HTTP GET request.

35. The computer program product of claim 29 wherein using the persistent access token to verify authorization to access the subset of the access controlled documents from the ranked results includes submitting an HTTP GET request including range headers.

36. The computer program product of claim 29 further including instructions for testing whether the persistent access token is expired.

37. The computer program product of claim 29 further including instructions for checking whether authorization to access an access controlled document is cached in an authorization cache.

38. The computer program product of claim 37 wherein the authorization cache is configured to enable an administrator to purge the authorization cache.

39. The computer program product of claim 29 wherein the persistent access token is a cookie and the cookie is also used by a user to access an access controlled document included in the result list.

40. The computer program product of claim 29 wherein the persistent access token is obtained from a user.

41. The computer program product of claim 29 wherein the persistent access token is issued to a search appliance using a user'"'"'s credentials.

42. The computer program product of claim 29 wherein the persistent access token is issued to a search appliance using a user'"'"'s credentials and stored with the user.