×

Enforcing native access control to indexed documents

  • US 8,417,693 B2
  • Filed: 07/14/2005
  • Issued: 04/09/2013
  • Est. Priority Date: 07/14/2005
  • Status: Expired due to Fees
First Claim
Patent Images

1. A method for processing a search request, comprising:

  • while crawling for documents, selecting higher levels of access control list information from native levels of access control list information for each document, wherein the selected higher levels of access control list information have a similar semantic for different types of one or more backend repositories, wherein the selected higher levels of access control list information are used to predict a probability of successful impersonation access to the documents, wherein the native levels of access control list information represents access controls implemented at the one or more backend repositories;

    mapping the selected higher levels of access control list information to one or more indexed levels of access control list information that are stored in a search index, wherein the indexed levels include a database level and a server level, and wherein, for each of the indexed levels, for each document, information is stored in the search index to indicate a security level of access a user needs to access the document;

    generating a pre-filtered list of documents by matching terms of the search request by using the search index;

    generating an interim result set of documents from the pre-filtered list of documents by matching the one or more indexed levels of access control list information associated with each said document to one or more security groups associated with the search request, wherein the one or more security groups are associated with a user issuing the search request and who is a member of the one or more security groups;

    generating a final result set by performing impersonation for the interim result set of documents by contacting the one or more backend repositories storing the interim result set of documents; and

    providing the final result set of documents to the user.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×