System, method and program for information processing

• US 9,002,811 B2
• Filed: 11/13/2009
• Issued: 04/07/2015
• Est. Priority Date: 11/14/2008
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Kan, Masaki, Kajiki, Yoshihiro
• Primary Examiner(s): Mamillapalli, Pavan
• Application Number:
  US13/128,738
• Publication Number:
  US 20110218999A1
• Time in Patent Office: 1,971 Days
• Field of Search: 707/783, 707/696
• US Class Current: 707/696
• CPC Class Codes: G06F 16/217 Database tuning G06F16/2282 takes precedence; database performance monitoring G06F11/3409
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

An index update unit analyses the information stored in a document repository to create an index for search and stores the index in a time-series divisional index storage unit and creates, from an ACL repository, an access control entry ACE in association with the index for search, which is correlation of information to be searched with access right of at least a group to which the user belongs. The ACL cache generation unit creates ACL cache data that correlates the user with access right to the information to be searched, from the ACE, and registers the ACL cache data created in an ACL cache. A search processing unit searches for an index for search in response to a request for search from said user. In case the ACL cache data correlating the user with the index for search is registered in the ACL cache, the search processing unit takes, from among the information searched, the information, reference to which is allowed for the user as a search result, based on information in the ACL cache.

Claims

1. An information processing system comprising:

a hardware processor;

a first memory storing a plurality of indexes having access control information, the plurality of indexes comprising a first index and a plurality of second indexes corresponding to versions of the first index; and

a second memory storing instructions,

wherein;

the first index stores, on a per-group basis, a list of one or more documents accessible by each group of a plurality of groups of users, and wherein;

the hardware processor is configured by the instructions to;

receive a search query; and

provide, in response to the search query, a first document from among the list of one or more documents based on the first index.

2. The information processing system according to claim 1, wherein the hardware processor is further configured to generate, from the first index, access control cache data which stores an access right of each of the users for each of the one or more documents, and register the access control cache data in a cache.

3. The information processing system according to claim 2, wherein the hardware processor is further configured to provide the first document by searching the access control cache data.

4. The information processing system according to claim 1, wherein the first index further stores:

on a per-group basis a list of one or more documents not accessible by each of a plurality of groups of users,

on a per-user basis for each of the users, a list of one or more documents accessible by each of the users, and

on a per-user basis for each of the users, a list of one or more documents not accessible by each of the users.

5. The information processing system according to claim 4, wherein the hardware processor is configured to provide the first document in response to the search query by:

determining a user associated with the search query;

determining a first plurality of documents that satisfy the search query and are accessible by the user or a group of the user, and

determining a second plurality of documents that are not accessible by the user or a group of the user.

6. The information processing system according to claim 5, wherein the hardware processor determines the user based on login information provided by the user.

7. The information processing system according to claim 5, wherein the first document is present in the first plurality of documents and not present in the second plurality of documents.

8. The information processing system according to claim 1, wherein the hardware processor is further configured to select one of the plurality of second indexes in response to the search query.

9. The information processing system according to claim 1, wherein the second indexes are a time-series of index files.

10. The information processing system according to claim 9, wherein the hardware processor is further configured to search a latest index in response to the search query.

11. The information processing system according to claim 1, wherein the search query includes time or trigger information as a search condition.

12. The information processing system according to claim 1, wherein the hardware processor is further configured to select the first index in response to the search query.

13. An information processing method comprising:

storing a plurality of indexes, the plurality of indexes comprising a first index and a plurality of second indexes corresponding to versions of the first index; and

providing by a hardware processor, in response to a received search query, a first document from among the one or more documents based on the first index; and

wherein;

the first index includes access control information and stores on a per-group basis, a list of one or more documents accessible by each group of a plurality of groups of users.

14. The information processing method according to claim 13, further comprising:

generating, from the first index, access control cache data which stores an access right of each of the users for each of the one or more documents, and registering the access control cache data in a cache.

15. The information processing method according to claim 14, further comprising:

providing the first document by searching the access control cache data.

16. The information processing method according to claim 13, wherein the first index further stores:

on a per-group basis a list of one or more documents not accessible by each of a plurality of groups of users,

on a per-user basis for each of the users, a list of one or more documents accessible by each of the users, and

on a per-user basis for each of the users, a list of one or more documents not accessible by each of the users.

17. The information processing method according to claim 16, wherein providing the first document in response to the search query includes:

determining a user associated with the search query;

determining a first plurality of documents that satisfy the search query and are accessible by the user or a group of the user, and

determining a second plurality of documents that are not accessible by the user or a group of the user.

18. The information processing method according to claim 17, wherein the user is determined based on login information provided by the user.

19. The information processing method according to claim 13, wherein the method further includes selecting one of the plurality of second indexes in response to the search query.

20. The information processing method according to claim 13, wherein the second indexes are a time-series of index files.

21. The information processing method according to claim 13, wherein the method further comprises searching a latest index in response to the search query.

22. The information processing method according to claim 13, wherein the search query includes time or trigger information as a search condition.

23. The information processing method according to claim 13, wherein the first document is present in the first plurality of documents and not present in the second plurality of documents.

24. The information processing method according to claim 13, further comprising selecting the first index in response to the search query.

25. A non-transitory computer-readable recording medium storing a program that enables a computer to execute an information processing method, the method comprising:

storing a plurality of indexes, the plurality of indexes comprising a first index and a plurality of second indexes corresponding to versions of the first index;

providing by a hardware processor, in response to a received search query, a first document from among the one or more documents based on the first index; and

wherein;

the first index includes access control information and stores on a per-group basis a list of one or more documents accessible by each group of a plurality of groups of users.

26. The non-transitory computer-readable recording medium according to claim 25, wherein the method further comprises:

generating, from the first index, access control cache data which stores an access right of each of the users for each of the one or more documents, and registering the access control cache data in a cache.

27. The non-transitory computer-readable recording medium according to claim 26, wherein the method further comprises providing the first document by searching the access control cache data.

28. The non-transitory computer-readable recording medium according to claim 26, wherein the search query includes time or trigger information as a search condition.

29. The non-transitory computer-readable recording medium according to claim 25, wherein the first index further stores:

on a per-group basis a list of one or more documents not accessible by each of a plurality of groups of users,

on a per-user basis for each of the users, a list of one or more documents accessible by each of the users, and

on a per-user basis for each of the users, a list of one or more documents not accessible by each of the users.

30. The non-transitory computer-readable recording medium according to claim 29, wherein providing the first document in response to the search query includes:

determining a user associated with the search query;

determining a first plurality of documents that satisfy the search query and are accessible by the user or a group of the user, and

determining a second plurality of documents that are not accessible by the user or a group of the user.

31. The non-transitory computer-readable recording medium according to claim 30, wherein the user is determined based on login information provided by the user.

32. The non-transitory computer-readable recording medium according to claim 25, wherein the method further includes selecting one of the plurality of second indexes in response to the search query.

33. The non-transitory computer-readable recording medium according to claim 25, wherein the second indexes are a time-series of index files.

34. The non-transitory computer-readable recording medium according to claim 25, wherein the method further comprises searching a latest index in response to the search query.

35. The non-transitory computer-readable recording medium according to claim 25, wherein the first document is present in the first plurality of documents and not present in the second plurality of documents.

36. The non-transitory computer-readable recording medium according to claim 25, wherein the method further comprises selecting the first index in response to the search query.