Real-time interactive authorization for enterprise search

• US 9,020,913 B2
• Filed: 10/25/2007
• Issued: 04/28/2015
• Est. Priority Date: 10/25/2007
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Rajamani, Nithya, Rubas, James, Vogl, Norbert G., Zadrozny, Wlodek Wlodzimierz
• Primary Examiner(s): OBISESAN, AUGUSTINE KUNLE
• Application Number:
  US11/924,219
• Publication Number:
  US 20090112868A1
• Time in Patent Office: 2,742 Days
• US Class Current: 707/694
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

Techniques for providing at least one user access to one or more documents in a collaborative computing environment in accordance with a search engine are provided. The user is presented with search results, wherein the search results comprise at least one document comprising at least one portion to which the user has no access. A request from the user for access to the at least one document is received. A supervising entity is then notified of the user request to access the at least one document. An instruction from the supervising entity is then received. In accordance with the received instruction, the user is granted access to the at least one document.

Claims

1. A computer-based method of providing at least one user access to one or more documents in a collaborative computing environment in accordance with a search engine, comprising the steps of:

presenting the user with search results, wherein the search results comprise at least one document comprising at least one portion to which the user has no access;

receiving a request from the user for access to the at least one document;

notifying a supervising entity of the user request to access the at least one document;

receiving an instruction from the supervising entity with regard to the request; and

granting access to the user to the at least one document in accordance with the received instruction;

wherein the step of presenting the user with search results further comprises the step of allowing the user to view at least one segment to which the user has access, of the at least one document;

wherein the at least one document is associated with an access control list, the access control list;

specifying a first set of necessary credentials for at least one of read access and write access for the at least one document; and

specifying a second set of necessary credentials for searching within the at least one document;

wherein the step of presenting the user with search results further comprises;

the step of searching for the at least one document according to at least one of concepts and words; and

partitioning search hits into documents in which the user is allowed to view, documents in which the user is not allowed to view, and documents where the user could potentially obtain access by executing a workflow; and

wherein the searching for the at least one document is limited to selective portions of the one or more documents based on a prior determination of search access within the one or more documents.

2. The method of claim 1, wherein the collaborative computing environment is a multi-user communications system.

3. The method of claim 1, wherein the one or more documents are stored in a virtual repository.

4. The method of claim 1, wherein the step of presenting the user with search results further comprises the step of selecting which of the one or more documents the user can preview, wherein the step of selecting is in accordance with at least one of the identity of the user, a policy of the collaborative computing environment, and the access control list.

5. The method of claim 1, wherein the step of notifying further comprises the step of forwarding user information.

6. The method of claim 1, wherein the instruction from the supervising entity is to increase or decrease user access to one or more documents.

7. The method of claim 1, further comprising the step of tracking user access to the one or more documents, grants of access to the one or more documents, and levels of access to the one or more documents.

8. The method of claim 1, wherein the step of presenting the user with search results further comprises the step of selecting portions of the one or more documents which the user can preview, wherein the selection is performed in accordance with a policy of the collaborative computing environment.

9. The method of claim 1, wherein the prior determination of search access is based on a policy of the collaborative computing environment.

10. The method of claim 9, wherein the policy governs portions of the one or more documents that can be searched.

11. The method of claim 1, wherein the documents where the user could potentially obtain access are annotated with a non-confidential synopsis.

12. The method of claim 1, wherein the documents where the user could potentially obtain access include a reference to the workflow.

13. A computer-based method wherein a user obtains access to one or more documents in a collaborative computing environment using a search engine, comprising the steps of:

searching for the one or more documents using the search engine, wherein the search engine provides search results comprising at least one document, the at least one document comprising at least one portion to which the user has no access;

requesting access to the at least one document using the search engine, wherein the search engine notifies a supervising entity of the request; and

receiving access to the at least one document in accordance with an instruction from the supervising entity;

wherein the step of providing search results further comprises the step of allowing the user to view at least one segment to which the user has access, of the at least one document;

wherein the at least one document is associated with an access control list, the access control list;

specifying a first set of necessary credentials for at least one of read access and write access for the at least one document; and

specifying a second set of necessary credentials for searching within the at least one document;

wherein the searching for the one or more documents includes partitioning search hits into documents in which the user is allowed to view, documents in which the user is not allowed to view, and documents where the user could potentially obtain access by executing a workflow; and

wherein the searching for the one or more documents is limited to selective portions of the one or more documents based on a prior determination of search access within the one or more documents.

14. The method of claim 13, wherein the search engine provides search results in accordance with at least one of the identity of the user, a policy of the collaborative system, and the access control list.

15. The method of claim 13, wherein the step of requesting access further comprises the step of forwarding user information.

16. The method of claim 13, wherein the instruction from the supervising entity is to increase or decrease user access to one or more documents.

17. A computer-based method wherein a supervising entity grants a user access to one or more documents in a collaborative computing environment using a search engine, comprising the steps of:

indexing the one or more documents using the search engine, wherein at least one of the one or more documents comprises at least one portion to which the user has no access;

instructing the search engine to allow the user to search for the one or more documents using the search engine, wherein the searching for the one or more documents includes partitioning search hits into documents in which the user is allowed to view, documents in which the user is not allowed to view, and documents where the user could potentially obtain access by executing a workflow, and is limited to selective portions of the one or more documents based on a prior determination of search access within the one or more documents;

receiving notification from the search engine of a user request to access the at least one document; and

instructing the search engine to provide the user with access to the at least one document designating a no-access portion;

wherein the search engine allows the user to view at least one segment to which the user has access, of the at least one document; and

wherein the at least one document is associated with an access control list, the access control list;

specifying a first set of necessary credentials for at least one of read access and write access for the at least one document; and

specifying a second set of necessary credentials for searching within the at least one document.

18. The method of claim 17, wherein the step of indexing the one or more documents is in accordance with at least one of concepts and words.

19. The method of claim 17, wherein the step of receiving notification further comprises the step of obtaining user information.

20. The method of claim 17, wherein the step of instructing further comprises the step of increasing user access to one or more documents by unblocking one or more segments of the one or more documents.

21. The method of claim 17, wherein the step of instructing further comprises the step of decreasing user access to one or more documents by blocking one or more segments of the one or more documents.

22. An apparatus for providing at least one user access to one or more documents in a collaborative computing environment in accordance with a search engine, the apparatus comprising:

a memory; and

at least one processor coupled to the memory and operative to;

(i) present the user with search results, wherein the search results comprise at least one document comprising at least one portion to which the user has no access;

(ii) receive a request from the user for access to the at least one document;

(iii) notify a supervising entity of the user request to access the at least one document;

(iv) receive an instruction from the supervising entity with regard to the request; and

(iv) grant access to the user to the at least one document in accordance with the received instruction;

wherein the at least one processor coupled to the memory is further operative to allow the user to view at least one segment to which the user has access, of the at least one document;

wherein the at least one document is associated with an access control list, the access control list;

specifying a first set of necessary credentials for at least one of read access and write access for the at least one document; and

specifying a second set of necessary credentials for searching within the at least one document;

wherein the processor is further operative to allow the user to search for the at least one document;

wherein the searching for the at least one document includes partitioning search hits into documents in which the user is allowed to view, documents in which the user is not allowed to view, and documents where the user could potentially obtain access by executing a workflow; and

wherein the searching for the at least one document is limited to selective portions of the one or more documents based on a prior determination of search access within the one or more documents.

23. The apparatus of claim 22, wherein the operation of presenting the user with search results, the processor is further operative to allow the user to view at least one segment to which the user has access, of the at least one document.

24. The apparatus of claim 22, wherein the operation of presenting the user with search results, the processor is further operative to select which of the one or more documents the user can preview, wherein the operation of selecting is in accordance with at least one of the identity of the user, a policy of the collaborative system, and the access control list.

25. The apparatus of claim 22, wherein the operation of notifying, the processor is further operative to forward user information.

26. The apparatus of claim 22, wherein the processor is further operative to track at least one of user access to the one or more documents, grants of access to the one or more documents, and levels of access to the one or more documents.

27. An article of manufacture for providing at least one user access to one or more documents in a collaborative computing environment in accordance with a search engine, the article comprising a non-transitory computer readable storage medium containing one or more computer programs, which when executed implement the steps of:

presenting the user with search results, wherein the search results comprise at least one document comprising at least one portion to which the user has no access;

receiving a request from the user for access to the at least one document;

notifying a supervising entity of the user request to access the at least one document;

receiving an instruction from the supervising entity with regard to the request; and

granting access to the user to the at least one document in accordance with the received instruction;

wherein the step of presenting the user with search results further comprises the step of allowing the user to view at least one segment to which the user has access, of the at least one document;

wherein the at least one document is associated with an access control list, the access control list;

specifying a first set of necessary credentials for at least one of read access and write access for the at least one document; and

specifying a second set of necessary credentials for searching within the at least one document;

wherein the step of presenting the user with search results further comprises the step of searching for the at least one document;

wherein the searching for the at least one document includes partitioning search hits into documents in which the user is allowed to view, documents in which the user is not allowed to view, and documents where the user could potentially obtain access by executing a workflow; and

wherein the searching for the at least one document is limited to selective portions of the one or more documents based on a prior determination of search access within the one or more documents.

28. A computer-based method of providing at least one user access to one or more documents in a collaborative computing environment in accordance with a search engine, comprising the steps of:

presenting the user with search results, wherein the search results comprise at least one document comprising at least one portion to which the user has no access;

receiving a request from the user for access to the at least one document; and

responsive to the request;

notifying a supervising entity of the user request to access the at least one document;

receiving an instruction from the supervising entity with regard to the request; and

granting access to the user to the at least one document in accordance with the received instruction;

wherein the request receiving, notifying, instruction receiving, and access granting steps are executed via a plurality of workflows; and

each of the plurality of workflows specifies a respective set of actions to be performed to provide at least one user access to the at least one document;

wherein the at least one document is associated with an access control list, the access control list;

specifying a first set of necessary credentials for at least one of read access and write access for the at least one document; and

specifying a second set of necessary credentials for searching within the at least one document;

wherein the step of presenting the user with search results further comprises the step of searching for the at least one document;

wherein the searching for the at least one document includes partitioning search hits into documents in which the user is allowed to view, documents in which the user is not allowed to view, and documents where the user could potentially obtain access by executing a workflow; and

wherein the searching for the at least one document is limited to selective portions of the one or more documents based on a prior determination of search access within the one or more documents.

29. The method of claim 28, wherein a set of actions specified by a given one of the plurality of workflows comprises:

composing a message containing text of a search query input by the user, a name of the requested document and credentials of the end user;

sending the message as an instant message to the supervising entity;

receiving instructions and approval from the supervising entity; and

amending the credentials of the user to permit access to the at least one document.