Self-service sources for secure search

• US 8,027,982 B2
• Filed: 02/28/2007
• Issued: 09/27/2011
• Est. Priority Date: 03/01/2006
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Krishnamurthy, Vishu, Ture, Mark, Krishnaprasad, Muralidhar, Chang, Thomas, Yang, Chi-Ming
• Primary Examiner(s): Wong; Leslie
• Assistant Examiner(s): Willis; Amanda
• Application Number:
  US11/680,570
• Publication Number:
  US 20070208745A1
• Time in Patent Office: 1,672 Days
• Field of Search: 707/2, 707/3, 707/100, 707/9, 707/741, 707/E17.002, 707/999.002, 707/709, 707/711, 707/999.01, 707/999.107, 707/999.009, 707/999.003, 726/2, 709/203, 709/219
• US Class Current: 707/741
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A flexible and extensible architecture allows for secure searching across an enterprise. Such an architecture can provide a simple Internet-like search experience to users searching secure content inside (and outside) the enterprise. The architecture allows for the crawling and searching of a variety of sources across an enterprise, regardless of whether any of these sources conform to a conventional user role model. The architecture further allows for security attributes to be submitted at query time, for example, in order to provide real-time secure access to enterprise resources. The user query also can be transformed to provide for dynamic querying that provides for a more current result list than can be obtained for static queries.

Claims

1. A computer-implemented method of providing user-subscribed sources for secure search, comprising:

providing to a user a template for crawling a source, the template defining a location of and crawl settings for a target data repository source, the template not having specified security credentials for the source;

allowing a user to subscribe to the source using the template;

receiving user-specified security credentials from the user and applying the user-specified security credentials to an instance of the template to create a user-subscribed source;

authenticating a crawler as the user on the source;

crawling, using a processor associated with a computer system, the source as the user template with user-specified security credentials;

indexing documents for the user during the crawling in an index; and

stamping identification information for the user with each entry in the index such that the associated documents are only available for search in the index by the user.

2. A method according to claim 1, further comprising:

creating an access control list for the user-subscribed source.

3. A method according to claim 1, wherein:

the user-subscribed source is capable of matching the user-specified security credentials with the template such that during a crawl on the user-subscribed source authentication is accomplished by augmenting the user-specified security credentials with target repositories.

4. A method according to claim 1, further comprising:

displaying query results for the indexed documents to the user.

5. A method according to claim 1, wherein:

the template includes a data table.

6. A method according to claim 1, further comprising:

launching a crawler on said user-subscribed source using one of a current data source ID and a template source ID.

7. A method according to claim 1, further comprising:

providing a customize page that, when operated, allow the user to modify an aspect or attribute of the user-subscribed source.

8. A method according to claim 1, further comprising:

associating the template with a predetermined group of secure data.

9. A method according to claim 1, further comprising:

allowing an administrator to select a time for a crawl of the user-subscribed source.

10. A method according to claim 1, further comprising:

mapping the user-subscribed source to other secure sources.

11. A method according to claim 1, further comprising:

stamping any document crawled for the user-subscribed source with identification information for the user.

12. A method according to claim 1, further comprising:

using a single sign-on service with the user-subscribed source.

24. The method of claim 1 wherein the operations of providing, allowing, receiving, and inheriting are all performed using the processor.

25. The method of claim 1 wherein the applying the user-specified security credentials to an instance of the template occurs at crawl time such that a configuration of the template can be modified without requiring each user to re-subscribe to the source.

13. A computer program product embedded in a computer-readable storage medium for providing user-subscribed sources for secure search, comprising:

program code for providing to a user a template for crawling a source, the template defining a location of and crawl settings for a target data repository source, the template not having specified security credentials for the source;

program code for allowing a user to subscribe to the source using the template;

program code for receiving user-specified security credentials from the user and applying the user-specified security credentials to an instance of the template to create a user-subscribed source;

program code for authenticating a crawler as the user on the source;

program code for crawling the source as the user template with user-specified security credentials;

program code for indexing documents for the user during the crawling in an index; and

program code for stamping identification information for the user with each entry in the index such that the associated documents are only available for search in the index by the user.

14. A computer program product according to claim 13, further comprising:

program code for creating an access control list for the user-subscribed source.

15. A computer program product according to claim 13, further comprising:

program code capable of matching the user-specified security credentials with the template such that during a crawl on the user-subscribed source authentication is accomplished by augmenting the user-specified security credentials with target repositories.

16. A computer program product according to claim 13, further comprising:

Program code for displaying query results for the indexed documents to the user.

17. A computer program product according to claim 13, further comprising:

program code for launching a crawler on said user-subscribed source using one of a current data source ID and a template source ID.

18. A computer program product according to claim 13, further comprising:

program code for providing a customize page that, when operated, allow the user to modify an aspect or attribute of the user-subscribed source.

19. A computer program product according to claim 13, further comprising:

program code for associating the template with a predetermined group of secure data.

20. A computer program product according to claim 13, further comprising:

program code for allowing an administrator to select a time for a crawl of the user-subscribed source.

21. A computer program product according to claim 13, further comprising:

program code for mapping the user-subscribed source to other secure sources.

22. A computer program product according to claim 13, further comprising:

program code for stamping any document crawled for the user-subscribed source with identification information for the user.

23. A computer program product according to claim 13, further comprising:

program code for using a single sign-on service with the user-subscribed source.