Suggested content with attribute parameterization

• US 8,352,475 B2
• Filed: 04/04/2011
• Issued: 01/08/2013
• Est. Priority Date: 03/01/2006
• Status: Expired due to Term

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Bhatkar, Sachin, Bhavsar, Meeten, Davis, Mark, Delgado, Joaquin, Hsin, Cindy, Krishnaprasad, Muralidhar, Ouyang, Hui
• Primary Examiner(s): Trujillo, James
• Assistant Examiner(s): Chang, Jeffrey
• Application Number:
  US13/079,434
• Publication Number:
  US 20110246443A1
• Time in Patent Office: 645 Days
• Field of Search: 707/706, 707/722, 707/741
• US Class Current: 707/741
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A flexible and extensible architecture allows for secure searching across an enterprise. Such an architecture can provide a simple Internet-like search experience to users searching secure content inside (and outside) the enterprise. The architecture allows for the crawling and searching of a variety of sources across an enterprise, regardless of whether any of these sources conform to a conventional user role model. The architecture further allows for security attributes to be submitted at query time, for example, in order to provide real-time secure access to enterprise resources. The user query also can be transformed to provide for dynamic querying that provides for a more current result list than can be obtained for static queries.

Claims

1. A method of utilizing a self-service source, the method comprising:

defining a template source for crawling a target data repository;

identifying the target data repository in the template source without including in the template source security credentials required to crawl the target data repository;

allowing a first user to subscribe to the template source;

receiving first user credentials for the first user;

creating a user-subscribed source based at least on the template source and the first user credentials;

generating an access control list that controls access to the user-subscribed source;

receiving a crawl request from a second user of one or more users to crawl the target data repository;

based on user credentials of the second user and the access control list that controls access to the user-subscribed source, determining to allow the second user to initiate a crawl using the user-subscribed source; and

crawling the target data repository, using the first user credentials, to index only documents which are accessible with the first user credentials.

2. The method according to claim 1, further comprising dynamically inheriting changes from the template source to the user-described source for each subsequent crawl.

3. The method of claim 1, wherein the first user is the same as the second user.

4. The method of claim 1, wherein the first user is different from the second user.

5. The method of claim 4, wherein the first user and the second user each belong to a common group of users, wherein the common group of users is associated with a set of access rights.

6. The method of claim 5, wherein the access control list that controls access to the user-subscribed source provides access to users who belong to the common group.

7. The method of claim 1, wherein the first user credentials and the second user credentials have certain access rights in common but not all access rights in common.

8. The method of claim 1, wherein determining to allow the second user to initiate a crawl using the user-subscribed source is further based on a time restriction associated with the template source, the time restriction selected by an administrator to restrict the time during which a crawl using the user-subscribed source is permitted to be initiated.

9. A non-transitory computer-readable storage medium storing sets of instructions which, when executed by a computer, cause the computer to:

define a template source for crawling a target data repository;

identifying the target data repository in the template source without including in the template source security credentials required to crawl the target data repository;

allow a first user to subscribe to the template source;

receive first user credentials for the first user;

creating a user-subscribed source based at least on the template source and the first user credentials;

generate an access control list that controls access to the user-subscribed source;

receive a crawl request from a second user of one or more users to crawl the target data repository;

and

based on user credentials of the second user and the access control list that controls access to the user-subscribed source, determine to allow the second user to initiate a crawl using the user-subscribed source; and

crawl the target data repository, using the first user credentials, to index only documents which are accessible with the first user credentials.

10. The non-transitory computer-readable storage medium according to claim 9, wherein the sets of instructions further comprise instructions which when executed by the computer cause the computer to dynamically inherit changes from the template source to the user-described source for each subsequent crawl.

11. The non-transitory computer-readable storage medium of claim 9, wherein the first user is the same as the second user.

12. The non-transitory computer-readable storage medium of claim 9, wherein the first user is different from the second user.

13. The non-transitory computer-readable storage medium of claim 12, wherein the first user and the second user each belong to a common group of users, wherein the common group of users is associated with a set of access rights.

14. The non-transitory computer-readable storage medium of claim 13, wherein the access control list that controls access to the user-subscribed source provides access to users who belong to the common group.

15. The non-transitory computer-readable storage medium of claim 9, wherein the first user credentials and the second user credentials have certain access rights in common but not all access rights in common.

16. The non-transitory computer-readable storage medium of claim 9, wherein the instructions for determining to allow the second user to initiate a crawl using the user-subscribed source further comprises instructions for determining to allow the second user to initiate a crawl based on a time restriction associated with the template source, the time restriction selected by an administrator to restrict the time during which a crawl using the user-subscribed source is permitted to be initiated.

17. A system for utilizing a self-service source, the system comprising:

a storage medium; and

a processor coupled with the storage medium, wherein the storage medium includes sets of instructions which, when executed by the processor, cause the processor to;

define a template source for crawling a target data repository;

identifying the target data repository in the template source without including in the template source security credentials required to crawl the target data repository;

allow a first user to subscribe to the template source;

receive first user credentials for the first user;

creating a user-subscribed source based at least on the template source and the first user credentials;

generate an access control list that controls access to the user-subscribed source;

receive a crawl request from a second user of one or more users to crawl the target data repository;

and

based on user credentials of the second user and the access control list that controls access to the user-subscribed source, determine to allow the second user to initiate a crawl using the user-subscribed source; and

crawling the target data repository, using the first user credentials, to index only documents which are accessible with the first user credentials.

18. The system for utilizing a self-service source of claim 17, wherein the first user is the same as the second user.

19. The system for utilizing a self-service source of claim 17, wherein the first user is different from the second user.

20. The system for utilizing a self-service source of claim 19, wherein the first user and the second user each belong to a common group of users, wherein the common group of users is associated with a set of access rights.

21. The system for utilizing a self-service source of claim 20, wherein the access control list that controls access to the user-subscribed source provides access to users who belong to the common group.

22. The system for utilizing a self-service source of claim 17, wherein the first user credentials and the second user credentials have certain access rights in common but not all access rights in common.

23. The system for utilizing a self-service source of claim 17, wherein the instructions for determining to allow the second user to initiate a crawl using the user-subscribed source further comprises instructions for determining to allow the second user to initiate a crawl based on a time restriction associated with the template source, the time restriction selected by an administrator to restrict the time during which a crawl using the user-subscribed source is permitted to be initiated.