Real-time interactive authorization for enterprise search

Patent metadata

Field	Value
Publication number	US-9020913-B2
Application number	US-92421907-A
Country	US
Kind code	B2
Filing date	Oct 25, 2007
Priority date	Oct 25, 2007
Publication date	Apr 28, 2015
Grant date	Apr 28, 2015

Abstract

Techniques for providing at least one user access to one or more documents in a collaborative computing environment in accordance with a search engine are provided. The user is presented with search results, wherein the search results comprise at least one document comprising at least one portion to which the user has no access. A request from the user for access to the at least one document is received. A supervising entity is then notified of the user request to access the at least one document. An instruction from the supervising entity is then received. In accordance with the received instruction, the user is granted access to the at least one document.

First claim

What is claimed is:

1. A computer-based method of providing at least one user access to one or more documents in a collaborative computing environment in accordance with a search engine, comprising the steps of:
presenting the user with search results, wherein the search results comprise at least one document comprising at least one portion to which the user has no access;
receiving a request from the user for access to the at least one document;
notifying a supervising entity of the user request to access the at least one document;
receiving an instruction from the supervising entity with regard to the request; and
granting access to the user to the at least one document in accordance with the received instruction;
wherein the step of presenting the user with search results further comprises the step of allowing the user to view at least one segment to which the user has access, of the at least one document;
wherein the at least one document is associated with an access control list, the access control list:
specifying a first set of necessary credentials for at least one of read access and write access for the at least one document; and
specifying a second set of necessary credentials for searching within the at least one document;

wherein the step of presenting the user with search results further comprises:
the step of searching for the at least one document according to at least one of concepts and words; and
partitioning search hits into documents in which the user is allowed to view, documents in which the user is not allowed to view, and documents where the user could potentially obtain access by executing a workflow; and
wherein the searching for the at least one document is limited to selective portions of the one or more documents based on a prior determination of search access within the one or more documents.

2. The method of claim 1 , wherein the collaborative computing environment is a multi-user communications system.

3. The method of claim 1 , wherein the one or more documents are stored in a virtual repository.

4. The method of claim 1 , wherein the step of presenting the user with search results further comprises the step of selecting which of the one or more documents the user can preview, wherein the step of selecting is in accordance with at least one of the identity of the user, a policy of the collaborative computing environment, and the access control list.

5. The method of claim 1 , wherein the step of notifying further comprises the step of forwarding user information.

6. The method of claim 1 , wherein the instruction from the supervising entity is to increase or decrease user access to one or more documents.

7. The method of claim 1 , further comprising the step of tracking user access to the one or more documents, grants of access to the one or more documents, and levels of access to the one or more documents.

8. The method of claim 1 , wherein the step of presenting the user with search results further comprises the step of selecting portions of the one or more documents which the user can preview, wherein the selection is performed in accordance with a policy of the collaborative computing environment.

9. The method of claim 1 , wherein the prior determination of search access is based on a policy of the collaborative computing environment.

10. The method of claim 9 , wherein the policy governs portions of the one or more documents that can be searched.

11. The method of claim 1 , wherein the documents where the user could potentially obtain access are annotated with a non-confidential synopsis.

12. The method of claim 1 , wherein the documents where the user could potentially obtain access include a reference to the workflow.

13. A computer-based method wherein a user obtains access to one or more documents in a collaborative computing environment using a search engine, comprising the steps of:
searching for the one or more documents using the search engine, wherein the search engine provides search results comprising at least one document, the at least one document comprising at least one portion to which the user has no access;
requesting access to the at least one document using the search engine, wherein the search engine notifies a supervising entity of the request; and
receiving access to the at least one document in accordance with an instruction from the supervising entity;
wherein the step of providing search results further comprises the step of allowing the user to view at least one segment to which the user has access, of the at least one document;
wherein the at least one document is associated with an access control list, the access control list:
specifying a first set of necessary credentials for at least one of read access and write access for the at least one document; and
specifying a second set of necessary credentials for searching within the at least one document;

wherein the searching for the one or more documents includes partitioning search hits into documents in which the user is allowed to view, documents in which the user is not allowed to view, and documents where the user could potentially obtain access by executing a workflow; and
wherein the searching for the one or more documents is limited to selective portions of the one or more documents based on a prior determination of search access within the one or more documents.

14. The method of claim 13 , wherein the search engine provides search results in accordance with at least one of the identity of the user, a policy of the collaborative system, and the access control list.

15. The method of claim 13 , wherein the step of requesting access further comprises the step of forwarding user information.

16. The method of claim 13 , wherein the instruction from the supervising entity is to increase or decrease user access to one or more documents.

17. A computer-based method wherein a supervising entity grants a user access to one or more documents in a collaborative computing environment using a search engine, comprising the steps of:
indexing the one or more documents using the search engine, wherein at least one of the one or more documents comprises at least one portion to which the user has no access;
instructing the search engine to allow the user to search for the one or more documents using the search engine, wherein the searching for the one or more documents includes partitioning search hits into documents in which the user is allowed to view, documents in which the user is not allowed to view, and documents where the user could potentially obtain access by executing a workflow, and is limited to selective portions of the one or more documents based on a prior determination of search access within the one or more documents;
receiving notification from the search engine of a user request to access the at least one document; and
instructing the search engine to provide the user with access to the at least one document designating a no-access portion;
wherein the search engine allows the user to view at least one segment to which the user has access, of the at least one document; and
wherein the at least one document is associated with an access control list, the access control list:
specifying a first set of necessary credentials for at least one of read access and write access for the at least one document; and
specifying a second set of necessary credentials for searching within the at least one document.

18. The method of claim 17 , wherein the step of indexing the one or more documents is in accordance

Assignees

• Rajamani Nithya
• Rubas James
• Vogl Norbert G
• Zadrozny Wlodek Wlodzimierz
• IBM

Inventors

• Rajamani Nithya
• Rubas James
• Vogl Norbert G
• Zadrozny Wlodek Wlodzimierz

Classifications

• G06F17/30867

  Physics · mapped topic

• G06F21/604 Primary

  Tools and structures for managing or administering access control systems · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F16/9535

  Search customisation based on user profiles and personalisation · CPC title