Granted Patent B2

US 8,700,663 · App. 12/536,411 · Granted Apr 15, 2014

Abstract

Claims (61)

1. A method for contextual keyword-based access control, the method comprising:

providing content;

annotating the content with one or more searchable keywords;

specifying the one or more searchable keywords using an implied keyword rule;

assigning a user to a group configured to associate the content to a privilege;

providing a context wherein the content is different from the context;

associating a keyword of the one or more searchable keywords with the group and the context to associate both access control functions of the group and content searching functions of the keyword;

determining a privilege for the user to access the content based on the association in the context of the keyword to the group and an association of the group to the privilege;

searching the content using the one or more keywords wherein searching comprises filtering the content based on the determined privilege;

storing the privilege as a tuple including elements specifying the content, the context, and the user, wherein the context comprises at least one of: an account, a topic, a qualification, a perspective, a region, or a constraint; and

overriding the determined privilege in response to a direct association of the group with the content.

2. The method of claim 1 , wherein storing the privilege comprises:

generating a user index specifying the user; and

generating the tuple, wherein the tuple includes the user index.

3. The method of claim 1 , wherein storing the privilege comprises:

generating a group index specifying the group; and

generating the tuple, wherein the tuple includes the group index.

4. A method for contextual keyword-based access control, the method comprising:

receiving a request to access content in a context, wherein the request includes information specifying a user, wherein the content has been annotated with an implied keyword wherein the implied keyword is derived based on an input of an original keyword and an implied keyword rule;

mapping the context to a group;

mapping the implied keyword to the context to associate both access control functions associated with the group and content searching functions of the implied keyword; and

providing access to the content based on the user belonging to the group, wherein providing access comprises:

determining a privilege for the user to access the content based on the association of the implied keyword to the group within the context and an association of the group to the privilege within the context;

searching the content using the original keyword wherein searching comprises filtering the content based on the privilege;

retrieving a privilege comprising a tuple identifying the content, the context, and the user, wherein the context comprises at least one of: an account, a topic, a qualification, a perspective, a region, or a constraint; and

overriding the determined privilege in response to a direct association of the group with the content.

5. The method of claim 4 , wherein retrieving the privilege comprises:

determining an index specifying the user; and

retrieving the privilege in response to the index.

6. The method of claim 4 , wherein retrieving the privilege comprises:

determining an index specifying the group; and

retrieving the privilege in response to the index.

7. A system comprising:

a non-transitory machine readable medium having stored therein a plurality of instructions to perform contextual keyword-based access control, which, when executed by a computing platform comprising a processor, cause the computing platform to:

provide content;

identify one or more searchable keywords using an implied keyword rule;

annotate the content with the one or more searchable keywords;

associate content privileges to a group;

provide a context wherein the content is different from the context;

associate a keyword of the one or more searchable keywords with the group and the context to associate both content privileges of the group and content searching functions of the keyword;

assign a user to a group configured to associate the content to a particular content privilege;

store the particular content privilege as a tuple, wherein the tuple includes elements specifying the content, the context, and/or the user;

identify the particular content privilege for the user to access the content based on an association in the context of the searchable keyword to the group and an association of the group to the content privilege;

search and/or filter the content by using the one or more searchable keywords and filtering the content based on the particular content privilege; and

override the particular content privilege in response to a direct association of at least one of the groups with the content.

8. An article comprising:

a non-transitory machine readable medium having stored therein a plurality of instructions, which, when executed by a computing platform comprising a processor, cause the computing platform to:

receive a request to access content in a context, wherein the request includes information specifying a user wherein the content has been annotated with an implied keyword wherein the implied keyword is derived based on an input of an original keyword and an implied keyword rule;

map the context to a group;

map the implied keyword to the context to associate both access control functions associated with the group and content searching functions of the implied keyword; and

provide access to the content based on the user belonging to the group, wherein providing access includes:

determining a privilege for the user to access the content based on the association of the implied keyword to the group within the context and an association of the group to the privilege within the context;

retrieving a privilege, wherein the privilege comprises a tuple specifying the content, the context, and the user;

searching the content using the keyword, wherein the searching comprises filtering the content based on the privilege; and

overriding the determined privilege in response to a direct association of the group with the content.

9. The article of claim 8 , wherein retrieving the privilege comprises:

determining an index specifying the user; and

retrieving the privilege in response to the index.

10. The article of claim 8 , wherein retrieving the privilege comprises:

determining an index specifying the group; and

retrieving the privilege in response to the index.

Assignments (8)