Providing access control for public and private document fields

1. A computer program product to control access to information, the computer program product comprising:

one or more computer-readable storage devices and program instructions stored on the one or more computer-readable storage devices, the program instructions comprising:

program instructions to determine that a first type of field of a document has restricted access, based on a degree of authorization of the user;

program instructions to generate a modified list of index terms by encrypting tokens occurring in the first type of field using a first set of encryption settings;

program instructions to execute an indexing step using the modified list of index terms;

program instructions to determine whether a user has authorization to view a first type of field, based on a degree of authorization of the user;

program instructions to respond to a determination that the user has authorization to view a first type of field by generating a modified list of search terms by adding additional search terms to a list of search terms, wherein the additional search terms are encrypted search terms created using the first set of encryption settings; and

program instructions to respond to the determination that the user has authorization to view a first type of field by executing a search using the modified list of search terms such that the document is identified as a search result when either an unencrypted or an encrypted version of a given search term is found in the index terms associated with that document.

2. The computer program product of claim 1 , the program instructions further including:

program instructions to determine that the user has authorization to view a first type of field, based on a degree of authorization of the user;

program instructions to generate the modified list of search terms by adding additional search terms to the list of search terms, based on the degree of authorization of the user to view the first type of field, wherein the additional search terms are encrypted search terms created using the first set of encryption settings;

program instructions to execute the search using the modified list of search terms; and

program instructions to identify a search result that is based on the modified list of search terms.

3. The computer program product of claim 2 , wherein the program instructions to generate a modified list of search terms by adding additional search terms to a list of search terms, based on the degree of authorization of the user to view the first type of field includes one or more of the following:

program instructions to remove frequently used words from the list of search terms;

program instructions to search for one or more synonyms of a search term included in the list of search terms;

program instructions to search for one or more terms that are related to the search term included in the list of search terms; and

program instructions to generate the modified list of search terms by adding the identified synonyms of the search term, terms that are related to the search term, and the encrypted versions of the search term to the list of search terms.

4. The computer program product of claim 1 , the program instructions further including:

program instructions to determine that a second type of field of a document has restricted access, based on a degree of authorization of the user;

program instructions to generate the modified list of index terms by encrypting the tokens occurring in the second type of field using a second set of encryption settings; and

program instructions to execute an indexing step using the modified list of index terms.

5. The computer program product of claim 4 , the program instructions further including:

program instructions to determine, based on the degree of authorization of the user, that the user is authorized to view the second type of field; and

program instructions to generate the modified list of search terms by adding additional search terms to the list of search terms, wherein the additional search terms are created using the second set of encryption settings.

6. The computer program product of claim 4 , the program instructions further including:

program instructions to retrieve the search result; and

program instructions to decrypt the second type of field included in the search result based on a degree of authorization of the user to view the second type of field.

7. The computer program product of claim 6 , wherein executing the search using the modified list of search terms includes

replacing, in the search result, an encrypted search term with a decrypted version of that encrypted search term, wherein the encrypted search term is included in the second type of field.

8. The computer program product of claim 1 , the program instructions further including:

program instructions to determine a degree of authorization of a user to view a decrypted term that corresponds to an encrypted term included in a document, wherein the encrypted term included in the document is included in the first type of field of the identified search result; and

program instructions to respond to the determination that the user has authorization to view the decrypted term that corresponds to the encrypted term, by replacing an instance of the encrypted term that appears in the first type of field of the document with the decrypted term.

9. The computer program product of claim 1 , wherein executing the search using the modified list of search terms includes searching a single index to identify prospective search results that include at least one type of field, wherein the single index indexes prospective search results based on the prospective search results respectively including one or more of an encrypted search term, an encrypted document term, an unencrypted document term, and a type of field.

10. A computer system to control access to information, the computer system comprising:

one or more computer processors;

one or more computer readable storage devices;

program instructions stored on the computer readable storage medium for execution by at least one of the one or more processors, the program instructions comprising:

program instructions to determine that a first type of field of a document has restricted access, based on a degree of authorization of the user;

program instructions to generate a modified list of index terms by encrypting tokens occurring in the first type of field using a first set of encryption settings;

program instructions to execute an indexing step using the modified list of index terms;

program instructions to determine whether a user has authorization to view a first type of field, based on a degree of authorization of the user;

program instructions to respond to a determination that the user has authorization to view a first type of field by generating a modified list of search terms by adding additional search terms to a list of search terms, wherein the additional search terms are encrypted search terms created using the first set of encryption settings; and

program instructions to respond to the determination that the user has authorization to view a first type of field by executing a search using the modified list of search terms such that the document is identified as a search result when either an unencrypted or an encrypted version of a given search term is found in the index terms associated with that document.

11. The computer system of claim 10 , the program instructions further including:

program instructions to determine that the user has authorization to view a first type of field, based on a degree of authorization of the user;

program instructions to generate the modified list of search terms by adding additional search terms to the list of search terms, based on the degree of authorization of the user to view the first type of field, wherein the additional search terms are encrypted search terms created using the first set of encryption settings;

program instructions to execute the search using the modified list of search terms; and

program instructions to identify a search result that is based on the modified list of search terms.

12. The computer system of claim 11 , wherein the program instructions to generate a modified list of search terms by adding additional search terms to a list of search terms, based on the degree of authorization of the user to view the first type of field includes one or more of the following:

program instructions to remove frequently used words from the list of search terms;

program instructions to search for one or more synonyms of a search term included in the list of search terms;

program instructions to search for one or more terms that are related to the search term included in the list of search terms; and

program instructions to generate the modified list of search terms by adding the identified synonyms of the search term, terms that are related to the search term, and the encrypted versions of the search term to the list of search terms.

13. The computer system of claim 10 , the program instructions further including:

program instructions to determine that a second type of field of a document has restricted access, based on a degree of authorization of the user;

program instructions to generate the modified list of index terms by encrypting the tokens occurring in the second type of field using a second set of encryption settings; and

program instructions to execute an indexing step using the modified list of index terms.

14. The computer system of claim 13 , the program instructions further including:

program instructions to determine, based on the degree of authorization of the user, that the user is authorized to view the second type of field; and

program instructions to generate the modified list of search terms by adding additional search terms to the list of search terms, wherein the additional search terms are created using the second set of encryption settings.

15. The computer system of claim 13 , the program instructions further including:

program instructions to retrieve the search result; and

program instructions to decrypt the second type of field included in the search result based on a degree of authorization of the user to view the second type of field.

16. The computer system of claim 15 , wherein executing the search using the modified list of search terms includes replacing, in the search result, an encrypted search term with a decrypted version of that encrypted search term, wherein the encrypted search term is included in the second type of field.

17. The computer system of claim 10 , the program instructions further including:

program instructions to determine a degree of authorization of a user to view a decrypted term that corresponds to an encrypted term included in a document, wherein the encrypted term included in the document is included in the first type of field of the identified search result; and

program instructions to respond to the determination that the user has authorization to view the decrypted term that corresponds to the encrypted term, by replacing an instance of the encrypted term that appears in the first type of field of the document with the decrypted term.

18. The computer system of claim 10 , wherein executing the search using the modified list of search terms includes searching a single index to identify prospective search results that include at least one type of field, wherein the single index indexes prospective search results based on the prospective search results respectively including one or more of an encrypted search term, an encrypted document term, an unencrypted document term, and a type of field.