Apparatus and method for operating a triple store database with document based triple access security
A server includes a triple processor with instructions executed by a processor to receive an input document, read and store document restrictions for the input document, specify a first triple permutation, and produce for each triple in the input document a record of the triple in accordance with the first triple permutation and the position of the triple in the document. The server also includes a query processor with instructions executed by a processor to receive a query, match components of the query to triples in a triple repository to form initial triples, remove triples from the initial triples in accordance with document restrictions associated with the triples to form final triples, and return the final triples.
1. A server, comprising:
a triple processor with instructions executed by a processor to:
receive an input document,
read and store document restrictions for the input document, wherein the document restrictions are document position restrictions, individual user access restrictions and user group access restrictions,
specify a first triple permutation,
produce for each first triple permutation in the input document a first triple permutation record and a corresponding position in the document,
specify a second triple permutation, and
produce for each second triple permutation in the input document a second triple permutation record and a corresponding position in the document, wherein the first triple permutation and the second triple permutation are different permutations used to provide access to different sort orders;
wherein each triple in the input document includes a subject, predicate, object triple and the first triple permutation and the second triple permutation are selected from different permutations of (1) subject, predicate, object, (2) predicate, subject, object, and (3) object, predicate, subject.
2. The server of claim 1 wherein the triple processor further comprises instructions executed by the processor to produce for each triple in the input document a record of the triple in accordance with the first triple permutation, an object type and the position of the triple in the document.
3. The server of claim 1 wherein the document restrictions include domain access restrictions, user specified restrictions and query specified restrictions.
4. The server of claim 1 wherein the triple processor includes instructions executed by the processor to produce a triple repository with a plurality of tables.
5. The server of claim 4 wherein the plurality of tables includes a document restriction table.
6. The server of claim 4 wherein the plurality of tables includes an identifier-type-value table.
7. The server of claim 4 wherein the plurality of tables includes a triple-document_id-position table.