Providing access control for public and private document fields

1. A method to control access to information, the method comprising:

computer hardware determining whether a first type of field of a first document has restricted access;

the computer hardware generating a modified list of index terms by encrypting tokens occurring in the first type of field using a first set of encryption settings;

the computer hardware executing an indexing step using the modified list of index terms;

the computer hardware generating a modified list of search terms by adding first additional search terms to a list of search terms, wherein the first additional terms include synonyms of the search terms and terms that are related to the search terms;

the computer hardware removing frequently used words from the modified list of search terms; and

responsive to a determination that a user has authorization to view the first type of field, the computer hardware adding to the modified list of search terms an encrypted version of a search term included in the list of search terms such that execution of a search using the modified list of search terms returns a result that identifies the first document as a search result when either an unencrypted or an encrypted version of a search term is found in the index terms associated with the first document.

2. The method of claim 1 , the method further including:

the computer hardware determining whether the user has authorization to view the first type of field, based on a first degree of authorization of the user;

the computer hardware generating the modified list of search terms by adding second additional search terms to a list of search terms, based on the first degree of authorization of the user to view the first type of field, wherein the second additional search terms are encrypted search terms created using the first set of encryption settings;

the computer hardware executing a search using the modified list of search terms; and

the computer hardware identifying a search result based, at least in part, on the modified list of search terms.

3. The method of claim 1 , the method further including:

the computer hardware determining that a second type of field of a second document has restricted access, based on a second degree of authorization of the user;

the computer hardware generating a modified list of index terms by encrypting one or more tokens occurring in the second type of field using a second set of encryption settings; and

the computer hardware executing an indexing step using the modified list of index terms.

4. The method of claim 3 , the method further including:

the computer hardware determining, based on the second degree of authorization of the user, that the user is authorized to view the second type of field; and

the computer hardware generating the modified list of search terms by adding third additional search terms to the list of search terms, wherein the third additional search terms are created using the second set of encryption settings.

5. The method of claim 2 , the method further including:

the computer hardware adding to an original list of search terms, a search term in encrypted form that corresponds a user provided search term, thereby generating the modified list of search terms; and

the computer hardware executing the search such that a document is identified as a search result when either an unencrypted or an encrypted version of a given search term is found in the index terms associated with that document.

6. The method of claim 2 , wherein the step of the computer generating a modified list of search terms by adding second additional search terms to the list of search terms, based on the first degree of authorization of the user to view the first type of field includes one or more of the following:

the computer hardware searching for one or more synonyms of a search term included in the list of search terms;

the computer hardware searching for one or more terms that are related to the search term included in the list of search terms; and

the computer hardware generating a modified list of search terms by adding synonyms of the search term, terms that are related to the search term, and the encrypted versions of the search term to the list of search terms.

7. A method to control access to information, the method comprising:

computer hardware determining that a first type of field of a first document has restricted access;

the computer hardware generating a modified list of index terms by using a first set of encryption settings to encrypt one or more tokens included in the first type of field;

the computer hardware executing an indexing step using the modified list of index terms;

the computer hardware determining whether a user has authorization to view the first type of field based on a degree of authorization of the user;

the computer hardware generating a modified list of search terms by adding first additional search terms to a list of search terms, wherein the first additional terms include synonyms of the search terms;

the computer hardware removing frequently used words from the modified list of search terms;

responsive to a determination that the user has authorization to view the first type of field, the computer hardware adding to the modified list of search terms an encrypted version of a search term included in the list of search terms such that execution of a search using the modified list of search terms returns a result that identifies the first document as a search result when either an unencrypted or an encrypted version of that search term is found in the index terms associated with the first document;

the computer hardware executing a search using the modified list of search terms; and

the computer hardware identifying a first search result that includes the first type of field, wherein the first type of field of the first search result includes a search term that is included in the modified list of search terms.

8. The method of claim 7 , the method further including:

the computer hardware determining, based on the degree of authorization of the user, that the user is authorized to view a second type of field; and

the computer hardware generating the modified list of search terms by adding second additional search terms to the list of search terms, wherein the second additional search terms further include one or both of encrypted search terms and encrypted document terms.

9. The method of claim 8 , the method further including:

the computer hardware retrieving a second search result; and

the computer hardware decrypting the second type of field included in a second search result based on the degree of authorization of the user indicating the user is authorized to view the second type of field.

10. The method of claim 7 , wherein the step of the computer generating a modified list of search terms by adding additional search terms to the list of search terms includes:

the computer hardware searching for one or more synonyms of a search term included in the list of search terms;

the computer hardware searching for one or more terms that are related to the search term included in the list of search terms; and

the computer hardware generating the modified list of search terms by adding one or more of synonyms of the search term, terms that are related to the search term, and the encrypted versions of the search term to the list of search terms.

11. The method of claim 9 , wherein the step of the computer hardware decrypting the second type of field included in the second search result based on the degree of authorization of the user indicating the user is authorized to view the second type of field includes:

the computer hardware replacing, in the second search result, an encrypted search term with a decrypted version of that encrypted search term, wherein the encrypted search term is included in the second type of field.

12. The method of claim 7 , the method further including:

the computer hardware determining a degree of authorization of the user to view a decrypted term that corresponds to an encrypted term included in a document, wherein the encrypted term included in the document is included in the first type of field; and

responsive to the determination that the user has authorization to view the decrypted term that corresponds to the encrypted term, the computer hardware replacing an instance of the encrypted term that appears in the first type of field of the document with the decrypted term.

13. The method of claim 7 , wherein the step of the computer hardware executing the search using the modified list of search terms includes:

the computer hardware searching a single index to identify prospective search results that include at least one type of field, wherein the single index indexes prospective search results based, at least in part, on whether a prospective search result includes one or more of an encrypted search term, an encrypted document term, an unencrypted document term, and a type of field.

14. A method to control access to information, the method comprising:

computer hardware generating a modified list of index terms by encrypting one or more tokens occurring in a first type of field of a first document using a first set of encryption settings;

the computer hardware executing an indexing step using the modified list of index terms;

the computer hardware generating a modified list of search terms by adding to a list of search terms one or both of synonyms of the search terms and terms that are related to the search terms;

the computer hardware removing frequently used words from the modified list of search terms; and

responsive to a determination that a user has authorization to view the first type of field, the computer hardware adding to the modified list of search terms an encrypted version of a search term included in the list of search terms such that execution of a search using the modified list of search terms returns a result that identifies the first document as a search result when either an unencrypted or an encrypted version of that search term is found in the index terms associated with the first document.

15. The method of claim 14 , the method further including:

the computer hardware executing a search using the modified list of search terms; and

the computer hardware identifying a search result based, at least in part, on the modified list of search terms.

16. The method of claim 14 , the method further including:

a computer hardware determining that a second type of field of a second document has restricted access, based on a first degree of authorization of the user;

the computer hardware generating a modified list of index terms by encrypting one or more tokens occurring in the second type of field using a second set of encryption settings; and

the computer hardware executing an indexing step using the modified list of index terms.

17. The method of claim 16 , the method further including:

the computer hardware determining, based on the first degree of authorization of the user, whether the user is authorized to view the second type of field; and

responsive to a determination that the user is authorized to view the second type of field, the computer hardware generating the modified list of search terms by adding first additional search terms to a list of search terms, wherein the first additional search terms are created using the second set of encryption settings.

18. The method of claim 14 , the method further including:

a computer hardware determining that a user has authorization to view a first type of field, based on a second degree of authorization of the user; and

the computer hardware generating a modified list of search terms by adding second additional search terms to the list of search terms, based on the second degree of authorization of the user to view the first type of field, wherein the second additional search terms are encrypted search terms created using the first set of encryption settings.

19. The method of claim 18 , the method further including:

the computer hardware adding to the list of search terms, a search term in encrypted form that corresponds a user provided search term, thereby generating, at least in part, the modified list of search terms.

20. The method of claim 18 , wherein the computer generating a modified list of search terms by adding second additional search terms to the list of search terms, based on the second degree of authorization of the user to view the first type of field includes:

based on the second degree of authorization of a user, the computer hardware generating the modified list of search terms by adding to the list of search terms an encrypted version of an unencrypted search term included in the list of search terms.