IP Library Granted Patent US 9,195,759
Granted Patent B2
US 9,195,759 · App. 13/430,710 · Granted Nov 24, 2015

Method and apparatus for enterprise-level filtered search

Inventors: Yakov Faitelson (Elkana, IL); Ohad Korkus (Herzeliya, IL); Ophir Kretzer-Katzir (Re'ut, IL); David Bass (Karmei Yosef, IL)
Assignee: VARONIS SYSTEMS, LTD.
G06F17/30867G06F21/6218
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,195,759
App. No.
13/430,710
Granted
Nov 24, 2015
Kind
B2
Abstract

A method for a secure search in a computerized system having a storage, comprising searching for objects in the storage of the computerized system according to search criteria provided by a user wherein the criteria comprise at least one attribute of the objects, identifying objects that meet the criteria and displaying representations respective of identified objects that are accessible to the user, and an apparatus for performing the same.

Claims (37)

1. A method for a secure search in a computerized system having a storage, comprising:

searching for objects in the storage of the computerized system according to search criteria provided by a user, the criteria comprising at least permissions of the user with respect to the objects;

identifying objects that meet the criteria;

filtering the objects that meet the criteria according to an at least one condition, thereby selecting objects that meet the criteria and the at least one condition;

displaying representations respective of identified objects that are selected and accessible to the user based on permissions of the user with respect to the identified objects, the representations are displayed according to a ranking order based on an at least one attribute of the identified objects that are selected and accessible to the user;

separately displaying an indication of an at least one another object that is identified as not accessible to the user, and

activating the indication, thereby notifying an entity authorized to grant access to the at least one another object that the user requests access to the at least one another object,

wherein the method is carried, out by an at least one computer of the computerized system configured to perform the method.

2. The method according to claim 1 , wherein the permissions of the user with respect to the identified objects are obtained by exploring the storage of the computerized system and identifying objects and respective permissions for users of the computerized system.

3. The method according to claim 2 , wherein the objects and respective permissions for users of the computerized system are indexed for subsequent retrieval for determining whether the identified objects are accessible to the user.

4. The method according to claim 1 , further comprising activating at least one of the representations of identified objects that are accessible to the user, thereby accessing the respective object.

5. The method according to claim 1 , wherein responsive to the notification the user is granted, by the entity via communications from outside the computerized system, rights for accessing the at least one identified object that is not accessible to the user.

6. The method according to claim 1 , wherein the displayed representations of the identified objects that are accessible to the user are ranked according to one or more attributes of the objects.

7. The method according to claim 1 , wherein the at least one attribute comprises a plurality of attributes.

8. The method according to claim 1 , wherein the at least one attribute of the objects comprises any one of a classification of the objects, owner of the objects, permissions of users of the objects, access history of the objects, activities of the objects; confidentially of the objects, or sensitivity of the objects.

9. The method according to claim 1 , wherein the objects are identified according to an at least one rule.

10. The method according to claim 1 , wherein the ranking order is hierarchical.

11. The method according to claim 1 , wherein the at least one condition relates to activity history of the objects.

12. An apparatus for a secure search, comprising:

a computerized system comprising an at least one computer and an at least one data storage device; and

an at least one program operative in the computerized system and configured for:

searching for objects in the at least one data storage device according to search criteria provided by a user, the criteria comprising at least permissions of the user with respect to the objects;

identifying objects that meet the criteria;

filtering the objects that meet the criteria according to an at least one condition, thereby selecting objects that meet the criteria and the at least one condition;

displaying representations of identified objects that are selected and accessible to the user based on permissions of the user with respect to the identified objects, the representations are displayed according to a ranking order based on an at least one attribute of the identified objects that are selected and accessible to the user;

separately displaying an indication of an at least one another object that is identified as not accessible to the user, and

responsive to activation of the indication, notifying an entity authorized to grant access to the at least one another object that the user requests access to the at least one another object.

13. The apparatus according to claim 12 , wherein the at least one program further configured for activating at least one of the representations of identified objects that are accessible to the user, thereby accessing the respective object.

14. The apparatus according to claim 12 , wherein the at least one program further configured for displaying a representation of an at least one identified object that is accessible to the user.

15. The apparatus according to claim 14 , wherein the at least one identified object that is accessible to the user is accessible responsive to activation the representation thereof.

16. The apparatus according to claim 12 , wherein responsive to the notification the user is granted, by the entity via communications from outside the computerized system, rights for accessing the at least one identified object that is not accessible to the user.

17. The apparatus according to claim 12 , wherein the at least one program operative in the computerized system is further configured for ranking the representations of the identified objects that are accessible to the user according to one or more attributes of the objects.

18. The apparatus according to claim 12 , wherein the at least one attribute comprises a plurality of attributes.

19. The apparatus according to claim 12 , wherein the at least one attribute of the objects comprises any one of a classification of the objects, owner of the objects, permissions of users of the objects, access history of the objects, activities of the objects, confidentially of the objects, or sensitivity of the objects.

20. The apparatus according to claim 12 , wherein the objects are identified according to an at least one rule.

21. The apparatus according to claim 12 , wherein the ranking order is hierarchical.

22. The apparatus according to claim 12 , wherein the at least one condition relates to activity history of the objects.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 22, 2022
From: VARONIS SYSTEMS LTD.
To: VARONIS SYSTEMS, INC.
Reel/Frame 059332/0426 →
CORRECTIVE ASSIGNMENT TO CORRECT THE NAME AND ADDRESS OF THE RECEIVING PARTY (ASSIGNEE) PREVIOUSLY RECORDED ON REEL 027931 FRAME 0033. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT OF ASSIGNORS INTEREST. Recorded Feb 2, 2014
From: FAITELSON, YAKOV; KORKUS, OHAD; KRETZER-KATZIR, OPHIR; BASS, DAVID
To: VARONIS SYSTEMS, LTD.
Reel/Frame 032153/0533 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 27, 2012
From: FAITELSON, YAKOV; KORKUS, OHAD; KRETZER-KATZIR, OPHIR; BASS, DAVID
To: VARONIS SYSTEMS, INC.
Reel/Frame 027931/0033 →
Continuity (1)
Related Publication 20130263221A1 · Oct 3, 2013