Encrypted Cache Data for Search Query Accessibility
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data content management systems face inefficiencies in search query processing due to the need for frequent access control list (ACL) verification, particularly in post-filtering methods, which can lead to increased time and resource usage.
Innovation Solution
Implementing a system that uses encrypted cache data to store previous accessibility determinations, allowing the search server to reduce the number of queries to the data source server by decrypting and collating this data with new search results, while only querying the server for unverified data, thus optimizing search result generation and reducing storage requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If post-filtering methods are used to verify access control for each search result, then accurate accessibility determination is achieved, but query time and resource usage increase significantly
Solution Approach 1:
The system performs accessibility determinations in advance and stores the results in encrypted cache data on the client device. When a search query is executed, the processor decrypts and collates this pre-computed cache data with the search results, eliminating the need to query the data source server for each result's accessibility. This preliminary action resolves the contradiction by achieving accurate accessibility determination without the time penalty of real-time verification.
2Volume of stationary object
If encrypted cache data is stored on the client device, then server storage requirements are reduced, but client device storage is required
Solution Approach 1:
The system extracts the cache data storage function from the server and relocates it to the client device. The processor receives encrypted cache data from the client device, decrypts it, and uses it to determine accessibility. This extraction resolves the contradiction by reducing server storage requirements while utilizing client device storage capacity, effectively moving the storage burden from the server to the client.
3Reliability
If the processor queries the data source server for each unverified data item, then accurate accessibility information is obtained, but the number of queries and resource usage increase
Solution Approach 1:
Instead of querying the data source server for every search result, the system uses partial action by querying only for unverified data items that are not covered by the encrypted cache data. For data items already verified and stored in the cache, no additional queries are made. This partial action resolves the contradiction by maintaining accurate accessibility information while significantly reducing the number of server queries and improving processing efficiency.
Data Source
AI summary
Provided is a system for managing search queries using encrypted cache data. A processor may receive a search query and encrypted cache data from a search client. The processor may search an index for a listing of target data that matches the search query. The processor may decrypt the cache data and collate the cache data with the listing of target data to ascertain a first accessibility determination to a first data. The processor may query a data source server to ascertain a second accessibility determination to a second data. In response to the query, the processor may receive the second accessibility determination. The processor may prepare a result list by removing a third data from the target data in response to at least one of the first accessibility determination and the second accessibility determination indicating that the third data is inaccessible by the search client.