Hierarchical Path Document Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In public safety environments, document search systems often waste communications bandwidth and processing resources due to the lack of consideration for individual document access permissions, leading to the retrieval of unauthorized documents in search results.
Innovation Solution
A system that uses a security permissions database to store hierarchical document access paths associated with user or group identifiers, allowing only permissible documents to be searched by modifying the search query to include these access paths, thereby filtering results to show only accessible documents.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If individual document access permissions are assigned to each document, then security control is improved, but search efficiency deteriorates due to lack of pre-filtering
Solution Approach 1:
The patent segments document access control by introducing hierarchical paths that divide the document space into accessible and non-accessible regions. Instead of checking each document individually, the system segments the search space using path-based permissions, allowing efficient pre-filtering of unauthorized documents while maintaining granular security control.
Solution Approach 2:
The patent implements preliminary action by establishing hierarchical document paths and access permissions before searches are executed. The system pre-configures permissible paths and non-permissible paths, so that during search operations, unauthorized documents are filtered out before retrieval, eliminating the need for post-search permission verification.
2Loss of information
If security permissions are checked after document retrieval, then search completeness is improved, but resource waste increases due to unauthorized access attempts
Solution Approach 1:
The patent applies preliminary anti-action by proactively preventing access to unauthorized documents before the search process completes. The system embeds path permission checks into the search query itself, so that documents outside permissible paths are excluded from retrieval results, thereby preventing waste of bandwidth and processing resources on unauthorized content.
3Measurement precision
If document access permissions are individually managed, then access control precision is improved, but system complexity increases due to frequent re-indexing requirements
Solution Approach 1:
The patent transitions from flat, individual document permission management to a hierarchical dimensional structure using paths. By organizing documents into nested paths with associated permission levels, the system achieves precise access control through hierarchical relationships rather than individual document settings, reducing the complexity of permission management.
Data Source
AI summary
A device, system and process for controlling document access using hierarchical paths is provided. A query, received from a requesting device, comprises: a search string for searching a document database; and an identifier associated with a user. A security permissions database is accessed using the identifier to receive permissible hierarchical document access paths indicating document access permissions associated with the identifier. A modified query includes the permissible hierarchical document access paths. The modified query used to access an index of the document database, the index comprising: a searchable content portion, and corresponding hierarchical document access paths, of a document. Document identifiers are received that identify only the documents having: respective searchable content portions that include the search string of the modified query; and at least one respective corresponding hierarchical document access path encompassed by the permissible hierarchical document access paths. The document identifiers are provided to the requesting device.