Enterprise Search Filtering by Access Rights
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computerized search systems in enterprises fail to securely present search results, allowing unauthorized access to objects identified by users without sufficient access rights.
Innovation Solution
A method and system that filters search results based on user access rights, preventing access to objects for which the user lacks sufficient permissions, and allows owners to grant access rights to such objects upon request.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If search systems present all found items according to keywords, then search completeness is improved, but security and access control deteriorate
Solution Approach 1:
The patent applies local quality by customizing search result presentation according to each user's access rights. Instead of presenting all found items uniformly, the system filters and presents only items for which the user has sufficient access rights, thereby adapting the search results to individual user security levels while maintaining search completeness for authorized items.
Solution Approach 2:
The patent introduces an intermediary mechanism between the search results and the user interface. This intermediary layer filters search results based on user access rights before presentation, acting as a mediator that ensures security while allowing users to access complete search results when authorized. The intermediary checks access rights and selectively presents items to maintain both security and search completeness.
2Reliability
If search results are filtered by access rights, then access security is improved, but search effectiveness deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-establishing access rights and filtering mechanisms before the search operation. The system pre-checks user access rights and prepares filtered search results in advance, ensuring that when a user performs a search, they immediately receive secure and effective results without needing to manually filter or review each item for accessibility.
Solution Approach 2:
The patent utilizes parameter changes by dynamically adjusting search result parameters based on user access rights. The system changes the presentation parameters of search results according to the user's authorization level, filtering items based on access rights parameters while maintaining search effectiveness for authorized content. This dynamic parameter adjustment ensures both security and effectiveness.
3Reliability
If the system checks access rights for each object, then access control precision is improved, but system complexity increases
Solution Approach 1:
The patent applies merging by combining the access rights checking function with the search result presentation function. Instead of implementing separate complex access control mechanisms, the system merges access right verification into the search results filtering process, thereby achieving precise access control while reducing overall system complexity through functional integration.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for a secure search in a computerized system having a storage, comprising searching for objects in the storage of the computerized system according to search criteria provided by a user wherein the criteria comprise at least one attribute of the objects, identifying objects that meet the criteria and displaying representations respective of identified objects that are accessible to the user, and an apparatus for performing the same.