Search Result Filtering Using Pre-stored Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data search systems face challenges in providing accurate and timely search results due to outdated access control information, leading to inefficiencies in filtering search results based on user access rights, which can fail to meet service level objectives (SLOs) and service level agreements (SLAs).
Innovation Solution
A computer-implemented method that generates a candidate search result using an index for a data source, where files with confidentiality levels less than or equal to a threshold are included, and additional files with higher confidentiality levels are checked for user access rights, reducing the need for extensive post-filtering and improving search result generation time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control information is updated frequently to ensure accuracy, then reliability of access rights is improved, but time required for search result generation increases
Solution Approach 1:
The system performs preliminary filtering using pre-stored access control information from the index before presenting search results. By pre-processing and storing access control data in the index, the system avoids time-consuming access right verification during actual search operations, thus maintaining reliability while reducing response time.
Solution Approach 2:
The filtering process is divided into two segments: initial filtering based on the index with pre-stored access control information, and optional secondary verification for results that require higher confidence. This segmentation allows most searches to complete quickly while maintaining accuracy for critical cases.
2Measurement precision
If all search results are filtered to verify user access rights, then accuracy of results is improved, but productivity of search system deteriorates
Solution Approach 1:
Instead of verifying access rights for all search results, the system applies partial verification only when necessary. The index contains pre-filtered results based on stored access control information, and full verification is performed only for cases where the pre-filtering uncertainty requires additional checking, thus maintaining accuracy while improving productivity.
Solution Approach 2:
Access control filtering is performed preliminarily during index creation and maintenance, so that during actual search operations, the system can quickly retrieve pre-filtered results without performing time-consuming access right verifications for every query.
3Reliability
If extensive post-filtering is performed on search results, then reliability of access control is improved, but time consumption increases
Solution Approach 1:
Access control information is pre-loaded into the index during index creation or update operations. This preliminary action ensures that when searches are executed, the system can rely on the pre-stored access control data rather than performing extensive post-filtering verification, thus maintaining reliability while minimizing time consumption during actual search operations.
Data Source
AI summary
A computer implemented method searches data. A number of processor units generates a candidate search result using an index for a data source in response to a search query by a user, wherein the candidate search result comprises files accessible by the user based on access control information in the index. The number of processor units generates a completed search result with a set of the files from the candidate search result having a confidentiality level less than or equal to a threshold confidentiality level. The number of processor units determines whether the user has access to a file in the candidate search result in which the file has the confidentiality level greater than the threshold confidentiality level for the data source. The number of processor units adds the file to the completed search result in response to the file being accessible by the user in the data source.