초록 ▼

Systems and methods for enforcing access control on secured documents that are stored outside of the direct control of the original application that would normally store and govern access to the documents. Access security can be enforced at a search engine associated with an indexing system that com

Systems and methods for enforcing access control on secured documents that are stored outside of the direct control of the original application that would normally store and govern access to the documents. Access security can be enforced at a search engine associated with an indexing system that compiles references to documents at any number of network locations. The search engine discloses to the requesting user only those documents that the user is authorized to read. If a document is identified for potential disclosure to a user, and the document's source location has an access control system that is not directly interoperable with a native access control system of the search engine, a security provider at the search engine enforces access control. The security provider, in cooperation with the source location of the document, converts the user context that identifies the requesting user to a format that can be used by the security provider. The security provider also retrieves the access control information from the document's source location. The security provider then applies the user context to the access control information to determine if the user is authorized to read the document.

대표청구항 ▼

1. In a networked computing environment having a first data storage location and an indexing system, wherein the first data storage location employs a first access control system to control access to documents stored at the first data storage location, and wherein the indexing system employs a secon

1. In a networked computing environment having a first data storage location and an indexing system, wherein the first data storage location employs a first access control system to control access to documents stored at the first data storage location, and wherein the indexing system employs a second access control system to control access to documents stored at the indexing system, a method for indexing documents while preserving access security for the indexed documents, the method comprising:maintaining, at the first data storage location, a stored copy of a first document and access control information defining user access privileges to the first document in accordance with the first access control system; indexing the first document at the indexing system so as to create a reference to the first document in the indexing system; and if the first and second access control systems are compatible, retrieving from the first data storage location the access control information associated with the first document and storing the access control information in the indexing system in association with the reference to the first document, otherwise, storing, at the indexing system in association with the reference to the first document, document source location information identifying the first data storage location as the source of the first document.