Patent ID: 9158778
Filing Date: 2015-10-13
Classification: G06F,H04L

Abstract:
1. A method implemented and residing within a non-transitory computer-readable storage medium that is executed by one or more processors of a network to perform the method, comprising: receiving a request for a document over a network connection from a principal; parsing the document from its native storage environment into portions, each portion having a separate unique and independent network addressable reference, wherein some of the independent network addressable references are inode based and other of the independent network addressable references are path based; providing access to the document via the network addressable references to the principal, wherein the principal can directly access a particular portion using a particular network addressable reference; and enforcing identity and policy restrictions against the principal and against the access to the document, and wherein enforcing further includes enforcing a local policy restriction against the access ensuring that the local policy restriction for an environment of the principal is within global policy restrictions and obtaining an identity for the principal from a federation of identity providers.