Patent ID: 8909943
Filing Date: 2014-12-09
Classification: G06F

Abstract:
1. A method performed by one or more processing devices, comprising: for each document of a plurality of documents for inclusion in a search index of a search system: receiving i) a search query and ii) an authentication credential associated with a particular user providing the search query; in response to receiving the search query, identifying one or more documents of the plurality of documents based on the search query; for each of the one or more identified documents, decrypting the wrapped key using the second key to produce the first key and the ACL for the identified document; determining, by the one or more processors, that the particular user is authorized to access a subset of the one or more identified documents based on, for each identified document, the authentication credential corresponds to the user identifier associated with the identified document; based on the determining, decrypting each of the subset of the one or more identified documents using the first key associated with the corresponding identified document; and providing search results to the particular user including content associated with the subset of the one or more identified documents.