Patent ID: 7734649
Filing Date: 2010-06-08
Classification: G06F

Abstract:
1. A computer implemented method, comprising: initializing data access control information associated with each of a plurality of data elements in a computer readable storage medium, wherein the data access control information associated with each of the data elements includes a user access list indicating authorized users and different access levels for authorized users, and a data access list indicating at least one data element other than the data element associated with the data access control information that may be involved in a derivation with the data element associated with the data access control information including the data access list to form a derived data element; receiving a derivation request from one user to subject a first and second data elements of the data elements to a derivation operation to form the derived data element, wherein the derivation comprises aggregating or combining data elements; processing the data access control information associated with the first and second data elements to determine whether the user access list and the data access list in the processed data access control information permit the user to derive the derived data element from the first and second data elements by performing: processing, by the derivation operation, the first and second data elements to produce the derived data element comprising data based on the processed first and second data elements in response to determining that the user access list and the data access list permit the user to derive the derived data element from the first and second data elements.