Patent ID: 8086615

Claim:
A method for securing access to data, the method comprising: receiving a request from a requestor to access a plurality of data access services, said request associated with a service model, and said request including filter parameters wherein the service model provides a plurality of structured views of data in a format specific to the requestor, and wherein data returned to the requestor is mapped to one of the plurality of structured views associated with the requestor, and wherein the filter parameters accompany the request and determine the data included in a result set; accessing an authorization policy upon receiving the request to identify which of the plurality of data access services are available to the requestor, wherein the authorization policy includes one or more rules that are used to permit access to the plurality of data access services based on the requestor; accessing, based on the requestor, the plurality of data access services for which access is permitted by the authorization policy; receiving a combined filtered result set, the combined result set including the results from accessing the plurality of data access services, wherein the results from each of the plurality of data access services is filtered based on the filter parameters, and wherein each portion of the combined filtered result set is assigned a minimum level of access required to access the portion; determining a level of access assigned to the requestor; inspecting the combined filtered result set and determining, for each portion of the combined filtered result set, whether the requestor is permitted to access said portion of the combined filtered result set by comparing the minimum level of access associated with each portion in the combined filtered result set with the requestor's level of access; redacting said portion from the combined filtered result set if the requestor is not permitted by the level of access to access said portion of the combined filtered result set, wherein said redacting is performed after the combined filtered result set is received from the plurality of data access services; retaining said portion within the combined filtered result set if the requestor is permitted to access said portion of the combined filtered result set based on the level of access assigned to the requestor; presenting to the requestor at least one of the plurality of structured views of the combined filtered result set, wherein each portion that is not permitted to be accessed by the requestor is redacted from the result set, and wherein the at least one of the plurality of different views presented is based upon a determination of which of the plurality of data access services are relevant to the requestor.