Patent ID: 7748027

Claim:
A computer-implemented method for securing access to data, comprising: providing a computer including a processor, storage medium, and security service module operating thereon; receiving, at the security service module, a request from a requestor to access one or more resources; accessing the one or more resources on behalf of the requestor; receiving, at the security service module, responses from the one or more resources, and aggregating a result set wherein the aggregated result set includes several portions of disparate resource data; determining current access policies for the requestor corresponding to each of said several portions of disparate resource data; redacting from the aggregated result set a portion of said disparate resource data that the requestor is not permitted to receive, based on said current access policies, to create a redacted result set from said aggregated result set when said aggregated result set exceeds the requestor's authorization while each of said disparate resources the requestor is authorized to access; and providing the redacted result set to the requestor.