Access controlled graph query spanning

US10242223B2 · kind B2 · utility

Assignee

• MICROSOFT TECHNOLOGY LICENSING, LLC · US

Inventors

• Tor Kreutzer · Tromsø, NO
• Steffen Viken Valvåg · Tromsø, NO
• Dag Steinnes Eidesen · Tromsø, NO
• Amund Kronen Johansen · Tromsø, NO
• Peter Dahle Heen · Tromsø, NO
• Jan-Ove Almli Karlberg · Tromsø, NO
• Jon Meling · Tromsø, NO
• Åge Kvalnes · Tromsø, NO

Key dates

• Filing date: Feb 27, 2017
• Grant date: Mar 26, 2019
• Expiry date: Sep 13, 2037

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/101
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Controlling access to nodes in a relational graph at query time by using an approximate membership query (AMQ) filter and ordered queries based on historic grants or denials of access according to security context enables a more efficient querying of the relational graph while preserving access controls. Security contexts that grant or deny access to a node are stored in an associated AMQ filter and are queried according to the subject's security context in an order based on the frequency at which the security contexts have previously granted or denied access to nodes in the relational graph.