US 11,914,623 B2
Approaches for managing access control permissions
James Baker, London (GB); and Sander Kromwijk, Brooklyn, NY (US)
Assigned to Palantir Technologies Inc., Denver, CO (US)
Filed by Palantir Technologies Inc., Denver, CO (US)
Filed on Oct. 22, 2020, as Appl. No. 17/077,792.
Claims priority of provisional application 62/925,714, filed on Oct. 24, 2019.
Prior Publication US 2021/0124766 A1, Apr. 29, 2021
Int. Cl. G06F 16/28 (2019.01); G06F 16/22 (2019.01); G06F 16/2455 (2019.01); G06F 16/248 (2019.01); G06F 21/62 (2013.01)
CPC G06F 16/285 (2019.01) [G06F 16/221 (2019.01); G06F 16/248 (2019.01); G06F 16/24553 (2019.01); G06F 21/6227 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A system comprising:
one or more processors; and
a memory storing instructions that, when executed by the one or more processors, cause the system to perform:
determining a query involving at least one dataset comprising a plurality of records, the query being submitted by an entity operating a computing device;
determining an archetype policy that governs access to records of the at least one dataset, wherein the archetype policy includes a logical formula to be evaluated when determining whether the entity is permitted to access a given record;
evaluating the archetype policy, wherein the evaluating of the archetype policy comprises evaluating the logical formula based on values or attributes of a variable that are inferred from a different dataset or a different data source besides the at least one dataset, wherein the values or attributes of the variable are missing from the at least one dataset and correspond to a characteristic of the entity;
creating new entries corresponding to the respective records in the at least one dataset, wherein at least a portion of the new entries comprise or encode the inferred values or attributes of the variable; and
determining at least one record that the entity is permitted to access based at least in part on satisfaction of the logical formula associated with the archetype policy.