CPC G06F 21/6209 (2013.01) [G06N 5/02 (2013.01)] | 20 Claims |
1. One or more non-transitory computer storage media comprising computer-executable instructions that when executed by a computing device cause the computing device to perform a method of enforcing a visibility policy on property information output from a knowledge graph, comprising:
receiving a request for multiple properties stored in a knowledge-graph object, the request associated with a requestor;
determining that a subset of the multiple properties have restricted visibility;
adding a representation of each requested property in the subset the property to a property-requested record;
determining whether the requestor has access to each individual property of the subset based, at least in part, on an evaluation of each individual property in the subset against a first visibility record of the knowledge-graph object;
in response to determining that the first visibility record grants the requestor visibility to a first property in the subset, removing the representation of the first property from the property-requested record and adding the representation of the first property to a property-granted record; and
querying the knowledge-graph object for a set of properties listed in the property-granted record; and
outputting each property in the property-granted record to the requestor.
|