US 11,768,854 B2
Data permissioning through data replication
Jeremy Dorne, Washington, DC (US); Jeffrey Bagdis, Washington, DC (US); Hirsh Jain, New York, NY (US); Mitchell Skiles, New York, NY (US); Armando Belardo, Washington, DC (US); Joseph Schiavone, New York, NY (US); and Joshua Zweig, New York, NY (US)
Assigned to Palantir Technologies Inc., Denver, CO (US)
Filed by Palantir Technologies Inc., Denver, CO (US)
Filed on Mar. 25, 2022, as Appl. No. 17/656,506.
Application 17/656,506 is a continuation of application No. 16/782,602, filed on Feb. 5, 2020, granted, now 11,314,773.
Claims priority of provisional application 62/944,570, filed on Dec. 6, 2019.
Prior Publication US 2022/0215040 A1, Jul. 7, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 16/00 (2019.01); G06F 16/27 (2019.01); G06F 16/2455 (2019.01); G06F 16/9532 (2019.01)
CPC G06F 16/27 (2019.01) [G06F 16/2455 (2019.01); G06F 16/9532 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method of data permissioning, the method comprising:
by one or more processors executing program instructions:
receiving an input search query associated with a data table;
determining sensitivity permissions and group access permissions associated with the input search query;
based on the determined sensitivity permissions and the determined group access permissions, generating a replicated-data-table query;
providing the replicated-data-table query to a search service for execution of the replicated-data-table query on a replicated table data layer generated based on the data table, wherein:
the replicated data table layer comprises a replicated data table including two or more replicated sets of rows each associated with different sensitivity levels of a plurality of sensitivity levels associated with the data table,
each of the two or more replicated sets of rows includes a different subset of data associated with the applicable sensitivity level of the replicated data table, and
each of the two or more replicated sets of rows includes data associated with each of a plurality of group access permissions;
receiving a response from the search service including results of the replicated-data-table query; and
providing a response to the input search query based on at least the results of the replicated-data-table query.