Palantir Technologies Inc.

Javier Campanini

Mark Elliot

Gregory Martin

Caitlin Colgrove

James Baker

Benjamin Duffield

Timothy Wilson

Shahine Zoubeiri

Derek Cicerone

Brian Schimpf

Neil Rickards

Jacob Meacham

Jason Zhao

Nathan Ziebart

Savino Sguera

Marco Gelmi

Qinfeng Chen

Joel Ossher

Agatha Yu

Robin Lim

Youssef Moussaoui

Mitch Beard

Mike Glazer

Dathan Bennett

Steve Matuszek

A method of executing computer-readable code for interaction with one or more data resources on a data processing platform, the method performed using one or more processors, comprising: receiving a request message including an identifier identifying executable code stored in a data repository; determining, using the identifier, an execution environment of a plurality of stored execution environments mapped to the identified executable code, wherein determining the execution environment mapped to the identified executable code comprises: accessing mapping data identifying a mapping between the identifier and the execution environment of the plurality of stored execution environments, the mapping data including configuration data associated with the identifier, wherein the configuration data identifies one or more convention-based data libraries particular to the execution environment; configuring the determined execution environment to access the one or more convention-based data libraries during execution; executing the identified executable code using the determined execution environment; and passing requests made with the identified executable code to the one or more data resources via a proxy.

Creation and execution of customised code for a data processing platform

Creation and execution of customized code for a data processing platform

Aspects of the present disclosure include a system comprising a computer-readable storage medium storing at least one program and a method for managing access permissions associated with data resources. Example embodiments involve evaluating user access permissions with respect to shared data resources of a group of network applications. The method includes receiving a request to access a data resource. The method further includes accessing a policy object linked to the data resource that includes an effective policy for the data resource. The method further includes evaluating a user's access permissions with respect to the data resource based on the policy object and communicating a response to the network application that includes the access permission of the user.

Network-based permissioning system

A system of one or more computing devices is utilized for, among other purposes, creating a template-driven search interface and conducting searches thereon. In an embodiment, the system comprises: a template repository; search templates in the template repository, the search templates comprising at least: field specification data that specify search interface fields for obtaining search input data, and query specification data that specify how to generate structured queries based on the search input data obtained for the one or more of the search interface fields; a search field generator that generates search fields indicated by the field specification data; a template loading module, coupled to the template repository, that identifies available search templates in the template repository; and a search interface generator, coupled to the search field generator and template loading module, that generates different search interfaces depending on which template is selected.

Simple web search

A system with methodology for dynamic modular ontology. In one embodiment, for example, a method comprises: receiving a command from an analyst to create a new ontology module; receiving, from the analyst, a selection of a first ontology module to import into the new ontology module; receiving, from the analyst, a selection of a second ontology module to import into the new ontology module; detecting an ambiguous data type definition conflict between a first definition of a data type in the first ontology module and a second definition of the data type in the second ontology module; generating a third definition of the data type reflecting a resolution of the ambiguous data type definition conflict; and storing, in a data container, the new ontology module comprising the third definition of the data type.

System with methodology for dynamic modular ontology

A method of executing computer-readable code for interaction with one or more data resources on a data processing platform is disclosed, wherein the method is performed using one or more processors. The method may comprise receiving a request message including an identifier identifying executable code stored in a data repository. Another operation may comprise determining, using the identifier, an execution environment mapped to the executable code. Another operation may comprise executing the identified executable code using the determined execution environment. A further operation may comprise passing requests made with the executable code to one or more data resources via a proxy. Also disclosed is a method of creating customized computer-readable code for interaction with one or more data resources on a data processing platform, wherein the method is performed using one or more processors. This method may comprise receiving, through a code creation tool, user entered computer-readable code, committing the entered code to a data repository and creating an identifier which maps to the committed code and to an execution environment for running the committed code on the data processing platform.

Aspects of the present disclosure include a system comprising a computer-readable storage medium storing at least one program and a method for managing access permissions associated with data resources. The method includes providing a user interface for registering a policy to a client device, and receiving a policy registration associated with a data resource stored in a first network database. The method further includes registering a policy associated with the data resource based on the policy registration. The registering of the policy includes creating a policy object that is linked to the data resource and storing the policy object in a second network database.

Aspects of the present disclosure include a system comprising a computer-readable storage medium storing at least one program and a method for managing access permissions associated with data resources. Example embodiments involve evaluating user access permissions with respect to shared data resources of a group of network applications. The method includes receiving a request, from one of the network applications, to access a particular data resource. The request includes an identifier of a requesting user. The method further includes accessing a policy object associated with the data resource that includes policy information specifying operations the user is authorized to perform with respect to the data resource based on satisfaction of one or more conditions. The method further includes evaluating the user's access permissions with respect to the data resource based on the policy object, and communicating a response to the network application that includes the access permission of the user.

Growing community of inventors

Mountain View, CA, United States of America

Javier Campanini