Microsoft Technology Licensing, LLC

Vidar Tveoy Knudsen

Jan-Ove Almli Karlberg

Tor Kreutzer

Helge Grenager Solheim

Andrei-Alin Corodescu

Åge Andre Kvalnes

Kjetil Krogvig Bergstrand

Rezaul Hoque

Simon Thoresen Hult

Oystein Fledsberg

Azmil Macksood

Bernt Lervik

Olav Hamang Bru

Particular aspects of this disclosure relate to computerized systems for generating and using improved data structures and functionality to efficiently render different multiple access-controlled resources (or properties of access-controlled resources) that are part of a concept. Often times, two or more resources of a concept or properties of a resource are subject to different access controls. This adds computing complexity as to whether or not a user is granted access to the entire concept or resource, a portion of the concept or resource, or none of the concept or resources and what exactly is surfaced back to the user when there are resources or properties the user does and does not have access to. Some embodiments accordingly render an efficient composite view of concepts or resources where some resources or properties are accessible by the requesting user, while other resources or properties are not accessible by the requesting user.

Efficient retrieval and rendering of access-controlled computer resources

The technology described herein protects the privacy and security of data stored in a knowledge graph ('graph') by enforcing visibility policies when returning property information in response to a query or other attempt to extract property information from the graph and/or about the graph. The visibility policies may be stored with the object and used to prevent restricted properties from being extracted from the object, let alone the graph. The object-specific visibility policy may be stored in the storage layer of the knowledge-graph object with the object properties and content. Some implementations may include multiple visibility records for a single object. Together the visibility records form the object visibility policy. An object visibility policy may have a single visibility record or multiple visibility records.

Property-level visibilities for knowledge-graph objects

A server system comprising a physically separate storage area for each of a plurality of respective parties including a first and second party, and a manager function for managing the storage. E.g. some of the storage areas may be in separate server units or at separate geographic locations. Each of at least some of the storage areas stores a primary instance of one or more data resources of the respective party. The manager function is configured so as, in response to the second party forming a relationship with one of the resources of the first party, establish a secondary copy of said one of the resources of the first party in the respective storage area of the second party. Further, when the primary instance is updated with a change, the manager function automatically propagates the change in the primary instance to the secondary copy in the second party's storage area.

Modifying data resources within party-partitioned storage areas

Growing community of inventors

OSLO, Norway

Vidar Tveoy Knudsen