公开(公告)号：US11681829B2

公开(公告)日：2023-06-20

申请号：US17493168

申请日：2021-10-04

Applicant: Palantir Technologies Inc.

Inventor： James Ding ,  Gonçalo Silva Santos ,  Richard Helzberg ,  Thomas Playford

IPC: G06F21/62 ,  G06F21/60 ,  H04L9/40 ,  G06F8/36 ,  G06F8/60 ,  G06F8/71 ,  G06F9/50 ,  G06F21/12 ,  G06F21/53

CPC classification number: G06F21/629 ,  G06F21/604 ,  H04L63/101 ,  H04L63/105 ,  G06F2221/2135 ,  G06F2221/2137 ,  G06F2221/2141 ,  G06F2221/2149

Abstract: Systems and methods are provided for determining an access request provided by an application that seeks to interact with one or more backend systems through a computing system. One or more predefined restrictions can be enforced on the application, the computing system, or the one or more backend systems.

公开(公告)号：US20230306030A1

公开(公告)日：2023-09-28

申请号：US18190585

申请日：2023-03-27

Applicant: Palantir Technologies Inc.

Inventor： Hannah Korus ,  Kevin Chen ,  Tushar Narayan ,  Thomas Playford

IPC: G06F16/2455 ,  G06F16/2457

CPC classification number: G06F16/24564 ,  G06F16/2457

Abstract: A computer system is disclosed that provides classification-based access controls at the dataset row-level. The system may perform operations including: ingesting a dataset, wherein the dataset comprises a table of rows and columns; determining a column of the table that includes permissions information; applying parsing rules to the column to determine, for each row of the table, a list of permissions markings; receiving, from a user, a request to access the dataset; and in response to receiving the request: determining a permissions policy associated with the user; determining an evaluated policy associated with the user based on the permissions policy; filtering the table based on applying the evaluated policy associated with the user to the permissions markings of each row of the table; and providing the user access to the filtered table.

公开(公告)号：US20220027489A1

公开(公告)日：2022-01-27

申请号：US17493168

申请日：2021-10-04

Applicant: Palantir Technologies Inc.

Inventor： James Ding ,  Gonçalo Silva Santos ,  Richard Helzberg ,  Thomas Playford

IPC: G06F21/62 ,  G06F21/60 ,  H04L29/06

Abstract: Systems and methods are provided for determining an access request provided by an application that seeks to interact with one or more backend systems through a computing system. One or more predefined restrictions can be enforced on the application, the computing system, or the one or more backend systems.

公开(公告)号：US10467435B1

公开(公告)日：2019-11-05

申请号：US16221309

申请日：2018-12-14

Applicant: Palantir Technologies Inc.

Inventor： James Ding ,  Gonçalo Silva Santos ,  Richard Helzberg ,  Thomas Playford

IPC: G06F21/62 ,  H04L29/06 ,  G06F21/60

Abstract: Systems and methods are provided for determining an access request provided by an application that seeks to interact with one or more backend systems through a computing system. One or more predefined restrictions can be enforced on the application, the computing system, or the one or more backend systems.

公开(公告)号：US20220414239A1

公开(公告)日：2022-12-29

申请号：US17849291

申请日：2022-06-24

Applicant: Palantir Technologies Inc.

Inventor： Christopher Yu ,  Hannah Korus ,  Katherine Carras ,  Kevin Lowe ,  Lam Tran ,  Patrick Koenig ,  Sebastian Brueckner ,  Thomas Playford ,  Yin Lin

IPC: G06F21/62

Abstract: Computing systems and methods are provided for defining, within a data platform, a segment having constraints at a level of the segment, implementing the constraints or the classification rules within the segment while insulating resources within the segment from inheriting the constraints, and controlling an ingestion of an external resource into the segment based on the constraints.

公开(公告)号：US11138342B2

公开(公告)日：2021-10-05

申请号：US16586553

申请日：2019-09-27

Applicant: Palantir Technologies Inc.

Inventor： James Ding ,  Gonçalo Silva Santos ,  Richard Helzberg ,  Thomas Playford

IPC: G06F21/62 ,  G06F21/60 ,  H04L29/06 ,  G06F21/12 ,  G06F8/60 ,  G06F8/71 ,  G06F9/50 ,  G06F8/36 ,  G06F21/53

Abstract: Systems and methods are provided for determining an access request provided by an application that seeks to interact with one or more backend systems through a computing system. One or more predefined restrictions can be enforced on the application, the computing system, or the one or more backend systems.