ROW-LEVEL SECURITY
    1.
    发明申请

    公开(公告)号:US20250013776A1

    公开(公告)日:2025-01-09

    申请号:US18894162

    申请日:2024-09-24

    Applicant: Snowflake Inc.

    Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.

    PROJECTION CONSTRAINT POLICIES IN A DATABASE SYSTEM

    公开(公告)号:US20240176822A1

    公开(公告)日:2024-05-30

    申请号:US18428694

    申请日:2024-01-31

    Applicant: Snowflake Inc.

    CPC classification number: G06F16/90335

    Abstract: A database system facilitates secure data sharing by implementing projection constraints within a query processing framework. Upon receiving a query directed to a shared dataset, the system, utilizing hardware processors, identifies a subset of data within the dataset that is subject to a projection constraint policy. The applicability of the projection constraint is determined based on the context of the query, which is derived from a data sharing agreement. The system processes the query by selectively restricting the projection of data values from constrained columns, while allowing specific operations to be performed on the data. The output generated in response to the query is compliant with the projection constraint policy, providing derived data based on the allowed operations without revealing the actual data values. This ensures the confidentiality of sensitive information while enabling collaborative data analysis and sharing among various users of the database system.

    NOISY AGGREGATES IN A QUERY PROCESSING SYSTEM

    公开(公告)号:US20240362355A1

    公开(公告)日:2024-10-31

    申请号:US18647728

    申请日:2024-04-26

    Applicant: Snowflake Inc.

    CPC classification number: G06F21/6227 G06F16/24556 G06F16/24565

    Abstract: A noisy aggregation constraint system receives a query for a shared dataset, where the query identifies an operation. The noisy aggregation constraint system accesses a set of data from the shared dataset to perform the operation, the set of data comprises data accessed from a table of the shared dataset. The system determines that an aggregation constraint policy is attached to the table, the policy restricts output of data values stored in the table. Based on the context of the query, the system determines that the aggregation constraint policy should be enforced in relation to the query. The system assigns a specified noise level to the shared dataset and generates an output based on the set of data and the operation; the output comprises data values added to the table based on the specified noise level.

Patent Agency Ranking