公开(公告)号：US20230177203A1

公开(公告)日：2023-06-08

申请号：US18162705

申请日：2023-01-31

Applicant: Snowflake Inc.

Inventor： Justin Langseth ,  Michael Earle Rainey

IPC: G06F21/62 ,  G06F21/60 ,  G06F16/245 ,  G06F16/25 ,  G06F16/27

CPC classification number: G06F21/6227 ,  G06F21/602 ,  G06F16/245 ,  G06F16/258 ,  G06F16/27

Abstract: A first database account shares, with a second database account, a secure function configured to accept an encrypted dataset and a decryption parameter. The first database account includes a first dataset. The second database account includes a second dataset. The second database account selects one or more rows and one or more columns of the second dataset as a searchable dataset, generates an encrypted searchable dataset by encrypting the searchable dataset with a key, and calls the secure function with the encrypted searchable dataset and the key. The secure function generates results of a query by: generating a decrypted searchable dataset by decrypting the encrypted searchable dataset with the key in a secure environment, obtaining the results by executing the query against a combination of the first dataset and the decrypted dataset in the secure environment to generated query-results data, and outputting the results to the second database account.

公开(公告)号：US11651287B1

公开(公告)日：2023-05-16

申请号：US17816421

申请日：2022-07-31

Applicant: Snowflake Inc.

Inventor： Orestis Kostakis ,  Justin Langseth

IPC: G06N20/00

CPC classification number: G06N20/00

Abstract: Embodiments of the present disclosure may provide a data sharing system implemented as a local application in a consumer database of a distributed database. The local application can include a training function and a scoring function to train a machine learning model on provider and consumer data, and generate output data by applying the trained machine learning model on input data. The input data can include data portions from a consumer database and a provider database that are joined to create a joined dataset for scoring.

公开(公告)号：US11637836B2

公开(公告)日：2023-04-25

申请号：US17702115

申请日：2022-03-23

Applicant: SNOWFLAKE INC.

Inventor： Pui Kei Johnston Chu ,  Benoit Dageville ,  Matthew J. Glickman ,  Christian Kleinerman ,  Prasanna Krishnan ,  Justin Langseth

IPC: H04L29/06 ,  H04L9/40 ,  G06F16/2455 ,  H04L41/22 ,  H04L67/1097 ,  H04L51/212

Abstract: Systems and methods for managing membership in a private data exchange are provided herein. In one embodiment, the method includes generating a plurality of listings in a data exchange. A first listing of the plurality of listings may include a reference to a first version of shared data within a first database, where the first version is one of a plurality of versions of the shared data within the first database. The method further includes receiving a request from a member of the data exchange for access to the first listing and limiting, by a processing device, access for the member to the first version of the shared data of the first database referenced by the first listing.

公开(公告)号：US11599550B2

公开(公告)日：2023-03-07

申请号：US17839248

申请日：2022-06-13

Applicant: Snowflake Inc.

Inventor： Pui Kei Johnston Chu ,  Benoit Dageville ,  Matthew J. Glickman ,  Christian Kleinerman ,  Prasanna Krishnan ,  Justin Langseth

IPC: G06F16/2455 ,  G06F16/25 ,  G06F21/62

Abstract: A method of operating a data exchange includes creating a first listing referencing data of a first database of a plurality of databases, wherein the first listing comprises access controls and a data share associated with a first user, the access controls defining portions of the first database that are accessible by a second user, receiving a request from the second user for a bidirectional share between the portions of the first database that are accessible by the second user and portions of a second database controlled by the second user, and receiving an instruction from the first user to perform a database operation referencing data of the bidirectional share between the portions of the first database that are accessible by the second user and the portions of the second database controlled by the second user.

公开(公告)号：US11567943B1

公开(公告)日：2023-01-31

申请号：US17652873

申请日：2022-02-28

Applicant: Snowflake Inc.

Inventor： Rachel Frances Blum ,  Justin Langseth ,  Michael Earle Rainey

IPC: G06F16/2455 ,  G06F16/242 ,  G06F16/27

Abstract: Embodiments of the present disclosure may provide a data clean room architecture that restricts data included in the clean room. The data clean room architecture can implement a policy to enable data restrictions for data shared between multiple parties via a distributed database. Multiple database accounts can implement validation instances to validate queries when received from other database accounts. One or more of the database accounts can provide a query template that is congruent with the validation instance for use by the other database accounts to generate queries against the data shared in the data clean room.

公开(公告)号：US20230007074A1

公开(公告)日：2023-01-05

申请号：US17940436

申请日：2022-09-08

Applicant: SNOWFLAKE INC.

Inventor： Pui Kei Johnston Chu ,  Benoit Dageville ,  Matthew Glickman ,  Christian Kleinerman ,  Prasanna Krishnan ,  Justin Langseth

IPC: H04L67/10 ,  H04L41/50 ,  H04L67/51 ,  H04L9/40

Abstract: Sharing data in a data exchange across multiple cloud computing platforms and/or cloud computing platform regions is described. An example method can include generating a consumer account corresponding to a first cloud entity and receiving, by the first cloud entity, a copy of a data set from a provider account corresponding to a second cloud computing entity, wherein the first cloud computing entity and the second cloud computing entity represent different regions of a cloud computing platform. The method may also include accessing, by the consumer account, the copy of the data set.

公开(公告)号：US20230004669A1

公开(公告)日：2023-01-05

申请号：US17390935

申请日：2021-07-31

Applicant: Snowflake Inc.

Inventor： Justin Langseth ,  Michael Earle Rainey

IPC: G06F21/62 ,  G06F21/60 ,  G06F16/27 ,  G06F16/25 ,  G06F16/245

Abstract: Embodiments of the present disclosure may provide a data clean room allowing encryption based data analysis across multiple accounts of different database users. The data clean room may also restrict which data may be used in the analysis and may restrict the output. A requesting user's data can be encrypted using a key and a provider user can generate a shareable database function that accepts the key to decrypt the data to generate the results data without exposing each others' data.

公开(公告)号：US11544401B2

公开(公告)日：2023-01-03

申请号：US17659732

申请日：2022-04-19

Applicant: Snowflake Inc.

Inventor： Christopher Peter Child ,  Matthew J. Glickman ,  Justin Langseth

IPC: G06F3/06 ,  G06F21/62 ,  G06F21/31 ,  G06F16/248 ,  G06F16/2457 ,  G06F16/28 ,  G06F16/25

Abstract: Security credentials associated with a first account maintained by a database system are authenticated. Based on authenticating the security credentials, a user interface element is provided to enable sharing of customer data associated with the first account with an application. A request to share customer data with the application is received. Based on the request, third-party data that is accessible by the first account is identified. The third-party data corresponds to a second account maintained by the database system. The second account corresponds to a third-party data provider. The application is enabled to access cloud data associated with the first account based on the request. The cloud data comprises the customer data and the third-party data.

公开(公告)号：US11470089B2

公开(公告)日：2022-10-11

申请号：US17666473

申请日：2022-02-07

Applicant: Snowflake Inc.

Inventor： Benoit Dageville ,  Matthew Glickman ,  Christian Kleinerman ,  Prasanna Krishnan ,  Justin Langseth

IPC: H04L9/40 ,  G06F16/2455 ,  H04L41/22 ,  H04L67/1097 ,  H04L51/212

Abstract: Providing access to metrics on a private data exchange is described. An example computer-implemented method can include executing one or more queries against data referenced by a data listing of a data exchange, the data exchange comprising a plurality of data listings provided by one or more data providers, gathering consumer information based on the one or more queries, assigning privileges that grant access to the consumer information to a share object, in response to the share object being added to a list of consumed share objects of a data provider that provided the data listing, generating a database that references the consumer information based on the share object, and granting access to the database to the data provider that provided the data listing.

公开(公告)号：US11418577B1

公开(公告)日：2022-08-16

申请号：US17709689

申请日：2022-03-31

Applicant: SNOWFLAKE INC.

Inventor： Pui Kei Johnston Chu ,  Benoit Dageville ,  Matthew Glickman ,  Christian Kleinerman ,  Prasanna Krishnan ,  Justin Langseth

IPC: G06F15/173 ,  H04L67/10 ,  H04L9/40 ,  H04L41/50 ,  H04L67/51

Abstract: Sharing data in a data exchange across multiple cloud computing platforms and/or cloud computing platform regions is described. An example computer-implemented method can include receiving data sharing information from a data provider for sharing a data set in a data exchange from a first cloud computing entity to a set of second cloud computing entities. In response to receiving the data sharing information, the method may also include creating an account with each of the set of second cloud computing entities. The method may also further include sharing the data set from the first cloud computing entity with the set of second cloud computing entities using at least the corresponding account of that second cloud computing entity.