MANAGING ENCRYPTION DATA FOR SYSTEM REPLICATION OF DATABASE SYSTEMS

    公开(公告)号:US20250094620A1

    公开(公告)日:2025-03-20

    申请号:US18468570

    申请日:2023-09-15

    Applicant: SAP SE

    Abstract: Some embodiments provide a non-transitory machine-readable medium that stores a program. The program takes a first snapshot of a first set of data stores configured to store data associated with a database system. After taking the first snapshot of the first set of data stores, the program further takes a second snapshot of a second set of data stores configured to store a set of encryption keys for a set of tenants of the database system. The program also transmits data included in the first snapshot of the first set of data stores to a secondary system. The program further transmits data included in the second snapshot of the second set of data stores to the secondary system.

    Handling pre-existing containers under group-level encryption

    公开(公告)号:US11991272B2

    公开(公告)日:2024-05-21

    申请号:US17547511

    申请日:2021-12-10

    Applicant: SAP SE

    Inventor: Dirk Thomsen

    CPC classification number: H04L9/0833 G06F16/2379 H04L9/0891

    Abstract: Computer-readable media, methods, and systems are disclosed for tenant-specific encryption of container in connection with a database employing group-level encryption. An encryption group identifier may be assigned to container. The encryption group identifier may define how the container is encrypted. A container entry corresponding to the container may be created. A commit operation may be received for committing the assignment of the encryption group identifier to the container. A job may be initialized for encryption the container according to the encryption group identifier. The container may be flagged as modified. A flush operation may be initiated whereby the container is re-encrypted according to the encryption group identifier. Once flushing is complete, the container entry may be deleted.

    Backup and recovery under group-level encryption

    公开(公告)号:US11977457B2

    公开(公告)日:2024-05-07

    申请号:US17546406

    申请日:2021-12-09

    Applicant: SAP SE

    Inventor: Dirk Thomsen

    CPC classification number: G06F11/1469 G06F21/602 G06F21/64 G06F2201/84

    Abstract: Computer-readable media, methods, and systems are disclosed for processing backup and recovery of pages in an in-memory database system employing tenant-based, group-level encryption for a plurality of tenants. Page metadata for a page may be collected. The page may comprise a header and a set of page contents. The page metadata may be stored with the page header. When a backup request is received, the page may be loaded into a backup stream. The page may be loaded with the header unencrypted and the page contents encrypted. When a recovery request is received, the data page may be retrieved from the backup stream. A converter may be rebuilt using the page metadata. The data page may then be written to the main memory of the database system. The page contents may be decrypted by the converter.

    Processing log entries under group-level encryption

    公开(公告)号:US11880495B2

    公开(公告)日:2024-01-23

    申请号:US17333531

    申请日:2021-05-28

    Applicant: SAP SE

    Inventor: Dirk Thomsen

    CPC classification number: G06F21/78 G06F16/2379

    Abstract: Computer-readable media, methods, and systems are disclosed for processing log entries in an in-memory database system employing tenant-based, group-level encryption for a plurality of tenants. A request to generate a database transaction log record is received. A log entry handle corresponding to the allocated log buffer is provided. In response to determining that the transaction log record to be written into the log buffer contains tenant-specific content, certain content requiring group-level encryption is flagged. An encryption group identifier is received, and the tenant-specific content is encrypted with a corresponding group-level encryption key. The group-level encryption group identifier is appended to the transaction log header, and log data containing the log buffer is encrypted with one or more encryption keys. Finally, the encrypted log data is persisted and subsequently read, unencrypted, and replayed under appropriate circumstances.

    In-memory database page allocation
    27.
    发明授权

    公开(公告)号:US11544180B2

    公开(公告)日:2023-01-03

    申请号:US15970704

    申请日:2018-05-03

    Applicant: SAP SE

    Abstract: A provisional page to be filled with data is allocated in an in-memory database system in which pages are loaded into memory and having associated physical disk storage a provisional page to be filled with data. Thereafter, the provisional page is filled with data. The provisional page is register after the provisional page has been filled with data such that consistent changes in the database are not required for the provisional page prior to the registering.

    PROCESSING LOG ENTRIES UNDER GROUP-LEVEL ENCRYPTION

    公开(公告)号:US20220382915A1

    公开(公告)日:2022-12-01

    申请号:US17333531

    申请日:2021-05-28

    Applicant: SAP SE

    Inventor: Dirk Thomsen

    Abstract: Computer-readable media, methods, and systems are disclosed for processing log entries in an in-memory database system employing tenant-based, group-level encryption for a plurality of tenants. A request to generate a database transaction log record is received. A log entry handle corresponding to the allocated log buffer is provided. In response to determining that the transaction log record to be written into the log buffer contains tenant-specific content, certain content requiring group-level encryption is flagged. An encryption group identifier is received, and the tenant-specific content is encrypted with a corresponding group-level encryption key. The group-level encryption group identifier is appended to the transaction log header, and log data containing the log buffer is encrypted with one or more encryption keys. Finally, the encrypted log data is persisted and subsequently read, unencrypted, and replayed under appropriate circumstances.

    Enhanced database recovery by maintaining original page savepoint versions

    公开(公告)号:US11467926B2

    公开(公告)日:2022-10-11

    申请号:US16824494

    申请日:2020-03-19

    Applicant: SAP SE

    Inventor: Dirk Thomsen

    Abstract: A database receives pages that are piped from backup media with each of the pages having a corresponding savepoint version. At least a portion of the pages are then flagged as being from recovery. The savepoint versions for the pages are maintained if they have a flag. A single checksum is then calculated for each page to confirm integrity. Each page is then loaded into memory of the database after it is confirming the corresponding calculated single checksum. Related apparatus, systems, techniques and articles are also described.

    Database mass entry insertion
    30.
    发明授权

    公开(公告)号:US11354357B2

    公开(公告)日:2022-06-07

    申请号:US16261361

    申请日:2019-01-29

    Applicant: SAP SE

    Inventor: Dirk Thomsen

    Abstract: A database system receives a mass insert operation command specifying a plurality of entries. Thereafter, the entries are iteratively inserted into a plurality of preliminary pages associated with a container provided by a persistence layer of the database system. Thereafter, the preliminary pages are registered to the container once they are full.

Patent Agency Ranking