Shared tag data system
    21.
    发明授权

    公开(公告)号:US12222949B2

    公开(公告)日:2025-02-11

    申请号:US18545672

    申请日:2023-12-19

    Applicant: Snowflake Inc.

    Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

    Row-level security
    22.
    发明授权

    公开(公告)号:US12135815B2

    公开(公告)日:2024-11-05

    申请号:US18521589

    申请日:2023-11-28

    Applicant: Snowflake Inc.

    Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.

    DATA CLEAN ROOMS USING DEFINED ACCESS
    25.
    发明公开

    公开(公告)号:US20230418699A1

    公开(公告)日:2023-12-28

    申请号:US18462044

    申请日:2023-09-06

    Applicant: Snowflake Inc.

    CPC classification number: G06F9/547 G06F21/6254 G06F16/2456 G06F9/541

    Abstract: In an embodiment, a data platform creates an application in a data-provider account. The application includes one or more APIs corresponding to one or more underlying code blocks. The data platform shares provider data with the application in the data-provider account, and also installs, in a data-consumer account, an application instance of the application. The application instance includes one or more APIs corresponding to the one or more APIs in the application in the data-provider account. The data platform shares consumer data with the application instance in the data-consumer account, and invokes one or more of the APIs of the application instance to execute respective associated underlying code blocks, which are not visible to the data-consumer account. The data platform also saves output of the one or more respective associated underlying code blocks locally within the data-consumer account.

    TAG-BASED DATA GOVERNANCE AUDITING SYSTEM

    公开(公告)号:US20230062496A1

    公开(公告)日:2023-03-02

    申请号:US18052990

    申请日:2022-11-07

    Applicant: Snowflake Inc.

    Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

    Row-level security
    28.
    发明授权

    公开(公告)号:US11494513B2

    公开(公告)日:2022-11-08

    申请号:US17661089

    申请日:2022-04-28

    Applicant: Snowflake Inc.

    Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.

    Container-centric access control on database objects

    公开(公告)号:US11372995B2

    公开(公告)日:2022-06-28

    申请号:US16745922

    申请日:2020-01-17

    Applicant: Snowflake Inc.

    Abstract: Using container-centric managed access, an administrator is enabled to define a set of future grants for each object that will be created in the future in a container managed by the administrator. When a user creates a database object, the system checks the future grants to determine if any apply to the user, the database object, or the combination. Any applicable future grants are applied to the database object before the user is allowed to modify it. As a result, the administrator is enabled to control the privileges associated with the database object even before the database object is created, while restricting individual object owners from managing privileges on their owned objects.

Patent Agency Ranking