公开(公告)号：US11244067B1

公开(公告)日：2022-02-08

申请号：US17162376

申请日：2021-01-29

Applicant: Snowflake Inc.

Inventor： Christopher Peter Child ,  Matthew J. Glickman ,  Justin Langseth

IPC: G06F3/06 ,  G06F21/62 ,  G06F21/31 ,  G06F16/248 ,  G06F16/2457 ,  G06F16/28

Abstract: Security credentials associated with a first account maintained by a database system are authenticated. Based on authenticating the security credentials, a user interface element is provided to enable sharing of customer data associated with the first account with an application. A request to share customer data with the application is received. Based on the request, third-party data that is accessible by the first account is identified. The third-party data corresponds to a second account maintained by the database system. The second account corresponds to a third-party data provider. The application is enabled to access cloud data associated with the first account based on the request. The cloud data comprises the customer data and the third-party data.

公开(公告)号：US11216580B1

公开(公告)日：2022-01-04

申请号：US17232859

申请日：2021-04-16

Applicant: Snowflake Inc.

Inventor： Monica J. Holboke ,  Justin Langseth ,  Stuart Ozer ,  William L. Stratton, Jr.

IPC: G06F21/62 ,  G06K9/62 ,  G06N20/00 ,  G06F16/25 ,  G06F16/28

Abstract: A secure machine learning system of a database system can be implemented to use secure shared data to train a machine learning model. To manage the model, a first user of the database can share data in an encrypted view with a second user of the database, and further share one or more functions of an application that accesses the data while the data is encrypted. The second user can access functions of the application and can call the functions to generate a trained machine learning model and further generate machine learning outputs (e.g., predictions) from the trained model.

公开(公告)号：US20200327249A1

公开(公告)日：2020-10-15

申请号：US16902266

申请日：2020-06-16

Applicant: Snowflake Inc.

Inventor： Justin Langseth ,  Matthew J. Glickman ,  Christian Kleinerman ,  Robert Muglia ,  Daniel Freundel ,  Thierry Cruanes ,  Allison Waingold Lee

IPC: G06F21/62 ,  H04L9/32 ,  G06F16/2455

Abstract: Systems, methods, and devices for generating a secure join of database data are disclosed. A method includes determining data stored in a first account to be compared with data stored in a second account. The method includes determining a function for generating a secure join key, wherein the secure join key includes a hashed string that hashes one or more of a data entry of the first account and a data entry of the second account. The method includes providing the secure join key to the first account and/or the second account.

公开(公告)号：US10798100B1

公开(公告)日：2020-10-06

申请号：US16746758

申请日：2020-01-17

Applicant: Snowflake Inc.

Inventor： Pui Kei Johnston Chu ,  Benoit Dageville ,  Matthew Glickman ,  Christian Kleinerman ,  Prasanna Krishnan ,  Justin Langseth

IPC: H04L29/06 ,  H04L12/58

Abstract: Systems and methods for managing membership in a private data exchange are provided herein. In one embodiment, the method comprises adding a new member to a data exchange, wherein the data exchange comprises a set of listings, each listing comprising data from one or more datasets stored on a cloud computing service. An account type is assigned to the new member, the account type comprising at least one of a consumer type, provider type, or exchange administrator type. Each of the account types associated with one or more rights with respect to the set of listings, such that the new member has a set of rights based on the account type. The set of rights of the new member are then modified with respect to one or more listings from the set of listings based on a set of visibility and access rules for each of the set of listings.

公开(公告)号：US12135721B2

公开(公告)日：2024-11-05

申请号：US18480028

申请日：2023-10-03

Applicant: Snowflake Inc.

Inventor： Rachel Frances Blum ,  Justin Langseth ,  Michael Earle Rainey

IPC: G06F16/2455 ,  G06F16/242 ,  G06F16/27 ,  G06F21/62

Abstract: Disclosed herein are systems and methods for query processing with restrictions in a database clean room. In an embodiment, a system receives a query directed to a combination of a first source dataset from a first database account of a distributed database and a second source dataset from a second database account of the distributed database. The system generates an approved statements table that contains database statement language that can be executed against the combination of the first and second source datasets. Based on determining that the approved statements table includes the query, the system executes the query to produce results data, and stores the results data in the first database account.

公开(公告)号：US20240169095A1

公开(公告)日：2024-05-23

申请号：US18429261

申请日：2024-01-31

Applicant: Snowflake Inc.

Inventor： Marcus A. Henderson ,  Justin Langseth ,  Jamie B. Pfeiffer, JR.

IPC: G06F21/62 ,  G06F16/22 ,  G06F16/2455 ,  G06F21/60

CPC classification number: G06F21/6254 ,  G06F16/2282 ,  G06F16/24568 ,  G06F21/602

Abstract: A method includes performing by at least one hardware processor operations such as configuring at an account of a data consumer, a source table with personally identifiable information (PII) associated with a user. A secure view of the PII is generated based on a view object at the account of the data consumer. The secure view of the PII is shared with an account of a data provider using a share object at the account of the data consumer. The sharing is based on an update of the PII in the source table. A result table is retrieved from the account of the data provider. The result table includes identity resolution information of the user. The identity resolution information is generated based on the update.

公开(公告)号：US11989173B2

公开(公告)日：2024-05-21

申请号：US18162710

申请日：2023-01-31

Applicant: Snowflake Inc.

Inventor： Rachel Frances Blum ,  Justin Langseth ,  Michael Earle Rainey

IPC: G06F16/30 ,  G06F16/242 ,  G06F16/2455 ,  G06F16/27

CPC classification number: G06F16/242 ,  G06F16/2456 ,  G06F16/27

Abstract: A method includes generating a defined access clean room in a provider database account, as well as installing, in a consumer account, an application instance that implements the defined access clean room. The method also includes sharing, by the provider database account, source provider data with the defined access clean room, where the sharing makes the source provider data accessible to the consumer database account via the application instance. The method further includes sharing, by the provider database account, a query template with the consumer database account via the application instance. Additionally, the method includes receiving a query generated by the consumer database account based on the query template, validating that the query is consistent with the query template, responsively generating query results by executing the query, as well as storing the query results in the consumer database account.

公开(公告)号：US11954229B1

公开(公告)日：2024-04-09

申请号：US18161030

申请日：2023-01-27

Applicant: Snowflake Inc.

Inventor： Marcus A. Henderson ,  Justin Langseth

IPC: H04L29/06 ,  G06F16/22 ,  G06F21/62

CPC classification number: G06F21/6245 ,  G06F16/2255

Abstract: A method for identity resolution and data enrichment is performed by at least one hardware processor and includes detecting at an account of a data provider, a shared data object that is shared by an account of a data consumer with the account of the data provider. An application executing at the account of the data consumer is enabled for an identity resolution process based on the detecting of the shared data object. A request for source data received from the application is detected at the account of the data provider. The source data is managed by the account of the data provider. The source data is communicated to the application executing at the account of the data consumer, based on a verification that the application is enabled for the identity resolution process. The identity resolution process is performed at the account of the data consumer using the source data.

公开(公告)号：US20240062098A1

公开(公告)日：2024-02-22

申请号：US17821587

申请日：2022-08-23

Applicant: Snowflake Inc.

Inventor： Rachel Frances Blum ,  Nancy Dou ,  Matthew J. Glickman ,  Boxin Jiang ,  Orestis Kostakis ,  Justin Langseth ,  Michael Earle Rainey ,  Haoran Yu

IPC: G06N20/00

CPC classification number: G06N20/00

Abstract: The subject technology receives first party training data provided by an end-user of a baseline machine learning model. The subject technology determines a first set of common features based on the first party training data. The subject technology receives, from at least one data source. The subject technology determines a second set of common features based on the set of datasets. The subject technology trains, using the first set of common features and the second set of common features, a second machine learning model, the second machine learning model incorporating additional training data from the external data supplier during training compared to the baseline machine learning model. The subject technology generates a boosted machine learning model based at least in part on the training, the boosted machine learning model comprising the trained second machine learning model.

公开(公告)号：US11907395B1

公开(公告)日：2024-02-20

申请号：US18162696

申请日：2023-01-31

Applicant: Snowflake Inc.

Inventor： Marcus A. Henderson ,  Justin Langseth

IPC: G06F21/30 ,  G06F21/62

CPC classification number: G06F21/6227 ,  G06F21/30 ,  G06F21/6245 ,  G06F2221/2113

Abstract: Techniques for identity resolution and data enrichment include configuring, during an onboarding process at an account of a data provider, at least one parameter associated with access to identity resolution functions by an account of a data consumer. A first shared data object is generated at the account of the data provider. The first shared data object corresponds to a second shared data object at the account of the data consumer. The second shared data object at the account of the data consumer is enabled for sharing of log data associated with an application executing at the account of the data consumer. The application is enabled for an identity resolution process based on the detecting of the second shared data object. Source data associated with the identity resolution functions is encoded for communication to the application at the account of the data consumer based on the enabling.