公开(公告)号：US20220253547A1

公开(公告)日：2022-08-11

申请号：US17661089

申请日：2022-04-28

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz ,  Jian Xu

IPC: G06F21/62 ,  G06F21/60 ,  G06F16/22

Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.

公开(公告)号：US11301478B1

公开(公告)日：2022-04-12

申请号：US17160960

申请日：2021-01-28

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/28 ,  G06F16/27 ,  G06F16/23

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

公开(公告)号：US12222949B2

公开(公告)日：2025-02-11

申请号：US18545672

申请日：2023-12-19

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/22 ,  G06F16/23 ,  G06F16/27 ,  G06F16/28

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

公开(公告)号：US12135815B2

公开(公告)日：2024-11-05

申请号：US18521589

申请日：2023-11-28

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz ,  Jian Xu

IPC: G06F21/62 ,  G06F16/22 ,  G06F21/60

Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.

公开(公告)号：US12120189B2

公开(公告)日：2024-10-15

申请号：US18497720

申请日：2023-10-30

Applicant: Snowflake Inc.

Inventor： Khalid Zaman Bijon ,  Damien Carru ,  Christopher Peter Child ,  Eric Karlson ,  Zheng Mi

IPC: H04L67/306 ,  G06F9/54 ,  G06F21/31 ,  H04L9/40 ,  H04L41/50 ,  H04L41/5041 ,  H04L67/02 ,  H04L67/10 ,  H04L67/1097 ,  H04L67/59 ,  H04L67/60

CPC classification number: H04L67/306 ,  G06F9/547 ,  G06F21/31 ,  H04L41/50 ,  H04L41/5041 ,  H04L63/08 ,  H04L63/0815 ,  H04L63/102 ,  H04L63/20 ,  H04L67/02 ,  H04L67/10 ,  H04L67/1097 ,  H04L67/59 ,  H04L67/60

Abstract: Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.

公开(公告)号：US20240119056A1

公开(公告)日：2024-04-11

申请号：US18545672

申请日：2023-12-19

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/22 ,  G06F16/23 ,  G06F16/27 ,  G06F16/28

CPC classification number: G06F16/24573 ,  G06F16/211 ,  G06F16/212 ,  G06F16/2291 ,  G06F16/2365 ,  G06F16/27 ,  G06F16/288 ,  G06F16/289

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

公开(公告)号：US11886441B2

公开(公告)日：2024-01-30

申请号：US18052990

申请日：2022-11-07

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/23 ,  G06F16/22 ,  G06F16/28 ,  G06F16/27

CPC classification number: G06F16/24573 ,  G06F16/211 ,  G06F16/212 ,  G06F16/2291 ,  G06F16/2365 ,  G06F16/27 ,  G06F16/288 ,  G06F16/289

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

公开(公告)号：US20230385289A1

公开(公告)日：2023-11-30

申请号：US18447231

申请日：2023-08-09

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/28 ,  G06F16/27 ,  G06F16/23 ,  G06F16/22

CPC classification number: G06F16/24573 ,  G06F16/211 ,  G06F16/288 ,  G06F16/27 ,  G06F16/289 ,  G06F16/2365 ,  G06F16/2291 ,  G06F16/212

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a target object identifier. The processor determines a target object associated with the target object identifier. The target object includes a tag value. The processor associates the current tag with the target object. The processor identifies a first child object of the target object. The target object and the first child object are hierarchical objects. In response to determining that the first child object is tag-unassociated, the processor associates the current tag with the first child object. In response to receiving a query including the tag name, the processor generates an output based on the tag name. Other embodiments are also described herein.

公开(公告)号：US20230141984A1

公开(公告)日：2023-05-11

申请号：US18149799

申请日：2023-01-04

Applicant: Snowflake Inc.

Inventor： Khalid Zaman Bijon ,  Damien Carru ,  Christopher Peter Child ,  Eric Karlson ,  Zheng Mi

IPC: H04L67/306 ,  G06F9/54 ,  H04L9/40 ,  G06F21/31 ,  H04L67/02 ,  H04L41/50 ,  H04L41/5041 ,  H04L67/10 ,  H04L67/1097 ,  H04L67/59 ,  H04L67/60

CPC classification number: H04L67/306 ,  G06F9/547 ,  G06F21/31 ,  H04L41/50 ,  H04L41/5041 ,  H04L63/08 ,  H04L63/20 ,  H04L63/102 ,  H04L63/0815 ,  H04L67/02 ,  H04L67/10 ,  H04L67/59 ,  H04L67/60 ,  H04L67/1097

Abstract: Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.

公开(公告)号：US20230062496A1

公开(公告)日：2023-03-02

申请号：US18052990

申请日：2022-11-07

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/28 ,  G06F16/27 ,  G06F16/23 ,  G06F16/22

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.