-
公开(公告)号:US12001552B1
公开(公告)日:2024-06-04
申请号:US18168852
申请日:2023-02-14
Applicant: Snowflake Inc.
Inventor: Damien Carru , Pui Kei Johnston Chu , Benoit Dageville , Iulia Ion , Unmesh Jagtap , Subramanian Muralidhar , James Pan , Nihar Pasala , Hrushikesh Shrinivas Paralikar , Jake Tsuyemura , Ryan Charles Quistorff , Rishabh Gupta
CPC classification number: G06F21/565 , G06F8/60 , G06F2221/033
Abstract: An anti-abuse system is provided for a data-platform. An anti-abuse scanner of the data-platform detects a creation of an application package by a provider of content to the data platform where the application package includes a set of files for deployment on the data platform. The anti-abuse scanner performs a review of the set of files to detect malicious content where the review is based on a set of analysis rules and generates a deployment decision for the application package based on a result of the review.
-
公开(公告)号:US11973748B1
公开(公告)日:2024-04-30
申请号:US18497232
申请日:2023-10-30
Applicant: Snowflake Inc.
Inventor: Damien Carru , Thierry Cruanes , Jiaqi Yan
IPC: H04L9/40
CPC classification number: H04L63/0807
Abstract: Techniques for sharing query results in a multi-tenant database system are described. The query results can be shared between users of the same account or organization in the multi-tenant network-based database system using security tokens. A first user executes a query, and the results are stored in the network-based database system. The first user can invoke a function to create a security token to provide access to the stored query results to other users in the same account. The first user can share the security token with the other users, who can directly access the stored results in the network-based database system instead of having to download local copies of the query results.
-
公开(公告)号:US11921876B1
公开(公告)日:2024-03-05
申请号:US18334864
申请日:2023-06-14
Applicant: Snowflake Inc.
Inventor: Christine A. Avanessians , Damien Carru , Ramachandran Natarajan Iyer , Eric Karlson , Dennis Edgar Lynch
CPC classification number: G06F21/6218 , G06F21/31
Abstract: Provided herein are systems and methods for global data objects on a data platform where the global data objects are accessible at an organization level. In particular, an organization-level global data object provided by various embodiments can be used as a generic organization object that is owned by a specific organization, and can be managed (e.g., created, deleted, or modified) by use of a leader-based model.
-
公开(公告)号:US20240062197A1
公开(公告)日:2024-02-22
申请号:US18198220
申请日:2023-05-16
Applicant: Snowflake Inc.
Inventor: Damien Carru , Pui Kei Johnston Chu , Tyson J. Hamilton , Unmesh Jagtap , Xiaodi Ke , Haroldo Level , Subramanian Muralidhar , James Pan , Steven Parkes , Xie Xu
CPC classification number: G06Q20/3829 , H04L63/0428
Abstract: Disclosed is an execution information sharing system that writes execution information to a provider target (and other targets) in a secure manner. Execution information generated by an application may be written to a consumer stage, wherein the application is shared by a provider account of a data exchange with a consumer account that executes the application. A consumer exchange service (ES) of the data exchange may send a request to a copy service of the data exchange to copy the execution information from the consumer stage to the provider stage, wherein the consumer ES is a part of the data exchange and is protected from actions of the consumer account. A copy operation may be executed to copy the execution information from the consumer stage to the provider stage using the copy service of the data exchange. The execution information is ingested from the provider stage to a provider table.
-
公开(公告)号:US20240061730A1
公开(公告)日:2024-02-22
申请号:US18243609
申请日:2023-09-07
Applicant: Snowflake Inc.
Inventor: Damien Carru , Pui Kei Johnston Chu , Unmesh Jagtap , Xiaodi Ke , Haroldo Level , Subramanian Muralidhar , James Pan , Steven Parkes , Xie Xu
CPC classification number: G06F9/542 , G06F16/254
Abstract: Disclosed is an execution information sharing system that duplicates execution information to a provider target (and other targets) as it is being loaded to a consumer target. A first log information object and a second log information object are generated. The first and second log information objects comprise information indicating a consumer target and information indicating a provider target respectively where execution information generated by an application shared with a consumer account of a data exchange is written. A first event unloader and a second event unloader are generated based on the first and second log information objects respectively, wherein the first and second event unloaders are both linked to the application using a mapping. In response to receiving execution information from the application, the execution information is forwarded to the consumer target and the provider target using the first event unloader and the second event unloader respectively.
-
公开(公告)号:US11886872B1
公开(公告)日:2024-01-30
申请号:US18169812
申请日:2023-02-15
Applicant: Snowflake Inc.
Inventor: Karol Pawel Bienkowski , Damien Carru , Jeremy Yujui Chen , Pui Kei Johnston Chu , Benoit Dageville , Scott C. Gray , Unmesh Jagtap , Subramanian Muralidhar
CPC classification number: G06F8/71 , G06F9/4488
Abstract: An in-database application package and application instance for a data platform. The data platform creates an application instance of an application package having a versioned schema, creates one or more system roles for the application instance, creates a user role and an administrator role for the application instance, creates one or more objects of the application instance based on a versioned schema, and grants one or more use privileges to the one or more roles. Application instances of the application package are upgraded or patched on the data platform based on application package versions. To ensure a proper upgrade or patch, the data platform tracks versions of executing objects of application instances in a call context.
-
公开(公告)号:US20230367896A1
公开(公告)日:2023-11-16
申请号:US18359360
申请日:2023-07-26
Applicant: Snowflake Inc.
Inventor: Damien Carru , Thierry Cruanes , Subramanian Muralidhar , Nicola Dan Onose , Ryan Michael Thomas Shelly , Brian Smith , Jaeyun Noh
IPC: G06F21/62 , G06F16/248 , H04L9/32 , H04L9/40 , G06F16/245
CPC classification number: G06F21/6227 , G06F16/248 , H04L9/3213 , H04L63/102 , H04L63/105 , G06F16/245
Abstract: Techniques described herein can allow users to share cached results of an original query with other users while protecting sensitive information. The techniques described herein can check whether the other users have access to the underlying data queried before allowing those users to see the stored query results. That is, the system may perform privilege checks on the shared users before giving them access to the stored query results but without having to re-run the original query.
-
公开(公告)号:US20230273905A1
公开(公告)日:2023-08-31
申请号:US18068998
申请日:2022-12-20
Applicant: Snowflake Inc.
Inventor: Damien Carru , Benoit Dageville , Subramanian Muralidhar , Eric Robinson , Sahaj Saini , David Schultz
CPC classification number: G06F16/212 , G06F16/285 , G06F21/6245
Abstract: Techniques for creating, sharing, and using bundles (also referred to as packages) in a multi-tenant database are described herein. A bundle is a schema object with associated hidden schemas. A bundle can be created by a provider user and can be shared with a plurality of consumer users. The bundle can be used to enable code sharing and distribution without losing control while maintaining security protocols.
-
公开(公告)号:US20230195922A1
公开(公告)日:2023-06-22
申请号:US18109191
申请日:2023-02-13
Applicant: Snowflake Inc.
Inventor: Damien Carru , Pui Kei Johnston Chu , Benoit Dageville , Shreyas Narendra Desai , Subramanian Muralidhar , Bowen Zhang
CPC classification number: G06F21/6218 , G06F16/256 , G06F16/21 , G06F2221/2141
Abstract: Embodiments of the present disclosure relate to sharing database roles using hidden roles. A database role may be generated within a database container having a plurality of data objects, wherein the database role exists exclusively within the database container. A set of grants to a particular subset of the plurality of data objects of the database container may be assigned to the database role and the database role may be granted to the share object. The share object is mounted within a consumer account to generate an imported database container within the consumer account, the imported database container including an imported copy of the database role. The imported copy of the database role may be granted to each of one or more account level roles of the consumer account to share the particular subset of the plurality of data objects without creating proxy objects in the consumer account that represent the particular subset of the plurality of data objects.
-
公开(公告)号:US20230141984A1
公开(公告)日:2023-05-11
申请号:US18149799
申请日:2023-01-04
Applicant: Snowflake Inc.
Inventor: Khalid Zaman Bijon , Damien Carru , Christopher Peter Child , Eric Karlson , Zheng Mi
IPC: H04L67/306 , G06F9/54 , H04L9/40 , G06F21/31 , H04L67/02 , H04L41/50 , H04L41/5041 , H04L67/10 , H04L67/1097 , H04L67/59 , H04L67/60
CPC classification number: H04L67/306 , G06F9/547 , G06F21/31 , H04L41/50 , H04L41/5041 , H04L63/08 , H04L63/20 , H04L63/102 , H04L63/0815 , H04L67/02 , H04L67/10 , H04L67/59 , H04L67/60 , H04L67/1097
Abstract: Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.
-
-
-
-
-
-
-
-
-