Token-based secure database query result sharing

    公开(公告)号:US11973748B1

    公开(公告)日:2024-04-30

    申请号:US18497232

    申请日:2023-10-30

    Applicant: Snowflake Inc.

    CPC classification number: H04L63/0807

    Abstract: Techniques for sharing query results in a multi-tenant database system are described. The query results can be shared between users of the same account or organization in the multi-tenant network-based database system using security tokens. A first user executes a query, and the results are stored in the network-based database system. The first user can invoke a function to create a security token to provide access to the stored query results to other users in the same account. The first user can share the security token with the other users, who can directly access the stored results in the network-based database system instead of having to download local copies of the query results.

    SHARING EVENTS AND OTHER METRICS IN NATIVE APPLICATIONS

    公开(公告)号:US20240062197A1

    公开(公告)日:2024-02-22

    申请号:US18198220

    申请日:2023-05-16

    Applicant: Snowflake Inc.

    CPC classification number: G06Q20/3829 H04L63/0428

    Abstract: Disclosed is an execution information sharing system that writes execution information to a provider target (and other targets) in a secure manner. Execution information generated by an application may be written to a consumer stage, wherein the application is shared by a provider account of a data exchange with a consumer account that executes the application. A consumer exchange service (ES) of the data exchange may send a request to a copy service of the data exchange to copy the execution information from the consumer stage to the provider stage, wherein the consumer ES is a part of the data exchange and is protected from actions of the consumer account. A copy operation may be executed to copy the execution information from the consumer stage to the provider stage using the copy service of the data exchange. The execution information is ingested from the provider stage to a provider table.

    SHARING EVENTS AND OTHER METRICS IN NATIVE APPLICATIONS

    公开(公告)号:US20240061730A1

    公开(公告)日:2024-02-22

    申请号:US18243609

    申请日:2023-09-07

    Applicant: Snowflake Inc.

    CPC classification number: G06F9/542 G06F16/254

    Abstract: Disclosed is an execution information sharing system that duplicates execution information to a provider target (and other targets) as it is being loaded to a consumer target. A first log information object and a second log information object are generated. The first and second log information objects comprise information indicating a consumer target and information indicating a provider target respectively where execution information generated by an application shared with a consumer account of a data exchange is written. A first event unloader and a second event unloader are generated based on the first and second log information objects respectively, wherein the first and second event unloaders are both linked to the application using a mapping. In response to receiving execution information from the application, the execution information is forwarded to the consumer target and the provider target using the first event unloader and the second event unloader respectively.

    FINE-GRAINED ACCESS CONTROL VIA DATABASE ROLES

    公开(公告)号:US20230195922A1

    公开(公告)日:2023-06-22

    申请号:US18109191

    申请日:2023-02-13

    Applicant: Snowflake Inc.

    CPC classification number: G06F21/6218 G06F16/256 G06F16/21 G06F2221/2141

    Abstract: Embodiments of the present disclosure relate to sharing database roles using hidden roles. A database role may be generated within a database container having a plurality of data objects, wherein the database role exists exclusively within the database container. A set of grants to a particular subset of the plurality of data objects of the database container may be assigned to the database role and the database role may be granted to the share object. The share object is mounted within a consumer account to generate an imported database container within the consumer account, the imported database container including an imported copy of the database role. The imported copy of the database role may be granted to each of one or more account level roles of the consumer account to share the particular subset of the plurality of data objects without creating proxy objects in the consumer account that represent the particular subset of the plurality of data objects.

Patent Agency Ranking