Data clean rooms using defined access in trusted execution environment

    公开(公告)号:US12235992B2

    公开(公告)日:2025-02-25

    申请号:US18060504

    申请日:2022-11-30

    Applicant: Snowflake Inc.

    Abstract: In an embodiment, an application is created on a data-provider platform. The application includes one or more application programming interfaces (APIs) corresponding to one or more underlying code blocks. Provider data is shared with the application on the data-provider platform. An application instance of the application is installed in a trusted execution environment (TEE). The application instance includes one or more APIs corresponding to the one or more APIs in the application on the data-provider platform. Consumer data is shared with the application instance from a data-consumer platform. One or more of the APIs of the application instance are invoked to execute, on the TEE, respective associated underlying code blocks that are not visible on the TEE. The output of the one or more respective associated underlying code blocks is saved to the data-consumer platform.

    Query plan cache in database systems

    公开(公告)号:US12026160B2

    公开(公告)日:2024-07-02

    申请号:US18300778

    申请日:2023-04-14

    Applicant: Snowflake Inc.

    CPC classification number: G06F16/24542 G06F16/24539

    Abstract: The subject technology receives a query, the query including a set of statements for performing the query. The subject technology populates a compilation context based at least in part the query. The subject technology invokes a compiler to perform a compilation process based on the compilation context. The subject technology performs a lookup operation on a stored plan cache for an exact match based on information from the compilation context. The subject technology, in response to determining an exact match, determines whether the particular query plan requires re-compilation based on a data dependent optimization. The subject technology determines whether a plan cache entry corresponding to the particular query plan includes a data property constraint. The subject technology determines whether the data property constraint still holds based on a set of data properties.

    PROJECTION CONSTRAINT POLICIES IN A DATABASE SYSTEM

    公开(公告)号:US20240176822A1

    公开(公告)日:2024-05-30

    申请号:US18428694

    申请日:2024-01-31

    Applicant: Snowflake Inc.

    CPC classification number: G06F16/90335

    Abstract: A database system facilitates secure data sharing by implementing projection constraints within a query processing framework. Upon receiving a query directed to a shared dataset, the system, utilizing hardware processors, identifies a subset of data within the dataset that is subject to a projection constraint policy. The applicability of the projection constraint is determined based on the context of the query, which is derived from a data sharing agreement. The system processes the query by selectively restricting the projection of data values from constrained columns, while allowing specific operations to be performed on the data. The output generated in response to the query is compliant with the projection constraint policy, providing derived data based on the allowed operations without revealing the actual data values. This ensures the confidentiality of sensitive information while enabling collaborative data analysis and sharing among various users of the database system.

    DATA CLEAN ROOMS USING DEFINED ACCESS IN TRUSTED EXECUTION ENVIRONMENT

    公开(公告)号:US20230401333A1

    公开(公告)日:2023-12-14

    申请号:US18060504

    申请日:2022-11-30

    Applicant: Snowflake Inc.

    CPC classification number: G06F21/6245 G06F21/53 G06F2221/032

    Abstract: In an embodiment, an application is created on a data-provider platform. The application includes one or more application programming interfaces (APIs) corresponding to one or more underlying code blocks. Provider data is shared with the application on the data-provider platform. An application instance of the application is installed in a trusted execution environment (TEE). The application instance includes one or more APIs corresponding to the one or more APIs in the application on the data-provider platform. Consumer data is shared with the application instance from a data-consumer platform. One or more of the APIs of the application instance are invoked to execute, on the TEE, respective associated underlying code blocks that are not visible on the TEE. The output of the one or more respective associated underlying code blocks is saved to the data-consumer platform.

    QUERY PLAN CACHE IN DATABASE SYSTEMS
    90.
    发明公开

    公开(公告)号:US20230325386A1

    公开(公告)日:2023-10-12

    申请号:US18300778

    申请日:2023-04-14

    Applicant: Snowflake Inc.

    CPC classification number: G06F16/24542 G06F16/24539

    Abstract: The subject technology receives a query, the query including a set of statements for performing the query. The subject technology populates a compilation context based at least in part the query. The subject technology invokes a compiler to perform a compilation process based on the compilation context. The subject technology performs a lookup operation on a stored plan cache for an exact match based on information from the compilation context. The subject technology, in response to determining an exact match, determines whether the particular query plan requires re-compilation based on a data dependent optimization. The subject technology determines whether a plan cache entry corresponding to the particular query plan includes a data property constraint. The subject technology determines whether the data property constraint still holds based on a set of data properties.

Patent Agency Ranking