DIRECTING QUERIES TO ENCRYPTED DATABASE FILES

    公开(公告)号:US20230205912A1

    公开(公告)日:2023-06-29

    申请号:US18111821

    申请日:2023-02-20

    申请人: Snowflake Inc.

    IPC分类号: G06F21/62 G06F21/60

    摘要: A method for directing queries to encrypted database files includes acquiring a mapping that links a first encrypted file with a different encrypted file. The first encrypted file is generated based on a first encryption key. The method includes generating, by one or more processors based on the mapping, an updated mapping to link a second encrypted file with the different encrypted file. The second encrypted file is generated based on a second encryption key. The method includes determining an arrival time of a query. The method includes directing, based on the arrival time, the query to the first encrypted file or the second encrypted file.

    Multi-cluster warehouse
    2.
    发明授权

    公开(公告)号:US11615117B2

    公开(公告)日:2023-03-28

    申请号:US15582071

    申请日:2017-04-28

    申请人: Snowflake Inc.

    摘要: A method for a multi-cluster warehouse includes allocating a plurality of compute clusters as part of a virtual warehouse. The compute clusters are used to access and perform queries against one or more databases in one or more cloud storage resources. The method includes providing queries for the virtual warehouse to each of the plurality of compute clusters. Each of the plurality of compute clusters of the virtual warehouse receives a plurality of queries so that the computing load is spread across the different clusters. The method also includes dynamically adding compute clusters to and removing compute clusters from the virtual warehouse as needed based on a workload of the plurality of compute clusters.

    Multi-cluster warehouse
    4.
    发明授权

    公开(公告)号:US11593403B2

    公开(公告)日:2023-02-28

    申请号:US16823124

    申请日:2020-03-18

    申请人: Snowflake Inc.

    摘要: A method for a multi-cluster warehouse includes allocating processing units as part of a data warehouse. The processing units access data within one or more databases in cloud storage resources. The method also includes providing one or more queries to each processing unit within the data warehouse. In response to the queries, each processing unit performs database operations on a particular portion of a database table. The method also includes monitoring a workload of the processing units to determine that a processing capacity of the processing units has reached a threshold processing capacity. The method also includes dynamically adding additional processing units to and removing processing units from the data warehouse as needed based on a workload of the processing units.

    SECURE DATA SHARING IN A MULTI-TENANT DATABASE SYSTEM

    公开(公告)号:US20220114277A1

    公开(公告)日:2022-04-14

    申请号:US17559226

    申请日:2021-12-22

    申请人: SNOWFLAKE INC.

    摘要: Systems, methods, and devices for implementing secure views for zero-copy data sharing in a multi-tenant database system are disclosed. A method includes receiving, by a cross-account, a grant to access a share object comprising a secure view and usage functionality associated with a secure user-defined function (UDF) to underlying data. The method includes accessing, by the cross-account, the share object using the grant. The method includes sending a request to a share component to cause the share component to implement the secure view and the usage functionality associated with the secure UDF. The method includes sending a query to the share component to cause the share component to implement the secure UDF.

    DATA SHARING USING ALIAS OBJECTS
    7.
    发明申请

    公开(公告)号:US20210312070A1

    公开(公告)日:2021-10-07

    申请号:US17354972

    申请日:2021-06-22

    申请人: SNOWFLAKE INC.

    IPC分类号: G06F21/62 G06F16/25

    摘要: A method of sharing data in a multi-tenant database includes generating a share object in a first account comprising a share role. The method includes associating one or more access rights with the share role, wherein the one or more access rights indicate which objects in the first account are accessible based on the share object. The method includes granting, to a second account, cross-account access rights to the share role or share object in the first account. The method includes receiving a request from the second account to access data or services of the first account. The method further includes providing a response to the second account based on the data or services of the first account.

    MULTI-CLUSTER WAREHOUSE
    8.
    发明申请

    公开(公告)号:US20210089560A1

    公开(公告)日:2021-03-25

    申请号:US17118201

    申请日:2020-12-10

    申请人: SNOWFLAKE INC.

    摘要: A method for a multi-cluster warehouse includes allocating a plurality of compute clusters as part of a virtual warehouse. The compute clusters are used to access and perform queries against one or more databases in one or more cloud storage resources. The method includes providing queries for the virtual warehouse to each of the plurality of compute clusters. Each of the plurality of compute clusters of the virtual warehouse receives a plurality of queries so that the computing load is spread across the different clusters. The method also includes dynamically adding compute clusters to and removing compute clusters from the virtual warehouse as needed based on a workload of the plurality of compute clusters.

    DATA SHARING IN A MULTI-TENANT DATABASE SYSTEM

    公开(公告)号:US20200257817A1

    公开(公告)日:2020-08-13

    申请号:US16833482

    申请日:2020-03-27

    申请人: Snowflake Inc.

    IPC分类号: G06F21/62 G06F16/25

    摘要: A method for sharing data in a multi-tenant database includes generating a share object in a first account comprising a share role. The method includes associating one or more access rights with the share role, wherein the one or more access rights indicate which objects in the first account are accessible based on the share object. The method includes granting, to a second account, cross-account access rights to the share role or share object in the first account. The method includes receiving a request from the second account to access data or services of the first account. The method further includes providing a response to the second account based on the data or services of the first account.

    External credential-less stages for data warehouse integrations

    公开(公告)号:US10715524B1

    公开(公告)日:2020-07-14

    申请号:US16683641

    申请日:2019-11-14

    申请人: Snowflake Inc.

    IPC分类号: H04L29/06 G06F16/25

    摘要: A storage integration object is created in a database of a data warehouse system. The storage integration object identifies a storage location in a storage platform of a cloud storage provider system and a cloud identity object maintained by a network-based data warehouse system. The cloud identity object is associated, at the storage platform of the cloud storage provider, with a proxy identity object granted permission to access the storage location. An external stage object is created based on the storage integration object. The external stage object identifies the storage location and includes an association with the storage integration object. A command to load or unload data at the storage location is received. In response to the command, the data is loaded or unloaded, via the proxy identity object, at the storage location using the external stage object.