Systems, methods, and devices for encrypting database data

    公开(公告)号:US11188674B2

    公开(公告)日:2021-11-30

    申请号:US17228379

    申请日:2021-04-12

    Applicant: Snowflake Inc.

    Abstract: A method for encrypting database data includes generating an encryption key for a first file stored in a data store, wherein a table in a database comprises an entry pointing to the first file. The method includes generating a second file by encrypting the data the first file in the data store using the encryption key without modifying the first file. The method includes, in response to generating the second file, modifying the entry in the table to point to the second file, wherein the modification of the entry is performed atomically. A process for rekeying from the first file to the second file may happen in the background without blocking, interfering, or otherwise obstructing user interaction with a database system.

    Systems, Methods, and Devices for Encrypting Database Data

    公开(公告)号:US20210256153A1

    公开(公告)日:2021-08-19

    申请号:US17228379

    申请日:2021-04-12

    Applicant: Snowflake Inc.

    Abstract: A method for encrypting database data includes generating an encryption key for a first file stored in a data store, wherein a table in a database comprises an entry pointing to the first file. The method includes generating a second file by encrypting the data the first file in the data store using the encryption key without modifying the first file. The method includes, in response to generating the second file, modifying the entry in the table to point to the second file, wherein the modification of the entry is performed atomically. A process for rekeying from the first file to the second file may happen in the background without blocking, interfering, or otherwise obstructing user interaction with a database system.

    DIRECTING QUERIES TO DATABASE FILES

    公开(公告)号:US20250053680A1

    公开(公告)日:2025-02-13

    申请号:US18928687

    申请日:2024-10-28

    Applicant: Snowflake Inc.

    Abstract: A method of preventing queries from accessing database files based on metadata. The method includes determining a first metadata associated with a particular file and a second metadata associated with a changed version of the particular file. The method includes directing, based on the first metadata associated with the particular file, a first query for the particular file to a first file that is associated with the particular file. The method includes preventing a second query for the particular file from accessing the particular file by directing, based on the second metadata associated with the changed version of the particular file, the second query to the changed version of the particular file instead of the particular file.

    Directing queries to encrypted database files

    公开(公告)号:US12158970B2

    公开(公告)日:2024-12-03

    申请号:US18111821

    申请日:2023-02-20

    Applicant: Snowflake Inc.

    Abstract: A method for directing queries to encrypted database files includes acquiring a mapping that links a first encrypted file with a different encrypted file. The first encrypted file is generated based on a first encryption key. The method includes generating, by one or more processors based on the mapping, an updated mapping to link a second encrypted file with the different encrypted file. The second encrypted file is generated based on a second encryption key. The method includes directing, using the mapping, a first query to the first encrypted file when the first query arrives before generating the updated mapping; and. The method includes directing, using the updated mapping, a second query to the second encrypted file when a second query arrives after generating the updated mapping.

Patent Agency Ranking