-
公开(公告)号:US20250013776A1
公开(公告)日:2025-01-09
申请号:US18894162
申请日:2024-09-24
Applicant: Snowflake Inc.
Inventor: Artin Avanes , Khalid Zaman Bijon , Zheng Mi , Subramanian Muralidhar , David Schultz , Jian Xu
Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.
-
公开(公告)号:US12061717B2
公开(公告)日:2024-08-13
申请号:US18062656
申请日:2022-12-07
Applicant: Snowflake Inc.
Inventor: Artin Avanes , Khalid Zaman Bijon , Damien Carru , Thierry Cruanes , Vikas Jain , Zheng Mi , Subramanian Muralidhar
CPC classification number: G06F21/6227 , G06F16/221 , G06F16/2282 , G06F16/248 , G06F16/252 , G06F16/27
Abstract: A shared database platform implements dynamic masking on data shared between users where specific data is masked, transformed, or otherwise modified based on preconfigured functions that are associated with user roles. The shared database platform can implement the masking at runtime dynamically in response to users requesting access to a database object that is associated with one or more masking policies.
-
公开(公告)号:US20240176822A1
公开(公告)日:2024-05-30
申请号:US18428694
申请日:2024-01-31
Applicant: Snowflake Inc.
Inventor: Khalid Zaman Bijon , Thierry Cruanes , Simon Holm Jensen , Allison Waingold Lee , Daniel N. Meredith , Subramanian Muralidhar , David Schultz , Zixi Zhang
IPC: G06F16/903
CPC classification number: G06F16/90335
Abstract: A database system facilitates secure data sharing by implementing projection constraints within a query processing framework. Upon receiving a query directed to a shared dataset, the system, utilizing hardware processors, identifies a subset of data within the dataset that is subject to a projection constraint policy. The applicability of the projection constraint is determined based on the context of the query, which is derived from a data sharing agreement. The system processes the query by selectively restricting the projection of data values from constrained columns, while allowing specific operations to be performed on the data. The output generated in response to the query is compliant with the projection constraint policy, providing derived data based on the allowed operations without revealing the actual data values. This ensures the confidentiality of sensitive information while enabling collaborative data analysis and sharing among various users of the database system.
-
公开(公告)号:US20230032281A1
公开(公告)日:2023-02-02
申请号:US17659797
申请日:2022-04-19
Applicant: Snowflake Inc.
Inventor: Raja Suresh Krishna Balakrishnan , Khalid Zaman Bijon , Subramanian Muralidhar , David Schultz , Jian Xu
IPC: G06F16/242 , G06F16/23 , G06F16/22 , G06F16/21 , G06F16/2453
Abstract: Aspects of the present disclosure address systems, methods, and devices for tracking object dependencies in a cloud database system. An object dependency created between a referencing object and a referenced object is detected. Based on detecting the object dependency, a dependency record is generated. The dependency record includes dependency information describing the object dependency between the reference object and the referenced object. The dependency record is stored in a database of dependency records.
-
公开(公告)号:US11349952B2
公开(公告)日:2022-05-31
申请号:US17345101
申请日:2021-06-11
Applicant: Snowflake Inc.
Inventor: Khalid Zaman Bijon , Damien Carru , Christopher Peter Child , Eric Karlson , Zheng Mi
IPC: H04L67/306 , H04L67/59 , G06F9/54 , H04L9/40 , G06F21/31 , H04L67/02 , H04L41/50 , H04L67/60 , H04L41/5041 , H04L67/10 , H04L67/1097
Abstract: Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.
-
公开(公告)号:US20220021746A1
公开(公告)日:2022-01-20
申请号:US17345101
申请日:2021-06-11
Applicant: Snowflake Inc.
Inventor: Khalid Zaman Bijon , Damien Carru , Christopher Peter Child , Eric Karlson , Zheng Mi
Abstract: Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.
-
公开(公告)号:US11057491B1
公开(公告)日:2021-07-06
申请号:US16931808
申请日:2020-07-17
Applicant: Snowflake Inc.
Inventor: Khalid Zaman Bijon , Damien Carru , Christopher Peter Child , Eric Karlson , Zheng Mi
Abstract: Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.
-
公开(公告)号:US20240362355A1
公开(公告)日:2024-10-31
申请号:US18647728
申请日:2024-04-26
Applicant: Snowflake Inc.
Inventor: Khalid Zaman Bijon , Monica J. Holboke , Stephen Joe Jonany , David Schultz
IPC: G06F21/62 , G06F16/2455
CPC classification number: G06F21/6227 , G06F16/24556 , G06F16/24565
Abstract: A noisy aggregation constraint system receives a query for a shared dataset, where the query identifies an operation. The noisy aggregation constraint system accesses a set of data from the shared dataset to perform the operation, the set of data comprises data accessed from a table of the shared dataset. The system determines that an aggregation constraint policy is attached to the table, the policy restricts output of data values stored in the table. Based on the context of the query, the system determines that the aggregation constraint policy should be enforced in relation to the query. The system assigns a specified noise level to the shared dataset and generates an output based on the set of data and the operation; the output comprises data values added to the table based on the specified noise level.
-
公开(公告)号:US20240346173A1
公开(公告)日:2024-10-17
申请号:US18756769
申请日:2024-06-27
Applicant: Snowflake Inc.
Inventor: Artin Avanes , Khalid Zaman Bijon , Damien Carru , Thierry Cruanes , Vikas Jain , Zheng Mi , Subramanian Muralidhar
IPC: G06F21/62 , G06F16/22 , G06F16/248 , G06F16/25 , G06F16/27
CPC classification number: G06F21/6227 , G06F16/221 , G06F16/2282 , G06F16/248 , G06F16/252 , G06F16/27
Abstract: A shared database platform implements dynamic masking on data shared between users where specific data is masked, transformed, or otherwise modified based on preconfigured functions that are associated with user roles. The shared database platform can implement the masking at runtime dynamically in response to users requesting access to a database object that is associated with one or more masking policies.
-
公开(公告)号:US20240064210A1
公开(公告)日:2024-02-22
申请号:US18497720
申请日:2023-10-30
Applicant: Snowflake Inc.
Inventor: Khalid Zaman Bijon , Damien Carru , Christopher Peter Child , Eric Karlson , Zheng Mi
IPC: H04L67/306 , G06F9/54 , H04L9/40 , G06F21/31 , H04L67/02 , H04L41/50 , H04L41/5041 , H04L67/10 , H04L67/1097 , H04L67/59 , H04L67/60
CPC classification number: H04L67/306 , G06F9/547 , H04L63/08 , G06F21/31 , H04L67/02 , H04L41/50 , H04L63/20 , H04L63/0815 , H04L41/5041 , H04L67/10 , H04L67/1097 , H04L63/102 , H04L67/59 , H04L67/60
Abstract: Embodiments of the present disclosure may provide a streamlined process for performing operations, such as data sharing and data replication, using multiple accounts. A global identity (also referred to as an organization user) may be employed, where the global identity may have access to multiple accounts across the same or different deployments. The global identity may switch between accounts from its login session and perform various tasks in the context of different accounts without undergoing further authentication.
-
-
-
-
-
-
-
-
-