Secure message exchange between deployments

    公开(公告)号:US12101294B2

    公开(公告)日:2024-09-24

    申请号:US18341954

    申请日:2023-06-27

    申请人: Snowflake Inc.

    IPC分类号: H04L9/40

    摘要: Different database deployments, or other data system deployments, may want to communicate with each other without sacrificing security or control. To this end, embodiments of the present disclosure may provide secure message exchange techniques for a source and/or target deployment. Configurable rule sets may be stored in the deployments; the rule sets may define what messages may be communicated between deployments. The deployments may implement a selective filtering scheme in one or more stages based on the rule sets to filter outgoing and/or incoming messages.

    SHARE-BASED REPLICATION
    2.
    发明公开

    公开(公告)号:US20240176711A1

    公开(公告)日:2024-05-30

    申请号:US18329348

    申请日:2023-06-05

    申请人: Snowflake Inc.

    IPC分类号: G06F11/20 G06F16/25 G06F16/27

    摘要: The subject technology determines a set of share objects in a replication group. The subject technology, for each object from the set of share objects, determines a set of permissions for a set of objects of databases that has been granted to each share object from the replication group. The subject technology, for each permission from the set of permissions, determines a set of dependencies, the set of dependencies comprising a second set of objects. The subject technology generates a graph structure based at least in part on the set of share objects, the set of permissions, and the set of dependencies. The subject technology traverses at least a portion of the graph structure to determine a final set of dependencies for replication. The subject technology performs a replication process based at least in part on the final set of dependencies.

    SECURE MESSAGE EXCHANGE BETWEEN DEPLOYMENTS

    公开(公告)号:US20210281544A1

    公开(公告)日:2021-09-09

    申请号:US17156072

    申请日:2021-01-22

    申请人: Snowflake Inc.

    IPC分类号: H04L29/06

    摘要: Different database deployments, or other data system deployments, may want to communicate with each other without sacrificing security or control. To this end, embodiments of the present disclosure may provide secure message exchange techniques for a source and/or target deployment. Configurable rule sets may be stored in the deployments; the rule sets may define what messages may be communicated between deployments. The deployments may implement a selective filtering scheme in one or more stages based on the rule sets to filter outgoing and/or incoming messages.

    Message-based database replication

    公开(公告)号:US10999261B1

    公开(公告)日:2021-05-04

    申请号:US17086261

    申请日:2020-10-30

    申请人: Snowflake Inc.

    IPC分类号: H04L29/06 H04L9/30 G06F16/27

    摘要: A networked device communication system can configure network devices (e.g., a primary and secondary database) to send and receive sequences of messages, such as replicated data, using one or more keypairs and wrapping keys. The sequences of messages can include an initial set of messages that are encrypted by a wrapping key, and further include another set of messages that are encrypted by a replaced staggered key. The sequence of messages can be configured to be decrypted without exporting keys of hardware security modules.

    Secure message exchange between deployments

    公开(公告)号:US10938780B1

    公开(公告)日:2021-03-02

    申请号:US16809209

    申请日:2020-03-04

    申请人: Snowflake Inc.

    IPC分类号: H04L29/06

    摘要: Different database deployments, or other data system deployments, may want to communicate with each other without sacrificing security or control. To this end, embodiments of the present disclosure may provide secure message exchange techniques for a source and/or target deployment. Configurable rule sets may be stored in the deployments; the rule sets may define what messages may be communicated between deployments. The deployments may implement a selective filtering scheme in one or more stages based on the rule sets to filter outgoing and/or incoming messages.

    Load history calculation in internal stage replication

    公开(公告)号:US11983165B1

    公开(公告)日:2024-05-14

    申请号:US18128212

    申请日:2023-03-29

    申请人: Snowflake Inc.

    摘要: Embodiments of the present disclosure provide techniques for deduplicating files during internal stage replication using a directory table of the replicated internal stage that is modified as a cache for storing and retrieving original file-level metadata for the replicated files. An initial list of candidate files for loading from the internal stage to a table of the target deployment is prepared based on the files listed in the internal stage, and refined using a directory table lookup. If there is any inconsistency between the files registered in the directory table and the files listed in the internal stage, the target deployment will inspect the user-defined file-level metadata to obtain original file-level metadata for each file that is present in the internal stage but not in the directory table. This information may be used during deduplication to ensure that no duplicate files are loaded.