Projection constraints in a query processing system

    公开(公告)号:US11928157B2

    公开(公告)日:2024-03-12

    申请号:US17934814

    申请日:2022-09-23

    Applicant: Snowflake Inc.

    CPC classification number: G06F16/90335

    Abstract: A constraint system enforces projection constraints on data values stored in specified columns of a shared dataset when queries are received by a database system. A projection constraint identifies that the data in a column may be restricted from being projected (e.g., presented, read, outputted) in an output to a received query, while allowing specified operations to be performed on the data and a corresponding output to be provided. For example, the projection constraint may indicate a context for a query that triggers the constraint, such as based on the user that submitted the query. Enforcing projection constraints on queries received at the database system allows for data to be shared and used anonymously by entities to perform various operations without the need to tokenize the data.

    USER DEFINED FUNCTION MEMOIZATION
    23.
    发明公开

    公开(公告)号:US20240028591A1

    公开(公告)日:2024-01-25

    申请号:US18477694

    申请日:2023-09-29

    Applicant: Snowflake Inc

    CPC classification number: G06F16/24539 G06F21/53 G06F2221/034

    Abstract: A data platform that implements memoizable functions for database objects. The data platform detects a first execution of a memoizable function and generates a first key based on metadata of one or more database objects operated on by the memoizable function and generates a first result for the memoizable function based on the one or more database objects. The data platform detects a second execution of the memoizable function and generates a second key based on the metadata of the one or more database objects operated on by the memoizable function. When the first key and the second key are equal, the data platform reuses the first result of the memoizable function. When the first key and second key do not match, the data platform generates a second result for the second execution of the memoizable function.

    Data clean rooms using defined access

    公开(公告)号:US11803432B1

    公开(公告)日:2023-10-31

    申请号:US18051457

    申请日:2022-10-31

    Applicant: Snowflake Inc.

    CPC classification number: G06F9/547 G06F9/541 G06F16/2456 G06F21/6254

    Abstract: In an embodiment, a data platform creates an application in a data-provider account. The application includes one or more APIs corresponding to one or more underlying code blocks. The data platform shares provider data with the application in the data-provider account, and also installs, in a data-consumer account, an application instance of the application. The application instance includes one or more APIs corresponding to the one or more APIs in the application in the data-provider account. The data platform shares consumer data with the application instance in the data-consumer account, and invokes one or more of the APIs of the application instance to execute respective associated underlying code blocks, which are not visible to the data-consumer account. The data platform also saves output of the one or more respective associated underlying code blocks locally within the data-consumer account.

    DATA CLEAN ROOMS USING DEFINED ACCESS WITH HOMOMORPHIC ENCRYPTION

    公开(公告)号:US20230177210A1

    公开(公告)日:2023-06-08

    申请号:US18162506

    申请日:2023-01-31

    Applicant: Snowflake Inc.

    CPC classification number: G06F21/6245 G06F21/53 G06F2221/032

    Abstract: A data platform creates an application in a data-provider account, where the application includes one or more application programming interfaces (APIs) corresponding to one or more underlying code blocks. The data platform shares homomorphically encrypted provider data with the application in the data-provider account. The data platform installs, in a data-consumer account, an application instance of the application. The data platform shares homomorphically encrypted consumer data with the application instance in the data-consumer account. The data platform invokes one or more of the APIs of the application instance to execute respective associated underlying code blocks, which are not visible to the data-consumer account, and which operate on the shared homomorphically encrypted provider data and the shared homomorphically encrypted consumer data. The data platform saves homomorphically encrypted output of the one or more respective associated underlying code blocks locally within the data-consumer account.

    ROW-LEVEL SECURITY
    29.
    发明申请

    公开(公告)号:US20230022027A1

    公开(公告)日:2023-01-26

    申请号:US17936681

    申请日:2022-09-29

    Applicant: Snowflake Inc.

    Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.

    SYSTEM FOR IMPLEMENTING AN OBJECT SHARING FRAMEWORK

    公开(公告)号:US20220197912A1

    公开(公告)日:2022-06-23

    申请号:US17689463

    申请日:2022-03-08

    Applicant: Snowflake Inc.

    Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

Patent Agency Ranking