公开(公告)号：US20220138206A1

公开(公告)日：2022-05-05

申请号：US17102156

申请日：2020-11-23

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/28 ,  G06F16/22 ,  G06F16/21

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a target object identifier. The processor determines a target object associated with the target object identifier. The target object includes a tag value. The processor associates the current tag with the target object. The processor identifies a first child object of the target object. The target object and the first child object are hierarchical objects. In response to determining that the first child object is tag-unassociated, the processor associates the current tag with the first child object. In response to receiving a query including the tag name, the processor generates an output based on the tag name. Other embodiments are also described herein.

公开(公告)号：US12222949B2

公开(公告)日：2025-02-11

申请号：US18545672

申请日：2023-12-19

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/22 ,  G06F16/23 ,  G06F16/27 ,  G06F16/28

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

公开(公告)号：US12135815B2

公开(公告)日：2024-11-05

申请号：US18521589

申请日：2023-11-28

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz ,  Jian Xu

IPC: G06F21/62 ,  G06F16/22 ,  G06F21/60

Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.

公开(公告)号：US20240303373A1

公开(公告)日：2024-09-12

申请号：US18345971

申请日：2023-06-30

Applicant: Snowflake Inc.

Inventor： Khalid Zaman Bijon ,  Bowei Chen ,  Thierry Cruanes ,  Simon Holm Jensen ,  Allison Waingold Lee ,  Valentin K. Kuznetsov ,  Jun Li ,  Subramanian Muralidhar ,  Carl Yates Perry ,  David Schultz ,  Zixi Zhang

IPC: G06F21/62 ,  G06F16/242

CPC classification number: G06F21/6245 ,  G06F16/244 ,  G06F2221/2113

Abstract: The cloud data platform receives a first query directed towards a shared dataset, the first query identifying a first operation. The platform accesses a first set of data from the shared dataset to perform the first operation, the first set of data including data accessed from a first table of the shared dataset. The cloud data platform determines that an aggregation constraint policy is attached to the first table, the aggregation constraint policy restricts output of data values stored in the first table and enforces the aggregation constraint policy on the first query based on a context of the first query. The cloud data platform generates an output to the first query based on the first set of data and the first operation, based on enforcing the aggregation constraint policy on the first query.

公开(公告)号：US20240119056A1

公开(公告)日：2024-04-11

申请号：US18545672

申请日：2023-12-19

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/22 ,  G06F16/23 ,  G06F16/27 ,  G06F16/28

CPC classification number: G06F16/24573 ,  G06F16/211 ,  G06F16/212 ,  G06F16/2291 ,  G06F16/2365 ,  G06F16/27 ,  G06F16/288 ,  G06F16/289

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

公开(公告)号：US11886441B2

公开(公告)日：2024-01-30

申请号：US18052990

申请日：2022-11-07

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/23 ,  G06F16/22 ,  G06F16/28 ,  G06F16/27

CPC classification number: G06F16/24573 ,  G06F16/211 ,  G06F16/212 ,  G06F16/2291 ,  G06F16/2365 ,  G06F16/27 ,  G06F16/288 ,  G06F16/289

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a source object identifier. The processor determines a source object associated with the source object identifier. The source object includes a tag value. The processor associates the current tag with the source object. The processor receives a replication command including the source object and a target object. The processor causes replication of the source object to the target object that comprises replicating the current tag with the tag name and the tag value in the source object to the target object. Other embodiments are also described herein.

公开(公告)号：US11880491B2

公开(公告)日：2024-01-23

申请号：US18161574

申请日：2023-01-30

Applicant: Snowflake Inc.

Inventor： Raja Suresh Krishna Balakrishnan ,  Khalid Zaman Bijon ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F21/62 ,  G06F16/245 ,  G06F16/28

CPC classification number: G06F21/6254 ,  G06F16/245 ,  G06F16/284

Abstract: Various embodiments provide for tag-based application of a masking policy, which can be used in connection with a data platform. In particular, various embodiments enable enforcement of one or more masking policies against an entity (e.g., object) of a data platform, such as a database, a table, a row, or a column, based on one or more tags associated with the entity.

公开(公告)号：US20230418699A1

公开(公告)日：2023-12-28

申请号：US18462044

申请日：2023-09-06

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Thierry Cruanes ,  Monica J. Holboke ,  Allison Waingold Lee ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F9/54 ,  G06F21/62 ,  G06F16/2455

CPC classification number: G06F9/547 ,  G06F21/6254 ,  G06F16/2456 ,  G06F9/541

Abstract: In an embodiment, a data platform creates an application in a data-provider account. The application includes one or more APIs corresponding to one or more underlying code blocks. The data platform shares provider data with the application in the data-provider account, and also installs, in a data-consumer account, an application instance of the application. The application instance includes one or more APIs corresponding to the one or more APIs in the application in the data-provider account. The data platform shares consumer data with the application instance in the data-consumer account, and invokes one or more of the APIs of the application instance to execute respective associated underlying code blocks, which are not visible to the data-consumer account. The data platform also saves output of the one or more respective associated underlying code blocks locally within the data-consumer account.

公开(公告)号：US20230401260A1

公开(公告)日：2023-12-14

申请号：US17934814

申请日：2022-09-23

Applicant: Snowflake Inc.

Inventor： Khalid Zaman Bijon ,  Thierry Cruanes ,  Simon Holm Jensen ,  Allison Waingold Lee ,  Daniel N. Meredith ,  Subramanian Muralidhar ,  David Schultz ,  Zixi Zhang

IPC: G06F16/903

CPC classification number: G06F16/90335

Abstract: A constraint system enforces projection constraints on data values stored in specified columns of a shared dataset when queries are received by a database system. A projection constraint identifies that the data in a column may be restricted from being projected (e.g., presented, read, outputted) in an output to a received query, while allowing specified operations to be performed on the data and a corresponding output to be provided. For example, the projection constraint may indicate a context for a query that triggers the constraint, such as based on the user that submitted the query. Enforcing projection constraints on queries received at the database system allows for data to be shared and used anonymously by entities to perform various operations without the need to tokenize the data.

公开(公告)号：US20230385289A1

公开(公告)日：2023-11-30

申请号：US18447231

申请日：2023-08-09

Applicant: Snowflake Inc.

Inventor： Artin Avanes ,  Khalid Zaman Bijon ,  Yujie Li ,  Zheng Mi ,  Subramanian Muralidhar ,  David Schultz

IPC: G06F16/2457 ,  G06F16/21 ,  G06F16/28 ,  G06F16/27 ,  G06F16/23 ,  G06F16/22

CPC classification number: G06F16/24573 ,  G06F16/211 ,  G06F16/288 ,  G06F16/27 ,  G06F16/289 ,  G06F16/2365 ,  G06F16/2291 ,  G06F16/212

Abstract: A method of implementing object tagging framework starts with the processor receiving a tag creation command including a tag name. In response to the tag creation command, the processor creates a current tag. The processor then receives an association command, the tag name and a target object identifier. The processor determines a target object associated with the target object identifier. The target object includes a tag value. The processor associates the current tag with the target object. The processor identifies a first child object of the target object. The target object and the first child object are hierarchical objects. In response to determining that the first child object is tag-unassociated, the processor associates the current tag with the first child object. In response to receiving a query including the tag name, the processor generates an output based on the tag name. Other embodiments are also described herein.