Microsoft Technology Licensing, LLC

Nikolas Christopher Ogg

Raghav Kaushik

Nitish Gupta

Dilli Dorai Minnal Arumugam

Steven Richard Gott

Elnata Degefa

Yueren Wang

Pankaj Prabhakar Naik

Andreas Wolter

Hanumantha Rao Kodavalla

Panagiotis Antonopoulos

Arvind Arasu

Ravishankar Ramamurthy

Rajat Jain

Shafi Ahmad

Rakesh Khanduja

Kunal Deep Singh

Jeffrey Michael Trimmer

Methods for database recovery for encrypted indexes are performed by systems and devices. A query with a decryption key is received from a client device, where the query modifies an encrypted index of a database using a secure enclave. When events requiring remedial actions for the database occur during the querying, some transactions of the query and later queries are deferred, and a remedial action is initiated that includes restarting the database. A determination of the remedial action being unsuccessful in recovering the encrypted index causes the action to be re-performed until another query having the decryption key is received whereupon the action is performed again to recover the encrypted index utilizing the decryption key. Deferred transactions are then performed with the decryption key. When a database restarts for access without secure enclaves, the encrypted index for the database is invalidated, and the remedial actions are otherwise completed or discarded.

System and method for database recovery for encrypted indexes

Methods for centralized access control for cloud relational database management system resources are performed by systems and devices. The methods utilize a central policy storage, managed externally to database servers, which stores external policies for access to internal database resources at up to fine granularity. Database servers in the processing system each receive external access policies that correspond to users of the system by push or pull operations from the central policy storage, and store the external access policies in a cache of the database servers for databases. For resource access, access conditions are determined via policy engines of database servers based on an external access policy in the cache that corresponds to a user, responsive to a resource access request from a device of the user specifying the internal resource. Data associated with the resource is provided to the user based on the access condition being met.

Centralized access control for cloud relational database management system resources

Growing community of inventors

Seattle, WA, United States of America

Nikolas Christopher Ogg