Oracle International Corporation

Shmuel Herman

Gabriel Thomas Hurley

Jim Battenberg

Bryan Pham

Operations include: receiving a first request for a first dataset of a plurality of datasets stored in a particular database instance; obtaining an encrypted version of the first dataset; obtaining an encrypted version of the first DEK; requesting decryption of the encrypted version of the first DEK; receiving a decrypted version of the first DEK; applying the first DEK to the encrypted version of the first dataset to obtain a decrypted version of the first dataset; and transmitting the decrypted version of the first dataset. The first dataset is encrypted by a first DEK associated with a first tenant. A second dataset is encrypted by a second DEK associated with a second tenant. The decrypted version of the first DEK is generated by applying a first MEK of the first tenant to the encrypted version of the first DEK.

Multi-tenant file-level encryption for index based database

Techniques discussed herein manage backups of a service cell (SC). Each SC may include a data plane that is isolated from other SCs and comprises a distributed computing cluster (a cluster). A manifest that specifies one or more backup policies may be used to generate a full backup or a partial backup of a data set stored by the cluster. In accordance with the manifest, a signal may be sent to nodes of the cluster. In response, the nodes may transmit locally-stored data (e.g., data segments) to specified locations at a remote storage. The system may maintain a mapping of which segments correspond to data that was stored in the cluster at a time corresponding to a full or partial backup.

Growing community of inventors

Kirkland, WA, United States of America

Shmuel Herman