Servicenow, Inc.

Siddharth Rajendra Shah

Jeremy Norris

Vincent Seguin

Martin Wexler

Pierre Francois Rohel

Josef Mart

Josiah Sullivan

Joe Davis

Kyle James Barron-Kraus

Joseph Michael Davis

Olivier Baxa

Donghang Lin

Atul Saini

Ashwin Kumar Kayyoor

Antony Chan

Kausik Sridharabalan

Herman Knief

Rajagopalan Madapusi Ammanur

Souvik Bhattacherjee

Scott Michael Nemes

A system and method for encrypting portions of data for storage in a remote network have been provided. The system comprises a memory with instructions executable by a processor to receive data for forwarding to a server device, wherein the received data comprises an indication of one or more portions of the received data to be encrypted; identify a portion comprising the one or more portions of the received data based at least in part on the indication; encrypt the identified portion of the data; generate a payload that comprises the encrypted portion and one or more unencrypted portions of the received data; and transmit, to the server device, the payload.

Edge encryption

A determination is made whether a received database query is to be processed by either a first database, a second database, or at least in part by both the first and second databases including by determining whether the query meets criteria to split the query for processing across the first and second databases. The first and second databases store shared synchronized records, the first database configured to store the records in a column-oriented format and the second database configured to store the records in a row-oriented format. In response to a determination that the query meets the criteria to split the query, a first and second component query of the database query are generated for the first and second databases, respectively, the second component query based at least in part on a result of the first component query. The execution of the first and second component queries is pipelined.

Database query splitting

Systems and method for improving query performance by querying an appropriate database engine based on the operation of the query request is provided. In one aspect, this approach involves querying a row-oriented database, querying a column-oriented database, or blacklisting the query request. In particular, updating the column-oriented database involves delete and insert operations. By maintaining updated databases and querying appropriate database engines, the response time of a query request may be improved.

System and methods for querying and updating databases

A processor may receive a request with a column-oriented operation. The query request may be related to updates to a row-oriented database based on the query request previously performed on the row-oriented database. The processor may determine the amount of time for replicating the updates to a column-oriented database. If the amount of time for replicating the updates to the column-oriented database is greater than a threshold amount of time, then the processor may create a transient file with the updates. The transient file may be in a format that is recognized by the column-oriented database. The processor may query the column-oriented database based on the query request and the transient file.

System and methods for performing updated query requests in a system of multiple database engine

An embodiment may involve persistent storage including a parent filesystem and a pre-configured amount of free space within the parent filesystem that is dedicated for shared use. The embodiment may also involve one or more processors configured to, for each of a plurality of child filesystems: create a sparse file with an apparent size equivalent to the pre-configured amount of free space; create a virtual mapped device associated with the sparse file; establish one or more cryptographic keys for the virtual mapped device; create an encrypted virtual filesystem for the virtual mapped device and within the sparse file, wherein the encrypted virtual filesystem uses the cryptographic keys for application-transparent encryption and decryption of data stored by way of the encrypted virtual filesystem; and mount the encrypted virtual filesystem within the parent filesystem as one of the child filesystems.

Security for data at rest in a remote network management platform

A database system could include a first database engine, a second database engine, and a replication engine. The database system could also include processors configured to perform operations. The operations could involve obtaining indicators that are respectively associated with performance issues that can occur in the database system, each indicator defining one or more conditions that, when satisfied, cause the indicator to become active. The operations could also involve obtaining mappings between: (i) at least some of the indicators, and (ii) remediation subroutines. The operations could additionally involve receiving operational data related to the first database engine, the second database engine, or the replication engine; determining, based on the operational data and the conditions defined by the indicators, that a particular indicator is active; determining, based on the mappings, that the particular indicator has an associated remediation subroutine; and executing the associated remediation subroutine.

Self-healing infrastructure for a dual-database system

A server system may include one or more hardware processors that execute computer-readable instructions from a non-transitory memory that cause the processor to receive a time component associated with a query request and one or more relational identification tags associated with a subset of a plurality of data items stored in one or more databases. The processor may then query the one or more databases to identify one or more time series data items based on the time component and the relational identification tags. After querying the databases, the processor may transmit the one or more time series data items to a computing device configured to display the one or more time series data items.

Systems and methods for querying time series data

An example embodiment performed by a proxy server application of a remote network management platform may involve receiving a message from a third-party application directed to an address of the proxy server application and containing an identifier related to a particular entity. The embodiment may also involve using a template associated with a protocol type of the message to parse the message and determine the identifier. The embodiment may also involve comparing the identifier to mapping data that defines pairwise associations between each of a plurality of identifiers and computational instances of a plurality of computational instances. Each such computational instance may be communicatively coupled and dedicated to a respective managed network controlled by a particular entity. The embodiment may also involve using the comparison as a basis for selecting a particular computational instance of the plurality of computational instances, and then transmitting the message to the particular computational instance.

Proxy application supporting multiple collaboration channels

Systems and methods are disclosed for encrypting portions of data for storage and processing in a remote network. For example, methods may include receiving a message that includes data for forwarding to a server device; encrypting a portion of the data to determine an encrypted portion; determining metadata based on the portion of the data, wherein the metadata indicates one or more properties of the portion of the data and enables one or more operations to be performed by the server device that depend on the one or more properties; determining a payload including the data with both the encrypted portion and the metadata substituted for the portion of the data; and transmitting the payload to the server device.

Growing community of inventors

Kirkland, WA, United States of America

Siddharth Rajendra Shah