Salesforce Com, Inc.

Salesforce, Inc.

Salesforee.com, Inc.

Swaroop Shere

Alexandre Hersans

Parth Vijay Vaishnav

Chenghung Ker

William Charles Mortimore, Jr

Samatha Sanikommu

Daniel Tafner McGarry

Assaf Ben Gur

John Bracken

Assaf Ben-Gur

Victor Weilin Liu

Danil Dvinov

Samantha Sanikommu

Disclosed herein are system, method, and computer program product embodiments for detecting duplicates with exact and fuzzy matching on encrypted match indexes using an encryption key in a cloud computing platform. An embodiment operates by determining a match rule index value upon reception of a new record. The embodiment encrypts the match index rule value using the customer's encryption key and a deterministic encryption method and stores the encrypted match rule index value. Duplicate detection may be later performed by using the same deterministic encryption method to determine a cypher text for a candidate entry and comparing the ciphertext to the stored encrypted match indexes.

Detect duplicates with exact and fuzzy matching on encrypted match indexes

Methods, systems, and devices for distributed caching of encrypted encryption keys are described. Some multi-tenant database systems may support encryption of data records. To efficiently handle multiple encryption keys across multiple application servers, the database system may store the encryption keys in a distributed cache accessible by each of the application servers. To securely cache the encryption keys, the database system may encrypt (e.g., wrap) each data encryption key (DEK) using a second encryption key (e.g., a key encryption key (KEK)). The database system may store the DEKs and KEKs in separate caches to further protect the encryption keys. For example, while the encrypted DEKs may be stored in the distributed cache, the KEKs may be stored locally on application servers. The database system may further support 'bring your own key' (BYOK) functionality, where a user may upload a tenant secret or tenant-specific encryption key to the database.

Distributed key caching for encrypted keys

Provided herein are system, methods and computer program products for identifying duplicate records stored in a database system, comprising: generating a plurality of encrypted match indexes for each of a plurality of records stored in the database system, each of the plurality of encrypted match indexes encrypts a value of each encryption enabled field of a respective one of the plurality of records defined by at least one match rule, creating a cluster of records comprising at least one set containing at least two records of the plurality of records, the at least two records having respective encrypted match indexes corresponding to the at least one match rule, causing identification of duplicate records in the at least one set according to detection of records of the at least one set having respective match indexes matching the at least one match rule, and outputting an indication of the identified duplicate records.

Bulk duplication detection supporting data encryption

Growing community of inventors

San Francisco, CA, United States of America

Swaroop Shere