The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Nov. 12, 2019

Filed:

Sep. 08, 2017
Applicant:

Salesforce.com, Inc., San Francisco, CA (US);

Inventors:

Saptarshi Roy, South San Francisco, CA (US);

Ryan Lamore, Castro Valley, CA (US);

Ankush Gulati, Fremont, CA (US);

Navya Sruti Sirugudi, Pleasanton, CA (US);

Assignee:

salesforce.com, inc., San Francisco, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 9/06 (2006.01); H04L 9/32 (2006.01); G06F 21/62 (2013.01); H04L 9/08 (2006.01);
U.S. Cl.
CPC ...
H04L 63/308 (2013.01); G06F 21/6245 (2013.01); H04L 9/0618 (2013.01); H04L 9/0891 (2013.01); H04L 9/0894 (2013.01); H04L 9/3234 (2013.01); H04L 63/061 (2013.01); G06F 2221/2107 (2013.01);
Abstract

Some database systems may implement encryption services to improve the security of data stored in databases or on disks. The systems may implement encryption using multiple encryption keys. For example, a worker server may implement a system call interceptor, such as a filesystem in userspace (Fuse) driver. The system call interceptor may intercept system calls (e.g., associated with query or extract, transform, and load (ETL) jobs) as they enter or exit the kernel. The system call interceptor may determine whether data sets associated with the jobs are marked for encryption, and may perform an encryption process on the data sets. A worker may encrypt and store data sets on a worker disk or at a file store, or may retrieve and decrypt the data sets. The system may additionally manage encryption keys, and may provide mechanisms for archiving or revoking encryption keys while maintaining user access to stored data sets.


Find Patent Forward Citations

Loading…