公开(公告)号：US20190114438A1

公开(公告)日：2019-04-18

申请号：US15782087

申请日：2017-10-12

Applicant: salesforce.com, inc.

Inventor： Alexandre Hersans ,  Je Woong Heo ,  Yunjia Zhou ,  Aleksandr Alexander ,  Assaf Ben Gur

IPC: G06F21/60 ,  G06F21/62 ,  G06F12/14 ,  G06F3/06

Abstract: Methods, systems, and devices for mass encryption management are described. In some database systems, users may select encryption settings for storing data records at rest. A database may receive a request to perform an encryption process on multiple data records corresponding to a user, for example, based on a user input or a change in encryption settings. A database server may partition the data records for encryption (e.g., encryption, decryption, key rotation, or scheme modification) into one or more data record groups of similar sizes, and may perform the encryption process on one record group at a time (e.g., to reduce overhead in the system). The database server may additionally support restricting user access to the data records being actively processed, estimating resources needed for the processing, determining data record encryption statuses to be displayed by a user device, or some combination of these features.

公开(公告)号：US10860727B2

公开(公告)日：2020-12-08

申请号：US16667618

申请日：2019-10-29

Applicant: salesforce.com, inc.

Inventor： Alexandre Hersans ,  Je Woong Heo ,  Yunjia Zhou ,  Aleksandr Alexander ,  Assaf Ben Gur

IPC: G06F21/00 ,  G06F21/60 ,  G06F21/62 ,  G06F3/06 ,  G06F12/14 ,  G06F16/27 ,  H04L9/08

Abstract: Methods, systems, and devices for mass encryption management are described. In some database systems, users may select encryption settings for storing data records at rest. A database may receive a request to perform an encryption process on multiple data records corresponding to a user, for example, based on a user input or a change in encryption settings. A database server may partition the data records for encryption (e.g., encryption, decryption, key rotation, or scheme modification) into one or more data record groups of similar sizes, and may perform the encryption process on one record group at a time (e.g., to reduce overhead in the system). The database server may additionally support restricting user access to the data records being actively processed, estimating resources needed for the processing, determining data record encryption statuses to be displayed by a user device, or some combination of these features.

公开(公告)号：US20200143065A1

公开(公告)日：2020-05-07

申请号：US16667618

申请日：2019-10-29

Applicant: salesforce.com, inc.

Inventor： Alexandre Hersans ,  Je Woong Heo ,  Yunjia Zhou ,  Aleksandr Alexander ,  Assaf Ben Gur

IPC: G06F21/60 ,  G06F21/62 ,  G06F3/06 ,  G06F12/14 ,  G06F16/27

Abstract: Methods, systems, and devices for mass encryption management are described. In some database systems, users may select encryption settings for storing data records at rest. A database may receive a request to perform an encryption process on multiple data records corresponding to a user, for example, based on a user input or a change in encryption settings. A database server may partition the data records for encryption (e.g., encryption, decryption, key rotation, or scheme modification) into one or more data record groups of similar sizes, and may perform the encryption process on one record group at a time (e.g., to reduce overhead in the system). The database server may additionally support restricting user access to the data records being actively processed, estimating resources needed for the processing, determining data record encryption statuses to be displayed by a user device, or some combination of these features.