公开(公告)号：US20200045086A1

公开(公告)日：2020-02-06

申请号：US16599503

申请日：2019-10-11

Applicant: salesforce.com, inc.

Inventor： Saptarshi Roy ,  Ryan Lamore ,  Ankush Gulati ,  Navya Sruti Sirugudi

IPC: H04L29/06 ,  H04L9/32 ,  G06F21/62 ,  H04L9/06 ,  H04L9/08 ,  G06F21/60

Abstract: Some database systems may implement encryption services to improve the security of data stored in databases or on disks. The systems may implement encryption using multiple encryption keys. For example, a worker server may implement a system call interceptor, such as a filesystem in userspace (Fuse) driver. The system call interceptor may intercept system calls (e.g., associated with query or extract, transform, and load (ETL) jobs) as they enter or exit the kernel. The system call interceptor may determine whether data sets associated with the jobs are marked for encryption, and may perform an encryption process on the data sets. A worker may encrypt and store data sets on a worker disk or at a file store, or may retrieve and decrypt the data sets. The system may additionally manage encryption keys, and may provide mechanisms for archiving or revoking encryption keys while maintaining user access to stored data sets.

公开(公告)号：US10476913B2

公开(公告)日：2019-11-12

申请号：US15699553

申请日：2017-09-08

Applicant: salesforce.com, inc.

Inventor： Saptarshi Roy ,  Ryan Lamore ,  Ankush Gulati ,  Navya Sruti Sirugudi

IPC: H04L29/06 ,  H04L9/06 ,  H04L9/32 ,  G06F21/62 ,  H04L9/08

Abstract: Some database systems may implement encryption services to improve the security of data stored in databases or on disks. The systems may implement encryption using multiple encryption keys. For example, a worker server may implement a system call interceptor, such as a filesystem in userspace (Fuse) driver. The system call interceptor may intercept system calls (e.g., associated with query or extract, transform, and load (ETL) jobs) as they enter or exit the kernel. The system call interceptor may determine whether data sets associated with the jobs are marked for encryption, and may perform an encryption process on the data sets. A worker may encrypt and store data sets on a worker disk or at a file store, or may retrieve and decrypt the data sets. The system may additionally manage encryption keys, and may provide mechanisms for archiving or revoking encryption keys while maintaining user access to stored data sets.

公开(公告)号：US20190081990A1

公开(公告)日：2019-03-14

申请号：US15699553

申请日：2017-09-08

Applicant: salesforce.com, inc.

Inventor： Saptarshi Roy ,  Ryan Lamore ,  Ankush Gulati ,  Navya Sruti Sirugudi

IPC: H04L29/06 ,  H04L9/32 ,  H04L9/06 ,  G06F21/62

Abstract: Some database systems may implement encryption services to improve the security of data stored in databases or on disks. The systems may implement encryption using multiple encryption keys. For example, a worker server may implement a system call interceptor, such as a filesystem in userspace (Fuse) driver. The system call interceptor may intercept system calls (e.g., associated with query or extract, transform, and load (ETL) jobs) as they enter or exit the kernel. The system call interceptor may determine whether data sets associated with the jobs are marked for encryption, and may perform an encryption process on the data sets. A worker may encrypt and store data sets on a worker disk or at a file store, or may retrieve and decrypt the data sets. The system may additionally manage encryption keys, and may provide mechanisms for archiving or revoking encryption keys while maintaining user access to stored data sets.