CENTRALLY ROTATING PRIVATE/PUBLIC ENCRYPTION KEYS IN A LARGE SCALE SYSTEM

    公开(公告)号:US20230179413A1

    公开(公告)日:2023-06-08

    申请号:US17457386

    申请日:2021-12-02

    CPC classification number: H04L9/0891 H04L9/0894 H04L9/14

    Abstract: A system and method for rotating private encryption keys for tenants of a database system has been developed. First, three separate public-private encryption keys are generated for a tenant of the database system. The three separate private encryption keys for the tenant are then stored in cloud-based storage. A defined cadence is created to rotate the private encryption keys for the tenant. The three separate private encryption keys for the tenant are defined as a a past private key, a present private key and a future private key. Next, the public encryption key is stored for the tenant in a global tenant directory. The present private key and the public encryption key are retrieved to encrypt and decrypt data from the tenant. The three separate private encryption keys are rotated at the defined cadence, where the past private key is discarded, the present private key becomes a new past private key, the future private key becomes a new present private key, and a new future private key is generated. The new past private key, the new present private key and the new future private key for the tenant are then stored in cloud-based storage.

    Techniques and architectures for managing cascading mutations in an environment having a data lake

    公开(公告)号:US11314767B2

    公开(公告)日:2022-04-26

    申请号:US16943314

    申请日:2020-07-30

    Abstract: Managing mutations in a data lake environment. A mutation request to cause write operations that modify data objects or structures within an environment for collecting unformatted raw data is received. The environment has at least a data table and a notification table. An entry is written to the data table with a streaming job configured to receive and process the mutation request. Entries to the data table specify at least records indicating changes to objects in the environment based on ingestion processing for the environment for collecting unformatted raw data and based on the mutation request. A corresponding entry is written to the notification table in response to a successful write attempt to the data table. The notification table entry has information about data table entries for a specified period. At least one data consumer is notified that the data table has been modified.

Patent Agency Ranking