Intercepting calls for encryption handling in persistent access multi-key systems
Assigneesalesforce.com, inc.
InventorsSaptarshi Roy, Ryan Lamore, Ankush Gulati, Navya Sruti Sirugudi
Life of this patent
Estimating the term…
Loading patent…
Assigneesalesforce.com, inc.
InventorsSaptarshi Roy, Ryan Lamore, Ankush Gulati, Navya Sruti Sirugudi
Estimating the term…
Some database systems may implement encryption services to improve the security of data stored in databases or on disks. The systems may implement encryption using multiple encryption keys. For example, a worker server may implement a system call interceptor, such as a filesystem in userspace (Fuse) driver. The system call interceptor may intercept system calls (e.g., associated with query or extract, transform, and load (ETL) jobs) as they enter or exit the kernel. The system call interceptor may determine whether data sets associated with the jobs are marked for encryption, and may perform an encryption process on the data sets. A worker may encrypt and store data sets on a worker disk or at a file store, or may retrieve and decrypt the data sets. The system may additionally manage encryption keys, and may provide mechanisms for archiving or revoking encryption keys while maintaining user access to stored data sets.
A method for encryption management, comprising:
An apparatus for encryption management, comprising:
A non-transitory computer readable medium storing code for encryption management, the code comprising instructions executable by a processor to:
Dependencies are inferred from the claim text.