US 11,238,174 B2Granted

Systems and methods of database encryption in a multitenant database management system

Assigneesalesforce.com, inc.

InventorsTerry Chong, Jameison Bear Martin, Thomas Fanghaenel, Andrew Tucker, Nathaniel Wyatt, Raghavendran Hanumantharau, Assaf Ben-Gur, William Charles Mortimore, Jr.

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

System and methods of the disclosed subject matter provide segregating, at a memory storage coupled to a multitenant database system, first tenant data of a first tenant from at least second tenant data of a second tenant, based on a first tenant identifier. A first encryption key associated with the first tenant may be retrieved from a key cache memory based on the first tenant identifier, to encrypt one or more fragments of the first tenant data. The fragments of the first tenant data may be encrypted based on the retrieved encryption key. Non-encrypted header information may be generated for each of the encrypted fragments of the first tenant data, where the header information may have metadata including the first tenant identifier. The encrypted fragments of the first tenant data and the corresponding non-encrypted header information may be stored in the immutable storage.

Claims24

Dependent claims

A computerized method of managing security of at least a portion of first tenant data of a first tenant of a multitenant database system that stores at least the first tenant data of the first tenant and second tenant data for a second tenant, the first tenant data of the first tenant being stored in an immutable storage of the multitenant database system associated with a first tenant identifier, and second tenant data of the second tenant being stored in the immutable storage of the multitenant database system associated with a second tenant identifier, wherein any portion of the first tenant data and the second tenant data logically belongs to at least one of the same database object in the multitenant database system, the method comprising:

segregating, at a memory storage coupled to the multitenant database system, the first tenant data of the first tenant from at least the second tenant data of the second tenant, based on the first tenant identifier;
retrieving, from a key cache memory based on the first tenant identifier, a first encryption key associated with the first tenant to encrypt one or more fragments of the first tenant data, wherein the first encryption key is different from a second encryption key associated with the second tenant;
encrypting, at the multitenant database system, at least one of the one or more fragments of the first tenant data based on the retrieved first encryption key;
encrypting, at the multitenant database system, cross-tenant data using a system encryption key that is different from the first encryption key and the second encryption key, wherein the cross-tenant data is data for the first tenant and the second tenant and is at least one selected from the group consisting of:
block indices, and transaction logs;
generating, at the multitenant database system, non-encrypted header information for each of the encrypted one or more fragments of the first tenant data, wherein the header information has metadata including the first tenant identifier;
and storing, in the immutable storage, the encrypted one or more fragments of the first tenant data and the corresponding non-encrypted header information, and storing the encrypted cross-tenant data.

4 more elements

A system to manage security of at least a portion of first tenant data of a first tenant of a multitenant database system that stores at least the first tenant data of the first tenant and second tenant data for a second tenant, the first tenant data of the first tenant being stored in an immutable storage of the multitenant database system associated with a first tenant identifier, and second tenant data of the second tenant being stored in the immutable storage of the multitenant database system associated with a second tenant identifier, wherein any portion of the first tenant data and the second tenant data logically belongs to at least one of the same database object, the system comprising:

a memory storage, coupled to the multitenant database system, to segregate the first tenant data of the first tenant from at least the second tenant data of the second tenant, based on the first tenant identifier;
a key cache memory to store, based on the first tenant identifier, a first encryption key associated with the first tenant to encrypt one or more fragments of the first tenant data, wherein the first encryption key is different from a second encryption key associated with the second tenant;
one or more servers of the multitenant database system communicatively coupled to the memory storage and the key cache memory to encrypt at least one of the one or more fragments of the first tenant data based on the retrieved first encryption key, to encrypt cross-tenant data using a system encryption key that is different from the first encryption key and the second encryption key, wherein the cross-tenant data is data for the first tenant and the second tenant and is at least one selected from the group consisting of:
block indices, and transaction logs, and generate non-encrypted header information for each of the encrypted one or more fragments of the first tenant data, wherein the header information has metadata including the first tenant identifier, wherein the encrypted one or more fragments of the first tenant data and the corresponding non-encrypted header information, and the encrypted cross-tenant data are stored in the immutable storage.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 16/263,751Filed 31 Jan 2019
Published: US 2020/0250325 A16 Aug 2020
Granted: 1 Feb 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 21/6227
To a system of files or objects, e.g. local or distributed file system or database: where protection concerns the structure of data, e.g. records,…
G06F 16/24552
Query execution: database cache management
G06F 21/604
Protecting data: tools and structures for managing or administering access control systems