US 11,379,605 B2 · Data sharing using secure views

Abstract

Systems, methods, and devices for secure view-based data sharing are disclosed. A method in accordance with embodiments disclosed herein comprises associating, by one or more processors, view privileges of a secure view with one or more of a plurality of underlying details of a share object of a first account such that each of the one or more underlying details of the share object comprises a definition of the secure view. The method further comprises: in response to receiving a request from a second account to access any underlying details of the share object, using a secure projection that does not match any rewrite rule preconditions to rewrite a query plan of the request to prevent expressions that do not originate from the secure view from being pushed down below a boundary of the secure view.

Claims30

Dependent claims

A method comprising:

associating, by one or more processors, view privileges of a secure view with one or more of a plurality of underlying details of a share object of a first account such that each of the one or more underlying details of the share object comprises a definition of the secure view, the secure view comprising an object that defines a logical abstraction of the one or more underlying details;
and
in response to receiving a request from a second account to access underlying details of the share object, using a secure projection that does not match any rewrite rule preconditions to rewrite a query plan of the request to prevent expressions that do not originate from the secure view from being pushed down below a boundary of the secure view such that the one or more of the plurality of the underlying details of the share object are hidden from the second account and visible to the first account when the request is processed.

A system comprising:

a memory;
and
one or more processors, operatively coupled to the memory, the one or more processors to:
associate view privileges of a secure view with one or more of a plurality of underlying details of a share object of a first account such that each of the one or more underlying details of the share object comprises a definition of the secure view, the secure view comprising an object that defines a logical abstraction of the one or more underlying details;
and
in response to receiving a request from a second account to access underlying details of the share object, use a secure projection that does not match any rewrite rule preconditions to rewrite a query plan of the request to prevent expressions that do not originate from the secure view from being pushed down below a boundary of the secure view such that the one or more of the plurality of the underlying details of the share object are hidden from the second account and visible to the first account when the request is processed.

3 more elements

A non-transitory computer readable medium having instructions stored thereon which, when executed by one or more processors, cause the one or more processors to:

associate, by the one or more processors, view privileges of a secure view with one or more of a plurality of underlying details of a share object of a first account such that each of the one or more underlying details of the share object comprises a definition of the secure view, the secure view comprising an object that defines a logical abstraction of the one or more underlying details;
and
in response to receiving a request from a second account to access underlying details of the share object, use a secure projection that does not match any rewrite rule preconditions to rewrite a query plan of the request to prevent expressions that do not originate from the secure view from being pushed down below a boundary of the secure view such that the one or more of the plurality of the underlying details of the share object are hidden from the second account and visible to the first account when the request is processed.

Dependencies are inferred from the claim text.

Data sharing using secure views

Life of this patent

Data sharing using secure views

Life of this patent

Abstract

Claims30