Handling of database encryption key revocation
AssigneeSap SE
InventorsBeomsoo KIM, Yong Sik KWON, Ji Hoon JANG, Hyeong Seog KIM
Life of this patent
Estimating the term…
Abstract
Systems and methods include storage of a plurality of encrypted data pages of a row store database table in a persistent storage system, determination of a first encryption key associated with one of the plurality of encrypted data pages based on a header of the one of the plurality of encrypted data pages, determination of whether the first encryption key has been revoked, and, if it is determined that the first encryption key has been revoked, adding of a portion of volatile memory allocated to the one of the plurality of data pages to a free list.
Claims20
A database system comprising:
- a persistent storage system storing a plurality of data pages of a row store database table;
- a volatile memory;
- and
- a processing unit to execute program code of a database instance to cause the database system to:
- determine a first encryption key associated with one of the plurality of data pages based on a header of the one of the plurality of data pages;
- determine whether the first encryption key has been revoked;
- and
- if it is determined that the first encryption key has been revoked, add a portion of the volatile memory allocated to the one of the plurality of data pages to a free list of the volatile memory.
A method comprising:
- storing a plurality of encrypted data pages of a row store database table in a persistent storage system;
- determining a first encryption key associated with one of the plurality of encrypted data pages, the one of the plurality of encrypted data pages including a header and an encrypted body;
- determining whether the first encryption key has been revoked;
- and
- if it is determined that the first encryption key has been revoked, adding a portion of volatile memory allocated to the one of the plurality of data pages to a free list.
A non-transitory computer-readable medium storing program code executable by one or more processing units to cause a computing system to:
- store a plurality of encrypted data pages of a row store database table in a persistent storage system;
- determine a first encryption key associated with one of the plurality of encrypted data pages based on a header of the one of the plurality of encrypted data pages;
- determine whether the first encryption key has been revoked;
- and
- if it is determined that the first encryption key has been revoked, add a portion of volatile memory allocated to the one of the plurality of data pages to a free list.
Dependencies are inferred from the claim text.