US 11,886,441 B2
Tag-based data governance auditing system
Artin Avanes, Palo Alto, CA (US); Khalid Zaman Bijon, Santa Cruz, CA (US); Yujie Li, Santa Clara, CA (US); Zheng Mi, Palo Alto, CA (US); Subramanian Muralidhar, Mercer Island, WA (US); and David Schultz, Piedmont, CA (US)
Assigned to Snowflake Inc., Bozeman, MT (US)
Filed by Snowflake Inc., Bozeman, MT (US)
Filed on Nov. 7, 2022, as Appl. No. 18/052,990.
Application 18/052,990 is a continuation of application No. 17/689,463, filed on Mar. 8, 2022, granted, now 11,514,057.
Application 17/689,463 is a continuation of application No. 17/160,960, filed on Jan. 28, 2021, granted, now 11,301,478.
Claims priority of provisional application 63/108,215, filed on Oct. 30, 2020.
Prior Publication US 2023/0062496 A1, Mar. 2, 2023
Int. Cl. G06F 16/2457 (2019.01); G06F 16/21 (2019.01); G06F 16/23 (2019.01); G06F 16/22 (2019.01); G06F 16/28 (2019.01); G06F 16/27 (2019.01)
CPC G06F 16/24573 (2019.01) [G06F 16/211 (2019.01); G06F 16/212 (2019.01); G06F 16/2291 (2019.01); G06F 16/2365 (2019.01); G06F 16/27 (2019.01); G06F 16/288 (2019.01); G06F 16/289 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented object tagging method for a database, comprising:
receiving from an administrator of the database, a tag creation command including a tag name;
in response to the tag creation command, creating a tag for classifying sensitive information in objects of the database;
granting an apply privilege of the tag to a data owner of an object of the database;
in response to a bind command from the data owner, generating a tagged object based on the tag and the object of the database, the tagged object containing sensitive information; and
in response to a request from the database administrator during an audit, performing operations comprising:
finding the tagged object of the database using the tag;
determining whether the tagged object of the database is associated with a masking policy set by the administrator; and
in response to determining the tagged object is unassociated with the masking policy, associating the tagged object with the masking policy to mask the sensitive information.