US 11,991,272 B2
Handling pre-existing containers under group-level encryption
Dirk Thomsen, Heidelberg (DE)
Assigned to SAP SE, Walldorf (DE)
Filed by SAP SE, Walldorf (DE)
Filed on Dec. 10, 2021, as Appl. No. 17/547,511.
Prior Publication US 2023/0188327 A1, Jun. 15, 2023
Int. Cl. H04L 9/00 (2022.01); G06F 16/23 (2019.01); H04L 9/08 (2006.01)
CPC H04L 9/0833 (2013.01) [G06F 16/2379 (2019.01); H04L 9/0891 (2013.01)] 20 Claims
OG exemplary drawing
 
1. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, perform a method for tenant-specific encryption of pre-existing data in connection with a database employing group-level encryption, the method comprising:
receiving an assignment of an encryption group identifier to a container, the encryption group identifier defining an encryption key for encrypting the container;
responsive to receiving the assignment, creating a special container entry corresponding to the container,
wherein the special container entry comprises a processing state, and
wherein the special container entry is initialized in an inactive state;
receiving a commit operation of the assignment of the encryption group identifier;
initializing a job for re-encrypting the container according to the encryption group identifier;
initiating a flush operation by which the container is re-encrypted using the encryption key and persisted to a data volume; and
deleting the special container entry upon completion of the flush operation.