US 12,314,319 B2
Projection constraint policies in a database system
Khalid Zaman Bijon, Santa Cruz, CA (US); Thierry Cruanes, San Mateo, CA (US); Simon Holm Jensen, Menlo Park, CA (US); Allison Waingold Lee, Pebble Beach, CA (US); Daniel N. Meredith, Laguna Beach, CA (US); Subramanian Muralidhar, Mercer Island, WA (US); David Schultz, Piedmont, CA (US); and Zixi Zhang, San Mateo, CA (US)
Assigned to Snowflake Inc., Bozeman, MT (US)
Filed by Snowflake Inc., Bozeman, MT (US)
Filed on Jan. 31, 2024, as Appl. No. 18/428,694.
Application 18/428,694 is a continuation of application No. 17/934,814, filed on Sep. 23, 2022, granted, now 11,928,157.
Claims priority of provisional application 63/366,281, filed on Jun. 13, 2022.
Prior Publication US 2024/0176822 A1, May 30, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 16/903 (2019.01)
CPC G06F 16/90335 (2019.01) 30 Claims
OG exemplary drawing
 
1. A method comprising:
receiving a query directed to a shared dataset stored on a database system distributed across one or more geographic locations, the shared dataset comprising data values organized in a plurality of columns;
identifying, by at least one hardware processor, a set of data within the shared dataset by validating the query corresponds to an approved statement stored in an approved statement table, the set of data associated with one or more columns subject to a projection constraint policy;
determining the projection constraint policy applies to the one or more columns based on a context associated with the query that triggers enforcement of projection constraint, the context determined based on a query context determination;
processing the query in accordance with the projection constraint policy, the processing of the query comprising:
selectively restricting projection of the data values from the one or more columns, and
selectively permitting a specified operation on the set of data to generate an output; and
providing the output to the query that complies with the projection constraint policy, the output comprising derived data based on the specified operation on the set of data without revealing the data values.