| CPC G06F 16/90335 (2019.01) | 30 Claims |

|
1. A method comprising:
receiving a query directed to a shared dataset stored on a database system distributed across one or more geographic locations, the shared dataset comprising data values organized in a plurality of columns;
identifying, by at least one hardware processor, a set of data within the shared dataset by validating the query corresponds to an approved statement stored in an approved statement table, the set of data associated with one or more columns subject to a projection constraint policy;
determining the projection constraint policy applies to the one or more columns based on a context associated with the query that triggers enforcement of projection constraint, the context determined based on a query context determination;
processing the query in accordance with the projection constraint policy, the processing of the query comprising:
selectively restricting projection of the data values from the one or more columns, and
selectively permitting a specified operation on the set of data to generate an output; and
providing the output to the query that complies with the projection constraint policy, the output comprising derived data based on the specified operation on the set of data without revealing the data values.
|