US 12,067,005 B2
Data clean room using defined access via native applications
Rachel Frances Blum, South Orange, NJ (US); Justin Langseth, Kailua, HI (US); and Michael Earle Rainey, Pasco, WA (US)
Assigned to Snowflake Inc., Bozeman, MT (US)
Filed by Snowflake Inc., Bozeman, MT (US)
Filed on Jul. 31, 2022, as Appl. No. 17/816,420.
Claims priority of provisional application 63/366,286, filed on Jun. 13, 2022.
Prior Publication US 2023/0401200 A1, Dec. 14, 2023
Int. Cl. G06F 16/30 (2019.01); G06F 16/242 (2019.01); G06F 16/2455 (2019.01); G06F 16/27 (2019.01)
CPC G06F 16/242 (2019.01) [G06F 16/2456 (2019.01); G06F 16/27 (2019.01)] 25 Claims
OG exemplary drawing
 
1. A method comprising:
generating, using one or more processors of a machine, a data clean room as a local application in a data-consumer database account of a distributed database system;
generating a query from a query template shared with the data-consumer database account by a data-provider database account of the distributed database system, the query comprising one or more fields;
validating that the query conforms with the requirements of the query template by confirming that the query generated from the query template corresponds to a valid template from a plurality of templates and that input values in editable fields of the query conform with input value ranges of the query template, the valid template including the editable fields for a user to input the input values for corresponding query parameters, the query template provided by the data-provider database account and configured to generate the query for execution on a shared dataset shared between the data-consumer database account and the data-provider database account; and
bypassing a firewall of the data-provider database account in response to validating that the query conforming with the requirements of the query template, the firewall including a data share policy managed by the data-provider database account, the bypassing of the firewall enabling access to at least a portion of a data-provider protected dataset;
providing access to the portion of the data-provider protected dataset to the data-consumer database account responsive to the firewall bypass, the data-provider protected dataset protected by the data share policy managed by the data-provider database account;
executing the query on the shared dataset that comprises the portion of the data-provider protected dataset joined with a portion of data from the data-consumer database account to generate results data; and
storing the results data.