US 12,147,558 B2
Native multi-tenant encryption for database system
Patrick Voelker, Mannheim (DE); Holger Mack, Karlsruhe (DE); Meinolf Block, Heidelberg (DE); Thorsten Glebe, Leimen (DE); Mihnea Andrei, Issy les Moulineaux (FR); Yong Sik Kwon, Seoul (KR); Dirk Thomsen, Heidelberg (DE); Martin Schindewolf, Walldorf (DE); Martin Kittel, Berlin (DE); Myung Sun Park, Seoul (KR); Beomsoo Kim, Seoul (KR); Martin Heidel, Walldorf (DE); Christian Bensberg, Heidelberg (DE); Fabian Garagnon, Berlin (DE); Michael Muehle, Walldorf (DE); Sergej Hardock, Herborn (DE); Johannes Beigel, Rauenberg (DE); Sascha Zorn, Schwetzingen (DE); Christoph Hohner, Mannheim (DE); and Andreas Hartel, Heidelberg (DE)
Assigned to SAP SE, Walldorf (DE)
Filed by SAP SE, Walldorf (DE)
Filed on Oct. 18, 2022, as Appl. No. 17/968,136.
Claims priority of provisional application 63/352,779, filed on Jun. 16, 2022.
Claims priority of provisional application 63/352,811, filed on Jun. 16, 2022.
Prior Publication US 2023/0409731 A1, Dec. 21, 2023
Int. Cl. G06F 21/00 (2013.01); G06F 21/62 (2013.01); H04L 9/08 (2006.01)
CPC G06F 21/6227 (2013.01) [H04L 9/0822 (2013.01); H04L 9/0825 (2013.01); H04L 9/0891 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A database system comprising:
a persistent storage system;
a memory storing:
metadata defining a tenant object and a plurality of database artifacts;
a first instance of the tenant object, the first instance associated with a first plurality of the database artifacts including first data associated with the first instance of the tenant object; and
a second instance of the tenant object, the second instance associated with a second plurality of the database artifacts including second data associated with the second instance of the tenant object; and
a processing unit to execute program code of a database instance to cause the database system to:
encrypt the first data associated with the first instance of the tenant object using a first public encryption key and store the encrypted first data in the persistent storage system; and
encrypt the second data associated with the second instance of the tenant object using a second public encryption key and store the encrypted second data in the persistent storage system.