专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09875370B2 Database server and client for query processing on encrypted data 有权
公开(公告)号：US09875370B2
公开(公告)日：2018-01-23
申请号：US14669848
申请日：2015-03-26
申请人： Microsoft Technology Licensing, LLC
发明人： Panagiotis Antonopoulos , Ajay S. Manchepalli , Kapil Vaswani , Haohai Yu , Michael James Zwilling
IPC分类号： G06F21/62 , H04L9/00
CPC分类号： G06F21/6209 , G06F21/6227 , H04L9/008
摘要： Methods, systems, apparatuses, and computer program products are provided for secure handling of queries by a data server (DS) and a database application (DA). A parameterized query is received by the DS from the DA based on a user query received from a requestor. The DS analyzes the parameterized query to attempt to determine an encryption configuration for a transformed version of the user query capable of being evaluated by the DS on encrypted data values. The DS responds to the DA with either a failure to determine the encryption configuration, or by providing the determined encryption configuration to the DA. The DA generates the transformed version of the user query, and provides the transformed version to the DS. The DS evaluates the transformed version of the user query, and provides results to the DA. The DA decrypts the results, and provides the decrypted results to the requestor.

2. 发明授权

US11507371B2 Column data driven arithmetic expression evaluation 有权
公开(公告)号：US11507371B2
公开(公告)日：2022-11-22
申请号：US16710969
申请日：2019-12-11
申请人： Microsoft Technology Licensing, LLC
发明人： Kaan Kara , Kenneth H. Eguro , Haohai Yu , Chirag Varde , Blake D. Pelton
IPC分类号： G06F9/30 , G06F16/22 , G06F30/331 , G06F9/54
摘要： Methods, systems, apparatuses, and computer program products are provided for generating an instruction set for an evaluation engine. An arithmetic expression that combines multiple columns of data (e.g., a first column of data, a second column of data, etc.) is received. Instructions may be generated, that, when executed by an integrated-circuit-based processor, cause the integrated-circuit-based processor to evaluate the arithmetic expression. In examples, a set of instructions may be generated for each column of data represented in the arithmetic expression. For instance, the instructions may comprise a first set of instructions associated with the first column of data, a second set of instructions associated with the second column of data, and so on. The instructions may specify one or more parameters for operations associated with each column of data, such as operations to load data from a buffer, store data into a buffer, arithmetic operations to perform on data, etc.

3. 发明申请

US20160292430A1 COMPUTING ON ENCRYPTED DATA USING DEFERRED EVALUATION 审中-公开
标题翻译：使用递归评估计算加密数据
公开(公告)号：US20160292430A1
公开(公告)日：2016-10-06
申请号：US14676574
申请日：2015-04-01
申请人： Microsoft Technology Licensing, LLC
发明人： Panagiotis Antonopoulos , Ajay S. Manchepalli , Kapil Vaswani , Haohai Yu , Michael James Zwilling
IPC分类号： G06F21/60 , G06F17/30
CPC分类号： G06F21/602 , G06F16/951 , G06F21/6227
摘要： Methods, systems, apparatuses, and computer program products are provided for processing queries. A data server includes a query processor configured to receive a query from a database application, which was received by the database application from a requestor. The query is directed to data stored at the data server. The query processor includes a deferred evaluation determiner and deferred expression determiner. The deferred evaluation determiner is configured to analyze the query, and to designate the query for deferred evaluation by the database application if a predetermined factor is met, such as the query including an operation on encrypted data that is not supported at the data server. The deferred expression determiner is configured to determine expression evaluation information for evaluating at least a portion of the query at the database application. The query processor provides the encrypted data and the expression evaluation information to the database application for evaluation.
摘要翻译：提供方法，系统，设备和计算机程序产品用于处理查询。数据服务器包括被配置为从数据库应用程序接收来自请求者的数据库应用程序接收到的查询的查询处理器。该查询针对存储在数据服务器中的数据。查询处理器包括延迟评估确定器和延迟表达式确定器。延迟评估确定器被配置为分析查询，并且如果满足预定的因素，则指定数据库应用的延迟评估的查询，诸如包括对数据服务器不支持的加密数据的操作的查询。配置延迟表达式确定器以确定用于在数据库应用程序中评估查询的至少一部分的表达式评估信息。查询处理器将加密数据和表达式评估信息提供给数据库应用程序进行评估。

4. 发明授权

US12061558B2 Protection of data in memory of an integrated circuit using a secret token 有权
公开(公告)号：US12061558B2
公开(公告)日：2024-08-13
申请号：US17870144
申请日：2022-07-21
申请人： Microsoft Technology Licensing, LLC
发明人： Blake D. Pelton , Haohai Yu , Chirag Varde
IPC分类号： G06F21/00 , G06F9/46 , G06F12/02 , G06F12/0831 , G06F12/14
CPC分类号： G06F12/1408 , G06F9/468 , G06F12/0246 , G06F12/0835
摘要： Methods, systems, apparatuses, and computer program products are provided for protecting data in a memory of an integrated circuit (IC). A process token is obtained in a special purpose IC from a host that is external to and communicatively connected to the special purpose IC. The process token is stored in a first memory portion of the special purpose IC. In response to receiving a processing request from the host, the processing request is processed, and data generated by processing the processing request is written in a second memory portion of the special purpose IC. When a read request is received to read the data in the second memory portion, a determination is made whether the read request includes a read token that matches the previously stored process token. If the read token matches the process token, the data in the second memory portion may be returned to the host.

5. 发明申请

US20160283728A1 DATABASE SERVER AND CLIENT FOR QUERY PROCESSING ON ENCRYPTED DATA 有权
标题翻译：数据库服务器和客户端对加密数据进行查询处理
公开(公告)号：US20160283728A1
公开(公告)日：2016-09-29
申请号：US14669848
申请日：2015-03-26
申请人： Microsoft Technology Licensing, LLC
发明人： Panagiotis Antonopoulos , Ajay S. Manchepalli , Kapil Vaswani , Haohai Yu , Michael James Zwilling
IPC分类号： G06F21/62
CPC分类号： G06F21/6209 , G06F21/6227 , H04L9/008
摘要： Methods, systems, apparatuses, and computer program products are provided for secure handling of queries by a data server (DS) and a database application (DA). A parameterized query is received by the DS from the DA based on a user query received from a requestor. The DS analyzes the parameterized query to attempt to determine an encryption configuration for a transformed version of the user query capable of being evaluated by the DS on encrypted data values. The DS responds to the DA with either a failure to determine the encryption configuration, or by providing the determined encryption configuration to the DA. The DA generates the transformed version of the user query, and provides the transformed version to the DS. The DS evaluates the transformed version of the user query, and provides results to the DA. The DA decrypts the results, and provides the decrypted results to the requestor.
摘要翻译：提供了方法，系统，设备和计算机程序产品，用于数据服务器（DS）和数据库应用程序（DA）的查询的安全处理。基于从请求者接收的用户查询，DS从DS接收参数化查询。 DS分析参数化查询以尝试确定用于可以由DS对加密数据值进行评估的用户查询的转换版本的加密配置。 DS对DA进行响应，无法确定加密配置，或者通过向DA提供确定的加密配置。 DA生成用户查询的转换版本，并将转换的版本提供给DS。 DS会评估用户查询的转换版本，并向DA提供结果。 DA解密结果，并将解密的结果提供给请求者。

6. 发明授权

US11436160B2 Protection of data in memory of an integrated circuit using a secret token 有权
公开(公告)号：US11436160B2
公开(公告)日：2022-09-06
申请号：US16592520
申请日：2019-10-03
申请人： Microsoft Technology Licensing, LLC
发明人： Blake D. Pelton , Haohai Yu , Chirag Varde
IPC分类号： G06F21/00 , G06F12/14 , G06F9/46 , G06F12/02 , G06F12/0831
摘要： Methods, systems, apparatuses, and computer program products are provided for protecting data in a memory of an integrated circuit (IC). A process token is obtained in a special purpose IC from a host that is external to and communicatively connected to the special purpose IC. The process token is stored in a first memory portion of the special purpose IC. In response to receiving a processing request from the host, the processing request is processed, and data generated by processing the processing request is written in a second memory portion of the special purpose IC. When a read request is received to read the data in the second memory portion, a determination is made whether the read request includes a read token that matches the previously stored process token. If the read token matches the process token, the data in the second memory portion may be returned to the host.

7. 发明申请

US20210182064A1 COLUMN DATA DRIVEN ARITHMETIC EXPRESSION EVALUATION 有权
公开(公告)号：US20210182064A1
公开(公告)日：2021-06-17
申请号：US16710969
申请日：2019-12-11
申请人： Microsoft Technology Licensing, LLC
发明人： Kaan Kara , Kenneth H. Eguro , Haohai Yu , Chirag Varde , Blake D. Pelton
IPC分类号： G06F9/30 , G06F16/22 , G06F9/54 , G06F30/331
摘要： Methods, systems, apparatuses, and computer program products are provided for generating an instruction set for an evaluation engine. An arithmetic expression that combines multiple columns of data (e.g., a first column of data, a second column of data, etc.) is received. Instructions may be generated, that, when executed by an integrated-circuit-based processor, cause the integrated-circuit-based processor to evaluate the arithmetic expression. In examples, a set of instructions may be generated for each column of data represented in the arithmetic expression. For instance, the instructions may comprise a first set of instructions associated with the first column of data, a second set of instructions associated with the second column of data, and so on. The instructions may specify one or more parameters for operations associated with each column of data, such as operations to load data from a buffer, store data into a buffer, arithmetic operations to perform on data, etc.

8. 发明申请

US20210103528A1 PROTECTION OF DATA IN MEMORY OF AN INTEGRATED CIRCUIT USING A SECRET TOKEN 有权
公开(公告)号：US20210103528A1
公开(公告)日：2021-04-08
申请号：US16592520
申请日：2019-10-03
申请人： Microsoft Technology Licensing, LLC
发明人： Blake D. Pelton , Haohai Yu , Chirag Varde
IPC分类号： G06F12/14 , G06F12/02 , G06F12/0831 , G06F9/46
摘要： Methods, systems, apparatuses, and computer program products are provided for protecting data in a memory of an integrated circuit (IC). A process token is obtained in a special purpose IC from a host that is external to and communicatively connected to the special purpose IC. The process token is stored in a first memory portion of the special purpose IC. In response to receiving a processing request from the host, the processing request is processed, and data generated by processing the processing request is written in a second memory portion of the special purpose IC. When a read request is received to read the data in the second memory portion, a determination is made whether the read request includes a read token that matches the previously stored process token. If the read token matches the process token, the data in the second memory portion may be returned to the host.

9. 发明授权

US10482263B2 Computing on encrypted data using deferred evaluation 有权
公开(公告)号：US10482263B2
公开(公告)日：2019-11-19
申请号：US14676574
申请日：2015-04-01
申请人： Microsoft Technology Licensing, LLC
发明人： Panagiotis Antonopoulos , Ajay S. Manchepalli , Kapil Vaswani , Haohai Yu , Michael James Zwilling
IPC分类号： G06F21/60 , G06F16/951 , G06F21/62
摘要： Methods, systems, apparatuses, and computer program products are provided for processing queries. A data server includes a query processor configured to receive a query from a database application, which was received by the database application from a requestor. The query is directed to data stored at the data server. The query processor includes a deferred evaluation determiner and deferred expression determiner. The deferred evaluation determiner is configured to analyze the query, and to designate the query for deferred evaluation by the database application if a predetermined factor is met, such as the query including an operation on encrypted data that is not supported at the data server. The deferred expression determiner is configured to determine expression evaluation information for evaluating at least a portion of the query at the database application. The query processor provides the encrypted data and the expression evaluation information to the database application for evaluation.

10. 发明授权

US09860063B2 Code analysis tool for recommending encryption of data without affecting program semantics 有权
公开(公告)号：US09860063B2
公开(公告)日：2018-01-02
申请号：US14633596
申请日：2015-02-27
申请人： Microsoft Technology Licensing, LLC
发明人： Ajay S. Manchepalli , Haohai Yu , Michael J. Zwilling , Kapil Vaswani , Panagiotis Antonopoulos
IPC分类号： G06F21/62 , H04L9/08 , H04L9/00 , H04L9/14
CPC分类号： H04L9/0897 , G06F21/6227 , H04L9/008 , H04L9/088 , H04L9/14
摘要： Systems, methods and computer program products are described that analyze the code of an application and, based on the analysis, identify whether data elements (e.g., columns) referenced by the code can be encrypted, and for those data elements that can be encrypted, recommend an encryption scheme. The recommended encryption scheme for a given data element may be the highest level of encryption that can be applied thereto without affecting the semantics of the application code. The output generated based on the analysis may not only include a mapping of each data element to a recommended encryption scheme, but may also include an explanation of why each recommendation was made for each data element. Such explanation may include, for example, an identification of the application code that gave rise to the recommendation for each data element.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式