Patent ID: 11899811
Assignee: SAP SE
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, perform a method for processing group-level encrypted logical data pages stored on a data volume in connection with a database employing group-level encryption, the method comprising:
based on a database operation requiring access to persisted database data, receiving a request to load a group-level encrypted logical data page into main memory of a database system, the group-level encrypted logical data page being identified by a logical page number;
obtaining a physical block number from a converter based on the logical page number, the converter comprising converter metadata having a value corresponding to an encryption group that the group-level encrypted logical data page belongs to,
wherein said group-level encrypted logical data pages stored in the data volume are associated with a plurality of tenants,
wherein each group-level encrypted logical data page comprises a page header and tenant data,
wherein the page header is encrypted with a data volume encryption key associated with the data volume,
wherein each tenant of the plurality of tenants is associated with a particular encryption group, and wherein the tenant data is encrypted with a group-level encryption key associated with the particular encryption group;
in response to obtaining the physical block number from the converter based on the logical page number, loading the group-level encrypted logical data page into the main memory of the database system, the group-level encrypted logical data page stored at a physical address corresponding to the physical block number within the data volume;
reading, by a data container, the group-level encrypted logical data page associated with the data container, wherein the data container is assigned to a particular encryption group and provides an encryption group identifier;
decrypting, using the data volume encryption key, the page header, wherein database internal operations are performed using the decrypted page header; and
decrypting, using the encryption group identifier and the group-level encryption key, the group-level encrypted logical data page.