Patent ID: 11870895
Assignee: SNOWFLAKE INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A computer-implemented method comprising:
receiving, by an application of a data platform, a secret;
communicating, by the application to an encryption client, the secret;
generating, by the encryption client, a Data encryption Key (DEK);
generating, by the encryption client, an encrypted secret using the DEK and the secret;
communicating, by the encryption client to an encryption server, the DEK while retaining the encrypted secret;
generating, by the encryption server, an encrypted DEK using a Transit Encryption Key (TEK);
communicating, by the encryption server to the encryption client, the encrypted DEK and metadata of the encrypted DEK;
generating, by the encryption client, a binary large object (blob) using the retained encrypted secret, the metadata of the encrypted DEK, and the encrypted DEK;
communicating, by the encryption client to the application, the blob;
storing, by the application, the blob on a data storage device;
retrieving, by the application, the blob from the data storage device;
communicating, by the application to the encryption client, the blob;
extracting, by the encryption client, from the blob, the encrypted DEK and the metadata of the encrypted DEK;
communicating, by the encryption client to the encryption server, the encrypted DEK and the metadata of the encrypted DEK;
generating, by the encryption server, the DEK using the encrypted DEK and the TEK;
communicating, by the encryption server to the encryption client, the DEK;
generating, by the encryption client, the secret using the DEK and the encrypted secret;
communicating, by the encryption client to the application, the secret; and
accessing, by the application, an object of a data platform using the secret.