Patent ID: 11928157
Assignee: SNOWFLAKE INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 10:
11. A system comprising:
one or more hardware processors of a machine; and
at least one memory storing instructions that, when executed by the one or more hardware processors, cause the system to perform operations comprising:
receiving, from a consumer account, a first query directed towards a shared dataset associated with a provider account, the first query identifying a first operation and including available values specifying data that is accessible by the consumer account by query requests;
accessing a first set of data from the shared dataset to perform the first operation, the first set of data including data accessed from a first column of the shared dataset;
determining, by at least one hardware processor, that the provider account attached a projection constraint policy, by the provider account, to the first column, the projection constraint policy restricting output of data values, to the consumer account, stored in the first column;
determining, based on a context of the first query, that the projection constraint policy should be enforced in relation to the first query;
enforcing the projection constraint policy in relation to the first query, the enforcing comprising enabling the consumer account to perform the first operation on the data values stored in the first column while maintaining confidentiality of the data values; and
generating an output to the first query based on the first set of data and the first operation, the output to the first query maintaining the confidentiality of the data values by not including the data values stored in the first column based on enforcing the projection constraint policy in relation to the first query.