Patent ID: 11880491
Assignee: SNOWFLAKE INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 15:
16. A method comprising:
accessing, by a processing device, a query plan that when executed causes access of stored data from a specified entity of a database system; and
during execution of the query plan:
determining, by the processing device, a set of tags assigned to the specified entity;
determining, by the processing device, a set of masking policies assigned to at least one tag in the set of tags, and
applying, by the processing device, at least one masking policy, from the set of masking policies, on the specified entity by applying a mask to at least a portion of the stored data from the specified entity prior to the stored data being accessed for the query plan, the mask being applied to at least the portion of the stored data according to a masking definition specified in the at least one masking policy assigned to the at least one tag, the masking definition defining a masking function, the applying the mask to at least the portion of the stored data comprises providing access to the stored data by returning the masking function in place of a reference to the specified entity.