Patent ID: 11860673
Assignee: AMAZON TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 5:
6. A method, comprising:
storing, by a plurality of nodes of a distributed database, a replicated version of an encrypted table, the encrypted table accessible using a table encryption key encrypted by a master encryption key, wherein access to the master encryption key is based at least in part on authorization to access the master encryption key granted by a client of the distributed database;
monitoring status information associated with the master encryption key, wherein the monitoring comprises a sweeper process examining metadata maintained by the distributed database to identify a plurality of encrypted tables and respective master encryption key status of the plurality of encrypted tables maintained by the distributed database, wherein the examination by the sweeper process is based at least in part on the metadata maintained by the distributed database, wherein the metadata describes each of the plurality of encrypted tables and comprises information indicative of identity and status of the master encryption key;
identifying a change in a status of the master encryption key used to generate the table encryption key; and
responding to the change in the status of the master encryption key, wherein the response to the change maintains access to the encrypted table for a threshold period of time after the change in the status of the master encryption key and indicates whether restoration of authorization to access the master encryption key has been granted by the client of the distributed database, wherein the metadata is updated based at least in part on the response.