Granted Patent B2

US 12,200,119 · App. 17/010,993 · Granted Jan 14, 2025

Inventors: Rohit Jog (Mountain View, CA); Cristina Schmidt (Mountain View, CA); Clifford Arthur Frey (Mountain View, CA)

Assignee: Google LLC

H04L9/088H04L9/0861H04L9/14H04L63/101H04L9/0822

Abstract

Claims (66)

1. A method comprising:

receiving, at data processing hardware, a table associated with a particular user, the table comprising a plurality of data blocks;

splitting, by the data processing hardware, the table into a plurality of tablets, each tablet comprising a corresponding portion of the plurality of data blocks of the table;

generating, by the data processing hardware, a unique resource key uniquely associated with the table;

for each corresponding tablet of the plurality of tablets:

generating, by the data processing hardware, a unique data encryption key for the corresponding tablet;

encrypting, by the data processing hardware, the corresponding tablet with the unique data encryption key such that decryption of the corresponding tablet requires the unique data encryption key; and

encrypting, by the data processing hardware, the unique data encryption key with the unique resource key that is uniquely associated with the table such that decryption of the unique data encryption key requires the unique resource key;

distributing, by the data processing hardware, control of each encrypted tablet and each corresponding encrypted data encryption key to a respective tablet server of a plurality of tablet servers, each respective tablet server independent from each other respective tablet server and controlling access to one or more of the encrypted tablets from the table;

encrypting, by the data processing hardware, the unique resource key with an access control key associated with an access control list (ACL) comprising a list of tablet servers authorized to access the unique resource key, wherein the ACL is based on a role assigned to one or more tablet servers of the plurality of tablet servers;

distributing, by the data processing hardware, the unique resource key encrypted with the access control key to each tablet server in the plurality of tablet servers, wherein at least one tablet server of the plurality of tablet servers is not authorized to access the unique resource key by the ACL; and

transmitting, by the data processing hardware, the unique resource key to a remote entity, the unique resource key causing the remote entity to:

encrypt the unique resource key with a user key associated with the particular user and kept secret from the data processing hardware; and

transmit the unique resource key encrypted with the user key to the data processing hardware.

2. The method of claim 1 , further comprising, after receiving the unique resource key encrypted with the user key from the remote entity:

obtaining, by the data processing hardware, a request to access one or more data blocks of the table;

generating, by the data processing hardware, a resource key decryption request comprising the unique resource key encrypted with the user key; and

transmitting, by the data processing hardware, the resource key decryption request to the remote entity, the resource key decryption request when received by the remote entity causing the remote entity to:

decrypt the unique resource key encrypted with the user key with the user key associated with the particular user; and

transmit the decrypted unique resource key to the data processing hardware.

3. The method of claim 1 , further comprising:

receiving, at the data processing hardware, a resource key request requesting the unique resource key in a decrypted form from one of the tablet servers of the plurality of tablet servers;

determining, by the data processing hardware, whether the one of the tablet servers is authorized to access the unique resource key based on the ACL;

when the one of the tablet servers is authorized to access the unique resource key, decrypting, by the data processing hardware, the unique resource key encrypted with the access control key with the access control key; and

transmitting, by the data processing hardware, the decrypted unique resource key to the one of the tablet servers.

4. The method of claim 3 , wherein the decrypted unique resource key, when received by the one of the tablet servers causes the one of the tablet servers to:

decrypt, using the decrypted unique resource key, the unique data encryption key corresponding to at least one tablet controlled by the one of the tablet servers; and

decrypt, using the decrypted unique data encryption key, the corresponding at least one tablet.

5. The method of claim 1 , wherein the unique resource key comprises an expiration time limit.

6. The method of claim 5 , further comprising rotating, by the data processing hardware, the unique resource key at a rotation rate that is less than the expiration time limit of the unique resource key.

7. The method of claim 6 , wherein the expiration time limit and the rotation rate are each configurable by the particular user.

8. The method of claim 1 , wherein the corresponding portion of data blocks of each tablet includes different data blocks than the corresponding portion of data blocks of each other tablet.

9. A system comprising:

data processing hardware; and

memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations comprising:

receiving a table associated with a particular user, the table comprising a plurality of data blocks;

splitting the table into a plurality of tablets, each tablet comprising a corresponding portion of the plurality of data blocks of the table;

generating a unique resource key uniquely associated with the table;

for each corresponding tablet of the plurality of tablets,

generating a unique data encryption key for the corresponding tablet;

encrypting the corresponding tablet with the unique data encryption key such that decryption of the corresponding tablet requires the unique data encryption key; and

encrypting the unique data encryption key with the unique resource key that is uniquely associated with the table such that decryption of the unique data encryption key requires the unique resource key;

distributing control of each encrypted tablet and each corresponding encrypted data encryption key to a respective tablet server of a plurality of tablet servers, each respective tablet server independent from each other respective tablet server and controlling access to one or more of the encrypted tablets from the table;

encrypting the unique resource key with an access control key associated with an access control list (ACL) comprising a list of tablet servers authorized to access the unique resource key, wherein the ACL is based on a role assigned to one or more tablet servers of the plurality of tablet servers;

distributing the unique resource key encrypted with the access control key to each tablet server in the plurality of tablet servers, wherein at least one tablet server of the plurality of tablet servers is not authorized to access the unique resource key by the ACL; and

transmitting the unique resource key to a remote entity, the unique resource key causing the remote entity to:

encrypt the unique resource key with a user key associated with the particular user and kept secret; and

transmit the unique resource key encrypted with the user key to the data processing hardware.

10. The system of claim 9 , wherein the operations further comprise, after receiving the unique resource key encrypted with the user key from the remote entity:

obtaining a request to access one or more data blocks of the table;

generating a resource key decryption request comprising the unique resource key encrypted with the user key; and

transmitting the resource key decryption request to the remote entity, the resource key decryption request when received by the remote entity causing the remote entity to:

decrypt the unique resource key encrypted with the user key with the user key associated with the particular user; and

transmit the decrypted unique resource key to the data processing hardware.

11. The system of claim 9 , wherein the operations further comprise:

receiving a resource key request requesting the unique resource key in a decrypted form from one of the tablet servers of the plurality of tablet servers;

determining whether the one of the tablet servers is authorized to access the unique resource key based on the ACL;

when the one of the tablet servers is authorized to access the unique resource key, decrypting the unique resource key encrypted with the access control key with the access control key; and

transmitting the decrypted unique resource key to the one of the tablet servers.

12. The system of claim 11 , wherein the decrypted unique resource key, when received by the one of the tablet servers causes the one of the tablet servers to:

decrypt, using the decrypted unique resource key, the unique data encryption key corresponding to at least one tablet controlled by the one of the tablet servers; and

decrypt, using the decrypted unique data encryption key, the corresponding at least one tablet.

13. The system of claim 9 , wherein the unique resource key comprises an expiration time limit.

14. The system of claim 13 , wherein the operations further comprise rotating the unique resource key at a rotation rate that is less than the expiration time limit of the unique resource key.

15. The system of claim 14 , wherein the expiration time limit and the rotation rate are each configurable by the particular user.

16. The system of claim 9 , wherein the corresponding portion of data blocks of each tablet includes different data blocks than the corresponding portion of data blocks of each other tablet.

Assignments (1)

Continuity (1)

References Cited (62)