Accelerator Trustworthiness via Secure Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In heterogeneous computing systems, accelerators face trustworthiness issues due to potential tampering of input/output data and compromised integrity, especially in shared environments where malicious users or system administrators can infect accelerator libraries or firmware, leading to security vulnerabilities.

Innovation Solution

Implementing secure and authenticated communication between host systems and accelerators using public-key cryptography, AES-GCM encryption, and synchronized sequence numbers to verify the authenticity of both the accelerator and data, ensuring that input and output are encrypted and tamper-proof, thereby maintaining the integrity of computations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If accelerators are used in shared heterogeneous computing environments, then computing productivity and resource utilization are improved, but security vulnerabilities and trustworthiness issues worsen due to potential tampering by malicious users or system administrators

Engineering Contradiction:
Improvecomputing productivityVSAvoidtrustworthiness
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent applies preliminary action by performing authentication and encryption setup before the accelerator processes workloads. The host system and accelerator establish secure communication channels, exchange cryptographic keys, and verify identities in advance. This preliminary security configuration ensures that when the accelerator processes sensitive computations in shared environments, the trustworthiness is already established, preventing malicious tampering while maintaining high productivity.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces cryptographic protocols and authentication mechanisms as intermediaries between the host system and accelerator. These intermediary security layers verify the authenticity of workloads, inputs, and outputs without directly interfering with the accelerator's computational performance. The intermediary authentication process acts as a trusted mediator that guarantees trustworthiness while allowing the accelerator to maintain its high productivity in shared environments.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authentication and encryption protocols are implemented between host systems and accelerators, then security and data integrity are improved, but communication overhead and processing time increase

Engineering Contradiction:
Improvedata integrityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent minimizes time loss by performing authentication and key exchange operations in advance, before the actual computational workload is executed. The host system and accelerator establish secure communication channels and verify identities beforehand, so that during the actual computation, the security checks do not repeatedly interrupt the processing flow. This preliminary action ensures data integrity while reducing the impact of authentication overhead on total processing time.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent applies partial action by implementing authentication and encryption only for critical data paths and sensitive operations, rather than uniformly applying full security protocols to all communications. This selective approach maintains data integrity for essential workloads while reducing the overall communication overhead and processing time penalty associated with comprehensive authentication and encryption for every operation.

Inventive Principle:
Principle #16Partial or excessive action

3Object-affected harmful factors

If secure communication channels with encryption are established, then security against malicious activities is improved, but computational overhead and energy consumption increase

Engineering Contradiction:
Improvesecurity vulnerabilitiesVSAvoidenergy consumption
Core Design Contradiction:
Object-affected harmful factorsVSUse of energy by moving object

Solution Approach 1:

The patent reduces energy consumption by establishing secure communication channels and performing cryptographic key exchange in advance, before the accelerator executes energy-intensive computational workloads. The preliminary security setup ensures protection against malicious activities, while the actual computation phase can proceed with minimal additional cryptographic overhead, thus reducing the total energy consumption compared to continuous encryption during computation.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent applies partial action by implementing strong encryption and authentication only for data transmission between host and accelerator, while using lighter security mechanisms or cached credentials during the accelerator's internal processing. This selective security approach protects against external malicious activities while minimizing the computational and energy overhead during the actual workload execution.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS12182627B2Accelerator trustworthiness
Publication Date: 2024.12.31 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US12182627B2 patent drawing
  • US12182627B2 patent drawing
  • US12182627B2 patent drawing

AI summary

Trustworthiness of an accelerator in heterogenous systems is increased. A workload of an application is offloaded to an accelerator for the accelerator to perform the workload. The accelerator is ensured to generate an output of the workload based on offloading the workload. The accelerator is identified as generating an output of the workload based on offloading the workload. Both an input and the output of the workload are ensured to be authentic based on offloading the workload to the accelerator. Both the input and the output of the workload are ensured to be securely transmitted based on offloading the workload to the accelerator.