Contiguous Memory Area for Secure Video Decryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The high cost of using multiple independent memories for video decryption and decoding in secure operating systems leads to increased production costs without effectively utilizing memory resources, resulting in potential waste and inefficiency.

Innovation Solution

A memory management method that creates a contiguous memory area, sets access permissions during use, and releases resources after decoding is completed, allowing for shared memory usage while maintaining data security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple independent memories are used for video decryption and decoding, then data security is guaranteed, but manufacturing cost increases and memory resources are wasted

Engineering Contradiction:
Improvedata securityVSAvoidmanufacturing cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent merges multiple independent memory areas into a single shared memory area for video decryption and decoding operations. Instead of allocating separate memory spaces for secure operations and regular operations, the system creates one memory area that can be dynamically accessed by different operating systems through permission control, thereby reducing manufacturing costs while maintaining security through access restrictions rather than physical isolation

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent introduces an intermediary mechanism (memory permission management system) that mediates access between the master operating system and the secure operating system to the shared memory area. This intermediary controls read/write permissions dynamically, allowing the secure operating system to access only authorized portions of the memory during decryption and decoding, while preventing unauthorized access, thus resolving the contradiction between shared memory and data security

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If multiple independent memories are used for video decryption and decoding, then data security is guaranteed, but memory resource utilization decreases

Engineering Contradiction:
Improvedata securityVSAvoidmemory resource utilization
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements dynamic memory allocation and permission management where the secure operating system's access permissions to the shared memory area are activated only when decryption or decoding operations are required. During these operations, the secure system gains temporary access to the memory area; otherwise, the memory remains accessible to the master operating system. This dynamic switching maximizes memory resource utilization while maintaining security during critical operations

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The shared memory area serves multiple functions: it acts as regular memory for the master operating system during normal operations, and as secure memory for the secure operating system during video decryption and decoding. This multi-functionality eliminates the need for dedicated independent memory spaces for different purposes, thereby improving overall memory resource utilization while maintaining security through role-based access control

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11366880B2Playing memory management method
Publication Date: 2022.06.21 AMLOGIC (SHANGHAI) CO LTD
  • US11366880B2 patent drawing
  • US11366880B2 patent drawing
  • US11366880B2 patent drawing

AI summary

The invention comprises a playing memory management method, comprising: Step S1, creating a contiguous memory area: Step S2, dividing a contiguous first memory range from the memory area when digital rights management playing information is received; Step S3, setting, by a secure operating system, an access permission for the first memory range; Step S4, performing, by the secure operating system, a decoding operation in the first memory range until the decoding operation is completed; and Step S5, clearing, by the secure operating system, data in the first memory range, releasing the access permission for the first memory range, and releasing the first memory range. The present invention has the beneficial effects that the memory sharing is realized by creating one memory area, setting the access permission during use and clearing data and releasing the access permission after use, so that the manufacturing cost is reduced.