Display Controller Secure Mode Data Blending
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices are vulnerable to security threats due to their ability to communicate wirelessly, and existing solutions do not effectively manage the transition from a non-secure to a secure operating mode while maintaining user experience.
Innovation Solution
A display controller that includes separate register sets for open and secure operating systems, with data input circuits and a processor to blend normal and secure data, allowing secure data to be superimposed over normal data in a secure mode, while preventing the non-secure OS from updating secure registers and maintaining resource sharing between modes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure operating system is loaded to reduce security threats, then security reliability is improved, but device complexity increases due to mode transition management
Solution Approach 1:
The patent segments the operating system into two distinct modes: secure mode and non-secure mode. Each mode has its own register set (first register for non-secure, second register for secure) and data input circuit configuration. This segmentation allows the system to maintain security reliability through proper isolation while managing complexity by providing clear separation between secure and non-secure operations.
Solution Approach 2:
The display controller acts as an intermediary between the processor and display device, managing the mode transitions and data blending operations. It contains both first and second data input circuits that can be selectively activated based on the operating mode, serving as a mediator that handles the complexity of mode switching without requiring changes to the processor or display device.
2Reliability
If separate register sets are implemented for secure and non-secure modes, then security isolation is improved, but device complexity increases
Solution Approach 1:
The patent implements separate register sets: a first register for non-secure mode configuration and a second register for secure mode configuration. This segmentation provides security isolation by ensuring that each mode has its own dedicated configuration space, preventing unauthorized access or modification of secure settings from non-secure contexts.
Solution Approach 2:
The display controller is designed with multi-functionality to handle both secure and non-secure operations through its dual register set architecture. The same display controller hardware can operate in either mode, with the appropriate register set activated based on the current operating mode, reducing overall device complexity while maintaining security isolation.
3Reliability
If secure data is superimposed over normal data in blended display, then security visibility is improved, but ease of operation decreases
Solution Approach 1:
The patent implements dynamic display blending where secure data can be superimposed over normal data based on the current operating mode. The display controller dynamically adjusts the data input circuits and blending operations according to whether secure or non-secure mode is active, allowing security visibility to be improved when needed while automatically returning to normal operation when not required.
Solution Approach 2:
The display controller automatically manages the blending of secure and normal data based on the state of the register sets and current operating mode. The system self-adjusts the display output without requiring manual intervention, improving security visibility when in secure mode while maintaining ease of operation through automated mode-based control.
4Reliability
If data blending is implemented to show secure data, then security monitoring is improved, but processing complexity increases
Solution Approach 1:
The patent segments the data input circuits into a first data input circuit for normal data and a second data input circuit for secure data. This segmentation allows the system to process and blend the two data streams separately before combining them for display, improving security monitoring capabilities while managing processing complexity through organized separation of data paths.
Data Source
AI summary
A display controller includes a first register set by an open operating system, a second register set by a secure operating system, a first data input circuit configured to read normal data according to set information in the first register, a second data input circuit configured to read secure data according to set information in the second register, and a data processor configured to blend and output the normal data with the secure data to display the secure data over the normal data.


