Obfuscation Kernel Algorithm for DP Accelerator Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data transmission for AI training data, models, and inference outputs is not adequately protected, and existing cryptographic key-based solutions are slow and impractical for securing communication channels between hosts and data processing accelerators.
Innovation Solution
Implementing an obfuscation scheme using an obfuscation kernel algorithm to obscure and de-obfuscate communication data between hosts and data processing accelerators, providing multiple layers of protection including trusted execution environments, secure boot mechanisms, and memory-safe programming to secure data transmissions without the need for cryptography-based hardware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic key-based solutions are used to protect data transmission, then data security is improved, but system speed and practicality deteriorate
Solution Approach 1:
The patent replaces cryptographic key-based security mechanisms with a hardware-based obfuscation system using an obfuscation unit and obfuscation kernel algorithm. This substitution eliminates the computational overhead of cryptographic operations while maintaining security through hardware-enforced obfuscation of data in transit between the data processing accelerator and host system.
2Reliability
If cryptographic hardware is implemented to secure communication channels, then data protection is improved, but device complexity increases
Solution Approach 1:
The patent merges the security functionality directly into the data processing accelerator by integrating an obfuscation unit within the accelerator architecture. This consolidation combines data processing and security obfuscation functions into a single integrated system, eliminating the need for separate cryptographic hardware modules and reducing overall system complexity.
Solution Approach 2:
The obfuscation unit serves multiple functions: it obfuscates data leaving the accelerator, de-obfuscates incoming data, and manages obfuscation kernel algorithms. This multi-functional design replaces what would traditionally require multiple separate security components, thereby reducing device complexity while maintaining comprehensive data protection.
Data Source
AI summary
According to one embodiment, a host communicates with a data processing (DP) accelerator using an obfuscation scheme. The DP accelerator receives an obfuscation kernel algorithm (or obfuscation algorithm), where the obfuscation kernel algorithm is used to obfuscate and de-obfuscate data in communication with a host. The DP accelerator de-obfuscates, using the obfuscation kernel algorithm, obfuscated data received from the host for a prediction request to obtain one or more AI models. The DP accelerator generates prediction results by applying the one or more AI models to a prediction input. The DP accelerator obfuscates, using the obfuscation kernel algorithm, the prediction results. The DP accelerator sends the obfuscated prediction results to the host, where the host retrieves the prediction results by de-obfuscating the obfuscated prediction results.