GPU Memory Access Controller for Secure Content Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern operating systems, particularly open platforms, lack strong trust in protecting secure content due to vulnerabilities in kernel mode drivers, which can be altered by third parties, leading to insecure storage and copying of digital rights managed content.
Innovation Solution
Implementing a GPU with a memory access controller that operates in secure and unsecure modes, restricting access to secure memory to prevent unauthorized copying by directing memory transactions to secure or unsecure context banks based on the mode.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If kernel mode drivers are used to control GPU operations, then the GPU can process secure content, but the drivers can be altered by third parties leading to insecure memory storage and copying
Solution Approach 1:
The patent segments the memory access control into two distinct pathways: a secure pathway for protected content and an unsecure pathway for regular content. The memory controller is divided into separate secure and unsecure context banks, preventing mixed access and ensuring that secure content cannot be copied to unsecure memory locations. This segmentation resolves the contradiction by maintaining security reliability while managing complexity through structured separation.
Solution Approach 2:
The patent introduces a memory access controller as an intermediary between the GPU and system memory. This controller enforces security policies by intercepting and filtering memory transactions, directing secure content access through protected pathways and blocking unauthorized copy operations. The intermediary resolves the trust issue by providing hardware-enforced security that operates independently of potentially compromised driver software.
2Reliability
If hardware-enforced security is implemented in the GPU, then secure content can be protected from unauthorized copying, but the device complexity increases
Solution Approach 1:
The patent implements a universal memory access controller that handles both secure and unsecure memory transactions through a single integrated component. The controller can dynamically switch between secure and unsecure modes, and can process different types of memory transactions (reads, writes, flushes) through the same hardware structure. This multi-functionality reduces overall device complexity compared to having completely separate secure and unsecure memory controllers.
Solution Approach 2:
The patent embeds security control logic within the existing GPU memory subsystem architecture. The secure context bank and unsecure context bank are nested within the same memory controller structure, with the security enforcement mechanisms integrated into the normal memory access pathways. This nesting approach adds security functionality without requiring a completely separate secure GPU architecture.
3Reliability
If secure and unsecure memory operations are isolated within the GPU, then unauthorized copying is prevented, but memory access control complexity increases
Solution Approach 1:
The patent implements dynamic memory access control where the memory controller can adaptively switch between secure and unsecure operational modes based on the current GPU state and transaction type. The controller dynamically determines whether to route transactions through the secure context bank or unsecure context bank, providing flexible security enforcement without requiring static, overly complex control structures. This dynamic approach manages complexity by using state-based decision logic rather than rigid control paths.
Data Source
AI summary
This disclosure proposes techniques for graphics processing. In one example, a graphics processing unit (GPU) is configured to access a memory according to one of an unsecure mode and a secure mode. The GPU may include a memory access controller configured to direct memory transactions from at least one hardware unit of the GPU to an unsecure memory unit or a secure memory unit based on the unsecure mode or secure mode and a resource descriptor associated with a memory resource.