GPU Offloading for CPU Security Task Execution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Computing platforms face performance and power consumption issues when executing security tasks on central processing units (CPUs), which can lead to reduced ability to detect and mitigate malware effectively due to CPU cycle and power restrictions.

Innovation Solution

Offloading security tasks to graphics processing units (GPUs) to reduce CPU usage and enhance malware detection capabilities by leveraging GPU's efficiency in handling memory scanning operations while ensuring secure execution through trusted channels and hypervisor protection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security tasks are executed on the CPU, then malware detection capability is maintained, but CPU cycle consumption increases and power consumption rises

Engineering Contradiction:
Improvemalware detection capabilityVSAvoidCPU cycle consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent extracts security tasks from the CPU and relocates them to the GPU. The CPU prepares security tasks and transfers them to the GPU via a graphics driver, which executes the memory scanning operations. This separation allows the CPU to maintain malware detection capability while significantly reducing its cycle consumption and power usage.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The graphics driver acts as an intermediary between the CPU and GPU for security task execution. The CPU submits security tasks to the graphics driver, which then manages GPU execution of these tasks. This intermediary mechanism enables efficient task distribution and resource management across different processing units.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If security tasks are executed on the CPU, then malware detection is performed, but system performance deteriorates due to CPU restrictions

Engineering Contradiction:
Improvemalware detectionVSAvoidsystem performance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

Security tasks are extracted from the CPU workload and assigned to the GPU. The CPU focuses on high-level security task management while the GPU handles intensive memory scanning operations. This extraction improves overall system performance by preventing CPU bottlenecks while maintaining comprehensive malware detection capabilities.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The system dynamically distributes security tasks between the CPU and GPU based on workload characteristics. The CPU prepares and manages security tasks, while the GPU executes memory-intensive scanning operations. This dynamic task allocation optimizes system performance by matching task requirements with appropriate processing capabilities.

Inventive Principle:
Principle #15Dynamics

3Use of energy by moving object

If security tasks are offloaded to the GPU, then CPU usage is reduced, but new security vulnerabilities may be introduced

Engineering Contradiction:
ImproveCPU usage reductionVSAvoidsecurity vulnerabilities
Core Design Contradiction:
Use of energy by moving objectVSObject-affected harmful factors

Solution Approach 1:

The graphics driver serves as a trusted intermediary that manages communication between the CPU and GPU for security tasks. It handles task submission, execution monitoring, and result retrieval, ensuring that the GPU executes only authorized security tasks. This intermediary layer prevents unauthorized access and maintains security boundaries.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements self-service security mechanisms where the GPU executes security tasks autonomously under the management of the graphics driver. The GPU performs memory scanning operations independently once tasks are submitted, reducing the need for continuous CPU intervention while maintaining security through established driver protocols and trusted execution pathways.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10073972B2Computing platform security methods and apparatus
Publication Date: 2018.09.11 MCAFEE LLC
  • US10073972B2 patent drawing
  • US10073972B2 patent drawing
  • US10073972B2 patent drawing

AI summary

Computing platform security methods and apparatus are disclosed. An example apparatus includes a security application to configure a security task, the security task to detect a malicious element on a computing platform, the computing platform including a central processing unit and a graphics processing unit; and an offloader to determine whether the central processing unit or the graphics processing unit is to execute the security task; and when the graphics processing unit is to execute the security task, offload the security task to the graphics processing unit for execution.