GPU Segmentation for Secure Video Playback and UI Compositing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current secure video solutions on mobile devices cannot perform GPU display compositing in combination with secure video playback, requiring video playback to be suspended to maintain protection for protected content, thus limiting the provision of protected content processing.
Innovation Solution
A data processing system with a host processor and an accelerator that operates in both normal and protected modes, with memory access restrictions ensuring the accelerator can process protected content without leaking data to the operating system, allowing simultaneous secure video playback and user interface display.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If GPU is used for user interface display composition, then user interface functionality is improved, but protected video content security deteriorates
Solution Approach 1:
The patent divides the GPU into two separate processing units: a first GPU for processing protected video content and a second GPU for processing user interface display. This segmentation allows each GPU to be dedicated to a specific function, preventing data leakage while maintaining both protected content security and user interface functionality.
Solution Approach 2:
The patent introduces a display manager as an intermediary component that coordinates between the first GPU (protected content) and the second GPU (user interface). The display manager manages the switching between protected content playback and user interface display, ensuring secure processing while enabling both functions to operate simultaneously without direct data exposure.
2Reliability
If video playback is suspended to maintain protection, then content security is improved, but productivity deteriorates
Solution Approach 1:
By segmenting the GPU into separate units for protected content and user interface processing, the system can maintain video playback continuity while ensuring security. The first GPU continues processing protected video content without interruption, while the second GPU handles user interface tasks, eliminating the need to suspend playback for security maintenance.
3Device complexity
If single GPU is used for both protected content and user interface, then device complexity is reduced, but security vulnerability increases
Solution Approach 1:
The patent segments the GPU into a first GPU for protected content and a second GPU for user interface processing. This segmentation physically separates the processing paths, eliminating data leakage risks while maintaining manageable device complexity through modular architecture.
Solution Approach 2:
The display manager acts as an intermediary that manages communication and switching between the first GPU and second GPU. This intermediary layer coordinates the two separate GPU processes, enabling secure protected content processing while maintaining user interface functionality without direct data exposure between the two processing paths.
Data Source
AI summary
A data processing system includes a host processor and a graphics processing unit operable to process data under the control of an operating system executing on the host processor. The graphics processing unit can be switched between a normal mode of operation in which the it has read and write access to data that is stored in non-protected memory regions 9 but no or write-only access to any protected memory regions 8, and a protected mode of operation in which it has read and write access to data that is stored in protected memory regions 8 but only has read-only access to any non-protected memory regions 9. The data processing system further comprises a mechanism for switching the graphics processing unit from its normal mode of operation to the protected mode of operation, and from its protected mode of operation to the normal mode of operation.