Graphics Memory Content Protection via Privilege Map Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional computer systems fail to provide cost-effective end-to-end content protection in graphics memory, as they rely on encryption and decryption mechanisms that negatively impact performance and require unnecessary encryption of both protected and unprotected content, leading to inefficiencies and increased resource usage.
Innovation Solution
A method and system that utilize a privilege map with restricted access to manage memory pages, allowing only authorized access to protected content, thereby eliminating the need for repeated encryption and decryption, and ensuring secure storage and processing without compromising performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption and decryption mechanisms are used to protect content in graphics memory, then content security is improved, but system performance deteriorates due to repeated encrypt/decrypt operations
Solution Approach 1:
The patent replaces the mechanical encryption/decryption process with a privilege-based access control mechanism. Instead of encrypting content and requiring decryption for access, the system uses privilege maps and privilege levels to control access to memory pages. This substitution eliminates the performance overhead of repeated cryptographic operations while maintaining security through authorized access paths.
Solution Approach 2:
The patent changes the security parameter from cryptographic state (encrypted/decrypted) to access privilege state (privileged/unprivileged). By associating privilege levels with memory pages and controlling access based on these privileges, the system avoids the need for encryption/decryption operations, thereby improving performance while maintaining content protection.
2Reliability
If encryption is applied to all content in memory, then content protection is improved, but resource usage increases due to unnecessary encryption of unprotected content
Solution Approach 1:
The patent applies security measures locally and selectively rather than universally. By associating privilege levels with specific memory pages and enforcing access control only for privileged pages, the system protects only the content that requires protection. Unprotected content remains accessible without encryption overhead, eliminating wasted resources on unnecessary security operations.
3Reliability
If privilege-based access control is implemented, then access security is improved, but device complexity increases due to privilege map management
Solution Approach 1:
The patent integrates privilege map management into the existing memory management unit (MMU), allowing the MMU to serve multiple functions: traditional memory address translation and privilege-based access control. This multi-functionality approach avoids adding separate complex security management hardware, thereby limiting the increase in device complexity while achieving improved access security.
Data Source
AI summary
A method and system for protecting content in graphics memory are disclosed. Specifically, one embodiment of the present invention sets forth a method, which includes the steps of storing a first privilege level in a privilege map with restricted access, wherein the first privilege level is associated with a memory page used to store the content; and determining whether to permit a request to access the memory page based on the first privilege level.