Host Channel Manager for Data Processing Accelerator Attestation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for secure communication channels between host systems and data processing accelerators, such as AI accelerators, to protect sensitive transactions from unauthorized access and data leakage, as existing solutions do not adequately safeguard AI training data, models, and inference outputs.
Innovation Solution
A method for attestation between a host system and a data processing accelerator is established using a trusted execution environment, secure channels, and cryptographic key management, including secure boot, memory management, and kernel validation to ensure the integrity and confidentiality of data exchanged between the host and the accelerator.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Power
If data processing accelerators are used to perform sensitive transactions, then computational efficiency and processing capability are improved, but security and protection from unauthorized access deteriorate
Solution Approach 1:
The patent introduces a host channel manager as an intermediary component between the host system and the data processing accelerator. This mediator establishes secure communication channels, manages authentication, and coordinates data exchange while maintaining security controls. The host channel manager acts as a buffer that protects the accelerator from direct unauthorized access while enabling efficient computational operations.
2Reliability
If secure communication channels are established between host system and data processing accelerator, then data protection and integrity are improved, but system complexity and overhead increase
Solution Approach 1:
The patent segments the security functionality into distinct components: a host channel manager for authentication and channel establishment, and a device channel manager for local security coordination. This segmentation allows each component to manage specific security tasks independently, reducing overall system complexity while maintaining comprehensive data protection through structured modular architecture.
3Reliability
If authentication and verification protocols are implemented, then unauthorized access prevention is improved, but processing time and operational overhead increase
Solution Approach 1:
The patent implements preliminary authentication actions during system initialization and channel establishment phases. The host channel manager performs authentication and verification protocols in advance before data processing begins, establishing secure communication channels that can be reused for subsequent operations. This preliminary action reduces the time required for authentication during actual data processing tasks.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
According to one embodiment, a system receives, at a host system a public attestation key (PK_ATT) or a signed PK_ATT from a data processing (DP) accelerator over a bus. The system verifies the PK_ATT using a public root key (PK_RK) associated with the DP accelerator. In response to successfully verifying the PK_ATT, the system transmits a kernel identifier (ID) to the DP accelerator to request attesting a kernel object stored in the DP accelerator. In response to the system receives a kernel digest or a signed kernel digest corresponding to the kernel object form the DP accelerator, verifying the kernel digest using the PK_ATT. The system sends the verification results to the DP accelerator for the DP accelerator to access the kernel object based on the verification results.