Host Channel Manager for Data Processing Accelerator Attestation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for secure communication channels between host systems and data processing accelerators, such as AI accelerators, to protect sensitive transactions from unauthorized access and data leakage, as existing solutions do not adequately safeguard AI training data, models, and inference outputs.

Innovation Solution

A method for attestation between a host system and a data processing accelerator is established using a trusted execution environment, secure channels, and cryptographic key management, including secure boot, memory management, and kernel validation to ensure the integrity and confidentiality of data exchanged between the host and the accelerator.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Power

If data processing accelerators are used to perform sensitive transactions, then computational efficiency and processing capability are improved, but security and protection from unauthorized access deteriorate

Engineering Contradiction:
Improvecomputational efficiencyVSAvoidsecurity protection
Core Design Contradiction:
PowerVSReliability

Solution Approach 1:

The patent introduces a host channel manager as an intermediary component between the host system and the data processing accelerator. This mediator establishes secure communication channels, manages authentication, and coordinates data exchange while maintaining security controls. The host channel manager acts as a buffer that protects the accelerator from direct unauthorized access while enabling efficient computational operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If secure communication channels are established between host system and data processing accelerator, then data protection and integrity are improved, but system complexity and overhead increase

Engineering Contradiction:
Improvedata protectionVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the security functionality into distinct components: a host channel manager for authentication and channel establishment, and a device channel manager for local security coordination. This segmentation allows each component to manage specific security tasks independently, reducing overall system complexity while maintaining comprehensive data protection through structured modular architecture.

Inventive Principle:
Principle #1Segmentation

3Reliability

If authentication and verification protocols are implemented, then unauthorized access prevention is improved, but processing time and operational overhead increase

Engineering Contradiction:
Improveunauthorized access preventionVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary authentication actions during system initialization and channel establishment phases. The host channel manager performs authentication and verification protocols in advance before data processing begins, establishing secure communication channels that can be reused for subsequent operations. This preliminary action reduces the time required for authentication during actual data processing tasks.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3794763B1An attestation protocol between a host system and a data processing accelerator
Publication Date: 2024.08.14 BAIDU COM TIMES TECH (BEIJING) CO LTD
  • EP3794763B1 patent drawingFigure 1
  • EP3794763B1 patent drawingFigure 2
  • EP3794763B1 patent drawingFigure 3

AI summary

According to one embodiment, a system receives, at a host system a public attestation key (PK_ATT) or a signed PK_ATT from a data processing (DP) accelerator over a bus. The system verifies the PK_ATT using a public root key (PK_RK) associated with the DP accelerator. In response to successfully verifying the PK_ATT, the system transmits a kernel identifier (ID) to the DP accelerator to request attesting a kernel object stored in the DP accelerator. In response to the system receives a kernel digest or a signed kernel digest corresponding to the kernel object form the DP accelerator, verifying the kernel digest using the PK_ATT. The system sends the verification results to the DP accelerator for the DP accelerator to access the kernel object based on the verification results.