Peripheral Device Hardware Encryption for CPU Load Reduction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional methods for preventing unauthorized access to confidential data are inefficient, as they often overload the central processing unit by encrypting and decrypting sensitive encryption routines, leading to reduced system performance.

Innovation Solution

A tamper-resistant system where sensitive data is stored in an encrypted format and decrypted only when needed by a peripheral device, using hardware resources to encrypt and decrypt, thereby reducing the processing load on the central processing unit and enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the central processing unit is used to encrypt and decrypt the encryption routine, then the sensitive data can be protected from unauthorized access, but the central processing unit becomes overloaded and system performance is reduced

Engineering Contradiction:
Improvedata securityVSAvoidsystem performance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent extracts the encryption and decryption functions from the central processing unit and implements them in dedicated hardware circuits within the peripheral device. This separation allows the CPU to focus on computational tasks while the peripheral device handles security operations independently, resolving the contradiction between data protection and system performance.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces hardware-based encryption and decryption circuits as intermediary components between the CPU and the data processing operations. These hardware circuits act as mediators that perform security functions without burdening the central processing unit, thereby maintaining both security and performance.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the encryption routine is encrypted when not in use, then unauthorized access to the encryption routine is prevented, but the processing load on the central processing unit increases

Engineering Contradiction:
Improveprotection of encryption routineVSAvoidprocessing load
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The peripheral device performs self-service by containing its own hardware-based encryption and decryption capabilities. The encryption routine is encrypted and stored in the peripheral device, and when needed, the hardware circuits automatically decrypt and execute the routine without requiring CPU intervention for security operations, thus reducing overall processing load.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS7594265B2System for preventing unauthorized access to sensitive data and a method thereof
Publication Date: 2009.09.22 ATI TECHNOLOGIES ULC
  • US7594265B2 patent drawing
  • US7594265B2 patent drawing
  • US7594265B2 patent drawing

AI summary

A method and system for prevention of unauthorized access to multimedia data are disclosed herein. A tamper-resistant system having a software driver, a peripheral device, and a system memory is used to encrypt sensitive routines used by the software driver. The software driver is used to interface between one component of the system, such as a processor, and a peripheral device, such as a graphics chip. The driver incorporates one or more sensitive routines, that if divulged, could possibly allow an unauthorized party access to data processed by the software driver. Accordingly, in one embodiment, the sensitive routines are stored in an encrypted format with the driver. To access a sensitive routine, the driver submits the associated encrypted routine to the peripheral device, as well as a decryption method, if desired, where it is decrypted and stored in a plaintext format in a location, such as system memory, accessible to both the driver and the peripheral device. The driver can then use the plaintext routine to process the data. When finished processing the data, the plaintext routine can be re-encrypted using one or more of a variety of encryption methods and stored with the driver. Any remaining copies of the plaintext routine can be removed from the system. By encrypting the sensitive routines at all times other than when in immediate use, the system can effectively prevent an unauthorized party from accessing data based on knowledge about the sensitive routine. In addition, the use of the hardware of the peripheral device to encrypt/decrypt the sensitive routines provides an additional barrier to an unauthorized party.