Peripheral Resource Isolation Using Hidden Memory Ownership Metadata
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing peripheral devices face challenges in securing sensitive code and data due to the presence of both a host and a peripheral device that can be attacked by malicious parties, leading to potential security breaches and underutilization of resources through static resource partitioning.
Innovation Solution
A peripheral device package with a command processor that enforces resource isolation using a datastructure in hidden memory, allowing dynamic allocation and ensuring secure user runtime processes can operate on untrusted hosts by verifying resource allocation requests through a datastructure in hidden memory, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static resource partitioning is used to secure sensitive code and data, then security is improved, but resource utilization deteriorates
Solution Approach 1:
The patent implements dynamic resource partitioning where resource allocations can be modified at runtime based on security requirements. The system allows secure user runtime processes to dynamically request and receive resource allocations from the command processor, enabling flexible adaptation between security and resource utilization needs without static pre-configuration.
2Productivity
If peripheral devices are used to improve processing efficiency, then productivity is improved, but security risks worsen due to additional attack vectors
Solution Approach 1:
The patent segments the peripheral device into multiple isolated resource partitions, each dedicated to specific user runtime processes. This segmentation creates logical isolation boundaries that prevent malicious processes from accessing resources allocated to secure processes, thereby maintaining security while enabling efficient parallel processing across multiple partitions.
Solution Approach 2:
The command processor acts as an intermediary between user runtime processes and the actual hardware resources. It enforces security policies by verifying resource allocation requests against the data structure in hidden memory, mediating access control without requiring changes to the efficient hardware architecture.
3Reliability
If resource isolation is enforced to maintain security, then security is improved, but device complexity worsens
Solution Approach 1:
The patent extracts the complex security management logic from the hardware layer and relocates it to software layer components. The data structure storing resource allocation metadata is placed in hidden memory accessible only to the command processor, separating security enforcement logic from the compute elements and reducing hardware complexity while maintaining strong isolation guarantees.
4Reliability
If hidden memory with datastructure is used to enforce isolation, then security is improved, but memory usage worsens
Solution Approach 1:
The patent optimizes the memory footprint of the security enforcement mechanism by using compact data structures in hidden memory that track resource allocation states. The system uses efficient parameter encoding and storage strategies for the metadata, minimizing the memory overhead required to maintain security isolation information while enabling fast verification of resource access requests.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A peripheral device package for use in a host computing device has a plurality of compute elements and a plurality of resources shared by the plurality of compute elements. A datastructure is stored in a hidden memory of the peripheral device package. The data structure holds metadata about ownership of resources of the peripheral device package by a plurality of user runtime processes of the host computing device which use the compute elements. At least one of the user runtime processes is a secure user runtime process. The peripheral device package has a command processor configured to use the datastructure to enforce isolation of the resources used by the secure user runtime process.