Processor Performance State Security Logic Interception

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current computing systems face security vulnerabilities due to unauthorized access and improper performance state changes of processors, which can lead to security breaches by allowing unauthorized changes in operating voltage and frequency.

Innovation Solution

Implementing performance state security logic to intercept and analyze requests for performance state changes, routing them through a secure path and blocking unsecure paths, thereby ensuring that only authorized changes are executed based on predefined security conditions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If performance state changes are allowed to be controlled by operating system and microcode, then system flexibility and ease of operation are improved, but security vulnerabilities increase due to unauthorized access

Engineering Contradiction:
ImprovePerformance state controlVSAvoidSecurity breaches
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

A performance state security logic module is introduced as an intermediary between the operating system/microcode and the performance state control logic. This intermediary intercepts P state change requests, verifies security conditions (such as checking if the processor is executing secure code), and only allows changes when security conditions are met. This resolves the contradiction by maintaining ease of operation through automated security verification while preventing unauthorized access and security breaches.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If performance state changes are intercepted and routed through security logic, then security is improved, but device complexity increases

Engineering Contradiction:
ImproveSecurity vulnerabilitiesVSAvoidControl logic structure
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The performance state control system is segmented into distinct functional modules: the operating system generates P state change requests, microcode processes these requests, performance state security logic verifies security conditions, and performance state control logic executes the changes. This segmentation isolates the security verification function in a dedicated module, making the system more manageable and maintainable despite the added complexity. The segmentation allows security logic to be independently implemented and updated without affecting other parts of the system.

Inventive Principle:
Principle #1Segmentation

3Reliability

If security conditions are verified for each performance state change request, then security reliability is improved, but processing time increases

Engineering Contradiction:
ImproveSecurity reliabilityVSAvoidRequest processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The security logic performs preliminary verification of security conditions (such as checking the current execution state and code permissions) before allowing performance state changes to proceed. By checking security conditions in advance and blocking unauthorized requests early in the processing pipeline, the system prevents security breaches while minimizing the time impact on legitimate requests. The security verification is integrated into the existing request flow, so approved requests experience minimal additional processing time.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS9396360B2System and method for secure control over performance state
Publication Date: 2016.07.19 ADVANCED MICRO DEVICES INC
  • US9396360B2 patent drawing
  • US9396360B2 patent drawing
  • US9396360B2 patent drawing

AI summary

The present disclosure relates to a method and system for securing a performance state change of one or more processors. A disclosed method includes intercepting a request for a change of a performance state of the processor and determining whether to execute the request based on a security condition of the processor. The performance state of the processor includes at least one of an operating voltage and an operating frequency. A disclosed system includes an operating system module operative to transmit a request for a performance state change of at least one processing core. The system includes performance state control logic in communication with the operating system module and operative to receive the request and to change the performance state of the at least one processing core based on the request. The computing system further includes performance state security logic operative to intercept the request transmitted from the operating system module to the performance state control logic and to selectively transmit the request to the performance state control logic based on a security condition of the computing system.