Processor Performance State Security Logic Interception
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computing systems face security vulnerabilities due to unauthorized access and improper performance state changes of processors, which can lead to security breaches by allowing unauthorized changes in operating voltage and frequency.
Innovation Solution
Implementing performance state security logic to intercept and analyze requests for performance state changes, routing them through a secure path and blocking unsecure paths, thereby ensuring that only authorized changes are executed based on predefined security conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If performance state changes are allowed to be controlled by operating system and microcode, then system flexibility and ease of operation are improved, but security vulnerabilities increase due to unauthorized access
Solution Approach 1:
A performance state security logic module is introduced as an intermediary between the operating system/microcode and the performance state control logic. This intermediary intercepts P state change requests, verifies security conditions (such as checking if the processor is executing secure code), and only allows changes when security conditions are met. This resolves the contradiction by maintaining ease of operation through automated security verification while preventing unauthorized access and security breaches.
2Object-affected harmful factors
If performance state changes are intercepted and routed through security logic, then security is improved, but device complexity increases
Solution Approach 1:
The performance state control system is segmented into distinct functional modules: the operating system generates P state change requests, microcode processes these requests, performance state security logic verifies security conditions, and performance state control logic executes the changes. This segmentation isolates the security verification function in a dedicated module, making the system more manageable and maintainable despite the added complexity. The segmentation allows security logic to be independently implemented and updated without affecting other parts of the system.
3Reliability
If security conditions are verified for each performance state change request, then security reliability is improved, but processing time increases
Solution Approach 1:
The security logic performs preliminary verification of security conditions (such as checking the current execution state and code permissions) before allowing performance state changes to proceed. By checking security conditions in advance and blocking unauthorized requests early in the processing pipeline, the system prevents security breaches while minimizing the time impact on legitimate requests. The security verification is integrated into the existing request flow, so approved requests experience minimal additional processing time.
Data Source
AI summary
The present disclosure relates to a method and system for securing a performance state change of one or more processors. A disclosed method includes intercepting a request for a change of a performance state of the processor and determining whether to execute the request based on a security condition of the processor. The performance state of the processor includes at least one of an operating voltage and an operating frequency. A disclosed system includes an operating system module operative to transmit a request for a performance state change of at least one processing core. The system includes performance state control logic in communication with the operating system module and operative to receive the request and to change the performance state of the at least one processing core based on the request. The computing system further includes performance state security logic operative to intercept the request transmitted from the operating system module to the performance state control logic and to selectively transmit the request to the performance state control logic based on a security condition of the computing system.


