Protected Stream Manager for Virtualized CE Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Virtualization-enabled small, mobile compact embedded (CE) devices face challenges in securing data streams, allocating resources for resource-heavy applications, and managing graphics processor unit (GPU) resources, particularly in supporting multiple protected streams and prioritizing resource usage.
Innovation Solution
A protected stream manager (PSM) is integrated into the hypervisor, responsible for obfuscating content streams, prioritizing processor and GPU resources, and managing resource allocation to ensure secure and efficient processing of multiple protected streams, preventing resource competition and exposure to unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If virtualization is implemented in CE devices to enable multiple applications and features, then adaptability and functionality are improved, but security of data streams and resource allocation control deteriorate
Solution Approach 1:
The patent segments the virtualization system by introducing a dedicated Protected Stream Manager (PSM) component that operates independently within the hypervisor architecture. This segmentation allows the PSM to specifically handle security-critical functions for protected streams while the rest of the virtualization system maintains its adaptability and functionality for multiple applications.
Solution Approach 2:
The PSM acts as an intermediary component between the hypervisor and protected content streams. It mediates resource allocation and security enforcement for protected streams, ensuring that security requirements are met while allowing the broader virtualization system to maintain its versatile functionality for multiple applications and features.
2Adaptability or versatility
If multiple protected streams are supported simultaneously, then adaptability is improved, but resource allocation control and security deteriorate
Solution Approach 1:
The patent introduces a dedicated PSM component that segments the complex task of managing multiple protected streams into specialized security and resource allocation functions. This segmentation simplifies the overall system architecture by creating a focused subsystem that handles protected stream management, while other system components continue to handle general virtualization tasks.
Solution Approach 2:
The PSM is designed as a universal component within the hypervisor that can handle multiple protected streams simultaneously through standardized interfaces and protocols. It provides multi-functional capabilities including security enforcement, resource allocation, and stream prioritization, thereby managing complexity while supporting adaptability for multiple streams.
3Adaptability or versatility
If GPU resources are shared among multiple virtual machines, then adaptability is improved, but resource allocation efficiency and security deteriorate
Solution Approach 1:
The patent implements dynamic resource allocation mechanisms where the PSM can adjust GPU resource allocation in real-time based on the priority and requirements of different protected streams. This dynamic approach allows the system to maintain high allocation efficiency for protected content while still providing adaptable resource sharing capabilities across multiple virtual machines.
Solution Approach 2:
The patent applies local quality by implementing differentiated resource allocation policies for different types of workloads. Protected content streams receive prioritized and secured GPU resource allocation through the PSM, while other virtual machines can utilize remaining resources. This local differentiation ensures allocation efficiency for critical protected streams while maintaining overall system adaptability.
Data Source
AI summary
A protected stream manager includes one or more subsystems to receive a content stream in a virtual environment, obfuscate the content stream, and prioritize use of a processor to process the content stream.