Secure Display Window via Virtualized Graphics Driver Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing computing platforms face challenges in securely displaying sensitive data on a display device, as unencrypted data can be intercepted by malicious software or third-party applications due to the direct access of the operating system to graphics hardware, leading to potential security breaches.

Innovation Solution

The implementation of Protected Audio Video Path (PAVP) technology and virtualization techniques, where encrypted data is processed within a secure virtual appliance, and only decrypted data is accessible to the graphics hardware for display, ensuring that unencrypted data remains protected from the user environment and malicious software.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the physical graphics driver runs in the user OS (COS) virtual machine, then ease of operation is improved, but security deteriorates as the system becomes vulnerable to COS-based malware attacks

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system segments the graphics driver functionality into two parts: a secure component running in the service OS (SOS) virtual machine that handles sensitive operations, and a user interface component in the capability OS (COS) that handles display rendering. This segmentation isolates security-critical functions from the untrusted user environment while maintaining ease of operation through the COS interface.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary secure display engine and protected memory space that acts as a mediator between the user OS and the display hardware. This intermediary layer encrypts sensitive data before it reaches the display pipeline and controls access to unencrypted data, preventing malware in the COS from intercepting sensitive information while still allowing legitimate display operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the physical graphics driver is moved into the service OS (SOS) for higher security, then security is improved, but productivity deteriorates due to performance degradation in all COS applications

Engineering Contradiction:
ImprovesecurityVSAvoidperformance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system applies local quality by making the security properties of the graphics driver context-dependent: when operating in the SOS virtual machine, the driver provides high security for sensitive operations; when operating in the COS virtual machine, it provides optimized performance for standard display tasks. This allows each virtual machine to utilize the graphics driver according to its specific security and performance requirements.

Inventive Principle:
Principle #3Local quality

3Reliability

If encrypted data is maintained throughout the display pipeline, then security is improved, but device complexity increases due to the need for secure path infrastructure

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent adds a new dimension to the display pipeline by introducing a protected memory space and secure display engine that operate alongside the traditional display path. Instead of modifying the entire existing pipeline, the secure path operates in a separate dimensional layer, encrypting data at specific points and using hardware-accelerated decryption to minimize complexity while maintaining security.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentEP2107486B1Method and apparatus for providing a secure display window inside the primary display
Publication Date: 2013.06.19 INTEL CORP
  • EP2107486B1 patent drawingFigure 1A~1B
  • EP2107486B1 patent drawingFigure 2
  • EP2107486B1 patent drawingFigure 3

AI summary

In some embodiments, the invention involves securing sensitive data from malware on a computing platform and, more specifically, to utilizing virtualization technology and protected audio video path technologies to prohibit a user environment from directly accessing unencrypted sensitive data. In an embodiment a service operating system (SOS) accesses sensitive data requested by an application running in a user environment virtual machine, or a capability operating system (COS). The SOS application encrypts the sensitive data before passing the data to the COS. The COS makes requests directly to a graphics engine which decrypts the data before displaying the sensitive data on a display monitor. Other embodiments are described and claimed.