Secure Display Window via Virtualized Graphics Driver Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing platforms face challenges in securely displaying sensitive data on a display device, as unencrypted data can be intercepted by malicious software or third-party applications due to the direct access of the operating system to graphics hardware, leading to potential security breaches.
Innovation Solution
The implementation of Protected Audio Video Path (PAVP) technology and virtualization techniques, where encrypted data is processed within a secure virtual appliance, and only decrypted data is accessible to the graphics hardware for display, ensuring that unencrypted data remains protected from the user environment and malicious software.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the physical graphics driver runs in the user OS (COS) virtual machine, then ease of operation is improved, but security deteriorates as the system becomes vulnerable to COS-based malware attacks
Solution Approach 1:
The system segments the graphics driver functionality into two parts: a secure component running in the service OS (SOS) virtual machine that handles sensitive operations, and a user interface component in the capability OS (COS) that handles display rendering. This segmentation isolates security-critical functions from the untrusted user environment while maintaining ease of operation through the COS interface.
Solution Approach 2:
The patent introduces an intermediary secure display engine and protected memory space that acts as a mediator between the user OS and the display hardware. This intermediary layer encrypts sensitive data before it reaches the display pipeline and controls access to unencrypted data, preventing malware in the COS from intercepting sensitive information while still allowing legitimate display operations.
2Reliability
If the physical graphics driver is moved into the service OS (SOS) for higher security, then security is improved, but productivity deteriorates due to performance degradation in all COS applications
Solution Approach 1:
The system applies local quality by making the security properties of the graphics driver context-dependent: when operating in the SOS virtual machine, the driver provides high security for sensitive operations; when operating in the COS virtual machine, it provides optimized performance for standard display tasks. This allows each virtual machine to utilize the graphics driver according to its specific security and performance requirements.
3Reliability
If encrypted data is maintained throughout the display pipeline, then security is improved, but device complexity increases due to the need for secure path infrastructure
Solution Approach 1:
The patent adds a new dimension to the display pipeline by introducing a protected memory space and secure display engine that operate alongside the traditional display path. Instead of modifying the entire existing pipeline, the secure path operates in a separate dimensional layer, encrypting data at specific points and using hardware-accelerated decryption to minimize complexity while maintaining security.
Data Source
Figure 1A~1B
Figure 2
Figure 3
AI summary
In some embodiments, the invention involves securing sensitive data from malware on a computing platform and, more specifically, to utilizing virtualization technology and protected audio video path technologies to prohibit a user environment from directly accessing unencrypted sensitive data. In an embodiment a service operating system (SOS) accesses sensitive data requested by an application running in a user environment virtual machine, or a capability operating system (COS). The SOS application encrypts the sensitive data before passing the data to the COS. The COS makes requests directly to a graphics engine which decrypts the data before displaying the sensitive data on a display monitor. Other embodiments are described and claimed.