Secure Mediator for Advanced Display DDC Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing secure mediators lack effective security measures to protect the Display Data Channel (DDC) for advanced displays that require bidirectional communication and handshake protocols, such as SCDC, which are vulnerable to security breaches and data leakage.

Innovation Solution

An advanced display secure mediator is introduced, featuring AD-EDID host and display emulators that enforce security policies by filtering and blocking unauthorized commands, emulating handshake operations, and ensuring unidirectional communication to prevent data leakage and unauthorized access, while supporting advanced display features like 4K60 modes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If bidirectional communication is enabled over DDC for advanced display features, then display functionality and compatibility are improved, but security vulnerability and data leakage risk increase

Engineering Contradiction:
Improvedisplay functionalityVSAvoidsecurity vulnerability
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a secure mediator as an intermediary device between the host and advanced display. This mediator intercepts, validates, and monitors all DDC communications, enabling bidirectional communication for advanced display features while preventing unauthorized access and data leakage through security policies enforced by the mediator.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent employs EDID emulators that create virtual copies of display identification data. Instead of allowing direct access to the actual display's EDID memory, the system uses emulator copies that can be securely managed and validated by the mediator, enabling communication while maintaining security through controlled virtual representations.

Inventive Principle:
Principle #26Copying

2Reliability

If security policies are enforced to prevent data leakage, then security is improved, but communication complexity and system overhead increase

Engineering Contradiction:
ImprovesecurityVSAvoidcommunication complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary security measures by pre-establishing security policies, authentication mechanisms, and communication protocols before data transmission begins. The mediator pre-validates communication requests and establishes secure channels in advance, reducing the complexity of real-time security enforcement while maintaining high security standards.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system incorporates feedback mechanisms where the mediator continuously monitors DDC communications and adjusts security policies based on observed behavior. This feedback loop enables dynamic security enforcement that adapts to communication patterns, reducing unnecessary complexity by allowing trusted communications to proceed with minimal overhead while blocking suspicious activities.

Inventive Principle:
Principle #23Feedback

Data Source

PatentEP4002343B1Secure mediator for advanced display and method
Publication Date: 2024.03.06 HIGH SEC LABS LTD
  • EP4002343B1 patent drawingFigure 1~3
  • EP4002343B1 patent drawingFigure 4~7
  • EP4002343B1 patent drawingFigure 8A

AI summary

Mediating between host and display where a mediator enforces security policy over bidirectional protocols of a Display Data Channel (DDC) of video communication protocols between host and display, where AD-EDID display emulators are coupled to DDCs of the host's video port, AD-EDID host emulators are coupled to DDCs of display's video port and security enforcing communication units couple between pairs of AD-EDID display emulator and AD-EDID host emulator, where AD-EDID display emulators emulate display operation and behavior over the DDC, AD-EDID host emulators emulate host operation and behavior over the DDC and security enforcing communication units enforce security policy such as unidirectional communication between the pairs of AD-EDID host emulators and AD-EDID display emulators.