TrustZone Graphic Rendering Offloading to Normal World
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The secure world within a trustzone, used for maintaining security in electronic devices, faces limitations in memory capacity and processing speed due to its smaller resources compared to the normal world, leading to inefficiencies in graphic rendering and user interface generation.
Innovation Solution
A trustzone graphic rendering method that generates image resources in the normal world and transmits them to the secure world for editing and rendering, allowing for efficient separation and editing of objects within the secure world to create a trustzone user interface, thereby overcoming memory and processing limitations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If graphic rendering operations are performed directly in the secure world (SWD), then security is maintained, but processing speed and memory utilization are insufficient
Solution Approach 1:
The graphic rendering system is segmented into two parts: security-critical operations remain in the SWD while resource-intensive rendering operations are offloaded to the NWD. This segmentation allows each environment to perform operations for which it is best suited, resolving the contradiction between security and processing speed.
Solution Approach 2:
A buffer memory serves as an intermediary between the NWD and SWD, enabling efficient data transfer of image resources and rendering results. This intermediary mechanism facilitates collaboration between the two worlds while maintaining security boundaries, allowing fast rendering in NWD without compromising SWD security.
2Reliability
If all image resources are stored in the secure world (SWD), then security is improved, but memory capacity limitations are exceeded
Solution Approach 1:
Image resources are extracted from the SWD and stored in the NWD where ample memory capacity is available. Only essential security-related data remains in the SWD, freeing up limited memory resources while maintaining security through controlled access mechanisms and buffer memory protection.
3Productivity
If graphic rendering is performed in the normal world (NWD), then processing speed increases, but security control is reduced
Solution Approach 1:
The buffer memory acts as a secure intermediary that enables fast rendering in NWD while maintaining SWD security control. All data transfers between NWD and SWD pass through this controlled intermediary, ensuring security protocols are maintained even as rendering operations occur in the faster NWD environment.
Data Source
Figure 1~2a
Figure 2b~3
Figure 4~5
AI summary
A trustzone graphic rendering method in an operating system (OS) divided into a normal world (NWD) and a secure world (SWD) corresponding to a trustzone. The trustzone graphic rendering method includes generating an image resource used to generate a trustzone user interface (UI) in the NWD, transmitting the image resource from the NWD to the SWD, and generating the trustzone UI in the SWD, by separating and editing the image resource including a plurality of objects, wherein the separating and editing is performed in units of objects.