Direct memory access encryption with application provided keys

A system for direct memory access encryption with application provided keys comprising:

• a non-transitory memory storing instructions;
• a processor configured to execute the instructions to cause the system to:
• access, at a memory management unit (MMU), data from a peripheral attached to a computer system;
• determine, at the MMU, an application that is the intended recipient of the data, wherein the application executes on the computer system;
• retrieve an application key used for transmission between the application and the peripheral;
• encrypt, at the MMU, the data using the application key;
• and
• transmit the encrypted data to a memory of the computer system;
• and
• a hardware component to:
• receive, from an operating system of the computer system, an encrypted configuration request including a security key corresponding to the peripheral, a first identity of the hardware component and a second identity of the peripheral;
• decrypt the encrypted configuration request;
• and
• sign a response message to the application comprising a matching security key.

A system for direct memory access encryption with application provided keys comprising:

• a processor to:
• encrypt data for a peripheral attached to the system, and
• transmit the encrypted data to a memory of the system;
• and
• a first hardware component, operably coupled to the processor, to:
• retrieve the encrypted data from the memory via direct memory access,
• access an application key used for transmission between an application and the peripheral,
• decrypt the encrypted data using the application key, and
• transmit the decrypted data to the peripheral;
• and
• a second hardware component coupled to the first hardware component to:
• receive an encrypted configuration request including a security key corresponding to the peripheral, a first identity of the second hardware component and a second identity of the peripheral;
• decrypt the encrypted configuration request;
• sign a response message to the application comprising a matching security key;
• and
• transmit the response message to the application.