Method and apparatus for trusted display on untrusted computing platforms to secure applications
AssigneeCarnegie Mellon University
InventorsVirgil D. Gligor, Zongwei Zhou, Miao Yu
Life of this patent
Estimating the term…
Abstract
This invention provides a method for providing trusted display to security sensitive applications on untrusted computing platforms. This invention has a minimal trusted code base and maintains full compatibility with the computing platforms, including their software and hardware. The core of our invention is a GPU separation kernel that (1) defines different types of GPU objects, (2) mediates access to security-sensitive GPU objects, and (3) emulates accesses to security-sensitive GPU objects whenever required by computing platform compatibility.
Claims14
A system for providing a trusted display for secure applications on an untrusted computing platform, comprising:
- one or more graphics processing units (GPU) driving one or more display monitors, each GPU defining a plurality of GPU objects;
- and
- a GPU separation kernel (GSK) performing the functions of
- determining which of said plurality of GPU objects are security-sensitive;
- mediating access to the security-sensitive objects issued by the secure applications and non-secure operating systems and applications;
- emulating accesses to a subset of the security-sensitive objects for the non-secure operating systems and applications.
Dependencies are inferred from the claim text.