Trusted local memory management in a virtualized GPU

One or more non-transitory computer-readable storage mediums having stored thereon executable computer program instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• receiving an access request in a system including a trusted execution environment (TEE), the access request being directed to a local memory for a graphics processing unit (GPU) of the system, wherein the local memory is partitioned into a plurality of protection regions, including a protected region that is not accessible to host system software and an unprotected region that is accessible to the host system software, the protected region including:
• a memory permission table maintained by a trusted agent of the GPU, the memory permission table to include any virtual function assigned to a trusted domain,
• a per process graphics translation table to translate between graphics virtual address (VA) to graphics guest physical address (GPA), and
• a local memory translation table to translate between graphics GPAs and physical addresses (PAs) for the local memory;
• determining whether the access request is from a virtual function assigned to a trusted domain;
• and
• in response to determining the access request is not from a virtual function assigned to a trusted domain and that the access request is associated with a trusted domain, aborting the access request.

A method comprising:

• managing local memory of a system by a host kernel mode driver, the system including a trusted execution environment (TEE) and the host kernel mode driver being outside of a trusted computing base of the TEE;
• receiving an access request directed to a local memory for a graphics processing unit (GPU) of the system, wherein the local memory is partitioned into a plurality of protection regions, including a protected region that is not accessible to host system software and an unprotected region that is accessible to the host system software, the protected region including:
• a memory permission table maintained by a trusted agent of the GPU, the memory permission table to include any virtual function assigned to a trusted domain,
• a per process graphics translation table to translate between graphics virtual address (VA) to graphics guest physical address (GPA), and
• a local memory translation table to translate between graphics GPAs and physical addresses (PAs) for the local memory;
• determining whether the access request is from a virtual function assigned to a trusted domain;
• and
• in response to determining the access request is not from a virtual function assigned to a trusted domain and that the access request is associated with a trusted domain, aborting the access request.