Method for data protection in a data processing cluster with authentication

A data processing accelerator (DPA) operating as a first DPA of a cluster of DPAs coupled to a host device, the DPA comprising:

• a resource manager to
• receive from a second DPA in the cluster, a request for the second DPA to access a resource of the first DPA;
• in response to determining that the resource requested by the second DPA is a sensitive resource of the first DPA, deny access to the resource requested by the second DPA;
• and
• otherwise authenticate the second DPA, by the first DPA, and
• in response to determining that the second DPA is authenticated, permit access to the resource requested by the second DPA, and
• in response to determining that the second DPA is not authenticated, break a communication link between the first DPA and the second DPA.

A processing system having at least one hardware processor, coupled to a memory programmed with executable instructions that, when executed by the at least one hardware processor, causes the at least one hardware processor to perform operations of configuring a cluster of data processing accelerators (DPAs) communicatively coupled to a host device, the operations comprising:

• receiving, by a first DPA in the cluster, from a second DPA in the cluster, a request for the second DPA to access a resource of the first DPA;
• in response to determining that the resource requested by the second DPA is a sensitive resource of the first DPA, denying access to the resource requested by the second DPA;
• otherwise:
• authenticating the second DPA, by the first DPA;
• and
• in response to determining that the second DPA is authenticated, permitting access to the resource requested by the second DPA, and
• in response to determining that the second DPA is not authenticated, breaking a communication link between the first DPA and the second DPA.