Protection of secure video content from malicious processing in the display pipeline

A computing system, comprising:

• a video memory having a first memory category corresponding to a first security level, a second memory category corresponding to a second security level, and a third memory category corresponding to a third security level;
• a memory assignment processor configured to identify a security level corresponding to received video content and to store the received video content in a category of the video memory based on the identified security level;
• a display pipeline having a plurality of different video processing components communicatively coupled to the video memory via a bus of the computing system;
• and
• a security processing system configured to control which video processing components of the plurality of different video processing components in the display pipeline have access to the received video content in the video memory based on the memory category of the video memory in which the received video content is stored, wherein the security processing system comprises:
• a fencing processor configured to identify, as a set of allowed video processing components, a subset of the plurality of different video processing components that have access to the received video content, the set of allowed video processing components performing video processing on the received video content to obtain processed video content.

A video processing system, comprising:

• a video memory having a high security level memory category, a medium security level memory category, and a low security memory category;
• a memory assignment processor configured to identify a security level corresponding to received video content and to store the received video content in a memory category in the video memory based on the identified security level;
• a first video processing component, communicatively coupled to the video memory via a bus, that performs a first video processing operation, the first video processing operation having a first importance in generating a display based on the received video content;
• a second video processing component, communicatively coupled to the video memory via the bus, that performs a second video processing operation, the second video processing operation having a second importance in generating the display based on the received video content, the second importance being higher than the first importance;
• and
• a security processing system configured to allow the second video processing component to access the received video content stored in the high security level memory category and inhibit the first video processing component from accessing the received video content stored in the high security level memory category, wherein the security processing system comprises:
• a fencing processor configured to identify the second video processing component that has access to the received video content stored in the high security level memory category as one of a set of allowed video processing components performing video processing on the received video content stored in the high security level memory category to obtain processed video content.