Methods and apparatuses for executing GPU task in confidential compute architecture

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform one or more operations for graphics processing unit (GPU) task execution, comprising:

• in a confidential compute architecture, wherein the confidential compute architecture comprises a secure world, a realm world, a non-secure world, and a root world:
• receiving, by a first realm over a secure channel, to-be-processed confidential data provided by a user;
• receiving, by a host of the non-secure world, a task code and a cache description of a first GPU task that are provided by the user;
• configuring, by GPU software in the non-secure world based on the task code and the cache description of a first GPU task that are provided by a user, a stub data structure of a first stub task in a non-secure world segment of a memory, wherein the stub data structure comprises a plurality of cache areas allocated based on the cache description and metadata indicating each cache area;
• in a segment, in the memory, corresponding to the first realm, configuring, by a root monitor in the root world, a real data structure corresponding to the stub data structure, and storing the to-be-processed confidential data in the segment;
• updating, by the root monitor, a granule protection table granule protection table (GPT) so that based on an updated GPT table, a target segment is accessible to a GPU and has realm world permission for all other objects, wherein the target segment stores the metadata and the task code;
• and
• modifying, by the root monitor, a target mapping relationship so that the GPU executes the first GPU task by using the target segment and the real data structure.

A computer-implemented system, comprising:

• one or more computers;
• and
• one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations for graphics processing unit (GPU) task execution, comprising:
• in a confidential compute architecture, wherein the confidential compute architecture comprises a secure world, a realm world, a non-secure world, and a root world:
• receiving, by a first realm over a secure channel, to-be-processed confidential data provided by a user;
• receiving, by a host of the non-secure world, a task code and a cache description of a first GPU task that are provided by the user;
• configuring, by GPU software in the non-secure world based on the task code and the cache description of a first GPU task that are provided by a user, a stub data structure of a first stub task in a non-secure world segment of a memory, wherein the stub data structure comprises a plurality of cache areas allocated based on the cache description and metadata indicating each cache area;
• in a segment, in the memory, corresponding to the first realm, configuring, by a root monitor in the root world, a real data structure corresponding to the stub data structure, and storing the to-be-processed confidential data in the segment;
• updating, by the root monitor, a granule protection table granule protection table (GPT) so that based on an updated GPT table, a target segment is accessible to a GPU and has realm world permission for all other objects, wherein the target segment stores the metadata and the task code;
• and
• modifying, by the root monitor, a target mapping relationship so that the GPU executes the first GPU task by using the target segment and the real data structure.