Methods and systems for maintaining an encrypted video memory subsystem

A method comprising:

• decrypting encrypted data that resides on one or more memory surfaces of a video card memory, said act of decrypting taking place only when an operation is to be performed on the data by a graphics processor unit (GPU) that resides on the video card;
• performing an operation on the decrypted data using the GPU to provide resultant data;
• re-encrypting the resultant data;
• and
• writing the encrypted resultant data to a video card memory surface associated with the video card.

A system comprising:

• means for decrypting encrypted data that resides on one or more memory surfaces of a video card memory only when an operation is to be performed on the data by a graphics processor unit (GPU) that resides on the video card;
• means for performing an operation on the decrypted data to provide resultant data;
• means for re-encrypting the resultant data;
• and
• means for writing the encrypted resultant data to a video card memory surface associated with the video card.

A system comprising:

• a video card;
• a graphics processor unit (GPU) on the video card and configured to process video data that is to be rendered on a display device;
• memory on the video card comprising one or more input memory surfaces configured to hold encrypted data that is to be operated upon by the GPU, and one or more output memory surfaces configured to hold encrypted resultant data that is to be rendered on the display device;
• a cryptographic processor on the video card and configured to control encryption and decryption on the video card, the cryptographic processor being configured to enable encrypted data on one or more of the input memory surfaces to be decrypted in connection with an operation that is to be performed on the data by the GPU;
• and
• the cryptographic processor further being configured to enable data that has been operated upon by the GPU to be encrypted to an output memory surface.

A method comprising:

• providing multiple input memory surfaces that are to hold encrypted data that is to be processed by a graphics processor unit (GPU) on a video card;
• associating, with each input memory surface, a decryptor that is uniquely able to decrypt the encrypted data that is held by the associated input memory surface;
• decrypting, with at least one associated decryptor, encrypted data that resides on at least one respective input memory surface;
• performing an operation on the decrypted data using the GPU to provide resultant data;
• re-encrypting the resultant data;
• and
• writing the encrypted resultant data to an output memory surface associated with the video card.

A system comprising:

• a video card;
• a graphics processor unit (GPU) on the video card and configured to process video data that is to be rendered on a display device;
• memory on the video card comprising one or more input memory surfaces configured to hold encrypted data that is to be operated upon by the GPU, and one or more output memory surfaces configured to hold encrypted resultant data that is to be rendered on the display device;
• a cryptographic processor on the video card and configured to control encryption and decryption on the video card, the cryptographic processor comprising a key manager for managing keys that can be utilized for encrypting and decrypting data on the video card;
• each individual input memory surface having its own unique associated key for decrypting encrypted data held thereon;
• the cryptographic processor being configured to enable encrypted data on one or more of the input memory surfaces to be decrypted so that the decrypted data can be operated upon by the GPU;
• the cryptographic processor further being configured to enable data that has been operated upon by the GPU to be encrypted to an output memory surface.

A method comprising:

• receiving encrypted data that is to be processed by a video card for rendering on a display device;
• writing the encrypted data to one or more input memory surfaces;
• responsive to an indication that a graphics processor unit (GPU) on the video card is to perform an operation on the encrypted data, decrypting the encrypted data;
• operating on the decrypted data with the GPU to provide resultant data;
• re-encrypting the resultant data;
• writing the encrypted data to an output memory surface;
• and
• decrypting the encrypted resultant data for rendering on the display device.

A system comprising:

• a video card,
• a graphics processor unit (GPU) on the video card and configured to perform operations on video data that is to be rendered on a display device;
• memory on the video card comprising input surfaces for holding data that is to be operated on by the GPU, and output surfaces for holding data that has been operated upon by the GPU;
• a cryptographic processor configured to control encryption and decryption on the video card;
• a first interface associated with the cryptographic processor and through which a trusted software component can set up a session key and send instructions to the cryptographic processor;
• and
• a second interface associated with the cryptographic processor and through which the cryptographic processor can configure the GPU for decrypting encrypted data held in one or more of the input surfaces.