Back to results
US 2014/0230067 A1Published application
Securing display output data against malicious software attacks
AssigneeIntel Corporation
InventorsRavi L. Sahita, Vinay Phegade, David J. Cowperthwaite
Life of this patent
Estimating the term…
Abstract
Systems, apparatus and methods are described including operations for securing display output data against malicious software attacks.
Claims30
A computer-implemented method for securing display output data comprising:
- registering a process as a protected process via a trusted memory service layer;
- marking a first portion of a process address space as an isolated display buffer associated with the protected process and a second portion of the process address space as a place holder display buffer associated with the protected process;
- marking a portion of a graphics memory space as an access controlled graphics memory region;
- providing a virtual sprite device and an associated virtual sprite memory region;
- invoking, in response to the reception of sensitive data into the isolated display buffer, an application programming interface via a windows manager to receive information associated with the place holder display buffer associated with the protected process;
- transferring the sensitive data in the isolated display buffer to the virtual sprite device memory region;
- transferring the sensitive data in the virtual sprite device memory region to the access controlled graphics memory region;
- and
- providing the sensitive data in the access controlled graphics memory region to a display device.
6 more elements
A system for securing display output data on a computer, comprising:
- a display device configured to display data;
- one or more processors communicatively coupled to the display device;
- one or more memory stores communicatively coupled to the one or more processors;
- a process address space including a place holder display buffer;
- a windows manager;
- and
- a sprite pipeline comprising a trusted memory service layer, a virtual sprite device and an associated virtual sprite memory region, the sprite pipeline configured to:
- register a process as a protected process via the trusted memory service layer;
- mark a portion of the process address space as an isolated display buffer associated with the protected process;
- mark a portion of a graphics memory space as an access controlled graphics memory region;
- receive sensitive data in the isolated display buffer;
- transfer the sensitive data in the isolated display buffer to the virtual sprite device memory region;
- transfer the sensitive data in the virtual sprite device memory region to the access controlled graphics memory region;
- and
- provide the sensitive data in the access controlled graphics memory region to the display device.
12 more elements
At least one machine readable medium comprising a plurality of instructions that in response to being executed on a computing device, cause the computing device to secure display output data by:
- invoking, in response to the reception of sensitive data into an isolated display buffer associated with a protected process registered via a trusted memory service layer, an application programming interface to receive information from a place holder display buffer associated with the protected process;
- transferring the sensitive data in the isolated display buffer to a virtual sprite device memory region via a virtual sprite device;
- and
- transferring the sensitive data in the virtual sprite device memory region to an access controlled graphics memory region for display via a display device.
1 more element
Dependencies are inferred from the claim text.