# US 2017/0256304 A1 · Technologies for secure content display with panel self-refresh > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0256304 A1 - Document ID: US20170256304A1 - Status: Published application - Kind: A1 - Application number: 15/061,494 - Filed: 2016-03-04 - Published: 2017-09-07 - Earliest claimed: 2016-03-04 - Assignees: Intel Corporation - Inventors: Rajesh Poornachandran; Ned M. Smith - Web page: https://patentgrep.com/patent/US20170256304A1 ## CPC - G06F 1/3275: {Power saving in memory, e.g. RAM, cache} - G06F 21/50: Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems - G06F 21/606: {by securing the transmission between two devices or processes} - G09G 5/001: {Arbitration of resources in a display system, e.g. control of access to frame buffer by video controller and/or main processor} - H04L 9/0833: {involving conference or group key (network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065)} - H04L 9/0841: {involving Diffie-Hellman or related key agreement protocols} - H04L 9/0897: {involving additional devices, e.g. trusted platform module [TPM], smartcard or USB} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)} - H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)} - H04L 63/126: {the source of the received data} - Y02D 10/00: Energy efficient computing, e.g. low power processors, power management or thermal management - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G09G: ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION (arrangements for transferring data between digital computers and displays G06F3/14; static indicating arrangements comprising an association of a number of separate sources or light control cells G09F9/00; static indicating arrangements comprising integral associations of a number of light sources H01J, H01K, H10H, H05B33/12; scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission, details thereof H04N1/00) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - Y02D: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE ## Abstract Technologies for secure content display include a computing device having a display controller and a display. The display includes a self-refresh frame buffer. The computing device establishes a secure, attested communication session between the display controller and the display device. Attestation may be performed using an enhanced privacy identifier key provisioned to the display controller and/or the display by the corresponding manufacturer. The display controller may transmit protected content from a protected audio/video path to the display over the secure communication session. The display controller may transmit a command to the display to disable read back of the self-refresh frame buffer. The display controller may transmit a command to the display to clear the frame buffer. The display controller may transmit a predefined image frame from secure storage to the display. The predefined image frame may be an advertisement or user-defined content. Other embodiments are described and claimed. ## Claims ### Claim 1 A computing device for secure image display, the computing device comprising: a display controller; an attestation module to establish a secure, attested communication session between the display controller and a display device; and a secure display module to transmit encrypted frame data from the display controller to the display device in response to establishment of the secure, attested communication session. ### Claim 2 (depends on 1) The computing device of claim 1, wherein to establish the secure, attested communication session comprises to attest to an origin of the display controller using a private key provisioned to the computing device. ### Claim 3 (depends on 2) The computing device of claim 2, wherein the private key comprises an enhanced privacy identifier (EPID) key provisioned to a secure storage of the computing device. ### Claim 4 (depends on 1) The computing device of claim 1, wherein the secure display module is further to transmit a command from the display controller to the display device via a secure control channel of the secure attested communication session, wherein the command comprises a command to disable read back of a self-refresh frame buffer of the display device. ### Claim 5 (depends on 1) The computing device of claim 1, wherein the secure display module is further to transmit a command from the display controller to the display device via a secure control channel of the secure, attested communication session, wherein the command comprises a command to clear contents of a self-refresh frame buffer of the display device. ### Claim 6 (depends on 1) The computing device of claim 1, further comprising a secure content module to transmit a predefined image frame from a secure storage of the computing device to the display device via the secure, attested communication session in response to termination of the secure, attested communication session, wherein the display device comprises a self-refresh frame buffer. ### Claim 7 (depends on 6) The computing device of claim 6, wherein to transmit the predefined image frame to the display device comprises to append the predefined image frame to a display queue of the display controller. ### Claim 8 (depends on 6) The computing device of claim 6, wherein to transmit the predefined image frame from the secure storage comprises to transmit the predefined image from secure storage associated with a trusted execution environment of the computing device. ### Claim 9 (depends on 8) The computing device of claim 8, further comprising a converged security and manageability engine, wherein the converged security and manageability engine comprises the trusted execution environment. ### Claim 10 (depends on 1) The computing device of claim 1, further comprising: a protected audio/video path module to (i) transmit frame data from a trusted execution environment of the computing device to a processor graphics of the computing device, wherein transmission of the frame data is cryptographically protected, and (ii) transmit the frame data from the processor graphics to the display controller, wherein transmission of the frame data is cryptographically protected; wherein the secure display module is further to encrypt, by the display controller, the frame data to generate the encrypted frame data; and wherein to transmit the encrypted frame data from the display controller to the display device comprises to transmit the encrypted frame data in response to encryption of the frame data. ### Claim 11 (depends on 10) The computing device of claim 10, further comprising a converged security and manageability engine, wherein the converged security and manageability engine comprises the trusted execution environment. ### Claim 12 One or more computer-readable storage media comprising a plurality of instructions that in response to being executed cause a computing device to: establish a secure, attested communication session between a display controller of the computing device and a display device; and transmit encrypted frame data from the display controller to the display device in response to establishing the secure, attested communication session. ### Claim 13 (depends on 12) The one or more computer-readable storage media of claim 12, wherein to establish the secure, attested communication session comprises to attest to an origin of the computing device using a private key provisioned to the computing device. ### Claim 14 (depends on 12) The one or more computer-readable storage media of claim 12, further comprising a plurality of instructions that in response to being executed cause the computing device to transmit a command from the display controller to the display device via a secure control channel of the secure attested communication session, wherein the command comprises a command to disable read back of a self-refresh frame buffer of the display device. ### Claim 15 (depends on 12) The one or more computer-readable storage media of claim 12, further comprising a plurality of instructions that in response to being executed cause the computing device to transmit a command from the display controller to the display device via a secure control channel of the secure, attested communication session, wherein the command comprises a command to clear contents of a self-refresh frame buffer of the display device. ### Claim 16 (depends on 12) The one or more computer-readable storage media of claim 12, further comprising a plurality of instructions that in response to being executed cause the computing device to transmit a predefined image frame from a secure storage of the computing device to the display device via the secure, attested communication session in response to termination of the secure, attested communication session, wherein the display device comprises a self-refresh frame buffer. ### Claim 17 A display device for secure image display, the display device comprising: an attestation module to establish a secure, attested communication session between the display device and a display controller of a computing device; and a secure display module to (i) receive encrypted frame data from the display controller in response to establishment of the secure, attested communication session, (ii) decrypt the encrypted frame data to generate frame data, and (iii) display the frame data. ### Claim 18 (depends on 17) The display device of claim 17, wherein to establish the secure, attested communication session comprises to attest to an origin of the display device using a private key provisioned to the display device. ### Claim 19 (depends on 18) The display device of claim 18, wherein the private key comprises an enhanced privacy identifier (EPID) key provisioned to the display device. ### Claim 20 (depends on 17) The display device of claim 17, further comprising a self-refresh frame buffer, wherein the secure display module is further to: receive a command from the display controller via a secure control channel of the secure attested communication session, wherein the command comprises a command to disable read back of the self-refresh frame buffer; and disable a read back capability of the self-refresh frame buffer in response to receipt of the command from the display controller. ### Claim 21 (depends on 17) The display device of claim 17, further comprising a self-refresh frame buffer, wherein the secure display module is further to: receive a command from the display controller via a secure control channel of the secure attested communication session, wherein the command comprises a command to clear contents of the self-refresh frame buffer; and clear the contents of the self-refresh frame buffer in response to receipt of the command from the display controller. ### Claim 22 One or more computer-readable storage media comprising a plurality of instructions that in response to being executed cause a display device to: establish a secure, attested communication session between the display device and a display controller of a computing device; receive encrypted frame data from the display controller in response to establishing the secure, attested communication session; decrypt the encrypted frame data to generate frame data; and display the frame data. ### Claim 23 (depends on 22) The one or more computer-readable storage media of claim 22, wherein to establish the secure, attested communication session comprises to attest to an origin of the display device using a private key provisioned to the display device. ### Claim 24 (depends on 22) The one or more computer-readable storage media of claim 22, further comprising a plurality of instructions that in response to being executed cause the display device to: receive a command from the display controller via a secure control channel of the secure attested communication session, wherein the command comprises a command to disable read back of a self-refresh frame buffer of the display device; and disable a read back capability of the self-refresh frame buffer in response to receiving the command from the display controller. ### Claim 25 (depends on 22) The one or more computer-readable storage media of claim 22, further comprising a plurality of instructions that in response to being executed cause the display device to: receive a command from the display controller via a secure control channel of the secure attested communication session, wherein the command comprises a command to clear contents of a self-refresh frame buffer of the display device; and clear the contents of the self-refresh frame buffer in response to receiving the command from the display controller.