Graphics Processor With Encrypted Kernels
AssigneeIntel Corporation
InventorsBalaji Vembu, Vidhya Krishnan, Sandeep S. Sodhi, Scott Janus, Daniel Nemiroff
Life of this patent
Estimating the term…
Abstract
An embodiment of a graphics apparatus may include a graphics processor including a kernel executor, and a security engine communicatively coupled to the graphics processor. The security engine may be configured to create a kernel security key, encrypt an executable kernel for the kernel executor in accordance with the kernel security key, and share the kernel security key with the graphics processor.
Claims24
A system, comprising:
- a central processing unit to generate a kernel security key;
- and
- a graphics processor to:
- identify when a specified mode is to be engaged;
- when the specified mode is engaged, force decryption of any executable kernel loaded on the graphics processor in accordance with the kernel security key;
- and
- when the specified mode is engaged, force decryption of an unverified kernel loaded on the graphics processor in accordance with the kernel security key so that the unverified kernel is decrypted into execution instructions that are unrecognizable by the graphics processor to block the unverified kernel from operating on the graphics processor.
A graphics processor, comprising:
- a memory;
- and
- logic communicatively coupled to the memory, wherein the logic is implemented at least partly in one or more of configurable logic or fixed-functionality logic hardware, the logic communicatively coupled to the memory to:
- identify when a specified mode is to be engaged;
- when the specified mode is engaged, force decryption of any executable kernel loaded on the graphics processor in accordance with a kernel security key;
- and
- when the specified mode is engaged, force decryption of an unverified kernel loaded on the graphics processor in accordance with the kernel security key so that the unverified kernel is decrypted into execution instructions that are unrecognizable by the graphics processor to block the unverified kernel from operating on the graphics processor.
At least one computer readable storage medium comprising a set of instructions, which when executed by a computing device, cause the computing device to:
- identify when a specified mode is to be engaged;
- when the specified mode is engaged, force decryption of any executable kernel loaded on a graphics processor in accordance with a kernel security key;
- and
- when the specified mode is engaged, force decryption of an unverified kernel loaded on the graphics processor in accordance with the kernel security key so that the unverified kernel is decrypted into execution instructions that are unrecognizable by the graphics processor to block the unverified kernel from operating on the graphics processor.
A method comprising:
- identifying when a specified mode is to be engaged;
- when the specified mode is engaged, forcing decryption of any executable kernel loaded on a graphics processor in accordance with a kernel security key;
- and
- when the specified mode is engaged, forcing decryption of an unverified kernel loaded on the graphics processor in accordance with the kernel security key so that the unverified kernel is decrypted into execution instructions that are unrecognizable by the graphics processor to block the unverified kernel from operating on the graphics processor.
Dependencies are inferred from the claim text.