Peripheral device with resource isolation
AssigneeMicrosoft Technology Licensing, LLC
InventorsStavros Volos, Kapil Vaswani
Life of this patent
Estimating the term…
Abstract
A peripheral device package for use in a host computing device has a plurality of compute elements and a plurality of resources shared by the plurality of compute elements. A datastructure is stored in a hidden memory of the peripheral device package. The data structure holds metadata about ownership of resources of the peripheral device package by a plurality of user runtime processes of the host computing device which use the compute elements. At least one of the user runtime processes is a secure user runtime process. The peripheral device package has a command processor configured to use the datastructure to enforce isolation of the resources used by the secure user runtime process.
Claims20
A peripheral device package for use in a host computing device, the peripheral device package comprising:
- a plurality of compute elements;
- a plurality of resources shared by the plurality of compute elements;
- a datastructure stored in a hidden memory of the peripheral device package, the data structure holding metadata about ownership of resources of the peripheral device package by a plurality of user runtime processes of the host computing device which use the compute elements, at least one of the user runtime processes being a secure user runtime process;
- a command processor configured to use the datastructure to enforce isolation of the resources used by the secure user runtime process.
A computer-implemented secure user runtime process having instructions for execution on a peripheral device package of an untrusted host computing device, the secure user runtime process comprising:
- sending commands via the untrusted host to a command processor of the peripheral device package, the commands using a datastructure in a hidden memory of the peripheral device package to enforce isolation of resources of the peripheral device package used by the secure user runtime process.
A peripheral device package for use in a host computing device, the peripheral device package comprising:
- a plurality of compute elements for execution of a plurality of user runtime processes of the host computing device, at least one of the user runtime processes being secure;
- a plurality of resources shared by the plurality of compute elements;
- a command processor configured to receive commands from the user runtime processes via a driver in the host computing device, and wherein the command processor receives the commands after specification of resources in the commands made by the driver;
- and wherein the command processor is configured to return responses to the received commands for authentication by the user runtime process.
Dependencies are inferred from the claim text.