Method and system for protecting data processed by data processing accelerators

A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations, the operations comprising:

• performing a secure boot using a security module of a host system;
• verifying that an operating system (OS) and one or more drivers including an accelerator driver associated with a data processing (DP) accelerator is provided by a trusted source;
• launching the accelerator driver within the OS;
• generating a trusted execution environment (TEE) associated with one or more processors of the host system;
• and
• launching an application and a runtime library within the TEE, wherein the application communicates with the DP accelerator via the runtime library and the accelerator driver.

A data processing system, comprising:

• a security module;
• one or more processors coupled to the security module;
• and
• a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations, the operations including:
• performing a secure boot using the security module for a host system,
• verifying that an operating system (OS) and one or more drivers including an accelerator driver associated with a data processing (DP) accelerator is provided by a trusted source,
• launching the accelerator driver within the OS,
• generating a trusted execution environment (TEE) associated with the one or more processors of the host system, and
• launching an application and a runtime library within the TEE, wherein the application communicates with the DP accelerator via the runtime library and the accelerator driver.