Method and system for key distribution and exchange for data processing accelerators

A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations, the operations comprising:

• receiving, at a host system from a data processing (DP) accelerator, an accelerator identifier (ID) that uniquely identifies the DP accelerator, wherein the host system is coupled to the DP accelerator over a bus;
• transmitting the accelerator ID to a predetermined trusted server over a network;
• receiving a certificate from the predetermined trusted server over the network, the certificate certifying the DP accelerator;
• extracting a public root key (PK_RK) from the certificate for verification, the PK_RK corresponding to a private root key (SK_RK) associated with the DP accelerator;
• and
• establishing a secure channel with the DP accelerator using the PK_RK based on the verification to exchange data securely between the host system and the DP accelerator.

A host system, comprising:

• a processor;
• and
• a memory storing instructions, which when executed by the processor, cause the processor to perform operations, the operations including
• receiving, at a host system from a data processing (DP) accelerator, an accelerator identifier (ID) that uniquely identifies the DP accelerator, wherein the host system is coupled to the DP accelerator over a bus,
• transmitting the accelerator ID to a predetermined trusted server over a network,
• receiving a certificate from the predetermined trusted server over the network, the certificate certifying the DP accelerator,
• extracting a public root key (PK_RK) from the certificate for verification, the PK_RK corresponding to a private root key (SK_RK) associated with the DP accelerator, and
• establishing a secure channel with the DP accelerator using the PK_RK based on the verification to exchange data securely between the host system and the DP accelerator.