Securing content from guest virtual machines from unauthorized access by host operating systems

Abstract

In examples, a virtual channel allocated to a virtual machine may be used to transmit image data representing a display surface to memory assigned to the display surface in a virtual address space of the virtual machine. A physical display engine may be configured to fetch the image data from the memory, perform desired transformations, and send the resulting output to the display surface to display. Privileged software may process requests from virtual machines for allocations or configurations of display surfaces and configure the physical display engine, a memory system, and/or other system components accordingly. Software running on a virtual machine may use virtual channels to submit the requests and transmit image data for display surfaces to memory using the virtual address space. A virtual channel may be provided by a virtual network adapter assigned to the virtual machine.

Dependencies are inferred from the claim text.