US 2024/0403092 A1 · GRAPHICAL CONSOLE CONFIDENTIALITY FOR CONFIDENTIAL VIRTUAL MACHINES

Abstract

Systems and methods for securing pixel data in a virtual framebuffer and efficiently providing the secure pixel data are presented. The systems and methods partition a virtual framebuffer into a plurality of sectors, wherein each one of the plurality of sectors corresponds to one of a plurality of regions of a screen. The systems and methods encrypt first pixel data corresponding to the plurality of regions to produce encrypted first pixel data and storing the encrypted first pixel data in the plurality of sectors of the virtual framebuffer. The systems and methods modify a portion of the first pixel data to produce second pixel data, wherein the portion of the first pixel data corresponds to a first sector in the plurality of sectors. The systems and methods encrypt the second pixel data to produce encrypted second pixel data. The systems and methods update the first sector of the virtual framebuffer with the encrypted second pixel data.

Claims20

Dependent claims

A method comprising:

partitioning a virtual framebuffer into a plurality of sectors, wherein each one of the plurality of sectors corresponds to one of a plurality of regions of a screen;
encrypting first pixel data corresponding to the plurality of regions to produce encrypted first pixel data and storing the encrypted first pixel data in the plurality of sectors of the virtual framebuffer;
modifying, by a processing device, a portion of the first pixel data to produce second pixel data, wherein the portion of the first pixel data corresponds to a first sector in the plurality of sectors;
encrypting the second pixel data to produce encrypted second pixel data;
and
updating the first sector of the virtual framebuffer with the encrypted second pixel data.

3 more elements

A system comprising:

a processing device;
and
a memory to store instructions that, when executed by the processing device cause the processing device to:
partition a virtual framebuffer into a plurality of sectors, wherein each one of the plurality of sectors corresponds to one of a plurality of regions of a screen;
encrypt first pixel data that corresponds to the plurality of regions to produce encrypted first pixel data and store the encrypted first pixel data in the plurality of sectors of the virtual framebuffer;
modify a portion of the first pixel data to produce second pixel data, wherein the portion of the first pixel data corresponds to a first sector in the plurality of sectors;
encrypt the second pixel data to produce encrypted second pixel data;
and
update the first sector of the virtual framebuffer with the encrypted second pixel data.

6 more elements

A non-transitory computer readable medium, having instructions stored thereon which, when executed by a processing device, cause the processing device to:

partition a virtual framebuffer into a plurality of sectors, wherein each one of the plurality of sectors corresponds to one of a plurality of regions of a screen;
encrypt first pixel data corresponding to the plurality of regions to produce encrypted first pixel data and store the encrypted first pixel data in the plurality of sectors of the virtual framebuffer;
modify a portion of the first pixel data to produce second pixel data, wherein the portion of the first pixel data corresponds to a first sector in the plurality of sectors;
encrypt the second pixel data to produce encrypted second pixel data;
and
update the first sector of the virtual framebuffer with the encrypted second pixel data.

3 more elements

Dependencies are inferred from the claim text.

Graphical console confidentiality for confidential virtual machines

Life of this patent

Graphical console confidentiality for confidential virtual machines

Life of this patent

Abstract

Claims20