Efficient Confidential Compute Check
AssigneesAdvanced Micro Devices, Inc., ATI Technologies ULC
InventorsRobert Landon Pelt, Steven Jidong Tu, Abin Thomas, Alexander Joseph Branover, Nippon HarshadKumar Raval, Chetty Somu Karuppan
Life of this patent
Estimating the term…
Abstract
An efficient confidential compute check is described. In one or more implementations, an apparatus includes a plurality of processors each configured to execute memory translations of at least one client that map client virtual memory to corresponding allocations of a physical memory shared among the plurality of processors. The apparatus also includes a security circuit configured to authorize client access to allocated regions of the physical memory based on whether an intercepted memory translation corresponds to an authorized client.
Claims20
An apparatus comprising:
- a plurality of processors each configured to execute memory translations of at least one client that map client virtual memory to corresponding allocations of a physical memory shared among the plurality of processors;
- and
- a security circuit configured to authorize client access to allocated regions of the physical memory based on whether an intercepted memory translation corresponds to an authorized client.
A system comprising:
- a host processor and at least one accelerator processor each configured to execute memory translations of at least one client that map client virtual memory to corresponding physical memory allocations;
- a physical memory that is shared between the host processor and the at least one accelerator processor;
- and
- a security circuit configured to authorize client access to allocated regions of the physical memory based on whether a client identifier and a memory address from an intercepted memory translation corresponds to an authorized client with ownership and access rights to the memory address.
A method comprising:
- maintaining, by a security processor, client permissions that authorize client ownership and access rights to allocated regions of a system memory;
- and
- authorizing, by the security processor, client access to the allocated regions of the system memory based on whether a client identifier and a memory address from an intercepted memory translation corresponds to an authorized client with ownership and access rights to the memory address.
Dependencies are inferred from the claim text.