Secure environment for graphics processing units

One or more non-transitory computer readable media storing instructions executed by a central processing unit to perform a sequence comprising:

• creating a trusted framework for a processing graphics unit on the central processing unit by providing an enclave on the central processing unit to build a protected module on the processing graphics unit;
• using a driver on the processing graphics unit to point the processing graphics unit to an entry point of the protected module;
• executing said protected module on said processing graphics unit;
• measuring code and data structures used to execute a workload running on the processing graphics unit;
• determining whether a part of the processing graphics unit is compromised using measured code and data structures;
• patching the compromised part remotely;
• and
• proving the patching remotely through attestation.

A computer comprising:

• a processing graphics unit;
• and
• a central processing unit coupled to said processing graphics unit using a first operating system to provide an enclave to build a protected module on the processing graphics unit using a trusted framework on the processing graphic unit,
• using a driver on the central processing unit to point the processing graphics unit to an entry point of the protected module,
• to execute said protected module on said processing graphics unit,
• to measure code and data structures used to execute a workload running on the processing graphics unit,
• to determine whether a part of the processing graphics unit is compromised using measured code and data structures,
• to patch the compromised part remotely;
• and prove the patching remotely through attestation.