Granted Patent B2

US 10,073,972 · App. 14/523,884 · Granted Sep 11, 2018

Abstract

Claims (35)

1. A method, comprising:

establishing, by executing an instruction with a processor, a trusted channel between a graphics driver and an application driver via mutual authentication of the graphics driver and the application driver;

in response to the mutual authentication of the graphics driver and the application driver, offloading, via the trusted channel, a computing task associated with the application driver from the processor to a graphics processing unit; and

configuring, by executing an instruction with the processor, a monitor to monitor memory associated with the computing task offloaded via the trusted channel for an unauthorized access attempt.

2. A method as defined in claim 1 , wherein the configuring of the monitor includes defining a policy for a hypervisor having a highest privilege level of a computing platform to monitor the memory.

3. A method as defined in claim 1 , further including configuring the monitor to operate outside an operating system.

4. A method as defined in claim 1 , wherein the monitor is implemented via a Trusted Memory Services Layer.

5. A method as defined in claim 1 , further including isolating the memory associated with the offloaded computing task from second memory associated with an image rendering task executed by the graphics processing unit.

6. A method as defined in claim 1 , wherein the application driver corresponds to a security application, and the computing task includes a memory scanning operation to detect a pattern associated with malware.

7. A method as defined in claim 1 , wherein the establishing of the trusted channel is performed in response to an indication from the application driver that the computing task is to be offloaded to the graphics processing unit.

8. A method as defined in claim 1 , further including denying the offload of the computing task when the mutual authentication fails.

9. An apparatus, comprising:

a graphics processing unit; and

a graphics driver to facilitate access to the graphics processing unit, the graphics driver including:

an authenticator to establish a trusted channel between the graphics driver and an application driver via mutual authentication of the graphics driver and the application driver;

a first interface through which a computing task associated with the application driver is to be offloaded, via the trusted channel, to the graphics processing unit in response to the mutual authentication of the graphics driver and the application driver; and

a definer to configure a monitor to monitor memory associated with the computing task offloaded via the trusted channel for an unauthorized access attempt.

10. An apparatus as defined in claim 9 , wherein the definer is to configure the monitor by defining a policy for a hypervisor having a highest privilege level of a computing platform to monitor the memory.

11. An apparatus as defined in claim 9 , wherein the definer is to configure the monitor to operate outside an operating system.

12. An apparatus as defined in claim 9 , wherein the monitor is implemented via a Trusted Memory Services Layer.

13. An apparatus as defined in claim 9 , wherein the memory is isolated from second memory associated with an image rendering task executed by the graphics processing unit.

14. An apparatus as defined in claim 9 , wherein the application driver corresponds to a security application, and the computing task includes a memory scanning operation to detect a pattern associated with malware.

15. An apparatus as defined in claim 9 , wherein the authenticator is to establish the trusted channel in response to an indication from the application driver that the computing task is to be offloaded to the graphics processing unit.

16. An apparatus as defined in claim 9 , wherein the authenticator is to deny the offload of the computing task when the mutual authentication fails.

17. A tangible computer readable storage medium comprising instructions that, when executed, cause a machine to at least:

establish a trusted channel between a graphics driver and an application driver via mutual authentication of the graphics driver and the application driver;

in response to the mutual authentication of the graphics driver and the application driver, offload, via the trusted channel, a computing task associated with the application driver to a graphics processing unit; and

configure a monitor to monitor memory associated with the computing task offloaded via the trusted channel for an unauthorized access attempt.

18. A storage medium as defined in claim 17 , wherein to configure the monitor, the instructions, when executed, cause the machine to define a policy for a hypervisor having a highest privilege level of a computing platform to monitor the memory.

19. A storage medium as defined in claim 17 , wherein the instructions, when executed, cause the machine to configure the monitor to operate outside an operating system.

20. A storage medium as defined in claim 17 , wherein the monitor is implemented via a Trusted Memory Services Layer.

21. A storage medium as defined in claim 17 , wherein the instructions, when executed, cause the machine to isolate the memory associated with the offloaded computing task from second memory associated with an image rendering task executed by the graphics processing unit.

22. A storage medium as defined in claim 17 , wherein the application driver corresponds to a security application, and the computing task includes a memory scanning operation to detect a pattern associated with malware.

23. A storage medium as defined in claim 17 , wherein the instructions, when executed, cause the machine to establish the trusted channel in response to an indication from the application driver that the computing task is to be offloaded to the graphics processing unit.

24. A storage medium as defined in claim 17 , wherein the instructions, when executed, cause the machine to deny the offload of the computing task when the mutual authentication fails.

Assignments (11)