Nvidia Corporation

Dwayne Frank Swoboda

Lucien Dunning

Mark Alan Overby

Naveen Cherukuri

Mark Hairgrove

Vyas Venkataraman

Michael Asbury Woodmansee

Gobikrishna Dhanuskodi

Sudeshna Guha

Philip John Rogers

Seth Schneider

Adam Zabrocki

Marko Mitic

In examples, a VM may receive and aggregate a first attestation report corresponding to a CPU and a second attestation report corresponding to a GPU. The aggregated data may be provided to an attestation service, which may verify the attestation reports indicate a TCB is to include the VM and GPU state data and is to isolate the GPU state data and the VM from an untrusted host OS. Based at least on the TCB being verified, the VM may perform one or more operations using the TCB. The TCB may include a trusted hypervisor to isolate the VM and GPU state data within the GPU(s) from the untrusted host OS. The trusted hypervisor may prevent the host OS from accessing device memory assigned to the VM based at least on controlling an IOMMU and/or second-level address translation (SLAT) used to access the data.

Verifying security for virtual machines in cloud streaming systems and applications

Apparatuses, systems, and techniques to generate a trusted execution environment including multiple accelerators. In at least one embodiment, a parallel processing unit (PPU), such as a graphics processing unit (GPU), operates in a secure execution mode including a protect memory region. Furthermore, in an embodiment, a cryptographic key is utilized to protect data during transmission between the accelerators.

Implementing trusted executing environments across multiple processor devices

Secure execution for multiple processor devices using trusted executing environments

Growing community of inventors

San Jose, CA, United States of America

Dwayne Frank Swoboda