Securing content from malicious instructions

Patent metadata

Field	Value
Publication number	US-9646153-B2
Application number	US-201213569937-A
Country	US
Kind code	B2
Filing date	Aug 8, 2012
Priority date	Aug 8, 2012
Publication date	May 9, 2017
Grant date	May 9, 2017

Abstract

A method and system is provided for securing content from malicious shaders. The method includes determining the content the shader is to execute. A signature of the shader is verified in response to the shader attempting to execute on protected content. In response to the shader being verified, it is verified that the shader has not been modified. The shader is executed in response to not being modified.

First claim

What is claimed is:

1. A method for securing content from malicious shaders, comprising:
assigning a key to a shader;
determining the content the shader is to execute;
verifying a signature of the shader was signed by a trusted entity in response to the shader attempting to execute on protected content, wherein the signature is produced using the shader and the key;
verifying the shader has not been modified subsequent to being signed in response to the signature being verified as signed by a trusted entity using cryptographic techniques;
comparing the key to a list of good keys in response to the shader not being modified;
storing the key assigned to the shader in the list of good keys in response to the key not being found on the list of good keys, wherein the key indicates that the shader is not a malicious shader and has not been modified; and
executing the shader in response to the shader not being modified, and blocking the shader from execution in response to the shader being modified.

2. The method of claim 1 , further comprising blocking the shader from execution in response to the signature not being verified.

3. The method of claim 1 , further comprising blocking the shader from execution in response to being modified subsequent to being signed.

4. The method of claim 1 , wherein the shader is a digital signal processing algorithm, and the protected content is premium audio and video.

5. The method of claim 1 , further comprising quarantining the shader in response to the signature not being verified or quarantining the shader in response to the shader being modified subsequent to being signed.

6. The method of claim 1 , further comprising verifying the signature of the shader using one or more of a hash value, a checksum, or any combination thereof.

7. A computing device, comprising:
a graphics processing unit (GPU) that is configured to execute stored instructions and a storage device that stores instructions, wherein the storage device includes processor executable code that, when executed by the GPU, is configured to:
assigning a key to a shader;
determine a content that a shader is to execute;
verify a signature of the shader was signed by a trusted entity in response to the shader's attempt to execute on protected content, wherein the signature is produced using the shader and the key;
verify the shader has had no modifications subsequent to being signed in response to the signature being verified as signed by a trusted entity using cryptographic techniques;
comparing the key to a list of good keys in response to the shader not being modified;
store the key assigned to the shader in the list of good keys in response to the key not being found on the list of good keys, wherein the key indicates that the shader is not a malicious shader and has not been modified; and
execute the shader in response to the shader's lack of modifications, and blocking the shader from execution in response to the shader being modified.

8. The computing device of claim 7 , wherein the GPU is configured to stop the shader from execution in response to the signature not being verified.

9. The computing device of claim 7 , wherein the GPU is configured to stop the shader from execution in response to being modified subsequent to being signed.

10. The computing device of claim 7 , wherein the shader is a digital signal processing algorithm, and the protected content is premium audio and video.

11. The computing device of claim 7 , wherein the GPU is configured to quarantine the shader in response to the signature not being verified, or quarantine the shader in response to being modified subsequent to being signed.

12. The computing device of claim 7 , wherein the GPU is configured to verify the signature of the shader using one or more of a hash value, a checksum, or any combination thereof.

13. The computing device of claim 7 , further comprising a radio and a display, the radio and display communicatively coupled at least to a central processing unit of the computing device.

14. At least one non-transitory machine readable medium having instructions stored therein that, in response to being executed on a computing device, cause the computing device to:
assigning a key to a shader;
determine a content that a shader is to execute;
authenticate a signature of the shader was signed by a trusted entity in response to the shader attempting to execute on protected content, wherein the signature is produced using the shader and the key;
confirm the shader has had no modifications subsequent to being signed in response to the signature being authenticated as signed by a trusted entity using cryptographic techniques;
store the key assigned to the shader in the list of good keys in response to the key not being found on the list of good keys, wherein the key indicates that the shader is not a malicious shader and has not been modified; and
execute the shader in response to the shader's lack of modifications, and blocking the shader from execution in response to the shader being modified.

15. The at least one non-transitory machine readable medium of claim 14 , further comprising preventing the shader from execution in response to the signature not being authenticated.

16. The at least one non-transitory machine readable medium of claim 14 , further comprising preventing the shader from executing in response to being modified subsequent to being signed.

17. The at least one non-transitory machine readable medium of claim 14 , wherein the shader is a digital signal processing algorithm, and the protected content is premium audio and video.

Assignees

• Janus Scott
• Scully Brian
• Nair Sanjay S
• Kumar Gaurav
• Intel Corp

Inventors

• Janus Scott
• Scully Brian
• Nair Sanjay S
• Kumar Gaurav

Classifications

• H04N21/234327 Primary

  by decomposing into layers, e.g. base layer and one or more enhancement layers · CPC title

• H04N21/41407

  embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop (constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57) · CPC title

• H04N21/835

  Generation of protective data, e.g. certificates {(protecting software against unauthorised usage in a vending or licensing environment G06F21/10)} · CPC title

• H04N21/44236

  Monitoring of piracy processes or activities (protecting computer platforms against harmful, malicious or unexpected behaviour or activities using intrusion detection and counter measures G06F21/566; computer virus detection and handling G06F21/56) · CPC title

• G06F21/51 Primary

  at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title