Patent ID: 9311458
Filing Date: 2016-04-12
CPC Classification: G06F,G11B

Claim Text:
1. A method implemented at host computing device comprising: establishing a secure destination address range responsive to initiation of a direct memory access (DMA) operation to be performed by a DMA module that includes obtaining encrypted content from a source memory, decrypting the encrypted content, and placing the decrypted content at a secure destination memory; receiving, at a controller of the DMA module, one or more destination addresses associated with the secure destination memory from an operating system executed by a host central processing unit (CPU) through a portion of memory shared between the controller and the operating system; validating, at the controller, whether the one or more destination addresses falls within the secure destination address range; and allowing, at the controller, the DMA module to place the decrypted content at the secure destination memory based on the one or more destination addresses falling within the secure destination address range.