A data processing accelerator, comprising: one or more execution units (EUs) configured to perform data processing operations in response to an instruction received from a host system coupled over a bus; a security unit configured to establish and maintain a secure channel with the host system to exchange commands and data associated with the data processing operations, wherein the security unit comprises a secure storage area to store a private root key (SK_RK) associated with the DP accelerator, wherein the private root key (SK_RK) is utilized for authentication, a random number generator to generate a random number, and a cryptographic engine to perform cryptographic operations on data exchanged with the host system over the bus using a session key derived based on the random number; and a time unit coupled to the security unit to provide timestamp services, characterized in that, the security unit is configured to receive a request from the host system to establish a secure connection with the DP accelerator; and in response to the request, generate the session key based on the random number generated by the random number generator, wherein the session key is utilized to encrypt or decrypt the data exchanged with the host system over the secure connection, wherein in generating the session key based on the random number, the security unit is configured to: generate a temporary key pair having a temporary private key (SK_d) and a temporary public key (PK_d), transmit the temporary public key (PK_d) and an encrypted temporary public key (PK_d) to the host, wherein the encrypted temporary public key (PK_d) is encrypted by the private root key (SK_RK), wherein the host system decrypts the encrypted temporary public key using a public root key (PK_RK) associated with the DP accelerator and compares the transmitted temporary public key (PK_d) and the temporary public key that is decrypted to authenticate the DP accelerator, receive a first nonce (nc) from the host system, and generate a first session key based on the first nonce (nc) and a second nonce (ns) generated locally at the DP accelerator. one or more execution units (EUs) configured to perform data processing operations in response to an instruction received from a host system coupled over a bus; a security unit configured to establish and maintain a secure channel with the host system to exchange commands and data associated with the data processing operations, wherein the security unit comprises a secure storage area to store a private root key (SK_RK) associated with the DP accelerator, wherein the private root key (SK_RK) is utilized for authentication, a random number generator to generate a random number, and a cryptographic engine to perform cryptographic operations on data exchanged with the host system over the bus using a session key derived based on the random number; and a secure storage area to store a private root key (SK_RK) associated with the DP accelerator, wherein the private root key (SK_RK) is utilized for authentication, a random number generator to generate a random number, and a cryptographic engine to perform cryptographic operations on data exchanged with the host system over the bus using a session key derived based on the random number; and a time unit coupled to the security unit to provide timestamp services, characterized in that, the security unit is configured to receive a request from the host system to establish a secure connection with the DP accelerator; and in response to the request, generate the session key based on the random number generated by the random number generator, wherein the session key is utilized to encrypt or decrypt the data exchanged with the host system over the secure connection, wherein in generating the session key based on the random number, the security unit is configured to: generate a temporary key pair having a temporary private key (SK_d) and a temporary public key (PK_d), transmit the temporary public key (PK_d) and an encrypted temporary public key (PK_d) to the host, wherein the encrypted temporary public key (PK_d) is encrypted by the private root key (SK_RK), wherein the host system decrypts the encrypted temporary public key using a public root key (PK_RK) associated with the DP accelerator and compares the transmitted temporary public key (PK_d) and the temporary public key that is decrypted to authenticate the DP accelerator, receive a first nonce (nc) from the host system, and generate a first session key based on the first nonce (nc) and a second nonce (ns) generated locally at the DP accelerator. generate a temporary key pair having a temporary private key (SK_d) and a temporary public key (PK_d), transmit the temporary public key (PK_d) and an encrypted temporary public key (PK_d) to the host, wherein the encrypted temporary public key (PK_d) is encrypted by the private root key (SK_RK), wherein the host system decrypts the encrypted temporary public key using a public root key (PK_RK) associated with the DP accelerator and compares the transmitted temporary public key (PK_d) and the temporary public key that is decrypted to authenticate the DP accelerator, receive a first nonce (nc) from the host system, and generate a first session key based on the first nonce (nc) and a second nonce (ns) generated locally at the DP accelerator.