Bakery：用於 KVM 虛擬化環境中 ARM SoC 整合式 GPU 的代理式授權架構;Bakery: A Proxy-Based Authorization Architecture for Integrated GPUs on ARM SoCs in KVM Virtualized Environments

NCUIR > College of Electrical Engineering & Computer Science > Graduate Institute of Computer Science and Information Engineering > Electronic Thesis & Dissertation > Item 987654321/98473

Please use this identifier to cite or link to this item: https://ir.lib.ncu.edu.tw/handle/987654321/98473

Title:	Bakery：用於 KVM 虛擬化環境中 ARM SoC 整合式 GPU 的代理式授權架構;Bakery: A Proxy-Based Authorization Architecture for Integrated GPUs on ARM SoCs in KVM Virtualized Environments
Authors:	陳則閔;Chen, Ze-Min
Contributors:	資訊工程學系
Keywords:	GPU 授權代理架構;GPU 虛擬化;KVM 虛擬化;ARM 系統單晶片（SoC）;整合式 GPU;ARM TrustZone;可信執行環境;proxy-based GPU authorization;GPU virtualization;KVM virtualization;ARM SoC;integrated GPU;ARM TrustZone;trusted execution environments
Date:	2025-07-31
Issue Date:	2025-10-17 12:49:22 (UTC+8)
Publisher:	國立中央大學
Abstract:	隨著邊緣運算與高效能嵌入式系統需求上升，整合 GPU 的 ARM SoC 廣泛應用於行動裝置與智慧城市等領域。然而，在虛擬化環境中使用這類 GPU 資源仍面臨挑戰，包括現有 GPU 虛擬化技術不易應用於 SoC 架構、硬體相依性高、架構部署複雜，以及缺乏對 GPU 命令授權與執行流程的有效保護。針對上述問題，本研究提出 Bakery —— 一套部署於 KVM 虛擬化環境中、針對 ARM SoC 上整合式 GPU 所設計的代理式授權架構（A Proxy-Based Authorization Architecture for Integrated GPUs on ARM SoCs in KVM Virtualized Environments）。Bakery 結合 KVM 虛擬化與 ARM Trusted Firmware，並於最高特權層級（Exception Level 3, EL3）執行授權。我們於 Rock Pi 4B 平台上實作 Bakery 原型，並以 OpenCL 工作負載進行實驗驗證。實驗結果顯示，Bakery 可在不修改 GPU 任務排程與記憶體機制的前提下，使 KVM 虛擬化環境中順利使用 GPU，且不受特定型號限制，同時具備 GPU 命令授權能力。系統維持良好相容性，展現實際部署潛力。;With the growing demand for edge computing and high-performance embedded systems, ARM SoCs integrated with GPUs are widely used in fields such as mobile devices and smart cities. However, using such GPU resources in virtualized environments still faces challenges, including the difficulty of applying existing GPU virtualization technologies to SoC architectures, high hardware dependency, complex deployment architecture, and the lack of effective protection for GPU command authorization and execution processes. To address the above challenges, this study proposes \textbf{Bakery} — a proxy-based authorization architecture for integrated GPUs on ARM SoCs in KVM virtualized environments. Bakery combines KVM virtualization with ARM Trusted Firmware and performs authorization at EL3. A prototype of Bakery was implemented on the Rock Pi 4B platform and evaluated using Open Computing Language (OpenCL) workloads. Experimental results show that Bakery enables GPU usage in KVM virtualized environments without modifying GPU task scheduling or memory mechanisms, is not limited to specific models, and provides GPU command authorization capabilities. The system maintains Compatibility and Integration Readiness, demonstrating its potential for practical deployment.
Appears in Collections:	[Graduate Institute of Computer Science and Information Engineering] Electronic Thesis & Dissertation

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	33	View/Open

社群 sharing

Loading...