JP2016085503A - Information processing device, information processing method, and information processing program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing device capable of reducing a load on a CPU.SOLUTION: An information processing device 100 of the present invention includes: a central processing unit 101 for executing arithmetic processing; an image processing unit 102 for executing image processing; a load acquisition unit 103 for obtaining loads on the central processing unit 101 and image processing unit 102; and a processing control unit 104 that, on the basis of the obtained loads, causes any one of the central processing unit 101 and image processing unit 102 to execute encryption processing.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an information processing device, an information processing method, and an information processing program, and more particularly to an information processing device, an information processing method, and an information processing program that include an image processing unit.

  In recent years, an information processing apparatus (computer) including a plurality of processors has been used to reduce the load on the processor. For example, information processing apparatuses described in Patent Documents 1 and 2 include a CPU (Central Processing Unit) and a GPU (Graphics Processing Unit). There is also an example in which the CPU and the GPU are mounted on the same semiconductor device.

  The GPU is a device that performs dedicated image processing in an information processing device such as a PC (Personal Computer) or a workstation. Since the GPU performs the calculation for image processing instead of the CPU, the load on the CPU can be reduced.

  On the other hand, when exchanging data such as documents and images via the Internet etc., security measures are necessary as usual, so that data can not be stolen or tampered with by a third party during data communication. Encryption has become very important.

  Patent Documents 3 and 4 are known as techniques related to encryption. In addition, Patent Document 4 is known as a technique related to the cluster system.

Special table 2007-503059 gazette JP 2008-090889 A International Publication No. 97/10659 JP 2013-206379 A

NVIDIA, GPU Gems 3, Chapter 36. AES Encryption and Decryption on the GPU, [online], Internet <http://http.developer.nvidia.com/GPUGems3/gpugems3_ch36.html>

  In an example where a CPU and a GPU are mounted as in the related technology, when advanced image processing using 3D graphics is required, the advantage of reducing the load on the CPU can be utilized by installing the GPU. . However, there are cases where resources cannot be utilized to the maximum when the GPU that does not require advanced image processing is rarely used.

  For example, when data is encrypted by an application, even if a GPU is installed as in a related technique, the CPU performs encryption processing. Then, since the encryption algorithm is complicated, a large load is applied to the CPU, and there is a risk of consuming a large amount of computer resources.

  Furthermore, in recent years, which is said to be the big data era, data is becoming larger, and the larger the data to be encrypted, the greater the load on the CPU and the higher the latency until a response is returned. There is also a risk of growing.

  Therefore, the related technology has a problem that even if a GPU is mounted, the CPU load cannot be reduced when performing encryption processing other than image processing.

  In view of such a problem, an object of the present invention is to provide an information processing apparatus, an information processing method, and an information processing program capable of reducing the load on the CPU.

  An information processing apparatus according to the present invention includes a central processing unit for executing arithmetic processing, an image processing unit for executing image processing, and a load acquisition unit that acquires loads of the central processing unit and the image processing unit. And a processing control unit that causes one of the central processing unit and the image processing unit to execute encryption processing based on the acquired load.

  An information processing method according to the present invention is an information processing method in an information processing apparatus including a central processing unit for executing arithmetic processing and an image processing unit for executing image processing, wherein the central processing The load of the unit and the image processing unit is acquired, and based on the acquired load, either the central processing unit or the image processing unit is caused to execute the encryption process.

  An information processing program according to the present invention is an information processing program to be executed in an information processing apparatus including a central processing unit for executing arithmetic processing and an image processing unit for executing image processing, Loads of the central processing unit and the image processing unit are acquired, and based on the acquired load, either the central processing unit or the image processing unit executes encryption processing.

  ADVANTAGE OF THE INVENTION According to this invention, the information processing apparatus, the information processing method, and information processing program which can reduce the load of CPU can be provided.

It is a block diagram which shows the schematic structure of the information processing apparatus which concerns on embodiment. It is a block diagram which shows the structure of the information processing apparatus of a reference example. It is a sequence which shows operation | movement of the information processing apparatus of a reference example. 1 is a configuration diagram illustrating a configuration of an information processing device according to a first embodiment. 3 is a sequence showing an operation of the information processing apparatus according to the first embodiment. 3 is a sequence showing an operation of the information processing apparatus according to the first embodiment. 3 is a sequence showing an operation of the information processing apparatus according to the first embodiment. 3 is a sequence showing an operation of the information processing apparatus according to the first embodiment.

(Outline of the embodiment)
First, the outline of the embodiment will be described with reference to FIG. As illustrated in FIG. 1, the information processing apparatus 100 according to the embodiment includes a central processing unit 101, an image processing unit 102, a load acquisition unit 103, and a processing control unit 104.

  The central processing unit (CPU) 101 is a processing device for executing arithmetic processing, and the image processing unit (GPU) 102 is a processing device for executing image processing. The load acquisition unit 103 acquires loads on the central processing unit 101 and the image processing unit 102. The processing control unit 104 causes either the central processing unit 101 or the image processing unit 102 to execute encryption processing based on the acquired load.

  In a system that requires encryption as a security measure, it is necessary to distribute the load on the CPU because there is a concern about the impact on the business system due to the increased load on the CPU. In the existing related technology, as a load distribution of the CPU, there is a technology for executing only image processing by the GPU and a technology for encrypting by the GPU. For example, in Non-Patent Document 1 described above, encryption processing is performed by a GPU.

  However, a method for judging the load on each device by combining the two has not been considered. For example, in Patent Documents 1 to 4 described above, the load of each device is not determined by combining a CPU and a GPU.

  Therefore, in the embodiment, as shown in FIG. 1, the load on each of the CPU and the GPU is confirmed, and the load on the CPU can be distributed by processing the encryption process on the GPU. In the embodiment, functions other than the image processing function of the GPU are added in order to effectively use the GPU as a resource. Furthermore, in the embodiment, the GPU can be effectively used by using the memory inside the GPU as a virtual data storage device (auxiliary storage device).

(Reference example)
Here, a reference example before application of the embodiment will be described. FIG. 2 shows a main configuration of the information processing apparatus 900 of the reference example. The information processing apparatus 900 of the reference example is an example of a configuration in which data encryption / decryption processing is executed by a CPU.

  As illustrated in FIG. 2, the information processing apparatus 900 of the reference example includes an OS (Operating System) 10, a CPU 20, a main memory 30, and a GPU 40.

  The OS 10 makes a general arithmetic processing request, a data encryption / decryption request, and an image processing request to the CPU 20. The CPU 20 executes arithmetic processing and encryption / decryption processing in response to an instruction from the OS 10 and requests the GPU 40 for image processing. The main memory (main storage device) 30 temporarily stores processing data of the CPU 20. The GPU 40 executes only image processing in response to a command from the CPU 20.

  The CPU 20 includes an LSI 21, a calculation unit 22, and a data cache unit 23. The LSI 21 holds information that causes the OS 10 to recognize as a CPU. The calculation unit 22 actually performs calculation processing. The data cache unit 23 stores data to be temporarily processed when the calculation unit 22 calculates.

  The GPU 40 includes an LSI 41, a calculation unit 42, a data cache unit 43, and an image memory 44. The LSI 41 holds information that causes the OS 10 to recognize the image processing apparatus. The calculation unit 42 actually performs calculation processing. The data cache unit 43 stores data to be temporarily processed when the calculation unit 42 calculates. The image memory 44 temporarily stores the image processed image data.

  Next, data encryption / decryption processing in the information processing apparatus 900 of the reference example will be described using the sequence of FIG. In the configuration of the reference example, the encryption / decryption process is performed only by the CPU.

  As shown in FIG. 3, in the data encryption process, first, the OS 10 requests the CPU 20 for data encryption (S101). Receiving the request, the CPU 20 executes encryption processing in the arithmetic unit 22 and stores the encrypted data in the main memory (main storage device) 30 (S102).

  In the data decryption process, first, the OS 10 requests the CPU 20 to decrypt data (S201). Receiving the request, the CPU 20 acquires the encrypted data from the main memory (main storage device) 30 (S202). The acquired data is decrypted by the arithmetic unit 22 of the CPU 20 and stored in the main memory 30, and the decrypted data is returned from the main memory 30 to the OS 10 (S203).

  As described above, in the reference example, the CPU always executes the encryption / decryption process in response to the encryption request from the OS. For example, even when image processing is not performed by the GPU, since encryption / decryption processing is always performed by the CPU, GPU resources are not used and cannot be effectively used. Further, since the encryption process is always executed by the CPU even when the load on the CPU is high, the load on the CPU further increases and the time until the encryption / decryption process is completed becomes longer.

(Embodiment 1)
The first embodiment will be described below with reference to the drawings. FIG. 4 shows a main configuration of the information processing apparatus 1 according to the present embodiment. The information processing apparatus 1 according to the present embodiment is an example of a configuration that uses a GPU to execute data encryption / decryption processing in which the CPU load is distributed.

  As illustrated in FIG. 4, the information processing apparatus 1 according to the present embodiment includes an OS 10, a CPU 20, a main memory 30, a GPU 140, and a load distribution management device 50.

  The OS 10 makes a request for general arithmetic processing, a request for data encryption / decryption processing, and a request for image processing to the load distribution management device 50. The load distribution management device 50 is a configuration added in the present embodiment, and instructs the CPU 20 or the GPU 140 in response to a request from the OS 10. The CPU 20 executes arithmetic processing and encryption / decryption processing according to instructions from the load distribution management device 50. The main memory (main storage device) 30 temporarily stores processing data of the CPU 20. The GPU 140 executes not only image processing but also encryption / decryption processing in accordance with an instruction from the load distribution management device 50.

  The load distribution management device 50 includes a control management unit 51, a load management unit 52, and an input / output management unit 53. The load management unit (load acquisition unit) 52 manages (acquires) the usage rate (load) of the CPU 20 and the GPU 140. The input / output management unit 53 manages data write / read requests to / from the image memory 144 serving as the main memory (main storage device) 30 and the virtual data storage device (auxiliary storage device). The control management unit 51 manages the load management unit 52 and the input / output management unit 53. For example, the control management unit 51 and the input / output management unit 53 can be said to be processing control units that cause either the CPU or the GPU to execute encryption processing based on the CPU and GPU loads acquired by the load management unit 52. .

  The CPU 20 has the same configuration as that of the reference example in FIG. 2 and includes an LSI 21, a calculation unit 22, and a data cache unit 23. However, in this embodiment, the request is not received directly from the OS 10 but is received via the load distribution management device 50.

  The GPU 140 basically has the same configuration as that of the reference example of FIG. 2, and includes an LSI 141, a calculation unit 142, a data cache unit 143, and an image memory 144. However, in the present embodiment, the GPU can execute image processing and encryption / decryption processing. In particular, in order to realize the functions of image processing and encryption / decryption processing, the GPU is operated as an image processing device and a virtual data storage device that stores encrypted / decrypted data.

  The LSI 141 holds information that causes the OS 10 to recognize it as an image processing device and a virtual data storage device. The calculation unit 142 actually performs calculation processing. The data cache unit 143 stores data that is temporarily processed when the calculation unit 142 performs calculations. The image memory 144 temporarily stores image data that has undergone image processing, and stores encrypted / decrypted data that has been encrypted / decrypted as a virtual data storage device (auxiliary storage device).

  Next, data encryption / decryption processing in information processing apparatus 1 according to the present embodiment will be described using the sequences of FIGS. 5A, 5B, 6A, and 6B.

  In the present embodiment, the image processing apparatus that performs image processing, which is the original function of the GPU 140, and the image memory 144 as a virtual data storage device are encrypted / decrypted in advance by software control of the LSI 141 in the GPU 140. Program to be identified as an encryption processor to execute. In the present embodiment, any method may be used as the encryption method.

  As shown in FIG. A5, in the data encryption process, first, the OS 10 requests data encryption from the control management unit 51 of the load distribution management device 50 (S301). Upon receiving the request, the control management unit 51 requests the load management unit 52 to check the load information (usage rate) of the CPU 20 and the GPU 140 (S302). Upon receiving the request, the load management unit 52 acquires (confirms) the load information of the CPU 20 (S303), acquires (confirms) the load information of the GPU 140 (S304), and sends the acquired load information to the control management unit 51 ( S305).

  Upon receiving the load information, the control management unit 51 requests the input / output management unit 53 to perform encryption processing on a device with a low load (S306). That is, when the load of the CPU 20 is lower than that of the GPU 140, the CPU 20 is requested to perform an encryption process. When the load of the GPU 140 is lower than that of the CPU 20, the encryption process is performed on the GPU 140. Request that. If the load on the CPU 20 and the GPU 140 is equal, the encryption process may be requested for either. Further, when the load on the CPU 20 is higher than the predetermined threshold, the GPU 140 may be requested to perform an encryption process. When the load on the CPU 20 is lower than the predetermined threshold, the encryption process is performed on the CPU 20. May be requested.

  When the input / output management unit 53 requests encryption from the CPU 20 (S307), the calculation unit 22 of the CPU 20 executes encryption processing and writes the encrypted data in the main memory (main storage device) 30 (S308). ). On the other hand, when the input / output management unit 53 requests the GPU 140 to perform encryption (S309), the calculation unit 142 of the GPU 140 executes encryption processing and encrypts the image memory 144, which is a virtual data storage device (auxiliary storage device). The converted data is stored (S310).

  Thereafter, as shown in FIG. 5B, the control management unit 51 periodically requests the load management unit 52 to confirm the load information of the CPU 2020 (S311), and the load management unit 52 acquires (confirms) the load information of the CPU 20. (S312). When the load on the CPU 20 is low, the control management unit 51 requests the input / output management unit 53 to acquire encrypted data (S313), and the input / output management unit 53 requests the GPU 140 to acquire encrypted data. (S314). The GPU 140 outputs the encrypted data of the image memory 144 which is a virtual data storage device (auxiliary storage device) to the CPU 20 (S315), and the CPU 20 stores the encrypted data in the main memory (main storage device) 30 (S316). .

  In addition, when the data capacity of the image memory 144 which is a virtual data storage device (auxiliary storage device) is full regardless of the load (when the data capacity is full), the main memory (main storage device) 30 is encrypted. The stored data is automatically stored.

  As shown in FIG. 6A, in the data decryption process, first, the OS 10 requests the control management unit 51 of the load distribution management device 50 to perform data decryption (S401). Upon receiving the request, the control management unit 51 requests the load management unit 52 to check the load information of the CPU 20 and the GPU 140 (S402). Upon receiving the request, the load management unit 52 acquires (confirms) the load information of the CPU 20 (S403), acquires (confirms) the load information of the GPU 140 (S404), and sends the acquired load information to the control management unit 51 ( S405).

  The control management unit 51 notifies the input / output management unit 53 of an encrypted data acquisition request (S406). At this time, the control management unit 51 or the input / output management unit 53 determines whether the encrypted data is stored in the main memory 30 or the image memory 144. For this determination, the CPU 20 or the GPU 40 may be inquired, or the control management unit 51 or the input / output management unit 53 may manage in advance. If the encrypted data is in the image memory 144 which is a virtual data storage device (auxiliary storage device) and the load on the GPU 140 is low, the input / output management unit 53 makes a data acquisition request to the GPU 140 (S407). Upon receiving the request, the GPU 140 decrypts the target data in the image memory 144 and outputs the decrypted data to the CPU 20 (S408). The CPU 20 stores the decrypted data in the main memory (main storage device) 30. The data is stored and returned to the input / output management unit 53 (S409).

  On the other hand, as shown in FIG. 6B, when the encrypted data is in the image memory 144 which is a virtual data storage device (auxiliary storage device) and the load on the CPU 20 is low, the input / output management unit 53 sends the A data acquisition request is made (S410). Upon receiving the request, the CPU 20 acquires encrypted data from the image memory 144, which is a virtual data storage device (auxiliary storage device), via the main memory (main storage device) 30 (S411). The CPU 20 decrypts the acquired data, stores the decrypted data in the main memory (main storage device) 30, and returns it to the input / output management unit 53 (S412).

  If the encrypted data is not in the image memory 144 which is a virtual data storage device (auxiliary storage device), the input / output management unit 53 requests the CPU 20 to acquire data (S413). The CPU 20 acquires encrypted data from the main memory (main storage device) 30 (S414). The CPU 20 performs a decryption process on the acquired data in the arithmetic unit 22 of the CPU 20 and stores it in the main memory 30, and returns the decrypted data from the main memory 30 to the input / output management unit 53 (S415). In this case, the CPU 20 performs decoding regardless of the load.

  Thereafter, the input / output management unit 53 returns the decrypted data to the control management unit 51 (S416), and the control management unit 51 returns the decrypted data to the OS 10 (S417).

The effect of this embodiment will be described. First, according to the present embodiment, even if data encryption / decryption that requires a load due to the complexity of the algorithm is performed, processing on the GPU instead of the CPU can reduce the load on the CPU. Thus, server resources can be used efficiently (first effect). Furthermore, according to the present embodiment, by using a GPU as a virtual data storage device (auxiliary storage device), latency of data read / write by encryption / decryption can be reduced (second effect) ).
(Other embodiments)

  It can also be used in an HA (High Availability) clustering system (abbreviation: HA cluster). As a background, in an HA cluster, sharing of data between servers to be clustered is an important factor. In an HA cluster applied to a mission critical system, it is necessary to encrypt shared data as a security measure. However, if encryption processing is performed by the CPU, the load increases, and there is a possibility that the business system (application) is greatly affected.

  By applying the above embodiment to such an HA cluster system, it is possible to distribute the CPU load, minimize the influence on the business system (application), and construct a more secure cluster system. it can. That is, the information processing apparatus may be a cluster node that constitutes a cluster system.

  Note that the present invention is not limited to the above-described embodiment, and can be changed as appropriate without departing from the spirit of the present invention.

  Each configuration in the information processing apparatus described above is configured by hardware and / or software, and may be configured by one piece of hardware or software, or may be configured by a plurality of pieces of hardware or software. For example, each function of the load distribution management device may be realized by storing a program for performing load distribution management in the storage device and executing the program stored in the storage device by a CPU (computer).

  These programs can be stored using various types of non-transitory computer readable media and supplied to a computer. Non-transitory computer readable media include various types of tangible storage media. Examples of non-transitory computer-readable media include magnetic recording media (for example, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (for example, magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R / W and semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (random access memory)) are included. The program may also be supplied to the computer by various types of transitory computer readable media. Examples of transitory computer readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

1 Information processing apparatus 10 OS
20 CPU
21 LSI
22 arithmetic unit 23 data cache unit 30 main memory 40, 140 GPU
41, 141 LSI
42, 142 Arithmetic units 43, 143 Data cache units 44, 144 Image memory 50 Load distribution management device 51 Control management unit 52 Load management unit 53 Input / output management unit 100 Information processing device 101 Central processing unit 102 Image processing unit 103 Load acquisition unit 104 Processing control unit

Claims (10)

A central processing unit for performing arithmetic processing;
An image processing unit for performing image processing;
A load acquisition unit for acquiring a load of the central processing unit and the image processing unit;
Based on the acquired load, a processing control unit that causes either the central processing unit or the image processing unit to execute encryption processing;
An information processing apparatus comprising: The processing control unit causes the encryption processing to be executed for a lower load of the central processing unit and the image processing unit.
The information processing apparatus according to claim 1. The processing control unit causes the image processing unit to execute the encryption process when the load on the central processing unit is higher than a predetermined threshold.
The information processing apparatus according to claim 1. The image processing unit is configured to be recognizable as an image processing device and an encryption processing device to the processing control unit.
The information processing apparatus according to any one of claims 1 to 3. The image processing unit is configured to be recognizable as a virtual data storage device that stores the encrypted data with respect to the processing control unit.
The information processing apparatus according to claim 4. The image processing unit includes an image memory for storing the image processed data,
The image memory stores the encrypted data as the virtual data storage device.
The information processing apparatus according to claim 5. The central processing unit comprises a main memory for storing the data processed by the arithmetic processing,
After the encrypted data is stored in the image memory, the encrypted data is stored in the main memory based on the load of the central processing unit.
The information processing apparatus according to claim 6. The processing control unit performs decryption processing on either the central processing unit or the image processing unit according to whether the acquired load and the data subjected to the encryption processing are stored in the image memory. To execute,
The information processing apparatus according to claim 6 or 7. An information processing method in an information processing apparatus comprising a central processing unit for executing arithmetic processing and an image processing unit for executing image processing,
Obtaining the load of the central processing unit and the image processing unit;
Based on the acquired load, one of the central processing unit and the image processing unit is caused to execute encryption processing.
Information processing method. An information processing program to be executed in an information processing apparatus including a central processing unit for executing arithmetic processing and an image processing unit for executing image processing,
Obtaining the load of the central processing unit and the image processing unit;
Based on the acquired load, one of the central processing unit and the image processing unit is caused to execute encryption processing.
Information processing program.

Images