Patent ID: 8635664

Claim:
A method comprising: establishing, by a computing device, a software hook for an application program interface selected out of a unified extensible firmware interface application program interface and a unified extensible firmware platform initialization interface application program interface on the computing device during a pre-boot phase of the computing device, wherein the software hook defines an access control list associated with the application program interface to be retrieved when the application programming interface is called to determine whether the application programming interface may be accessed; and in response to the application programming interface being called by a program: retrieving, by the computing device, a user token associated with the program, the user token including data indicative of a device path list that defines whether the user is permitted to set access policy in association with the application program interface and a drive path, including drive paths, if any, that are children of the drive path; retrieving, by the computing device, the access control list associated with the application program interface using the established software hook, the access control list including at least one access control entry; and granting or denying the program that called the application programming interface access to the application program interface, by the computing device, based on a comparison of the user token and the at least one access control entry.