System and Method for Providing UEFI Protocol Access Control

An information handling system comprising:

• a memory device;
• and
• a firmware image stored at the memory device, the firmware image providing a protocol access controller (PAC) to:
• generate a protocol database;
• receive, from a protocol publisher, a first request to install a first protocol at the protocol database, the first request including a first global unique identifier (GUID) and a first protocol pointer;
• store the first GUID and the first protocol pointer at an entry at the protocol database;
• receive a first root key;
• store the first root key at the entry at the protocol database;
• receive, from a first protocol consumer, a second request including the first GUID;
• provide a first random number to the first protocol consumer in response to the second request;
• generate a second GUID based on the first random number and the first root key;
• and
• store the second GUID at the entry of the protocol database.

A method comprising:

• installing, by a protocol publisher, a first protocol at an entry at a protocol database, the first protocol identified by a first global unique identifier (GUID);
• providing, by the protocol publisher, a first root key to the protocol database, the first root key associated with the first protocol;
• generating, at a protocol access controller, a second GUID based on the first root key and the first GUID;
• storing the second GUID at the entry at the protocol database;
• generating the second GUID at a first protocol consumer based on the first GUID and first root key;
• and
• receiving a first protocol pointer at the first protocol consumer in response to a request by the first protocol consumer, the first request including the second GUID.