Abstract: Disclosed is a system and associated methods for cryptographically verifying a user of a computing device at the bootloader level and before the loading of an operating system (OS). The cryptographic verification involves loading a boot authentication controller into a memory of the computing device upon powering on the computing device. The boot authentication controller restricts access to the computing device by preventing an OS from being loaded into the memory during the boot process. The boot authentication controller determines a level-of-access that a particular user has on the computing device from a received encoded value, customizes the OS with the level-of-access specified in the encoded value, and boots the computing system with a customized OS that provides the level-of-access.

Abstract: Disclosed is a system and associated methods for cryptographically verifying a user of a computing device at the bootloader level and before the loading of an operating system (OS). The cryptographic verification involves loading a boot authentication controller into a memory of the computing device upon powering on the computing device. The boot authentication controller restricts access to the computing device by preventing an OS from being loaded into the memory during the boot process. The boot authentication controller determines a level-of-access that a particular user has on the computing device from a received encoded value, customizes the OS with the level-of-access specified in the encoded value, and boots the computing system with a customized OS that provides the level-of-access.