Abstract: EFI sponsored by Intel is the next generation of BIOS framework，which is the BIOS innovation technology planning for the next generation of OS.Its own security problem has become the biggest obstacle of further development，while it solves lots of limitation of traditional BIOS well.This paper discusses the structure of EFI and the EFI driver model.On this basis，a Ukey driver based on EFI is designed and realized，which can be used to solve the identity authentication on BIOS layer.

Key words: Extensible Firmware Interfare（EFI） Basic Input Output System（BIOS）, Universil Key Device（Ukey）, driver, identity authentication

摘要： EFI是Intel提出的下一代BIOS的基础规范架构，是为下一代操作系统准备的BIOS革新技术。EFI在解决传统BIOS局限性的同时，其自身安全问题成为它进一步发展的最大障碍。在研究EFI结构的基础上，重点对EFI驱动模型进行分析，设计并实现了一个基于EFI的Ukey设备驱动，可用于解决BIOS层的用户身份认证问题。

关键词: 可扩展固件界面软件（EFIBIOS）, USB接口硬件存储设备（Ukey）, 驱动程序, 身份认证