Patent ID: 8584216
Filing Date: 2013-11-12
Classification: H04L

Abstract:
1. A computer-implemented method for efficiently deploying updates within a cryptographic-key management system, at least a portion of the method being performed by a server-side computing device comprising at least one processor, the method comprising: receiving, from at least one client device, a request for the at least one client device's subscribed cryptographic key material, wherein the request comprises information that identifies both the at least one client device and cryptographic key material currently possessed by the at least one client device; in response to the request for the at least one client device's subscribed cryptographic key material, automatically identifying the at least one client device's subscribed cryptographic key material by: identifying a plurality of user groups that the at least one client device is a member of; for each user group within the plurality of user groups that the at least one client device is a member of, identifying at least one set of cryptographic key material that the user group, and thus the at least one client device, is subscribed to; determining, by comparing the information received from the at least one client device with the at least one client device's subscribed cryptographic key material, that the cryptographic key material currently possessed by the at least one client device does not match the at least one client device's subscribed cryptographic key material; deploying at least one update to the at least one client device that causes the at least one client device to update the cryptographic key material currently possessed by the at least one client device to match the at least one client device's subscribed cryptographic key material.