Patent ID: 9020151
Filing Date: 2015-04-28
Classification: G06F,H04L

Abstract:
1. A computer-implemented method comprising: a key management server providing a first key to a first host computer system and a second key to a second host computer system over a computer network; prior to providing the first key to the first host computer system, the key management server receiving a key request from the first host computer system, determining whether or not the first host computer system meets a policy rule for receiving the first key, and providing the first key to the first host computer system when the first host computer system meets the policy rule for receiving the first key; the first host computer system receiving a file to be written to a first data storage device in the first host computer system, providing a copy of the file to the second host computer system in real-time, encrypting the file using the first key to generate an encrypted file, and storing the encrypted file in the first data storage device; and the second host computer system receiving the copy of the file, encrypting the copy of the file using the second key to generate an encrypted copy of the file, and storing the encrypted copy of the file in a second data storage device in the second host computer system.