Patent ID: 8266433
Filing Date: 2012-09-11
Classification: H04L

Abstract:
1. A computer-implemented method comprising: authenticating, by a first key manager, a communication channel between the first key manager and a second key manager; managing and storing, by the first key manager, a key for performing cryptographic operations on data of a storage system; receiving, by the first key manager, a request for the key from the second key manager across the authenticated communication channel; responsive to the request, securely providing, by the first key manager, the key to the second key manager across the authenticated communication channel; wherein the step of securely providing the key to the second key manager includes: wherein the step of authenticating the communication channel comprises verifying identities of the first key manager and the second key manager prior to sending the encrypted key directly between the first key manager and the second key manager; wherein the second key manager decrypts the encrypted key and uses the decrypted key to perform cryptographic operations on the data responsive to a cryptographic request of the storage system upon a failure of the first key manager to perform said cryptographic operations.