Patent ID: 7539311
Filing Date: 2009-05-26
Classification: G06Q,H04L

Abstract:
1. A method for determining a new key server in a network segment, the method comprising: receiving, at a first key receiver, a first secure key from a first key server, the first key server configured to provide the first secure key to one or more key receivers in the network segment, the first secure key used to encrypt messages sent among the group of the first key receiver and the one or more key receivers; receiving state information from the one or more key receivers, the state information being information for a future election of the new key server; determining, at the first key receiver, if the new key server needs to be elected; if the new key server needs to be elected, determining the state information previously received from the one or more key receivers in the network segment; and automatically electing the new key server from a group of the first key receiver and the one or more key receivers based on the state information previously received from the one or more key receivers before the determination that the new key server needs to be elected, the election automatically performed separately at the first key receiver using a heuristic applied by the first key receiver and the one or more key receivers separately, wherein the elected new key server is configured to send a second secure key to key receivers that are not elected the new key server in the group of the first key receiver and the one or more key receivers, the second secure key used to encrypt messages sent among the group of the first key receiver and the one or more key receivers.