Patent ID: 8402278

Claim:
A method for protecting data, comprising: receiving, by a client device, first key information from a first keyserver, the first keyserver selected at random from a plurality of keyservers associated with an organization, the first key information comprising first encryption algorithm information, a first key for encrypting a file, and a first key identifier of the first key; accessing and decrypting the file using the first key; modifying the file; deleting the first key from memory of the client device in response to a shut down, a restart, or an expiration of an idle timer; subsequent to deleting the first key from the memory of the client device, requesting second key information from a second keyserver, the second keyserver selected at random from the plurality of keyservers, the second key information comprising second encryption algorithm information, a second key, and a second key identifier; and encrypting the modified file using the second key.