Patent ID: 8494170

Claim:
A method, comprising: transmitting, by a key server, public keys associated with the key server and at least one device to at least one remote key server; receiving, by the key server, from the at least one remote key server public keys associated with the at least one remote key server; receiving, by the key server, a request for an encryption key from a requesting device comprising one of the at least one device; generating, by the key server, the encryption key for use by the requesting device to unlock a storage; generating, by the key server, a first wrapped encryption key by encrypting the encryption key with a requesting device public key associated with the requesting device; generating, by the key server, a second wrapped encryption key by encrypting the encryption key with a public key associated with the key server; generating at least one additional wrapped encryption key for each of the at least one remote key server by encrypting the encryption key with the at least one public key provided by the at least one remote key server; and transmitting, to the requesting device, the first, second and the at least one additional wrapped encryption key to the requesting device.