Patent ID: 8630985

Claim:
An automatic failover configuration comprising: a primary database system operating in a first database server that processes transactions and produces redo data as a primary database system participant; a standby database system operating in a second database server that receives the redo data from the primary database system as a standby database participant, wherein the redo data is applied physically or logically against the standby database system; an active observer operating in an entity other than the first and second database servers that executes independently of the primary database system and the standby database system, wherein the active observer provides a quorum for a failover operation in which the standby database system participant becomes the primary database system participant; the active observer exchanging first control messages with the primary database system and the standby database system; the primary database system and the standby database system exchanging second control messages; wherein the first and second control messages propagate a current state of the automatic failover configuration among participants; and wherein the current state of the automatic failover configuration indicates when the active observer is to request further state information from the primary or standby database system; and the active observer responds thereto by requesting the further state information from the primary or standby database system; wherein the first control messages are status checks from the observer to the other participants; and wherein the second control messages are status checks from the primary database system to the standby database system and responses to status checks from the standby database system.