Patent ID: 8683222

Claim:
A method for optimizing use of cryptographic key-store hardware security modules in a system, the method comprising: securing by a computer a plurality of cryptographic keys to a first security level by storing the keys in a first storage device; responsive to a first event, evaluating by a computer the stored keys against one or more rules; responsive to the evaluation, selecting and moving by a computer some but not all of the keys into a second storage device, wherein the movement frees memory space in the first storage device previously occupied by the moved key; and responsive to a subsequent request to access data associated with the moved key, using by a computer the moved key in the second storage device to protect the data; wherein the first storage has a first storage capacity and a first security certification level, wherein the second storage device has a second storage capacity and a second security certification level, and wherein the first storage capacity is less than the second storage capacity, and wherein the first security certification level is greater than the second security certification level.