Patent ID: 8300831

Claim:
A computer program product implemented in a key server to communicate with at least one remote key server and at least one device to provide an encryption key, the computer program product comprising a computer readable storage medium having computer readable program code embodied therein that executes to perform operations, the operations comprising: transmitting public keys associated with the key server and the at least one device to the at least one remote key server; receiving from the at least one remote key server public keys associated with the at least one remote key server; receiving a request for an encryption key from a requesting device comprising one of the at least one device; generating the encryption key for use by the requesting device to unlock a storage; generating a first wrapped encryption key by encrypting the encryption key with a requesting device public key associated with the requesting device; generating a second wrapped encryption key by encrypting the encryption key with a public key associated with the key server; generating at least one additional wrapped encryption key for each of the at least one remote key server by encrypting the encryption key with the at least one public key provided by the at least one remote key server; and transmitting, to the requesting device, the first, second and the at least one additional wrapped encryption key to the requesting device.