Einrichtung und Verfahren zur fehlertoleranten Schlüsselverwaltung

摘要

A system and method of fault tolerant key management of cryptographic keys includes a key distribution computer (20) and primary and secondary key management computers (30, 32) coupled to the key distribution computer. Primary and secondary server computers (40, 42) are each coupled to the primary and secondary key management computers. One of the primary and secondary key management computers is operational at a time. The operational one of the primary and secondary key management computers writes key data received from the key distribution computer to an archive database in each of the primary and secondary server computers. The method includes the steps of requesting storage of key data by an operational one of the primary and secondary key management computers; monitoring the operational status of each of primary and secondary server computers; writing key data to an archive database in each of the primary and secondary servers that are operational; writing key data to a log file in an operational one of the primary and secondary servers when one of the primary and secondary servers is not operational; monitoring a return to operational status of the non operational one of the primary and secondary servers; and writing to the archive database of the non-operational one of the primary and secondary server computers the key data stored in the log file of the operational one of the primary and secondary server computers.