Secure private key distribution between endpoint instances

A non-transitory computer-readable storage medium having stored thereon instruction for controlling a computer system to:

• register a plurality of authorization instances in a configuration file by providing a registration to the configuration, the authorization instances participating in a common service;
• generate host instance key pairs for each of the authorization instances, wherein each of the host instance key pairs include a public host key and a private host key;
• store the public host keys in a shared database;
• elect one of the authorization instances to be a signature key leader instance;
• generate a signature key pair by the signature key leader instance, wherein the signature key pair includes a public signature key and a private signature key;
• store the public signature key in the shared database;
• and
• transmit an encrypted private signature key to a requesting authorization instance of the authorization instances, wherein the private signature key is encrypted using the public host key corresponding to the requesting authorization instance to generate the encrypted private signature key.

A computer system for distributing a private signature key between authorization instances, the computer system comprising:

• a data processing component;
• a physical memory;
• and
• local data storage having stored thereon computer executable program code, which when executed by the data processing component causes the data processing component to:
• register a plurality of authorization instances in a configuration file by providing a registration to the configuration, the authorization instances participating in a common service;
• generate host instance key pairs for each of the authorization instances, wherein each of the host instance key pairs include a public host key and a private host key;
• store the public host keys in a shared database;
• elect one of the authorization instances to be a signature key leader instance;
• generate a signature key pair by the signature key leader instance, wherein the signature key pair includes a public signature key and a private signature key;
• store the public signature key in the shared database;
• and
• transmit an encrypted private signature key to a requesting authorization instance of the authorization instances, wherein the private signature key is encrypted using the public host key corresponding to the requesting authorization instance to generate the encrypted private signature key.