Techniques for managing keys using a key server in a network segment

A method comprising:

• receiving, at a first key receiver, a first secure key from a first key server, the first secure key used to encrypt messages sent on a network segment;
• maintaining a peer list, the peer list including state information received from the one or more key receivers, the state information being information for a future election of a new key server;
• and
• automatically electing the new key server from a group of the first key receiver and the one or more key receivers based on the state information previously received from the one or more key receivers, the election automatically performed separately at the first key receiver using a heuristic applied by the first key receiver,
• wherein if the first key receiver is the elected new key server, the first key server is configured to send a second secure key to the one or more key receivers, the second secure key used to encrypt messages sent among the group of the first key receiver and the one or more key receivers,
• wherein if the first key receiver is not elected the new key server, the first key receiver configured to receive the second secure key from the new key server.

An apparatus comprising:

• one or more processors;
• and
• logic encoded in one or more computer readable storage media for execution by the one or more processors and when executed operable to:
• receive a first secure key from a first key server, the first secure key used to encrypt messages sent on a network segment;
• maintain a peer list, the peer list including state information received from the one or more key receivers, the state information being information for a future election of a new key server;
• and
• automatically elect the new key server from a group of the apparatus and the one or more key receivers based on the state information previously received from the one or more key receivers, the election automatically performed separately at the apparatus using a heuristic applied by the apparatus,
• wherein if the apparatus is the elected new key server, send a second secure key to the one or more key receivers, the second secure key used to encrypt messages sent among the group of the apparatus and the one or more key receivers,
• wherein if the apparatus is not elected the new key server, receive the second secure key from the new key server.

An apparatus comprising:

• one or more processors;
• and
• logic encoded in one or more computer readable storage media for execution by the one or more processors and when executed operable to:
• send to a first device and a second device, a first secure key, the first secure key used in encrypting data communications sent in the network segment,
• wherein the first device and the second device are configured to automatically elect a second key server to send a second secure key using state information previously sent between the first device and the second device, the state information being information for a future election of a new key server sent before a determination that the second key server needs to be elected, the election performed separately by each of the first device and the second device using a heuristic applied by the first device and the second device separately, the second secure key used in encrypting data communications sent in the network segment.