Automatic authentication of backup clients

Computer readable media comprising storage media storing instructions for controlling a computer system to perform a method for authenticating a client computer for backup by a backup computer, the method comprising:

• obtaining first information from the client computer that identifies the client computer;
• identifying from the first information whether the client computer is included in a backup database;
• upon determining that the client computer is not included in the database, requesting from the client computer second information comprising client status information containing a key hash of a number and a key value encrypted using one of a plurality of public keys stored in the client computer, said plurality of public keys including a public key corresponding to a private key of said backup computer;
• decrypting the encrypted second information using the private key of the backup computer;
• determining whether the decrypted second information includes an expected key hash;
• adding the client computer to the backup database for backup upon the decrypted second information containing said expected key hash;
• upon the decrypted second information not including said expected key hash, requesting the client computer to encrypt the second information using another one of said plurality of stored public keys, and repeating said decrypting and said determining steps.

A system for automatically authenticating a client computer for backup, comprising a backup computer;

• a backup database storing identities of computers for backup;
• and computer readable media comprising computer program code instructions for controlling the operation the backup computer to receive first information from the client computer that identifies the client computer and to identify whether the client computer is included in the backup database;
• upon determining that the client computer is not included in the database, to receive second information from the client computer, the second information comprising client status information containing a key hash of a number and a key value encrypted using one of a plurality of public keys in the client computer, said plurality of public keys including a public key corresponding to a private key of said backup computer;
• to decrypt said second information using the private key in said backup computer;
• upon the decrypted second information containing an expected key hash, to authenticate the client computer, and upon the decrypted second information not including said expected key hash, to request the client computer to encrypt the second information using another one of said plurality of stored public keys, and to repeat said decrypting and said determining steps.