Patent ID: 8464043
Filing Date: 2013-06-11
Classification: G06F,H04L,H04N

Abstract:
1. A migration apparatus for migrating confidential data protected in a first terminal to a second terminal, the migration apparatus comprising: a receiving unit operable to receive, from the first terminal, confidential data protected by a first encryption algorithm in a security module in the first terminal, and receive a download request for the confidential data from the second terminal; an identification unit operable to identify the first encryption algorithm from a credential transmitted from the first terminal, and identify a second encryption algorithm used in a security module in the second terminal from a credential transmitted from the second terminal along with the download request for the confidential data; a package management table holding unit holding a package management table for managing the confidential data, a confidential data management method used by the first terminal, an encryption algorithm used by the first terminal, and a key length used by the first terminal; a package registration unit operable to register, with the package management table, the confidential data management method used by the first terminal, the encryption algorithm used by the first terminal, the key length used by the first terminal, and the confidential data after the confidential data is uploaded from the first terminal; a security policy table holding unit holding a security policy table that indicates correspondence relationships among key lengths, for a plurality of encryption algorithms including the first and second encryption algorithms, that provide a same encryption strength level; a determination unit operable to, when receiving the download request from the second terminal, determine whether or not migration is possible in accordance with the security policy table and the second encryption algorithm identified by the identification unit from the credential received from the second terminal along with the download request; and a control unit operable to: