Patent ID: 8332658

Claim:
A computer system comprising: at least one host computer; a plurality of storage systems; and a management terminal for managing the plurality of storage systems, wherein each of the plurality of storage systems have at least one storage area for storing data that the at least one host computer reads or writes, wherein the plurality of storage systems includes a first storage system and a second storage system that store encrypted data in respective storage areas, wherein the first storage system comprises a first storage area, and is coupled to the second storage system, wherein the second storage system comprises a second storage area, wherein the second storage area is a virtualized storage area for accepting access from the host computer as the storage area of the second storage system, wherein when a data encryption base changes from the first storage system to the second storage system, data to be moved is divided into at least one block, wherein for each at least one block, the second storage system encrypts successively data decrypted by the first storage system, wherein the first storage system doubly-encrypts and stores successively the data encrypted by the second storage system in the first storage area of the first storage system, wherein after all the data in the at least one block is doubly-encrypted and stored in the first storage area of the first storage system, the first storage system successively decrypts all the data in the least one block doubly-encrypted and stores the data encrypted by the second storage system in the first storage area of the first storage system, wherein the management terminal acquires encrypted state information of the first storage system and the second storage system, instructs the second storage system to start encryption, and instructs the first storage system to stop the encryption, and to start decryption, when the management terminal receives a signal from the second storage system indicating that the encryption is complete, and wherein when a write request for the first storage area of the first storage system is received from the host computer, the second storage system encrypts or does not encrypt the write data depending on whether or not the write request is for data in an encrypted block for the second storage system.