Patent ID: 8489873

Claim:
A migration apparatus for transferring data protected within a first terminal device to a second terminal device, comprising: a non-transitory memory device that stores a program; and a processing device that executes the program and causes the migration apparatus to operate as: a receiving unit operable to receive secret data from the first terminal device and a download request for the secret data from the second terminal device, the secret data protected by a first encryption algorithm, within a security module in the first terminal device; an identifying unit operable to identify the first encryption algorithm based on a credential received from the first terminal device, and to identify a second encryption algorithm based on a credential received from the second terminal device, the second encryption algorithm to be used within a security module in the second terminal device; a holding unit operable to hold a security policy table associating the first encryption algorithm with the second encryption algorithm; and a control unit operable, on receipt of the download request from the second terminal device, to re-protect the secret data by the second encryption algorithm instead of by the first encryption algorithm, according to the security policy table, and to send the secret data to the second terminal device, wherein before transmitting the secret data to the second terminal device, the control unit (i) receives, from the first terminal device, a minimum evaluation level required of a destination of the secret data by the first terminal device, (ii) receives, from the second terminal device, an evaluation level of the second terminal device, (iii) judges whether the evaluation level of the second terminal device is lower than the minimum evaluation level, and (iv) sends the secret data to the second terminal device only if the evaluation level of the second terminal device is no lower than the minimum evaluation level, wherein the minimum evaluation level is an Evaluation Assurance Level that is to be fulfilled by the destination of the secret data, and is defined based on Common Criteria according to a requirement by the first terminal device, and wherein the evaluation of the second terminal device is an Evaluation Assurance Level that is given to the second terminal device, and is defined based on Common Criteria.