Method and Device For Migrating a Specifically Encrypted Access Object From a First Terminal Unit to a Second Terminal Unit

Method, comprising:

• receiving, via a communication network, a voucher data object at a terminal device;
• storing said voucher data object in a voucher data object storage of said terminal device;
• and
• sending, via said communication network, said voucher data object from said terminal device.

Machine-readable medium comprising program code sections to instruct a controller, processor-based device, a computer, a microprocessor based device, a terminal, a network device, a mobile terminal, or a mobile communication-enabled terminal to:

• receive, via a communication network, a first specifically encrypted access object of a first terminal unit, and identification data related to said first terminal unit and to a content said first specifically encrypted access object is destined for;
• receive, via a communication network, identification data related to a second terminal unit, and a request for issuing a second specifically encrypted access object for said second terminal unit;
• check if said request is authorized;
• generate, if said request is authorized, a second specifically encrypted access object for said second terminal unit, being destined for said content;
• and
• send, via said communication network, said generated second specifically encrypted access object destined to said second terminal unit.

Server, comprising:

• an interface coupled to a communication network for receiving a first specifically encrypted access object of a first terminal unit, and identification data related to said first terminal unit and to a content said first specifically encrypted access object is destined for, and identification data related to a second terminal unit and a request for issuing a second specifically encrypted access object for said second terminal unit;
• a checking instance connected to said interface for checking if said received request is authorized;
• generating means for generating second specifically encrypted access objects, said generating means being connected to said checking instance, said generating means being configured for generating a second specifically encrypted access object for said second terminal unit being destined for said content;
• at least one storage connected to said checking instance;
• wherein
• said checking instance is configured to determine if a received request for a second specifically encoded access object is authorized;
• said generating means is configured to generate said second specifically coded access object according to a received identification data related to said second terminal unit, if said request is authorized;
• said storage is configured to store specifically encrypted access objects;
• and
• said interface is configured to send said second specifically encrypted access object destined to said second terminal unit via said communication network.

Device, comprising

• a communication network interface;
• a central processing unit;
• and
• a voucher data object storage;
• wherein said central processing unit is connectable to both said communication network interface and said voucher data object storage.

Device, comprising:

• means for receiving a first specifically encrypted access object of said first terminal unit via a communication network;
• means for receiving identification data related to said first terminal unit and to a content said first specifically encrypted access object is destined for;
• means for receiving identification data related to said second terminal unit;
• means for receiving a request for issuing a second specifically encrypted access object for said second terminal unit;
• means for checking if said received request is authorized;
• means for generating a second specifically encrypted access object for said second terminal unit being destined for said content;
• means for storing specifically encrypted access objects;
• means for determining if a received request for a second specifically encoded access object is authorized;
• means for generating said second specifically coded access object according to a received identification data related to said second terminal unit, if said request is authorized;
• means for sending said second specifically encrypted access object destined to said second terminal unit via said communication network.

A server comprising:

• an interface coupled to a communication network for receiving a first specifically encrypted access object of a first terminal unit, and identification data related to said first terminal unit and to a content said first specifically encrypted access object is destined for, and identification data related to a second terminal unit and a request for issuing a second specifically encrypted access object for said second terminal unit;
• at least one storage;
• a processing module configured to determine whether the received request is authorized and to generate at least one second specifically encrypted access object for said second terminal unit being destined for said content, and further configured to determine whether a received request for a second specifically encoded access object is authorized;
• and
• wherein said at least one storage is configured to store specifically encrypted access objects, and said interface is configured to send said second specifically encrypted access object destined to said second terminal unit via said communication network.