Secure Data Transfer

A process, for migrating controlled data from an existing controlled data environment (CDE) to a new CDE, comprising:

• generating first security keys (“1st Keys”);
• wherein the 1st Keys include a first public key (1PUK) and a first private key (1PRK);
• generating an encryption context (EC);
• generating, based on the EC, second security keys (“2nd Keys”);
• wherein the 2nd Keys include an encrypted 2nd Key (e2SEK) and an unencrypted 2nd Key (u2SEK);
• encrypting, using the u2SEK, the 1PRK to generate an encrypted 1PRK (“e1PRK”);
• generating a migration request;
• wherein the migration request requests transfer of controlled data from an existing data store (EDS) to a new data store (NDS);
• wherein the EDS is controlled by the existing CDE;
• and
• wherein the NDS is controlled by the new CDE;
• communicating, by the new CDE, the migration request and the 1PUK to the existing CDE;
• wherein, the existing CDE utilizes the 1PUK to encrypt the controlled data and output encrypted controlled data in a transfer file;
• receiving the transfer file from the existing CDE;
• upon receiving the transfer file:
• decrypting the transfer file;
• and
• storing the transfer file in the NDS.