We Claim:
[Claim l] An attribute linkage apparatus comprising:
an attribute distribution section to transmit attribute infrmation managed by each of a plurality of data management apparatuses to one of the plurality of data management apparatuses, and cause the one of the plurality of data management apparatuses to specif an access condition to data according to the transmitted attribute infrmation and then store the data, and
a condition distribution section to transmit access infrmation in which attribute infration relating to a target user out of the attribute infrmation managed by each of the plurality of data management apparatuses has been set, and cause whether the access condition is satisfed to be deterined according to the access infrmation and an access to the data to be controlled.
[Claim 2] The attribute linkage apparatus according to claim 1, wherein
the attribute distribution section causes a ciphertext in which the data has
been encryted by setting the access condition to be stored, and
the condition distribution section uses a decrytion key in which attribute
infrmation relating to the target user has been set as the access infrmation, and
causes an access to the data to be controlled by decryting the ciphertext with the
decrytion key.
[Claim 3] The attribute linkage apparatus according to claim 2, wherein
the target user perains to any one of the plurality of data management apparatuses, and

for each of the plurality of data management apparatuses, the condition distribution section uses, as access information relating to said data management apparatus, a decryption key in which attribute information relating to the target user managed by said data management apparatus has been set, and transmits the decryption key corresponding to the data management apparatus to which the target user pertains.
[Claim 4] The attribute linkage apparatus according to claim 3, wherein
with respect to each of the data management apparatuses, the attribute
distribution section causes said data management apparatus to store a ciphertext in
which the data has been encrypted with a master public key of said data management
apparatus, and
the condition distribution section uses, for each of the data management
apparatuses, the decryption key generated with a master private key of said data
management apparatus as access information relating to said data management
apparatus.
[Claim 5] The attribute linkage apparatus according to any one of claims 2 to 4, further comprising:
a decryption key generation section to generate the decryption key when a decryption key acquisition request is received, wherein
the condition distribution section causes the ciphertext to be decrypted with the decryption key generated by the decryption key generation section.
[Claim 6] The attribute linkage apparatus according to claim 3, wherein

the attribute distribution section causes a ciphertext in which the data has been encrypted with a common master public key of the plurality of data management apparatuses to be stored, and
the condition distribution section uses, for each of the data management apparatus, the decryption key generated by the common master private key of the plurality of data management apparatuses as access information relating to said data management apparatus.
[Claim 7] A transfer system comprising the attribute linkage apparatus according to claim 1, and a transmission apparatus and a reception apparatus which are any of the plurality of data management apparatuses, wherein
the attribute distribution section transmits the attribute information to the transmission apparatus and the condition distribution section transmits the access information to the reception apparatus,
the transmission apparatus specifies an access condition to data according to the attribute information and stores data in a storage apparatus, and
in the reception apparatus, an access to the data is permitted when the access information satisfies the access condition.
[Claim 8] A transfer system comprising the attribute linkage apparatus according to any one of claims 2 to 6, and a transmission apparatus and a reception apparatus which are any of the plurality of data management apparatuses, wherein
the attribute distribution section transmits the attribute information to the transmission apparatus and the condition distribution section transmits the decryption key to the reception apparatus,

the transmission apparatus causes the access condition to data according to the attribute information to be specified, and stores the ciphertext in which the data has been encrypted by setting the specified access condition in a storage apparatus, and
the reception apparatus decrypts the ciphertext with the decryption key.
[Claim 9] An attribute linkage method comprising:
transmitting attribute information managed by each of a plurality of data management apparatuses to any one of the plurality of data management apparatuses, and causing any one of the plurality of data management apparatuses to specify an access condition to data according to the transmitted attribute information and then store the data, by a computer; and
transmitting access information in which attribute information relating to a target user out of the attribute information managed by each of the plurality of data management apparatuses has been set, and causing whether the access condition is satisfied to be determined according to the access information and an access to the data to be controlled, by the computer.
[Claim 10] An attribute linkage program which causes a computer to execute
an attribute distribution processing to transmit attribute information managed by each of a plurality of data management apparatuses to any one of the plurality of data management apparatuses, and to cause any one of the plurality of data management apparatuses to specify an access condition to data according to the transmitted attribute information and then store the data, and
a condition distribution processing to transmit access information in which attribute information relating to a target user out of the attribute information managed

by each of the plurality of data management apparatuses has been set, and to cause whether the access condition is satisfied to be determined according to the access information and an access to the data to be controlled.