The application discloses an
encryption and decryption method, device and
system, and belongs to the technical field of
cryptography; considering that each user in the
system is assigned with a specified
access control strategy and attribute, the
access control strategy of the user determines which type of
receiver he can send a message to in the
encryption process, and the attribute of the user determines which sender he can receive a message from; the application expresses the
access control strategy based on a linear
secret sharing matrix (LSSS matrix) to realize flexible expression of an arbitrary access strategy and has strong expression capability; on the basis, the application generates an
encryption key embedded with a sender access control strategy for the sender, so that the fine-grained control of information flow in the
system is realized by assigning corresponding access control strategies and attributes to different users in the communication process, the flow direction of the information flow of the
encryption system can be better controlled, and the behavior of the user can be more conveniently and efficiently managed.