The invention belongs to the technical field of
cloud storage security and
information security, and relates to a CP-ABE method for supporting
privacy protection and decryption in cloud. According to the invention, a CP-ABE scheme with functions of
user privacy protection, decryption test, decryption outsourcing and message verifiability is realized. According to the method, a flexible LSSS structure construction scheme is used in a prime order group; attributes are divided into attribute names and attribute values, the attribute values containing sensitive information are embedded into a
ciphertext, and meanwhile multiple groups of generators and random values are selected to achieve
anonymity of data users; a decryption
test algorithm and an outsourcing decryption
algorithm are added, so that the calculation overhead of a data user is saved, and a large amount of decryption calculation is handed over to a
third party; and a message verifiability
algorithm ensures the decryption accuracy. According to the scheme of the invention, the decryption efficiency, the
ciphertext storage overhead and the
access control flexibility are greatly improved on the basis of
privacy protection, and the problems of privacy disclosure, high user calculation cost and the like in the prior art are solved.