The invention discloses a forward security encrypted data controllable editing method in a cloud environment, and belongs to the field of
cloud computing. The method specifically comprises the steps that firstly, a
cloud simulation environment is built and initialized; the trusted
authorization mechanism calculates an
encryption key # imgabs0 # of a data owner and a secret key # imgabs1 # or # imgabs2 # of a user or an editor, then the owner operates an Encrypt
algorithm to encrypt given
plaintext data msg, an original
ciphertext ct is obtained and uploaded to a
cloud server, and the user accesses through an
edge node or the
cloud server. The editor obtains the original
ciphertext ct from the
edge node or the
cloud server, then carries out controllable purification on the original
ciphertext ct to obtain a purified ciphertext ct ', and uploads the purified ciphertext ct' to the cloud
server for user access; when a certain ciphertext is not purified any more, puncture is executed locally according to the message of the ciphertext, a purified key # imgabs3 # is obtained, and finally, when malicious purification occurs, the trusted
authorization mechanism executes a tracking
algorithm to obtain the owner identity of the original ciphertext ct or the editor identity of the purified ciphertext ct '. According to the method, the safe and controllable
data editing and sharing requirements in the cloud environment are met.