The invention discloses a
hybrid encryption method supporting
access control and controllable
data search, and relates to the field of secure
data sharing. According to the method, a CP-ABE (
Ciphertext Policy
Attribute Based Encryption) technology and a symmetric searchable
Encryption (SSE) technology are creatively combined, and a data
authorization access function and a data controllable
search function are integrated. As for data
authorization access, CP-ABE is dominated, fine-grained
access control is achieved by embedding attribute information, and it is ensured that only authorized users conforming to a preset strategy can decrypt data. For data controllable search, SSE is dominated, a data storage
service provider is allowed to execute a search task based on keywords on the premise of not decrypting data, and expansion of fuzzy
keyword search is supported in combination with a trusted execution environment technology. According to the method, the problems that user access is not limited and
data sharing is easy to leak to an untrusted party are effectively solved. Through strict user right control, unauthorized access is prevented. And meanwhile, the targeted search of the shared data is realized, and bidirectional requirements are met.