The invention discloses a multi-authority
ciphertext-policy attribute-based
encryption method. The method includes following steps: step 1, performing
system initialization and establishing a plurality of authorities; step 2, before each starting of a mobile terminal device, executing pre-
encryption treatment, and generating an intermediate
ciphertext; step 3, in a process of uploading the intermediate
ciphertext to a
cloud storage server, encrypting the intermediate ciphertext by employing an access policy defined by a linear
secret sharing mechanism, and outsourcing the intermediate ciphertext to the
cloud storage server; and step 4, generating a private key for an
encryption file according to global identifiers of users and an attribute set of the users by each authority. According to the method, aiming at the
mobile cloud storage environment, on the premise of guaranteeing the
data security, a lot of
pairing operations are pre-processed in advance by employing the encryption pre-
processing technology so that the calculation cost of online encryption is minimum; and by employing the secret key transformation technology and decryption outsourcing, a lot of
pairing operations are outsourced to the
cloud storage server so that the decryption calculation cost of the mobile terminal is reduced.