Abstract: A hybrid encryption and data access control scheme based on CP-ABE with convergent encryption technology was constructed by combining the application environment of cloud storage. Three entities are included in the proposed scheme which are key distribution center， customers and cloud server. It was indicted that the proposed scheme is efficient， flexible， fine-grained which can also improve the space utilization of the storage server. The data origin authentication and the data integrity certification were supported by using signature authentication technology. Theoretical analysis and experimental test showed that the proposed scheme has highly practical value.

Key words: cloud storage, ciphertext policy attribute based encryption(CP-ABE), access control, convergent encryption, digital signature