The invention discloses a cloud storage access control method based on ciphertext policy attribute base encryption, which comprises the following steps: S1, an anonymous identity authentication process: assuming S is the authentication authority center, U is the user, hash function Hi= {0, 1} *= {0, 1} li, i=1, 2, 3, x is the private key of S, and y is the public key, calculating y=gxmod p. The invention can guarantee the security and integrity of the data in the cloud storage system under the open cloud environment under the premise that the cloud service provider is not trusted, realize thesecurity sharing of the sensitive data, and reduce the huge computing overhead brought to the data owner by the distribution of the key and the data management. Anonymous authentication is used in thesystem, and the session key is different in each authentication, which ensures the anonymity in the communication process. Even if the information in the communication process is intercepted, the identity information of the relevant users can not be obtained.