Data processing method and apparatus

A data processing method, wherein the method comprises:

• generating, by a terminal device, a first public key and a first private key;
• sending, by the terminal device, the first public key to a network entity that includes a key generation center (KGC), so that a server or the KGC generates a transform key according to the first public key;
• receiving, by the terminal device, second data sent by the server, wherein the second data is data that is generated after the server processes first data according to the transform key, and the first data is data that is encrypted based on an attribute structure of the terminal device and that is obtained by the server;
• and
• decrypting, by the terminal device, the second data according to the first private key.

A data processing method, wherein the method comprises:

• receiving, by a key generation center (KGC) included in a network entity, a first public key from a terminal device;
• generating, by the KGC, the second public key according to a system parameter, a master key, the first public key, attribute information of the terminal device, and internal state information of the KGC, wherein the system parameter is public information related to the KGC, and the master key is a private key of the KGC;
• and
• sending, by the KGC, the second public key or a transform key to a server, wherein the transform key is generated according to the second public key and key update information.

A data processing method, wherein the method comprises:

• receiving, by a server, a second public key from a key generation center (KGC) included in a network entity, wherein the second public key is generated by the KGC according to a first public key, attribute information of a terminal device, a system parameter, a master key, and internal state information of the KGC, wherein the system parameter is public information related to the KGC, the master key is a private key of the KGC, and the first public key is a public key of the terminal device;
• obtaining, by the server, first data, wherein the first data is data that is encrypted based on the attribute structure of the terminal device;
• transforming, by the server, the first data into second data according to the second public key;
• and
• sending, by the server, the second data to the terminal device, so that the terminal device decrypts the second data according to a first private key.