Ciphertext policy attribute-based encryption(CP-ABE)is becoming a new primitive for finegrained access control.It neither produces multiple encrypted copies of the same data nor suffers from the severe burden of key distribution and management.The escrow problem that the central authority could decrypt any ciphertexts addressed to all the specific users is still a challenge for CP-ABE mechanism.One new CP-ABE scheme without escrow is proposed,and furthermore the proposed scheme achieves fully security in the standard model.The performance and security analysis results indicate that the proposed CP-ABE scheme is extremely appropriate for cloud storage system. Ciphertext policy attribute-based encryption (CP-ABE) is becoming a new primitive for fine-grained access control. It also produces multiple encrypted copies of the same data nor suffers from the severe burden of key distribution and management. Escrow problem that the central authority could decrypt any ciphertexts addressed to all the specific users is still a challenge for CP-ABE mechanism. New CP-ABE scheme without escrow is proposed, and in the proposed scheme achieves fully security in the standard model. performance and security analysis results indicate that the proposed CP-ABE scheme is extremely appropriate for cloud storage system.