The invention discloses an attribute revocation method. A tree-shaped user space organization mode is used to define that the user identity identification code is a character string consisting of 0\ 1characters; the identity identification codes of all users have the same length m; the user identity space is a global I composed of all possible user identity identification codes; the size of the domain is 2m; groups are divided according to attribute use conditions; the users are randomly divided into irrelevant groups; the minimum coverage mechanism is introduced, a reduced user group is organized by using a minimum coverage group mechanism; the group identification code representing one user group is stored in the revoked user group, a combination mechanism is introduced, the adjacent groups are combined into one group when no user enters the user group with the revoked authority, and the proxy key of the user and the interpolation factor of the reduced user group are updated to complete attribute revocation. According to the method, collusion attacks can be resisted, and the confidentiality of the data and the forward and backward security of the data are ensured.