Abstract: In order to protect the security and privacy of data exchange between the resource-constrained Internet of Things (IoT) devices, the outsourcing technology is adopted to combine the ciphertext policy attribute-based encryption and equality test. For IoT devices, a concise encryption and decryption algorithm is proposed, as well as the ciphertext detection mechanism performed by the authorized cloud server is established without decryption, thereby alleviating the local computing burden and achieving accurate decryption. Based on the decisional q-1 assumption, it is proved that the proposed scheme resists chosen plaintext attacks and enjoys indistinguishable security. Finally, the experimental analysis shows that the scheme is practical and effective.