A method for controlling access to data from several connected objects (12-1,..., 12-3) with limited resources, by a plurality of users; the process comprising a preliminary phase and an operational phase; the preliminary phase comprising the following stages: - determination of an access control policy for controlling access to connected objects (12-1,..., 12-3); - allocation of at least one fixed encryption key to each connected object (12-1,..., 12-3), the or each fixed encryption key being determined as a function of the access control policy and intended to be used to encrypt at least some of the data from this object (12-1,..., 12-3); the operational phase being implemented on receipt of a request by a user to access data from one or more connected objects (12-1,..., 12-3), and comprising the following steps: - authentication of said user and allocation to this user of a plurality of attributes characterising them; - generation of an access structure to the connected objects (12-1,..., 12-3) as a function of the attributes of said user and the access control policy; - generation of a decryption key from the access structure corresponding to this user, the decryption key being intended to be used to decrypt at least some of the data coming from at least one connected object (12-1,..., 12-3). the process comprising a preliminary phase and an operational phase; the preliminary phase comprising the following stages: - determination of an access control policy for controlling access to connected objects (12-1,..., 12-3); - allocation of at least one fixed encryption key to each connected object (12-1,..., 12-3), the or each fixed encryption key being determined as a function of the access control policy and intended to be used to encrypt at least some of the data from this object (12-1,..., 12-3); - determination of an access control policy for controlling access to connected objects (12-1,..., 12-3); - allocation of at least one fixed encryption key to each connected object (12-1,..., 12-3), the or each fixed encryption key being determined as a function of the access control policy and intended to be used to encrypt at least some of the data from this object (12-1,..., 12-3); the operational phase being implemented on receipt of a request by a user to access data from one or more connected objects (12-1,..., 12-3), and comprising the following steps: - authentication of said user and allocation to this user of a plurality of attributes characterising them; - generation of an access structure to the connected objects (12-1,..., 12-3) as a function of the attributes of said user and the access control policy; - generation of a decryption key from the access structure corresponding to this user, the decryption key being intended to be used to decrypt at least some of the data coming from at least one connected object (12-1,..., 12-3). - authentication of said user and allocation to this user of a plurality of attributes characterising them; - generation of an access structure to the connected objects (12-1,..., 12-3) as a function of the attributes of said user and the access control policy; - generation of a decryption key from the access structure corresponding to this user, the decryption key being intended to be used to decrypt at least some of the data coming from at least one connected object (12-1,..., 12-3).