A method for controlling access to data from several connected objects (12-1, ..., 12-3) with limited resources, by a plurality of users ; the process comprising a preliminary phase (PP) and an operational phase (PO); the preliminary phase (PP) comprising the following stages: - determination of an access control policy for controlling access to connected objects (12-1, ..., 12-3); - allocation of at least one fixed encryption key to each connected object (12-1, ..., 12-3), the or each fixed encryption key being determined as a function of the access control policy and intended to be used to encrypt at least some of the data from this object (12-1, ..., 12-3); the operational phase (PO) being implemented on receipt of a request by a user to access data from one or more connected objects (12-1, ..., 12-3), and comprising the following steps: - authentication of said user and allocation to this user of a plurality of attributes characterising them; - generation of an access structure to the connected objects (12-1, ..., 12-3) as a function of the attributes of said user and the access control policy ; - generation of a decryption key from the access structure corresponding to this user , the decryption key being intended to be used to decrypt at least some of the data coming from at least one connected object (12-1, ..., 12-3). the process comprising a preliminary phase (PP) and an operational phase (PO); the preliminary phase (PP) comprising the following stages: - determination of an access control policy for controlling access to connected objects (12-1, ..., 12-3); - allocation of at least one fixed encryption key to each connected object (12-1, ..., 12-3), the or each fixed encryption key being determined as a function of the access control policy and intended to be used to encrypt at least some of the data from this object (12-1, ..., 12-3); - determination of an access control policy for controlling access to connected objects (12-1, ..., 12-3); - allocation of at least one fixed encryption key to each connected object (12-1, ..., 12-3), the or each fixed encryption key being determined as a function of the access control policy and intended to be used to encrypt at least some of the data from this object (12-1, ..., 12-3); the operational phase (PO) being implemented on receipt of a request by a user to access data from one or more connected objects (12-1, ..., 12-3), and comprising the following steps: - authentication of said user and allocation to this user of a plurality of attributes characterising them; - generation of an access structure to the connected objects (12-1, ..., 12-3) as a function of the attributes of said user and the access control policy ; - generation of a decryption key from the access structure corresponding to this user , the decryption key being intended to be used to decrypt at least some of the data coming from at least one connected object (12-1, ..., 12-3). - authentication of said user and allocation to this user of a plurality of attributes characterising them; - generation of an access structure to the connected objects (12-1, ..., 12-3) as a function of the attributes of said user and the access control policy ; - generation of a decryption key from the access structure corresponding to this user , the decryption key being intended to be used to decrypt at least some of the data coming from at least one connected object (12-1, ..., 12-3). <EOS>