The invention provides a health record access control system and method in electronic medical cloud. The system comprises a medical management center unit used for generating a system public key and asystem private key, and generating a corresponding user attribute private key according to the system public key, the system private key and a user attribute set; an electronic medical cloud storageunit used for receiving and storing health record ciphertexts with privacy protection; and at least one health record user access unit used for encrypting health records according to the system publickey to obtain the health record ciphertexts with privacy protection; and/or generating the user attribute set and decrypting the health record ciphertexts with privacy protection according to the system public key and the user attribute private key. By adoption of the health record access control system and method in electronic medical cloud provided by the invention, the confidentiality of the health records is not only guaranteed, and the security and the computational efficiency of the health record access are also improved.