Abstract: After analyzing security risks and combining with the layered architecture of cloud computing systems, this paper proposed a policy-based cloud computing security scheme with one core, five fields and two safeguards. This scheme was adapted to layered architecture of cloud computing systems, which was provided a new approach to security protection of cloud computing.