1. 反欺诈服务为实时服务，用户可以在支付授权前和支付授权后请求反欺诈风险评估：
• 对于支付授权前请求的，输出结果为：欺诈风险评分和支付决策建议(通过、拒绝、加强验证)
• 对于支付授权后请求的，输出结果为：欺诈风险评分和支付决策建议(拦截、请款)

2. 支持对商户进行定制化策略调优：接口对接完毕后2-4周的策略调优时间，商户对整体表现满意(支付成功率和欺诈率）后，开始计费

3. 商户需要向跨拒通传输相关数据，主要包括：
• BasicInfo：支付参考号、金额、币种等
• UserInfo：邮箱、账号名称等
• ClientInfo：商品类型、商品数量等
• ChannelInfo：卡号、有效期、持卡人名称、授权信息(AvsResult、CvcResult、ECI等）
• ExtraInfo：收货地址等交易信息

1. CanonicalRequest =

2. HTTPRequestMethod + '\n' +

3. CanonicalURI + '\n' +

4. CanonicalQueryString + '\n' +

5. CanonicalHeaders + '\n' +

6. SignedHeaders + '\n' +

7. HashedRequestPayload

1. POST

2. /

4. content-type:application/json; charset=utf-8

5. host:cvm.tencentcloudapi.com

7. content-type;host

8. 35e9c5b0e3ae67532d3c9f17ead6c90222632e5b1ff7f6e89887f1398934f064

1. StringToSign =

2. Algorithm + \n +

3. RequestTimestamp + \n +

4. CredentialScope + \n +

5. HashedCanonicalRequest

• Date 必须从时间戳 X-TC-Timestamp 计算得到，且时区为 UTC+0。如果加入系统本地时区信息，例如东八区，将导致白天和晚上调用成功，但是凌晨时调用必定失败。假设时间戳为 1551113065，在东八区的时间是 2019-02-26 00:44:25，但是计算得到的 Date 取 UTC+0 的日期应为 2019-02-25，而不是 2019-02-26。

• Timestamp 必须是当前系统时间，且需确保系统时间和标准时间是同步的，如果相差超过五分钟则必定失败。如果长时间不和标准时间同步，可能导致运行一段时间后，请求必定失败，返回签名过期错误。

• 根据以上规则，示例中得到的待签名字符串如下：
• TC3-HMAC-SHA256
• 1551113065
• 2019-02-25/cvm/tc3_request
• 5ffe6a04c0664d6b969fab9a13bdab201d63ee709638e2749d62a09ca18d7031

1. SecretKey = "Gu5t9xGAR***********EXAMPLE"

2. byte[] secretDate = hmac256(("TC3"+ SecretKey).getBytes(UTF8), date);

3. byte[] secretService = hmac256(secretDate, service);

4. byte[] secretSigning = hmac256(secretService, "tc3_request");

5. String signature = DatatypeConverter.printHexBinary(hmac256(secretSigning, stringToSign)).toLowerCase();

6. out.println(signature);
派生出的密钥 SecretDate、SecretService 和 SecretSigning 是二进制的数据，可能包含不可打印字符，此处不展示中间结果。

1. String Authorization =

2. Algorithm + ' ' +

3. 'Credential=' + SecretId + '/' + CredentialScope + ', ' +

4. 'SignedHeaders=' + SignedHeaders + ', ' +

5. 'Signature=' + Signature

• 接口请求域名：
美西：rce.na-siliconvalley.securego.com

• 请求方式：POST
Content-Type ：application/json

• 接口通过BizCryptoData参数，支持采用加密模式传递业务参数。

• 当CryptoContent非空时，接口触发加密模式。以AES加密为例，加密步骤如下：
• 向wetech申请获得账号的ClientID，进行base64编码，得到AES密钥key。当key大于等于32字节时，取前32字节为key；大于等于24字节时，取前24字节为key；大于等于16字节时，取前16字节为key
• 以步骤1中得到的密钥key，对业务数据对象进行AES加密。加密算法模式为AES/ECB/PKCS7Padding。业务数据对象为InputDescribeRiskControl参数的json字符串【json示例见：5.2、InputDescribeRiskControl_json格式】。
• 对步骤2中AES加密得到的字节数组进行base64编码，得到最终加密后的业务参数请求字符串，即CryptoContent。

java
**POST / HTTP/1.1**

**Host:** rce.na-siliconvalley.wetech-rc.com

**Content-Type: application/json**

**X-TC-Timestamp: 1695817824**

**X-TC-Region: na-siliconvalley（美西）**

**X-TC-Region: ap-singapore（新加坡）**

**X-TC-Version: 2020-02-26**

**X-TC-Action: DescribeRiskControl**

**Authorization: TC3-HMAC-SHA256 Credential=AKIDY1LTQp34sTs44vbP6bv41kfQzLWZP2Rc/2023-09-27/ra/tc3_request,SignedHeaders=content-type;host, Signature=4bb7f1650e41000ce2c38b961d86c42946b6c9e02ba2928ae8e75b0f46ff26d5**

***Header字段含义与签名生成方法见文件夹对应demo文件***

**<公共请求参数>**

**{**

"BizCryptoData":{

"IsAuthorized":"1",

"CryptoType": "1",

"CryptoContent":" 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"

**}**

**}**

java
##   参数：BizCryptoData.CryptoContent加密前数据格式：

{

"PostTime":1666347446,

"BasicInfo":{

"Scene":"transaction",

"Command":"post-check",

"Reference":"",

"ReqTime":"1666347446",

"AppID":"Test01",

"Details":[

{"Key":"ReqBillNo","Value":"16460183922615638888"},

{"Key":"ReqType","Value":"order"},

{"Key":"Amount","Value":"10"},

{"Key":"Currency","Value":"CNY"}

]},

"UserInfo":{

"Details":[

{"Key":"UserID","Value":"123456"},

{"Key":"UserIDType","Value":"facebook"},

{"Key":"UserIP","Value":"23.12.79.213"},

{"Key":"UserEmail","Value":"bengong@midas.com"}

]},

"ClientInfo":{

"Details":[

{"Key":"ClientBillNo","Value":"16460183922615638455"},

{"Key":"ClientIP","Value":"127.0.0.1"}

]},

"ChannelInfo":{

"Details":[

{"Key":"Channel","Value":"adyen"},

{"Key":"ChannelBillNo","Value":"16460183922615638455"},

{"Key":"CardBin","Value":"512312"},

{"Key":"CardMd5","Value":"12345"}

]},

"SceneInfo":{},

"ExtraInfo":{}}


##   参数：BizCryptoData.CryptoContent加密前数据格式：

{

"PostTime":1666347446,

"BasicInfo":{

"Scene":"transaction",

"Command":"post-check",

"Reference":"",

"ReqTime":"1666347446",

"AppID":"Test01",

"Details":[

{"Key":"ReqBillNo","Value":"16460183922615638888"},

{"Key":"ReqType","Value":"order"},

{"Key":"Amount","Value":"10"},

{"Key":"Currency","Value":"CNY"}

]},

"UserInfo":{

"Details":[

{"Key":"UserID","Value":"123456"},

{"Key":"UserIDType","Value":"facebook"},

{"Key":"UserIP","Value":"23.12.79.213"},

{"Key":"UserEmail","Value":"bengong@midas.com"}

]},

"ClientInfo":{

"Details":[

{"Key":"ClientBillNo","Value":"16460183922615638455"},

{"Key":"ClientIP","Value":"127.0.0.1"}

]},

"ChannelInfo":{

"Details":[

{"Key":"Channel","Value":"adyen"},

{"Key":"ChannelBillNo","Value":"16460183922615638455"},

{"Key":"CardBin","Value":"512312"},

{"Key":"CardMd5","Value":"12345"}

]},

"SceneInfo":{},

"ExtraInfo":{}}

java
{

"Response":{

"Data":{

"UUid":"b7715263-659f-f315-745d-20e325e8556c",

"Code":0,

"Message":"OK",

"Value":{

"ResultCode":"0",

"Action":"",

"ResultInfo":"OK",

"Reference":"",

"ReferenceIdle":"",

"Score":"",

"ScoreItems":[]

}}

,"RequestId":"d12839f7-ae86-497f-a2f2-9687f0e6581d"

}

}

• 接口通过BizCryptoData参数，支持采用加密模式传递业务参数。

• 当CryptoContent非空时，接口触发加密模式。以AES加密为例，加密步骤如下：
• 获取ClientID，进行base64编码，得到AES密钥key。当key大于等于32字节时，取前32字节为key；大于等于24字节时，取前24字节为key；大于等于16字节时，取前16字节为key
• 以步骤1中得到的密钥key，对业务数据对象进行AES加密。加密算法模式为AES/ECB/PKCS7Padding。业务数据对象为InputDescribeRiskNotify参数的json字符串【json示例见：4.2、InputDescribeRiskNotify_json格式】。
• 对步骤2中AES加密得到的字节数组进行base64编码，得到最终加密后的业务参数请求字符串，即CryptoContent。

java
**POST / HTTP/1.1**

**Host:** rce.na-siliconvalley.wetech-rc.com

**Content-Type: application/json**

**X-TC-Timestamp: 1695817824**

**X-TC-Region: na-siliconvalley（美西）**

**X-TC-Region: ap-singapore（新加坡）**

**X-TC-Version: 2020-02-26**

**X-TC-Action: DescribeRiskNotify**

**Authorization: TC3-HMAC-SHA256 Credential=AKIDY1LTQp34sTs44vbP6bv41kfQzLWZP2Rc/2023-09-27/ra/tc3_request,SignedHeaders=content-type;host, Signature=4bb7f1650e41000ce2c38b961d86c42946b6c9e02ba2928ae8e75b0f46ff26d5**

***Header字段含义与签名生成方法见文件夹对应demo文件***

**<公共请求参数>**

**{**

"BizCryptoData ":**{**

"CryptoType":"1",

"IsAuthorized":"1",

"CryptoContent":" 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"

**}**

**}**

java
##   参数：BizCryptoData.CryptoContent加密前数据格式：

{

"PostTime":1665658696,

"BasicInfo":{

"Scene":"transaction",

"Command":"fraud",

"AppID":"CloudTest",

"ReqTime":"1665658696",

"Details":[

{"Key":"ReqBillNo","Value":"16460183922615638888"},

{"Key":"TxnResult","Value":"0"},

{"Key":"Amount","Value":"10"},

{"Key":"Currency","Value":"CNY"}

]

},

"UserInfo":{

"Details":[

{"Key":"UserID","Value":"123456"},

{"Key":"UserIDType","Value":"facebook"}

]

},

"ChannelInfo":{

"Details":[

{"Key":"Channel","Value":"creditcard"},

{"Key":"ChannelBillNo","Value":"16460183922615638455"},

{"Key":"3DOffered","Value":"false"},

{"Key":"LiabilityShift","Value":"false"}

]

},

"ClientInfo":{},

"SceneInfo":{},

"ExtraInfo":{}

}

java
{

"Response":{

"Data":{

"UUid":"49ef4763-ea95-36a0-7e56-75e9be51cb47",

"Code":0,

"Message":"OK",

"Value":{

"ResultCode":"0",

"ResultInfo":"OK"

}

},"RequestId":"5f3036d2-674b-4137-ba2e-e7806507d9a4"

}

}