接口调用说明

接口提供方会为接口调用方提供下列信息

名称	代码	用途
企业私钥	company_private_key	接口调用方生成请求的签名数据
企业公钥	company_public_key	接口提供方验证接口调用方的签名数据
公钥	public_key	接口调用方验证响应的签名数据
3DES密钥	pwd	生成请求的密文内容、解密响应的密文内容

请求体格式

后续接口文档中的报文格式会省略外层结构，仅展示content节点加密前的明文内容

{
  "signType": "RSA",
  "timestamp": "2025-01-01 12:00:00",
  "content": "密文",
  "sign": "签名"
}

请求中content节点密文生成规则：先对明文json对象转成字符串，再使用3DES密钥对其进行3DES加密。

encryptContent=encrypt3DES(pwd,明文)

请求中sign签名值生成规则：将属性按ASCII码排序后，将key=value形式用&拼接后，使用企业私钥用RSA算法进行签名

toSignStr=content=encryptContent&signType=RSA&timestamp=2025-01-01 12:00:00

sign=RSA.sign(toSignStr,company_private_key)

响应体格式

content用decrypt3DES解密后可得明文；另如有需要，可验证sign值的正确性

{
  "code": "0000",
  "message": "success",
  "signType": "RSA",
  "sign": "签名",
  "content": "密文"
}

响应中content解密规则：使用3DES密钥对其进行3DES解密，可得到明文content的json字符串

content=decrypt3DES(pwd,密文)

响应中sign签名值验证规则：将属性按ASCII码排序后，将key=value形式用&拼接后，使用公钥用RSA算法进行验签。

toVerifyStr=code=0000&content=密文&message=success&signType=RSA

verifyResult=RSA.verify(toVerityStr,sign,public_key)

若verifyResult=true则证明响应内容未受到篡改

code值不成功时，签名内容为空，无需校验签名值

请求体签名生成示例

输出

请求体为====>{
  "signType": "RSA",
  "timestamp": "2025-01-01 12:00:00",
  "content": "ffMuKn4CP3s=",
  "sign": "e7zz+5BQsUyuH1hsAWgQVRzYNUvTksU9gGWTG7yMeR8QCQ7MCAqOP2Xz2KVjS5nR+268EB5BWjy2Fphn1q1Syl7F6m/ajl6GQsYQizRpQoXk3gsWaPJKWnfXVeklCRUiGCP73lHMfg/DAq26JOu6jjGwi+M4iCAu1ikWB0z5PoI="
}

响应报文解密及签名验证示例

输出

签名验证结果:true
content解密后:123abc

SecurityUtil（content加密、解密用）

RSAUtil（sign签名值生成、验证用）

示例密钥

companyPublicKey: MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCMq+Tj9PapzmiY7HPyOxA0frUSn0SLVSW+1fTsWfkgDL8+yzRufBLK8vheAElmMF4/SghKtR54f3O2yKD/H7wGwHKYghuerV81bIKNAuNQMHJ9CIvj5mYTXUyEDPTFTIh1vADiKhXYPwbUdJSDO0t5BnsXnoxNOUBlcKxvnp/g2wIDAQAB

companyPrivateKey: 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

publicKey: MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQClIuTZpMMUSTuw4zYKV5E/OsCG47lzmPm+FtiGp+Zq8R+fqPWj7NG6yF6Jlu8QFgfEh3++Qf3+zEpVS9WAFU8uNchOdIvNf/3ck56LveRYGKQpZ3gsqOvoGjJLb0jl8FhVoY6vp3Wlldt+bKDQb4glw5nUSFihSzzvsh4WX0PMUwIDAQAB

privateKey: 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

pwd: ONjz4KR7WNTNkx60itnOedfS

接口调用说明

请求体格式#

响应体格式#

请求体签名生成示例#

输出#

响应报文解密及签名验证示例#

输出#

SecurityUtil（content加密、解密用）#

RSAUtil（sign签名值生成、验证用）#

示例密钥#

请求体格式

响应体格式

请求体签名生成示例

输出

响应报文解密及签名验证示例

输出

SecurityUtil（content加密、解密用）

RSAUtil（sign签名值生成、验证用）

示例密钥