个人信用分接口完整开发指南：从加密传输到风险评估的实战应用

curl -X POST "https://api.tianyuanapi.com/api/v1/JRZQ0L85?t=1699999999999" \
  -H "Content-Type: application/json" \
  -H "Access-Id: your_access_id_here" \
  -d '{
    "data": "encrypted_base64_string_here"
  }'

import requests
import json
import time
from Crypto.Cipher import AES
from Crypto.Random import get_random_bytes
from Crypto.Util.Padding import pad, unpad
import base64

# ============ 加密解密函数 ============
def aes_encrypt(plain_text, key_hex):
    """
    AES-128-CBC加密函数
    :param plain_text: 待加密的明文字符串
    :param key_hex: 16进制格式的密钥字符串
    :return: Base64编码的加密结果（包含IV）
    """
    # 将16进制密钥转为字节
    key = bytes.fromhex(key_hex)

    # 生成随机IV（16字节）
    iv = get_random_bytes(16)

    # 创建AES加密器
    cipher = AES.new(key, AES.MODE_CBC, iv)

    # 对明文进行PKCS7填充并加密
    padded_data = pad(plain_text.encode('utf-8'), AES.block_size)
    encrypted_data = cipher.encrypt(padded_data)

    # 将IV和密文拼接后进行Base64编码
    result = base64.b64encode(iv + encrypted_data).decode('utf-8')

    return result

def aes_decrypt(encrypted_base64, key_hex):
    """
    AES-128-CBC解密函数
    :param encrypted_base64: Base64编码的加密数据（包含IV）
    :param key_hex: 16进制格式的密钥字符串
    :return: 解密后的明文字符串
    """
    # 将16进制密钥转为字节
    key = bytes.fromhex(key_hex)

    # Base64解码
    encrypted_data = base64.b64decode(encrypted_base64)

    # 提取IV（前16字节）和密文
    iv = encrypted_data[:16]
    ciphertext = encrypted_data[16:]

    # 创建AES解密器
    cipher = AES.new(key, AES.MODE_CBC, iv)

    # 解密并去除PKCS7填充
    decrypted_padded = cipher.decrypt(ciphertext)
    decrypted_data = unpad(decrypted_padded, AES.block_size)

    return decrypted_data.decode('utf-8')

# ============ API调用主函数 ============
def query_credit_score(mobile_no, id_card, name, access_id, access_key):
    """
    调用个人信用分API接口
    :param mobile_no: 手机号
    :param id_card: 身份证号
    :param name: 姓名
    :param access_id: 访问ID
    :param access_key: 访问密钥（16进制字符串）
    :return: 解密后的响应数据
    """
    # 1. 构建请求参数
    request_params = {
        "mobile_no": mobile_no,
        "id_card": id_card,
        "name": name
    }

    # 2. 将请求参数转为JSON字符串并加密
    params_json = json.dumps(request_params, ensure_ascii=False)
    encrypted_data = aes_encrypt(params_json, access_key)

    # 3. 构建请求体
    request_body = {
        "data": encrypted_data
    }

    # 4. 构建请求头
    headers = {
        "Content-Type": "application/json",
        "Access-Id": access_id
    }

    # 5. 生成13位时间戳
    timestamp = str(int(time.time() * 1000))

    # 6. 发送POST请求
    url = f"https://api.tianyuanapi.com/api/v1/JRZQ0L85?t={timestamp}"

    try:
        response = requests.post(url, headers=headers, json=request_body, timeout=10)
        response.raise_for_status()  # 检查HTTP状态码

        # 7. 解析响应
        response_data = response.json()

        # 8. 检查业务状态码
        if response_data.get("code") != 0:
            print(f"业务错误: {response_data.get('message')}")
            return None

        # 9. 解密响应数据
        encrypted_response = response_data.get("data")
        if encrypted_response:
            decrypted_data = aes_decrypt(encrypted_response, access_key)
            return json.loads(decrypted_data)
        else:
            print("响应数据为空")
            return None

    except requests.exceptions.RequestException as e:
        print(f"请求异常: {str(e)}")
        return None
    except Exception as e:
        print(f"处理异常: {str(e)}")
        return None

# ============ 使用示例 ============
if __name__ == "__main__":
    # 配置您的访问凭证
    ACCESS_ID = "your_access_id"
    ACCESS_KEY = "your_access_key_in_hex"  # 16进制字符串格式

    # 调用API
    result = query_credit_score(
        mobile_no="13800138000",
        id_card="110101199001011234",
        name="张三",
        access_id=ACCESS_ID,
        access_key=ACCESS_KEY
    )

    # 处理结果
    if result:
        score = result.get("score_120_General")
        print(f"信用评分: {score}")

        # 根据评分进行风控决策
        if score == "-1":
            print("决策建议: 未命中数据，建议人工审核")
        elif int(score) < 450:
            print("决策建议: 建议拒绝")
        elif int(score) >= 650:
            print("决策建议: 建议通过")
        else:
            print("决策建议: 需结合其他维度综合评估")

{
    "mobile_no": "手机号",
    "id_card": "身份证号",
    "name": "姓名"
}

{
    "data": "Base64编码的加密数据"
}

{
    "code": 0,
    "message": "业务成功",
    "transaction_id": "202311020001234567",
    "data": "Base64编码的加密数据"
}

{
    "score_120_General": "480"
}