sign = sha256(appId + appSecret + timestamp)

String appId = "xyzxy2121zxyz"；
String timestamp = "1555378976238"；
String appSecret = "efcefcef1121cefcefc1212121"；
String str = appId  + appSecret + timestamp；
String sign = sha256(str)；

{
  "code": 200,
  "message": "成功",
  "charge": true,
  "taskNo":  "69564903663951243279",
  "data":{
    "passed": true,
    "face_image_url": "https://xxxx",
    "hack_score": 0.7475364208221436,
    "motions":{
      "score": 0.4667766656564324,
      "motion": "BLINK",
      "passed": true
    }
  }
}

{
  "code": 200,
  "message": "成功",
  "charge": true,
  "taskNo":  "69564903663951243279",
  "data":{
    "desc": "检测不通过",
    "passed": false, 
    "hack_score": 0.9975364208221436,
    "motions":{
      "score": 0.1667766656504324,
      "motion": "BLINK",
      "passed": false
    }
  }
}

{
  "msg": "参数错误",
  "code": 400
}

sha256(appId + appSecret + passed + motions_score + hack_score + face_image_url + timestamp + taskId)

successUrl?sign=12121312sdsda&taskId=1212121313123123123&passed=true&face_image_url=https://xxx=&hack_score=0.8969539999961853&motion=NOD&motions_passed=true&motions_score=0.23534825444221497

<h2><a id="_0"></a>接口描述</h2> <ul> <li>拍摄一段视频，按照指示做相应动作来识别是否为活⼈</li> <li>动作活体⽀持眨眼、张嘴、左右摇头、上下点头四个动作</li> <li>视频时长2秒左右，大小建议不超过5M，常用视频格式都支持</li> <li>本文档适用于API、H5两种方式接入</li> </ul> <h2><a id="API_6"></a>API方式</h2> <h3><a id="_9"></a>请求地址</h3> <p><code>https://api.jumdata.com/lifecheck</code></p> <h3><a id="_12"></a>请求方式</h3> <ul> <li>POST</li> </ul> <h3><a id="_15"></a>请求格式</h3> <ul> <li>x-www-form-urlencoded</li> </ul> <h3><a id="_18"></a>请求参数</h3> <table> <thead> <tr> <th>名称</th> <th>类型</th> <th>是否必填</th> <th><div style="width:350px;">说明</div></th> </tr> </thead> <tbody> <tr> <td>appId</td> <td>String</td> <td>是</td> <td>聚美智数分配的唯一标识</td> </tr> <tr> <td>timestamp</td> <td>Long</td> <td>是</td> <td>当前时间戳（毫秒数）</td> </tr> <tr> <td>sign</td> <td>String</td> <td>是</td> <td>签名，见签名算法说明</td> </tr> <tr> <td>productCode</td> <td>String</td> <td>是</td> <td>产品编号，固定值：life_check</td> </tr> <tr> <td>file</td> <td>file</td> <td>否</td> <td>视频文件，适合本地文件上传，file和url二选一</td> </tr> <tr> <td>url</td> <td>String</td> <td>否</td> <td>视频文件地址，下载限时10秒，file和url二选一</td> </tr> <tr> <td>motions</td> <td>String</td> <td>是</td> <td>用户动作序列，BLINK - 眨眼；MOUTH - 张嘴； NOD - 点头；YAW - 摇头</td> </tr> </tbody> </table> <h3><a id="_32"></a>签名算法</h3> <pre><div class="hljs"><code class="lang-java">sign = sha256(appId + appSecret + timestamp) </code></div></pre> <p>用聚美智数分配的 <strong>appId</strong>、聚美智数分配的 <strong>appSecret</strong>，当前时间戳 <strong>timestamp</strong>，按上述顺序拼接成字符串，再进行 <strong>sha256</strong> 哈希得到。如下：</p> <pre><div class="hljs"><code class="lang-java">String appId = <span class="hljs-string">"xyzxy2121zxyz"</span>； String timestamp = <span class="hljs-string">"1555378976238"</span>； String appSecret = <span class="hljs-string">"efcefcef1121cefcefc1212121"</span>； String str = appId + appSecret + timestamp； String sign = sha256(str)； </code></div></pre> <h3><a id="_47"></a>通过返回样例</h3> <pre><div class="hljs"><code class="lang-json">{ <span class="hljs-attr">"code"</span>: <span class="hljs-number">200</span>, <span class="hljs-attr">"message"</span>: <span class="hljs-string">"成功"</span>, <span class="hljs-attr">"charge"</span>: <span class="hljs-literal">true</span>, <span class="hljs-attr">"taskNo"</span>: <span class="hljs-string">"69564903663951243279"</span>, <span class="hljs-attr">"data"</span>:{ <span class="hljs-attr">"passed"</span>: <span class="hljs-literal">true</span>, <span class="hljs-attr">"face_image_url"</span>: <span class="hljs-string">"https://xxxx"</span>, <span class="hljs-attr">"hack_score"</span>: <span class="hljs-number">0.7475364208221436</span>, <span class="hljs-attr">"motions"</span>:{ <span class="hljs-attr">"score"</span>: <span class="hljs-number">0.4667766656564324</span>, <span class="hljs-attr">"motion"</span>: <span class="hljs-string">"BLINK"</span>, <span class="hljs-attr">"passed"</span>: <span class="hljs-literal">true</span> } } } </code></div></pre> <h3><a id="_67"></a>不通过返回样例</h3> <pre><div class="hljs"><code class="lang-json">{ <span class="hljs-attr">"code"</span>: <span class="hljs-number">200</span>, <span class="hljs-attr">"message"</span>: <span class="hljs-string">"成功"</span>, <span class="hljs-attr">"charge"</span>: <span class="hljs-literal">true</span>, <span class="hljs-attr">"taskNo"</span>: <span class="hljs-string">"69564903663951243279"</span>, <span class="hljs-attr">"data"</span>:{ <span class="hljs-attr">"desc"</span>: <span class="hljs-string">"检测不通过"</span>, <span class="hljs-attr">"passed"</span>: <span class="hljs-literal">false</span>, <span class="hljs-attr">"hack_score"</span>: <span class="hljs-number">0.9975364208221436</span>, <span class="hljs-attr">"motions"</span>:{ <span class="hljs-attr">"score"</span>: <span class="hljs-number">0.1667766656504324</span>, <span class="hljs-attr">"motion"</span>: <span class="hljs-string">"BLINK"</span>, <span class="hljs-attr">"passed"</span>: <span class="hljs-literal">false</span> } } } </code></div></pre> <h3><a id="_87"></a>错误返回</h3> <pre><div class="hljs"><code class="lang-json">{ <span class="hljs-attr">"msg"</span>: <span class="hljs-string">"参数错误"</span>, <span class="hljs-attr">"code"</span>: <span class="hljs-number">400</span> } </code></div></pre> <h3><a id="_95"></a>公共返回字段</h3> <table> <thead> <tr> <th>字段名</th> <th><div style="width:350px;">说明 </div></th> </tr> </thead> <tbody> <tr> <td>code</td> <td>返回码，详见：返回码说明</td> </tr> <tr> <td>msg</td> <td>code对应的说明，详见：返回码说明</td> </tr> <tr> <td>taskNo</td> <td>本次请求号</td> </tr> <tr> <td>charge</td> <td>计费标志</td> </tr> <tr> <td>data</td> <td>详见正确返回体</td> </tr> </tbody> </table> <h3><a id="code__104"></a>code 返回码说明</h3> <table> <thead> <tr> <th>code</th> <th><div style="width:350px;">说明</div></th> </tr> </thead> <tbody> <tr> <td>200</td> <td>成功 (计费)</td> </tr> <tr> <td>400</td> <td>参数错误</td> </tr> <tr> <td>404</td> <td>接口地址不正确</td> </tr> <tr> <td>500</td> <td>服务商维护，请稍候再试</td> </tr> <tr> <td>601</td> <td>接口未开通，请联系聚美智数服务商</td> </tr> <tr> <td>602</td> <td>账号已停用</td> </tr> <tr> <td>603</td> <td>余额不足,请充值</td> </tr> <tr> <td>604</td> <td>接口已停用</td> </tr> <tr> <td>605</td> <td>次数不足，请购买套餐</td> </tr> <tr> <td>606</td> <td>调用超限，请稍候再试</td> </tr> <tr> <td>607</td> <td>ip不在白名单</td> </tr> <tr> <td>609</td> <td>请求过于频繁，请稍候再试</td> </tr> <tr> <td>610</td> <td>请求超时</td> </tr> <tr> <td>999</td> <td>其他，以实际返回为准</td> </tr> </tbody> </table> <h3><a id="data_122"></a>data返回字段说明</h3> <table> <thead> <tr> <th>字段名</th> <th><div style="width:420px">说明</div></th> </tr> </thead> <tbody> <tr> <td>passed</td> <td>总体检测结果，true - 通过，false - 未通过</td> </tr> <tr> <td>desc</td> <td>passed为false 活体检查失败的原因</td> </tr> <tr> <td>face_image_url</td> <td>活体通过之后，抓取的人脸照片</td> </tr> <tr> <td>hack_score</td> <td>防hack检测分数，hack_score阈值为0.98，由行业大数据训练得到，大于0.98是hack行为，小于等于0.98是正常活人</td> </tr> <tr> <td>motions</td> <td>单个行为检测结果，详见motions返回字段说明</td> </tr> </tbody> </table> <h3><a id="motions_131"></a>motions返回字段说明</h3> <table> <thead> <tr> <th>字段名</th> <th><div style="width:420px">说明</div></th> </tr> </thead> <tbody> <tr> <td>motion</td> <td>用户动作序列</td> </tr> <tr> <td>passed</td> <td>单个动作检测结果</td> </tr> <tr> <td>score</td> <td>单个动作分值 &gt; 0.2表示通过，&lt;= 0.2表示不通过</td> </tr> </tbody> </table> <h2><a id="H5_138"></a>H5方式</h2> <ul> <li>嵌入服务商提供的活体检测H5页面，并传递相关参数，可打开摄像头，根据指示拍摄视频并提交</li> <li>服务商检测完成之后在页面上直接返回结果，也可以通过回调通知方式将结果发送给商家</li> <li>视频时长2秒左右，大小建议不超过10M</li> </ul> <h3><a id="H5_143"></a>H5页面地址</h3> <p><code>https://api-h5.jumdata.com/lifecheck?appId=&amp;timestamp=&amp;sign=&amp;productCode= &amp;notifyUrl=&amp;returnUrl=&amp;title=&amp;complexity=</code></p> <blockquote> <p>参数通过url query的方式传递</p> </blockquote> <p><a href="https://api-h5.jumdata.com/lifecheck?appId=kSOnzJEi78tV8xvS&amp;title=%E6%B4%BB%E4%BD%93%E6%A3%80%E6%B5%8BH5%E7%89%88-%E8%81%9A%E7%BE%8E%E6%99%BA%E6%95%B0" target="_blank">体验</a></p> <h3><a id="_150"></a>参数说明</h3> <table> <thead> <tr> <th>名称</th> <th>必须</th> <th><div style="width:420px">说明</div></th> </tr> </thead> <tbody> <tr> <td>appId</td> <td>是</td> <td>服务商分配的唯一标识</td> </tr> <tr> <td>timestamp</td> <td>是</td> <td>当前时间的毫秒数</td> </tr> <tr> <td>sign</td> <td>是</td> <td>签名，见签名算法说明</td> </tr> <tr> <td>productCode</td> <td>是</td> <td>固定值: life_check</td> </tr> <tr> <td>motions</td> <td>否</td> <td>用户动作，BLINK - 眨眼；MOUTH - 张嘴； NOD - 点头；YAW - 摇头。如不传则动作随机</td> </tr> <tr> <td>title</td> <td>否</td> <td>活体检测h5页面标题</td> </tr> <tr> <td>notifyUrl</td> <td>否</td> <td>服务端接收活体检测结果地址 ，详见接收检测结果说明</td> </tr> <tr> <td>successUrl</td> <td>否</td> <td>活体检测成功跳转到该页面 ，详见接收检测结果说明</td> </tr> <tr> <td>failUrl</td> <td>否</td> <td>活体检测失败跳转到该页面 ，详见接收检测结果说明</td> </tr> <tr> <td>taskId</td> <td>否</td> <td>调用端生成一个唯一id，嵌入h5的时候传入该参数，服务商通知结果时原文返回，便于关联，当notifyUrl不为空时，taskId也不能为空</td> </tr> <tr> <td>returnUrl</td> <td>否</td> <td>活体检测后跳转到该页面，当提供了successUrl或failUrl时，该参数无效</td> </tr> </tbody> </table> <h3><a id="_165"></a>接收检测结果</h3> <ul> <li>商家的服务端和前端均可接收检测结果</li> </ul> <h4><a id="_168"></a>服务端接收检测结果</h4> <ul> <li>如果商家需要在服务端接收检测结果，需要提供接收检测结果接口，服务商会在检测之后将检测结果通知到<code>notifyUrl</code>参数指定的接口地址</li> </ul> <h5><a id="_171"></a>请求方式</h5> <ul> <li>POST</li> </ul> <h5><a id="_174"></a>请求格式</h5> <ul> <li>formdata</li> </ul> <h5><a id="_177"></a>结果参数说明</h5> <table> <thead> <tr> <th>名称</th> <th><div style="width:420px">说明</div></th> </tr> </thead> <tbody> <tr> <td>taskId</td> <td>返回打开h5页面时传入的taskId</td> </tr> <tr> <td>passed</td> <td>true 通过；false 未通过</td> </tr> <tr> <td>face_image_url</td> <td>活体成功之后，抓取的人脸照片</td> </tr> <tr> <td>hack_score</td> <td>防hack检测分数，hack_score阈值为0.98，由行业大数据训练得到，大于0.98是hack行为，小于等于0.98是正常活人</td> </tr> <tr> <td>motion</td> <td>用户动作序列</td> </tr> <tr> <td>motions_passed</td> <td>单个动作检测结果</td> </tr> <tr> <td>motions_score</td> <td>单个动作分值</td> </tr> <tr> <td>sign</td> <td>结果参数签名，详见结果签名算法</td> </tr> <tr> <td>timestamp</td> <td>当前时间戳</td> </tr> </tbody> </table> <h5><a id="_190"></a>结果签名算法</h5> <pre><code class="lang-">sha256(appId + appSecret + passed + motions_score + hack_score + face_image_url + timestamp + taskId) </code></pre> <ul> <li>将结果参数和appId按顺序：appId,appSecret,passed,motions_score,hack_score,face_image_url，timestamp，taskId 接成字符串，再对拼接后的字符串进行sha256摘要得到</li> <li>如果passed=false，则face_image_url不返回，生成sign时需要忽略</li> </ul> <h4><a id="_197"></a>前端接收检测结果</h4> <ul> <li>如果商家需要在前端接收检测结果，需要提供接收检测结果页面，服务商会在检测之后跳转到<code>successUrl</code> 参数或<code>failUrl</code>参数指定的页面地址，并将检测结果作为url参数带入，如下所示</li> </ul> <pre><code class="lang-">successUrl?sign=12121312sdsda&amp;taskId=1212121313123123123&amp;passed=true&amp;face_image_url=https://xxx=&amp;hack_score=0.8969539999961853&amp;motion=NOD&amp;motions_passed=true&amp;motions_score=0.23534825444221497 </code></pre> <ul> <li>详细参数和服务端结果参数相同</li> </ul>