跳到主要内容

嵌入代码

VOID 操作适用于结算前或同一天的交易。
REFUND 操作适用于结算后或超过一天的交易。
DuitNow QR 付款仅支持REFUND 操作。

源代码是用 Java 编写的，用于原生 Android 开发。


第 1 步： 实施 ECC 库

在 .../android/app 的 build.gradle 中实现 ECC 库。

android {
    ...
    defaultConfig {
        ...
        multiDexEnabled true
    }

    compileOptions {
        sourceCompatibility JavaVersion.VERSION_1_8 
        targetCompatibility JavaVersion.VERSION_1_8
    }

    packagingOptions {
        exclude 'META-INF/DEPENDENCIES' 
        exclude 'META-INF/LICENSE.md'
        exclude 'META-INF/NOTICE.md'
    }
    ...
}

dependencies {
    ...
    // Crypto
    implementation 'com.nimbusds:nimbus-jose-jwt:8.9' 
    implementation 'org.bouncycastle:bcprov-jdk15on:1.64'
    ...
}

第 2 步： 私钥和公钥

生成公钥和私钥。

第 2.1 步： 生成密钥

请参考 附录 4 生成 EC 密钥对。


第 2.2 步： 初始化按键

初始化将用于加密和解密过程的密钥。

TestPos(ReactApplicationContext reactContext) {
    super(reactContext);
    this.reactContext = reactContext;
    try {
        thirdAppPrivateKey = loadECPrivateKey(reactContext.getAssets().open("ec_private_key_pkcs8.pem"));
        thirdAppPublicKey = loadECPublicKey(reactContext.getAssets().open("ec_public_key.pem"));
        yippiePosPublicKey = loadECPublicKey(reactContext.getAssets().open("yippiepos_public_key.key"));
        String refNum = "1.0";
        secretKey = generateECDHSecret(thirdAppPrivateKey, yippiePosPublicKey, refNum);
    } catch (IOException ex) {
        ex.printStackTrace();
    }

    BA = BluetoothAdapter.getDefaultAdapter();
}

第 3 步： 加载初始化密钥

从密钥文件加载初始化的密钥。

对于 java 中的私钥
public static ECPrivateKey loadECPrivateKey(InputStream certFile) {
    ECPrivateKey ecPrivateKey = null;
    PrivateKey privateKey = null;
    try {
        byte[] encodedPrivateKey = new byte[certFile.available()];
        certFile.read(encodedPrivateKey);
        certFile.close();
        try {
            String certFileContent = new String(encodedPrivateKey)
                    .replace("-----BEGIN CERTIFICATE-----", "")
                    .replace("-----END CERTIFICATE-----","")
                    .replace("-----BEGIN PRIVATE KEY-----", "")
                    .replace("-----END PRIVATE KEY-----", "");
            encodedPrivateKey = android.util.Base64.decode(certFileContent, android.util.Base64.DEFAULT);
        } catch (Exception ex) {
            ex.printStackTrace();
        }
        PKCS8EncodedKeySpec privateKeySpec = new PKCS8EncodedKeySpec(encodedPrivateKey);
        KeyFactory keyFactory = KeyFactory.getInstance("EC");
        privateKey = keyFactory.generatePrivate(privateKeySpec);
    } catch (NoSuchAlgorithmException | InvalidKeySpecException | IOException e) {
        e.printStackTrace();
    }
    if (privateKey instanceof ECPrivateKey){
        ecPrivateKey = (ECPrivateKey) privateKey;
    }
    return ecPrivateKey;
}

第 4 步： 声明输入

声明请求中的所有输入参数并创建 JSON 字符串。

注：
  • 无效适用于结算前或同一天内的交易。
  • 退款适用于结算后或超过一天的交易
  • DuitNow QR 付款仅适用于退款。
无效请求参数
public void receiveMessage(ReadableMap data) {
    String msgVer = data.getString("msgVer");
    String callerDevice = data.getString("callerDevice");
    String callerDeviceVer = data.getString("callerDeviceVer");
    String txnID = UUID.randomUUID().toString().replaceAll("-", "").toUpperCase();
    String txnDateTime = data.getString("txnDateTime");
    String email = data.getString("email");
    String password = data.getString("password");
    String crcyCde = data.getString("crcyCde");
    String amt = data.getString("amt");
    String stan = data.getString("stan");
    String authIdResp = data.getString("authIdResp");
    String rrn = data.getString("rrn");
    String mrn = data.getString("mrn");

    String jsonMessage = "{'TxnTyp' : '" + TestPos.TransactionType.VOD +
            "', 'MsgVer' : '" + msgVer +
            "', 'CallerDeviceType' : '" + callerDevice +
            "', 'CallerDeviceVer' : '" + callerDeviceVer +
            "', 'TxnID' : '" + txnID +
            "', 'LocalTxnDTTime' : '" + txnDateTime +
            "', 'Email' : '" + email +
            "', 'Pwd' : '" + password +
            "', 'AmtTxn' : '" + amt +
            "', 'CrcyTxn' : '" + crcyCde +
            "', 'STAN' : '" + stan +
            "', 'AuthIdResp' : '" + authIdResp +
            "', 'RRN' : '" + rrn +
            "', 'MRN' : '" + mrn + "'}";

    ECKey publicKeyASJWK = new ECKey.Builder(Curve.P_256, thirdAppPublicKey)
            .keyID(UUID.randomUUID().toString())
            .build();

    String jsonMessageEncrypted = encryptWithFormatJWE(txnID,
            publicKeyASJWK.toJSONString(), secretKey, JWEAlgorithm.DIR, jsonMessage);

    startActivity(REQ_VOID, jsonMessageEncrypted);
}

第 5 步： 加密字符串

获取字符串形式的jsonMessage后，使用encryptWithFormatJWE函数对其进行加密。

在 java 中
public static String encryptWithFormatJWE(String transactionID, String sdkPublicKeyAsJWK, SecretKey secretKey, JWEAlgorithm jweAlgorithm, String message) {
    String encryptedMessage = "";

    try {
        //header
        JWEHeader.Builder builder = new JWEHeader.Builder(jweAlgorithm, EncryptionMethod.A128CBC_HS256);
        if (!TextUtils.isEmpty(transactionID)) {
            builder.keyID(transactionID);
        }
        if (!TextUtils.isEmpty(sdkPublicKeyAsJWK)) {
            builder.ephemeralPublicKey(ECKey.parse(sdkPublicKeyAsJWK));
        }
        JWEHeader header = builder.build();

        //encrypt
        if(jweAlgorithm == JWEAlgorithm.DIR) {
            Provider bouncyCastleProvider = BouncyCastleProviderSingleton.getInstance();
            Security.addProvider((bouncyCastleProvider));
            JWEObject jweObject = new JWEObject(header, new Payload(message));
            jweObject.encrypt(new DirectEncrypter(secretKey));
            encryptedMessage = jweObject.serialize();
        } else if (jweAlgorithm == JWEAlgorithm.ECDH_ES) {
            // build JWE structure
            JWECryptoParts jweParts = ContentCryptoProvider.encrypt(header, message.getBytes(), secretKey, null, new JWEJCAContext());

            // JWE Protected Header
            StringBuilder stringBuilder = new StringBuilder(header.toBase64URL().toString());
            stringBuilder.append('.');

            // Encrypted Key
            if (jweParts.getEncryptedKey() != null) { 
                stringBuilder.append(jweParts.getEncryptedKey().toString());
            }
            stringBuilder.append('.');

            // Initialization Vector
            if (jweParts.getInitializationVector() != null) {
                stringBuilder.append(jweParts.getInitializationVector().toString());
            }
            stringBuilder.append('.');

            // Ciphertext
            stringBuilder.append(jweParts.getCipherText().toString());
            stringBuilder.append('.');

            // Authentication Tag
            if (jweParts.getAuthenticationTag() != null) {
                stringBuilder.append(jweParts.getAuthenticationTag().toString());
            }
            encryptedMessage = stringBuilder.toString();
        } else {
            Log.d("Tag", "Unsupported other algorithms");
        }
    } catch (Exception ex) {
        ex.printStackTrace();
    }
    return encryptedMessage;
}

第 6 步： 执行应用间请求

Kayaaku POS 应用和商户 POS 应用必须安装在同一台设备上。AIDL 服务在后台运行以处理请求。

按照下面的示例代码，使用 startActivityForResult()。

INTENT 请求
// start intent activity
private void startActivity (int messageType, String encryptedMessage) {
    if (messageType == REQ_SALE) {
        Intent intent = new Intent(ACTION_SALE); // ACTION_SALE = "com.finexuscards.yippiepos.xxx.SALES"
        intent.putExtra("Data", encryptedMessage);
        startActivityForResult(intent, REQ_SALE); // REQ_SALE = 0
    } else if (messageType == REQ_VOID) {
        Intent intent = new Intent(ACTION_VOID); // ACTION_VOID = "com.finexuscards.yippiepos.xxx.VOID"
        intent.putExtra("Data", encryptedMessage);
        startActivityForResult(intent, REQ_VOID); // REQ_VOID = 1
    } else if (messageType == REQ_SALESCOMPLETION) {
        Intent intent = new Intent(ACTION_COMPLETION); // ACTION_COMPLETION = "com.finexuscards.yippiepos.xxx.SALESCOMPLETION"
        intent.putExtra("Data", encryptedMessage);
        startActivityForResult(intent, REQ_SALESCOMPLETION); // REQ_SALESCOMPLETION = 2
    } else if (messageType == REQ_SALESCOMPLETION) {
        Intent intent = new Intent(ACTION_REFUND); // ACTION_REFUND = "com.finexuscards.yippiepos.xxx.REFUND"
        intent.putExtra("Data", encryptedMessage);
        startActivityForResult(intent, REQ_REFUND); // REQ_REFUND = 3
    }
}

// get response from onActivityResult()
protected void onActivityResult(int requestCode,int resultCode,Intent data){
    super.onActivityResult(requestCode,resultCode,data);
    String encryptedResponse = data.getStringExtra("Data");
}

第 7 步： 解密响应消息

使用decryptWithFormatJWE函数解密从 Kayaaku POS 应用程序检索到的响应消息。

在 java 中
public static String decryptWithFormatJWE(SecretKey secretKey, String message) {
    String decryptedMessage = "";
    try {
        // parse message to Object
        JWEObject jweObject = JWEObject.parse(message);

        // get header
        JWEAlgorithm algorithm = jweObject.getHeader().getAlgorithm();
        EncryptionMethod encryptionMethod = jweObject.getHeader().getEncryptionMethod();

        // decrypt
        if (algorithm.equals(JWEAlgorithm.DIR)) {
            if (encryptionMethod == EncryptionMethod.A128CBC_HS256 || encryptionMethod == EncryptionMethod.A128GCM) {
                Provider bouncyCastleProvider = BouncyCastleProviderSingleton.getInstance();
                Security.addProvider(bouncyCastleProvider);

                // start decrypting
                jweObject.decrypt(new DirectDecrypter(secretKey));
                decryptedMessage = jweObject.getPayload().toString();
            } else {
                Log.d("Tag", "Unsupported other encryption method:" + encryptionMethod);
            }
        } else {
            Log.d("Tag", "Unsupported other algorithms");
        }
    } catch (Exception ex) {
        Log.e("Tag", "decryptedMessage Failed:" + ex.getMessage());
        ex.printStackTrace();
    }
    return decryptedMessage;
}

© 2026 Finexus Group。版权所有。