This topic describes how to query authentication results by calling the CheckResult operation.
API Description
Operation name: CheckResult
Request method: HTTPS POST
Description: After you receive a callback notification, call this operation on your server to retrieve the corresponding authentication status and authentication data.
ImportantBy default, ID Verification service results are stored for 30 days and then automatically deleted. You must retrieve the verification results within 30 days.
This API operation has a dedicated QPS limit. For more information, see QPS limits for ID Verification server-side API operations.
Service endpoints:
NoteBenefits of internal network access: An internal network is a private communication network between Alibaba Cloud products within the same region. If your business server is deployed in the corresponding Alibaba Cloud region, you can use the internal same-region endpoint to access the ID Verification service. This provides more secure and stable communication.
Optimization suggestions for access from outside China: Network environments outside China can be complex. To optimize your integration solution, reduce network latency, and minimize request failures, see Server-side network latency analysis and optimization.
Singapore
Public network:
cloudauth-intl.ap-southeast-1.aliyuncs.comInternal network:
cloudauth-intl-vpc.ap-southeast-1.aliyuncs.com
Indonesia
Public network:
cloudauth-intl.ap-southeast-5.aliyuncs.comInternal network:
cloudauth-intl-vpc.ap-southeast-5.aliyuncs.com
China (Hong Kong)
Public network:
cloudauth-intl.cn-hongkong.aliyuncs.comInternal network:
cloudauth-intl-vpc.cn-hongkong.aliyuncs.com
Malaysia (Kuala Lumpur)
Internet endpoint:
cloudauth-intl.ap-southeast-3.aliyuncs.comInternal same-region endpoint:
cloudauth-intl-vpc.ap-southeast-3.aliyuncs.com
Online Debugging and Integration
Before you debug and integrate an API operation, see Debug and integrate server-side API operations using OpenAPI Explorer for information about how to call API operations and obtain SDKs and sample code in OpenAPI Explorer.
You can directly run this operation in OpenAPI Explorer to test it and generate SDK code examples for this operation. SDK code examples.
Request parameters
Name | Type | Required | Description | Example |
MerchantBizId | String | Yes | A unique identifier that you define for your business. Use it to locate and troubleshoot issues later. The value must be a combination of up to 32 letters and digits. Ensure uniqueness. Note Alibaba Cloud does not check for uniqueness. To track requests effectively, ensure uniqueness. | e0c34a77f5ac40a5aa5e6ed20c35**** |
TransactionId | String | Yes | The unique identifier for the entire verification flow. Call the Initialize API operation to obtain this value. Important To prevent tampering, use the TransactionId stored on your server when you call the Initialize operation. Do not use the TransactionId returned by the client-side callback. | hksb7ba1b28130d24e015d6******** |
IsReturnImage | String | No | Specify whether to return authentication images:
| Y |
Response data
Name | Type | Description | Example | |
HTTP Status Code | Integer | The HTTP status code. | 200 | |
HTTP Body | RequestId | String | The request ID. | 130A2C10-B9EE-4D84-88E3-5384FF03**** |
Code | String | Success | ||
Message | String | A detailed description of the returned code. | success | |
Result.Passed | String | The final authentication result. Valid values:
| Y | |
Result.SubCode | String | A description of the authentication result. For more information, see ResultObject.SubCode error codes. | 200 | |
Result.ExtFaceInfo | String | Results related to face liveness verification. For the JSON format, see the example on the right. For more information, see ExtFaceInfo. | | |
ExtFaceInfo (FACE_IDU)
Name | Type | Description | Example |
faceImg | String | The captured face image in Base64 format. This field is returned if you set | Base64 format |
faceAttack | String | Indicates whether a liveness attack was detected on the captured face.
| N |
docVideoUrl | String | The OSS download URL for the evidence video. Note
| https://aliyun-cloudauth.oss-aliyuncs.com/******.webm |
faceAge | String | The predicted reference age based on the face image. This field may not be returned if the prediction fails. | 30 |
faceGender | String | The predicted gender based on the face image. This field may not be returned if the prediction fails.
| M |
faceAttackScore | Double | The probability of a spoofing attack predicted by the facial recognition algorithm. A higher score indicates a higher probability of a spoofing attack. The value ranges from 0 to 100. | 80 |
guardRiskScore | Double | The probability of device risk predicted by the Face-Guard algorithm. A higher score indicates a higher device risk. The value ranges from 0 to 100. | 90 |
faceComparisonScore | Double | The score of the face comparison. This field is returned only when the authentication includes a verification pattern. The value ranges from 0 to 100. The default system threshold is 90. You can also customize the decision as needed. | 90 |
faceRegistrationResult | String | Indicates whether the face registration was successful.
| 1 |
faceRegistrationID | String | The ID of the face registration. This field is returned only if the customer enables automatic registration and the face registration is successful. | f5a9219aefd6*******c84c8f0ca592a |
duplicateFace | String | Information about duplicate faces. If a duplicate face is retrieved, the ID of the corresponding face in the face database is returned. | |
Response codes
HTTP status code | Code | Message description |
200 | Success | Request successful. |
400 | MissingParameter | Parameter cannot be empty. |
InvalidParameter | Invalid parameter. | |
TransactionIdInvalid | Invalid Transaction ID. | |
403 | Forbidden.RAMUserAccessDenied | You need to grant the RAM user the AliyunAntCloudAuthFullAccess permission. For more information, see Authorize RAM users to access the service. |
Forbidden.AccountAccessDenied | Ensure that you have activated ID verification and your account has no overdue payment. | |
Throttling.Api | API request is blocked due to throttling. | |
404 | ProcessNotCompleted | The entire authentication process is not completed. |
500 | InternalError | Internal system error. Provide feedback to engineers for troubleshooting. |
503 | ServiceUnavailable | The service is unavailable. Contact engineers for troubleshooting. |
ResultObject.SubCode error codes
Error code | Is the authentication record billed? | Description and recommendations |
200 | Yes | Authentication passed. |
204 | Yes | The face comparison failed. The person may be different or the liveness photo is of low quality. |
205 | Yes | There are risks associated with liveness detection. |
206 | Yes | Business policy restriction. Note If safe mode is enabled, the service performs security checks on the device and environment used for authentication. If a potential threat is detected, the authentication fails. Remind the user to uninstall software or plug-ins such as multi-instance applications, app cloners, or virtual environments from their device. After the device is restored to its initial secure environment, ask the user to retry. |
233 | Yes | A similar face was detected. |