开放银行API在2023年产生了570亿美元的全球交易，证明了它们的重要角色

现在，全球金融机构正在将API作为现代银行业务的基础。这些数字连接器正在改变金融服务的运作方式

Open banking APIs are rapidly transforming the financial services landscape, and they’re set to play an increasingly critical role in the years ahead. In 2023 alone, these digital connectors generated an impressive $57 billion in global transactions, a testament to their impact on today’s diverse fintech ecosystem.

开放银行API正在迅速改变金融服务格局，并且在未来几年中将发挥越来越重要的作用。仅在2023年，这些数字连接器就产生了570亿美元的全球交易，这证明了它们对当今多样化的金融科技生态系统的影响。

This level of activity shows just how quickly consumers are integrating fintech solutions into their daily lives. Statistics from the U.S. show that 88% of consumers now use at least one fintech service.

这种活动水平表明，消费者将金融科技解决方案集成到日常生活中的速度。美国的统计数据表明，现在有88％的消费者使用至少一项金融科技服务。

When financial institutions collaborate with third-party providers through the secure framework of open banking APIs, they build a synergistic ecosystem where both consumers and businesses reap benefits. These collaborations are governed by exacting standards that ensure data moves safely between parties, and proper integration helps banks maintain optimal security measures while still opening their doors to innovation.

当金融机构通过开放银行API的安全框架与第三方提供商合作时，他们建立了一个协同的生态系统，消费者和企业都从中获得了收益。这些协作受严格的标准控制，以确保当事方之间的数据安全地移动，并且适当的集成有助于银行维持最佳的安全措施，同时仍在打开其创新之门。

As the fintech industry continues its remarkable ascent—anticipating an industry revenue of $1.5 trillion annually by 2030—scalability and security become paramount. These factors will be pivotal in sustaining the industry's high growth trajectory.

随着金融科技行业继续出色的上升 - 到2030年，每年1.5万亿美元的行业收入变得至关重要。这些因素将是维持该行业高增长轨迹的关键。

Despite the widespread discussion of open banking, there are still significant security hurdles to overcome in its implementation. Banks and financial institutions face a delicate balancing act: how do you innovate relentlessly while keeping security measures extremely robust? The challenge lies in protecting customer data with the utmost diligence while still making it accessible through the proper channels.

尽管对开放银行业务进行了广泛讨论，但在实施方面仍然存在重大的安全障碍。银行和金融机构面临着一个微妙的平衡行为：您如何不懈地创新，同时保持安全措施极强？挑战在于以最大的努力保护客户数据，同时仍可以通过适当的渠道访问它。

However, the introduction of Strong Customer Authentication (SCA) under PSD2 regulations has made a substantial difference. Compared to outdated methods like screen scraping, which were largely used before 2020 and rendered many aggregators useless, today's technology offers a vast improvement in fraud risks.

但是，根据PSD2法规引入强大的客户身份验证（SCA）已有很大的不同。与屏幕刮擦之类的过时方法相比，屏幕刮擦（在2020年之前都在很大程度上被使用，并使许多聚合器毫无用处，如今的技术可在欺诈风险方面得到了极大的改善。

This guide will take a comprehensive look at building secure and compliant open banking APIs for 2025 and beyond. We'll cover establishing secure endpoints using industry standards like FDX, setting up optimal authentication flows with OAuth 2.0, creating positive developer experiences with best practices, and designing systems that can evolve with changing regulations and technologies.

本指南将全面研究2025年及以后的安全且合规的开放银行API。我们将使用FDX等行业标准来建立安全的终点，以OAUTH 2.0建立最佳的身份验证流，从而在最佳实践中创造积极的开发人员体验，并设计可以随着法规和技术而发展的系统。

Let's delve into what makes open banking work securely and optimally at scale.

让我们深入研究使开放银行在大规模上安全和最佳工作的方法。

Understanding Open Banking APIs and Their Role in Fintech

了解开放银行API及其在金融科技中的作用

Financial institutions around the world are increasingly adopting APIs as fundamental building blocks of modern banking in today’s fast-moving fintech landscape. These digital connectors are altering the way financial services operate, interact and innovate.

在当今快速发展的金融科技景观中，全球金融机构越来越多地采用API作为现代银行业务的基本基础。这些数字连接器正在改变金融服务的运作，互动和创新方式。

What Are Open Banking APIs and Their Purpose?

什么是开放银行API及其目的？

Open banking APIs are essentially digital gateways that third-party developers can use to build applications around existing financial systems. They form standardized and secure channels for data exchange between banks and authorized third parties. In essence, these APIs create a technical framework that enables financial data to flow seamlessly and securely with proper customer permission.

开放银行API本质上是第三方开发人员可以用来围绕现有金融系统构建应用程序的数字网关。它们形成了银行和授权第三方之间的数据交换的标准化和安全渠道。本质上，这些API创建了一个技术框架，使财务数据能够在适当的客户许可下无缝且安全地流动。

Open banking APIs fulfill several key purposes, which are interconnected to create a broader ecosystem of services. These APIs can be categorized into various types, each serving a specific function in the integration process.

开放银行API实现了几个关键目的，这些目的是相互联系以创建更广泛的服务生态系统的。这些API可以分类为各种类型，每种API在集成过程中都有特定功能。

Data APIs: These APIs provide read-only access to account information, including balances, transaction history, and other relevant financial data. Third-party developers can use this access to build applications that analyze customer spending habits, generate personalized financial reports, or offer budgeting assistance.

数据API：这些API提供仅阅读的帐户信息访问，包括余额，交易历史记录和其他相关财务数据。第三方开发人员可以使用此访问来构建分析客户支出习惯，生成个性化财务报告或提供预算帮助的应用程序。

Transaction APIs: These APIs enable third parties to initiate transactions on behalf of customers with their consent. For instance, an e-commerce platform could use a transaction API to collect payment from a customer directly into their bank account in a single, seamless step.

交易API：这些API使第三方能够在客户同意下代表客户启动交易。例如，电子商务平台可以使用交易API以单个无缝的步骤直接从客户收集其银行帐户中的付款。

Product APIs: These APIs allow third parties to list and compare financial products, such as loans, credit cards, and investment products, from multiple institutions. Third-party providers can then use this data to build valuable services like financial product aggregators or personalized recommendations.

产品API：这些API允许第三方列出和比较来自多个机构的贷款，信用卡和投资产品等金融产品。然后，第三方提供商可以使用此数据来构建有价值的服务，例如金融产品聚合商或个性化建议。

The importance of open banking APIs in the financial ecosystem is evident in the latest statistics. In 2023 alone, an estimated $57 billion in transactions were generated by open banking APIs globally. This staggering figure showcases the rapid expansion of fintech solutions as consumers become increasingly engaged.

在最新统计数据中，在金融生态系统中开放银行API在金融生态系统中的重要性是显而易见的。仅在2023年，全球开放式银行API就产生了约570亿美元的交易。随着消费者越来越多的参与，这个惊人的人物展示了金融科技解决方案的快速扩展。

How APIs Facilitate Consumer-Permissioned Data Sharing

API如何促进消费者收到的数据共享

At the heart of open banking lies the concept of consumer-permissioned data sharing. This mechanism allows customers to explicitly authorize third-party providers (TPPs) to access specific types of financial data. The process usually starts with OAuth authorization.

开放银行的核心是消费者使用的数据共享的概念。这种机制使客户可以明确授权第三方提供商（TPP）访问特定类型的财务数据。该过程通常以OAUTH授权开始。

When a customer wishes to use an application from a third-party provider, they are redirected to their bank's authentication system, where they log in and grant the application the desired level of access to their financial data through a clear and concise consent screen. This authorization is typically expressed in terms of OAuth scopes, which specify the types of data or functions that the third party is authorized to use. For instance, a budgeting application might be granted scope to "read" transaction history but not to initiate transfers.

当客户希望使用第三方提供商的应用程序时，他们将通过清晰简明的同意屏幕重定向到银行的身份验证系统，并登录并授予应用程序所需的财务数据访问水平。该授权通常以OAUTH范围来表示，该范围指定了第三方被授权使用的数据或功能的类型。例如，预算应用程序可以授予“读取”交易历史记录的范围，但不能启动转移。

After successful authentication, the bank generates an authorization code and sends it back to the third-party provider through a redirect URL. The third-party provider then uses this code to obtain an access token. This is done by making a secure request

成功身份验证后，银行生成了授权代码，并通过重定向URL将其发送回第三方提供商。然后，第三方提供商使用此代码获得访问令牌。这是通过提出安全请求来完成的