Quote from SMPH on November 21, 2023, 9:59 AM

1. ACCESS TOKEN: Access token for authentication. Only those who valid API key can request for an access token. Each request to API will require this access token to validate the user.
2. DATA: This is the encrypted raw data of a request. The real data is encrypted before sending over to the server.
3. MAC: MAC is to prevent men in the middle attack. The server side will check the MAC value with MAC value generated on the sever side to make sure the data was not tempered