三方/四方支付系统搭建指南：通道·代收代付·风控Payment Gateway Development Guide: Channels · Collection & Disbursement · Risk Control

支付系统概述Payment System Overview

在互联网商业生态中，支付系统是连接商户与用户资金流转的核心基础设施。根据在支付链路中所处的位置和角色不同，支付系统主要分为第三方支付和第四方支付两种模式，它们共同构成了现代在线支付的完整生态。In the internet business ecosystem, payment systems are the core infrastructure connecting merchants and users' fund flows. Based on their position in the payment chain, they are mainly divided into third-party and fourth-party payment models.

第三方支付（Third-Party Payment）是指独立于银行和商户的支付中介机构，直接与银行或支付机构建立合作关系，为商户提供在线收款和结算服务。第三方支付平台持有支付牌照（或在特定地区通过合规渠道运营），直接处理资金的收付和清算。代表性的第三方支付包括支付宝、微信支付、PayPal、Stripe等。搭建第三方支付系统需要与银行或支付机构进行直连对接，技术门槛和合规要求较高。Third-Party Payment refers to payment intermediaries independent of banks and merchants, directly partnering with financial institutions. They hold payment licenses and handle fund collection and settlement. Examples include Alipay, WeChat Pay, PayPal, and Stripe. Building third-party systems requires direct bank integration with high technical and compliance requirements.

第四方支付（Fourth-Party Payment / Payment Aggregator）是在第三方支付基础上的再聚合——不直接处理资金，而是将多个第三方支付通道整合到一个统一的接口中，为商户提供"一次对接、多通道可用"的聚合支付服务。第四方支付的核心价值在于：通道聚合（整合多个支付通道，提高支付成功率）、智能路由（根据交易特征自动选择最优通道）和风控管理（统一的交易监控和风险控制）。对于出海业务、游戏平台、电商平台等需要对接多种支付方式的场景，四方支付系统是不可或缺的基础设施。Fourth-Party Payment (Payment Aggregator) re-aggregates multiple third-party channels into a unified interface, offering "one integration, all channels" service. Core value includes channel aggregation for higher success rates, intelligent routing for optimal channel selection, and unified risk management. Essential for cross-border, gaming, and e-commerce platforms needing multiple payment methods.

支付模式详解Payment Models Explained

不同的支付模式适用于不同的业务场景和合规要求。以下是四种主流支付模式的详细解析：Different payment models suit different business scenarios and compliance requirements. Here are four mainstream models:

三方支付（直连银行/支付机构）Third-Party Payment (Direct Bank/PSP Connection)

三方支付系统直接与银行、卡组织或持牌支付机构建立技术对接和资金通道。资金流转路径为：用户→三方支付平台→银行/支付机构→商户结算账户。三方支付的核心技术包括：与银行的支付网关对接（通常基于ISO 8583或自定义的HTTP/XML协议）、资金的代收和代付清算（T+0/T+1结算）、备付金管理（部分地区要求支付机构在央行存管备付金）。三方支付的优势是对资金链路有完全控制权，可以提供更低的手续费率和更灵活的结算周期；缺点是对接成本高、合规要求严格（通常需要支付牌照），适合有实力的大型平台或持牌机构。Third-party payment directly connects to banks or licensed PSPs. Fund flow: User → Platform → Bank/PSP → Merchant settlement. Core technology includes bank gateway integration (ISO 8583 or custom HTTP/XML), fund collection/disbursement (T+0/T+1 settlement), and reserve fund management. Advantages include full control and lower fees; disadvantages include high integration costs and strict licensing requirements.

四方支付（通道聚合）Fourth-Party Payment (Channel Aggregation)

四方支付系统不直接触碰资金，而是作为技术中间层聚合多个三方支付通道。资金流转路径为：用户→三方支付通道→银行→商户。四方支付平台负责：统一支付接口（商户只需对接一套API即可使用所有支付通道）、通道路由（根据交易金额、地区、成功率等因素自动选择最优通道）、通道管理（通道的上下线、费率配置、限额设置）和交易监控（实时监控各通道的成功率、响应时间等指标）。四方支付的核心竞争力在于通道资源的丰富程度和智能路由算法的精准度。Fourth-party payment aggregates multiple third-party channels as a technical middleware layer without touching funds directly. The platform provides unified APIs, intelligent routing based on amount/region/success rate, channel management, and real-time transaction monitoring. Competitive advantage lies in channel diversity and routing algorithm precision.

代收代付Collection & Disbursement

代收代付是支付系统中最核心的业务功能。代收（Collection）指平台代替商户向用户收取款项——用户通过银行转账、扫码支付、信用卡等方式付款，资金先进入支付平台的中间账户，再由平台结算给商户。代付（Disbursement）指平台代替商户向用户付款——商户发起提现或出款指令，平台将资金从商户结算账户划转至用户的银行账户。代收代付的技术要点包括：收款码动态生成（每笔交易生成唯一的收款码或收款链接）、支付状态回调（异步通知商户支付结果）、批量代付（支持CSV/API批量提交出款请求）和对账核销（每日与银行进行资金核对）。Collection & Disbursement are core payment functions. Collection: platform receives user payments via bank transfer, QR code, or card into an intermediary account, then settles to merchants. Disbursement: platform transfers from merchant accounts to user bank accounts. Technical requirements include dynamic payment code generation, async callback notifications, batch disbursement, and daily bank reconciliation.

跑分系统Commission-Based Collection System

跑分系统是一种去中心化的代收模式——平台招募大量个人用户（跑分客/码商）提供自己的银行卡或收款码，用于接收商户的收款需求。当有支付订单时，系统自动匹配可用的跑分客账户，将收款码展示给付款用户。付款完成后，跑分客确认收款，平台从商户结算金额中扣除手续费后将差额结算给跑分客。跑分系统的技术核心包括：码商管理（注册审核、等级体系、信用评分）、订单分配算法（根据码商余额、在线状态、历史表现分配订单）、资金池管理（确保码商账户有足够的USDT/法币余额用于承接订单）、以及防欺诈机制（防止码商截款、虚假确认等行为）。Commission-based collection uses a decentralized model where individual users (agents) provide their bank accounts or payment codes. When a payment order arrives, the system matches available agents and displays their payment code. Core technology includes agent management (registration, rating, credit scoring), order distribution algorithms, fund pool management, and anti-fraud mechanisms to prevent agent theft or false confirmations.

核心功能模块Core Functional Modules

一个完整的支付系统由多个紧密协作的功能模块组成。每个模块都涉及复杂的业务逻辑和技术实现：A complete payment system consists of tightly integrated modules, each involving complex business logic and technical implementation:

商户管理Merchant Management

商户管理是支付系统的入口模块，负责商户的全生命周期管理。核心功能包括：商户入驻与资质审核（营业执照、法人身份、银行账户验证）、商户等级与费率管理（根据交易量设置阶梯费率，如日均交易100万以上享受0.3%的优惠费率）、API密钥管理（每个商户分配独立的AppID和AppSecret，用于接口鉴权和签名验证）、结算账户配置（支持多个结算银行卡/USDT地址）、以及商户子账号和权限管理（财务角色只能查看报表，技术角色可以管理API密钥等）。Merchant management handles the full lifecycle: onboarding and qualification review, tiered fee management (e.g., 0.3% for $1M+ daily volume), API key management (AppID/AppSecret for authentication), settlement account configuration (multiple bank cards/USDT addresses), and sub-account role-based permissions.

通道管理Channel Management

通道管理是四方支付系统的核心差异化模块。系统需要同时管理数十甚至上百条支付通道，每条通道有独立的费率、限额、工作时间和支持的支付方式。多通道轮询机制是通道管理的关键技术——当某条通道出现故障、超限或成功率下降时，系统自动切换到下一条可用通道，确保支付服务不中断。权重路由允许运营团队为每条通道设置权重比例（如通道A权重60%、通道B权重40%），实现流量的合理分配。更高级的路由策略包括：基于交易金额的路由（小额走A通道费率低、大额走B通道限额高）、基于地区的路由（东南亚交易走本地通道）和基于时间的路由（工作日走银行直连、非工作日走第三方通道）。Channel management is the core differentiator. The system manages dozens to hundreds of channels, each with independent rates, limits, operating hours, and supported methods. Multi-channel polling automatically switches to backup channels on failure. Weight-based routing distributes traffic by configured ratios. Advanced routing includes amount-based (small amounts to low-fee channels), region-based (local channels for local markets), and time-based (bank direct on workdays) strategies.

订单系统Order System

订单系统是支付交易的全流程管理中心。一笔支付订单的完整生命周期包括：创建（商户发起支付请求）→ 待支付（生成收款码/支付链接）→ 支付中（用户正在操作付款）→ 支付成功/失败（收到银行/通道的异步通知）→ 已结算（资金已结算给商户）或已退款。订单系统需要处理的技术难点包括：订单号的全局唯一性（雪花算法或分布式ID生成器）、支付超时自动关单（通常15-30分钟）、重复支付检测和退款、以及异步回调的可靠投递（采用重试机制+人工补单的双保障策略）。日均百万级订单量的系统需要采用分库分表策略和读写分离架构。The order system manages the full transaction lifecycle: Created → Pending → Processing → Success/Failed → Settled/Refunded. Technical challenges include globally unique order IDs (snowflake algorithm), auto-cancellation on timeout (15-30 minutes), duplicate payment detection, and reliable async callbacks with retry + manual补单 fallback. Million-order-per-day systems require database sharding and read-write separation.

结算系统Settlement System

结算系统负责将代收的资金按照约定的结算周期和费率规则划转给商户。结算模式通常分为：T+0实时结算（收款后立即可提，费率较高）、T+1次日结算（当日交易次日结算，费率适中）和D+0自然日结算。结算流程包括：交易汇总（按结算周期汇总商户的成功交易）、手续费扣除（从交易总额中扣除约定的通道费和平台服务费）、生成结算单（包含结算金额、笔数、手续费明细）、审核放款（大额结算需要人工审核）和打款执行（调用代付通道完成资金划转）。结算系统的核心要求是资金计算的精确性，所有金额运算必须使用高精度数据类型（如Java的BigDecimal），避免浮点数精度丢失。Settlement transfers collected funds to merchants per agreed cycles: T+0 instant (higher fees), T+1 next-day (moderate), D+0 same-day. The process includes transaction aggregation, fee deduction, settlement statement generation, approval for large amounts, and disbursement execution. All monetary calculations must use high-precision types (e.g., BigDecimal) to avoid floating-point errors.

对账系统Reconciliation System

对账系统是支付平台资金安全的最后一道防线。每日需要进行三层对账：平台内部对账（订单系统的交易记录与资金系统的账务流水逐笔核对）、与上游通道对账（将平台的交易记录与三方支付通道的账单进行比对，识别长款/短款/差异交易）和与商户对账（提供商户可下载的交易明细，支持商户自行核对）。对账的核心技术是大数据量的逐笔比对算法——日均百万笔交易的对账需要在合理时间内完成。通常采用批量导入+哈希比对的方案，先计算双方交易记录的哈希摘要快速定位差异，再对差异记录进行逐笔排查。Reconciliation is the last line of defense for fund safety. Three daily layers: internal reconciliation (order records vs. accounting records), upstream channel reconciliation (platform vs. provider bills to identify discrepancies), and merchant reconciliation (downloadable transaction details). Core technology is batch hash-comparison algorithms for efficient million-record matching.

通道对接Channel Integration

支付通道的丰富程度直接决定了支付系统的市场覆盖能力。一个面向全球市场的支付系统通常需要对接以下几类支付通道：Channel diversity directly determines market coverage. A globally-oriented payment system typically integrates these channel types:

银行卡直连Direct Bank Card

银行卡直连是最传统也最稳定的支付通道。通过与银行网关或卡组织（Visa/Mastercard/UnionPay）直接对接，实现信用卡/借记卡的在线收款。技术上需要对接银行的支付网关API，处理3DS安全验证（3D Secure，持卡人身份二次验证）、CVV校验和地址验证（AVS）。银行卡直连的优势是成功率高（通常在95%以上）、单笔限额大，适合大额交易场景。Direct bank card is the most traditional and stable channel. Integration with bank gateways or card networks (Visa/Mastercard/UnionPay) handles 3DS verification, CVV checks, and AVS. Success rates typically exceed 95% with high per-transaction limits, ideal for large transactions.

扫码支付QR Code Payment

扫码支付在亚洲市场（特别是中国和东南亚）占据主导地位。技术实现包括：动态二维码生成（每笔交易生成唯一的QR码，包含金额、订单号等信息）、支付状态轮询（前端定时查询支付结果）和异步通知处理。对接的支付通道包括支付宝、微信支付、以及各国本地的扫码支付工具（如印尼的OVO/DANA、越南的MoMo/ZaloPay等）。扫码支付的技术要点是二维码的时效性管理——通常设置15-30分钟的有效期，过期后自动作废并释放通道资源。QR code payment dominates Asian markets. Implementation includes dynamic QR generation (unique per transaction with amount and order info), payment status polling, and async notification handling. Integrations span Alipay, WeChat Pay, and local tools (OVO/DANA in Indonesia, MoMo/ZaloPay in Vietnam). Key technical requirement is QR code TTL management — typically 15-30 minute validity with auto-expiration.

USDT/加密货币USDT / Cryptocurrency

加密货币支付在跨境交易和特定行业中的需求快速增长。USDT（Tether）因其价格稳定性成为最主流的加密支付媒介。技术实现需要：支持多链收款（TRON TRC-20链Gas费最低且确认速度快、ERC-20兼容EVM生态、BEP-20适合BSC链用户）、链上交易监听（通过节点RPC或区块浏览器API实时监控入账地址的交易记录）、确认数管理（TRON通常等待19个确认、ETH等待12个确认）和自动归集（将分散在各收款地址的USDT归集到主地址，降低管理成本）。USDT支付的核心优势是跨境结算无需经过传统银行体系，到账速度快（通常3-5分钟）、手续费低（TRC-20链约$1）。Crypto payment demand is surging for cross-border transactions. USDT is the dominant medium due to price stability. Implementation requires multi-chain support (TRC-20 for lowest fees, ERC-20 for EVM compatibility, BEP-20 for BSC users), on-chain transaction monitoring, confirmation management (19 for TRON, 12 for ETH), and automatic fund sweeping. USDT advantages include bypassing traditional banking, fast settlement (3-5 minutes), and low fees (~$1 on TRC-20).

本地化支付（GCash/GrabPay/TrueMoney/Pix）Localized Payment (GCash/GrabPay/TrueMoney/Pix)

面向东南亚和南美市场的支付系统，本地化支付通道是必不可少的。菲律宾市场以GCash（月活用户超6600万）和GrabPay为主导，支持电子钱包余额支付和银行卡绑定支付；泰国市场以TrueMoney和PromptPay（银行间即时转账系统）为核心支付方式；巴西市场的Pix（央行推出的即时支付系统）已成为全民级的支付工具，支持24/7实时到账。本地化支付通道的对接重点在于：理解各国的支付习惯和监管要求、处理多币种和汇率转换、以及应对各地区不同的API规范和认证标准。Local payment channels are essential for Southeast Asian and South American markets. Philippines: GCash (66M+ MAU) and GrabPay; Thailand: TrueMoney and PromptPay; Brazil: Pix (central bank instant payment). Integration focus areas include understanding local payment habits, multi-currency handling, and navigating diverse API standards and certification requirements.

风控与合规Risk Control & Compliance

支付系统直接处理资金流转，风控是系统安全和可持续运营的生命线。一个完善的风控体系需要覆盖以下维度：Payment systems handle direct fund flows, making risk control the lifeline of safe and sustainable operations:

交易限额与异常检测Transaction Limits & Anomaly Detection

多维度的交易限额控制是风控的第一道防线：单笔交易限额（根据通道和商户等级设置）、单日累计限额（防止异常大额交易）、单卡/单账户限额（防止盗卡/盗号）、同IP地址频率限制（防止自动化攻击）。异常交易检测采用规则引擎+机器学习的双层架构：规则引擎处理已知风险模式（如短时间内同一账户多次小额交易、跨地区异常交易、非营业时间大额交易等），机器学习模型基于历史交易数据训练，识别新型欺诈模式（如养卡套现、洗钱拆分等）。风控决策需要在100ms内完成，不能影响正常交易的支付体验。Multi-dimensional limits form the first defense: per-transaction, daily cumulative, per-card/account, and same-IP rate limits. Anomaly detection uses dual-layer architecture: rule engine for known patterns (rapid small transactions, cross-region anomalies, off-hours large transactions) and ML models trained on historical data for new fraud patterns. Risk decisions must complete within 100ms.

黑名单与KYC/AMLBlacklists & KYC/AML

黑名单系统维护多个维度的风险名单：银行卡黑名单（历史欺诈卡号）、IP黑名单（恶意攻击IP段）、设备指纹黑名单（通过设备指纹技术识别恶意设备）和商户黑名单（有欺诈历史的商户）。KYC（Know Your Customer）流程确保对商户和终端用户进行充分的身份验证。AML（Anti-Money Laundering）反洗钱策略包括：大额交易报告（超过阈值的交易自动报告给合规部门）、可疑交易监测（频繁的小额拆分交易、循环交易等模式）和制裁名单筛查（与OFAC、EU制裁名单等进行实时比对）。Blacklist systems cover multiple dimensions: card (fraud history), IP (malicious ranges), device fingerprint (identified malicious devices), and merchant blacklists. KYC ensures thorough identity verification. AML strategies include large transaction reporting, suspicious transaction monitoring (split transactions, circular flows), and sanctions list screening (OFAC, EU real-time matching).

通道熔断Channel Circuit Breaking

通道熔断是保障支付系统高可用性的关键机制——当某条支付通道的失败率超过预设阈值（如连续5笔失败或5分钟内成功率低于50%）时，系统自动将该通道标记为"熔断"状态，所有新订单自动路由到其他可用通道。熔断后，系统会定期发送探测请求（如每30秒发送一笔小额测试交易），当探测请求连续成功后自动恢复该通道。这种熔断-探测-恢复的机制参考了微服务架构中的断路器模式（Circuit Breaker Pattern），有效防止了故障通道拖垮整个支付系统。Channel circuit breaking ensures high availability — when a channel's failure rate exceeds thresholds (e.g., 5 consecutive failures or success rate below 50% in 5 minutes), the system marks it as "tripped" and routes orders elsewhere. Periodic probe transactions (e.g., small test payments every 30 seconds) auto-restore channels after consecutive successes. This follows the Circuit Breaker Pattern from microservices architecture.

技术架构Technical Architecture

支付系统处理的是真金白银，对系统的可靠性、一致性和安全性要求极高。以下是核心架构设计要点：Payment systems handle real money, demanding extreme reliability, consistency, and security. Key architectural design points:

高并发设计High Concurrency Design

支付系统的并发处理能力直接影响业务的承载上限。典型的高并发架构设计包括：API网关层（Nginx/Kong）实现请求的负载均衡和限流保护（令牌桶/漏桶算法），支持万级QPS；应用服务层采用无状态设计，支持水平扩展（Kubernetes Pod自动伸缩）；缓存层（Redis Cluster）处理热点数据的快速读取（商户配置、通道状态、费率信息等）；消息队列层（Kafka/RocketMQ）实现异步解耦——支付核心流程同步处理保证响应速度，非核心流程（通知商户、更新报表、风控分析等）异步处理提高吞吐量。High concurrency architecture includes: API gateway layer (Nginx/Kong) for load balancing and rate limiting (10K+ QPS); stateless application layer with horizontal scaling (Kubernetes auto-scaling); cache layer (Redis Cluster) for hot data; message queue layer (Kafka/RocketMQ) for async decoupling — core payment flows sync for speed, non-core flows (notifications, reports, analytics) async for throughput.

分布式事务与幂等性Distributed Transactions & Idempotency

支付场景中的分布式事务是最具挑战性的技术难题之一。一笔支付操作可能涉及多个服务的协调：订单服务创建订单、通道服务发起支付请求、账务服务记录流水、余额服务更新金额。任何一个环节的失败都可能导致数据不一致。常用的解决方案包括：TCC模式（Try-Confirm-Cancel，先预留资源再确认或回滚）、Saga模式（通过补偿事务实现最终一致性）和本地消息表方案（将分布式事务拆解为本地事务+可靠消息投递）。幂等性设计确保同一请求的重复执行不会产生副作用——每个支付请求携带唯一的请求ID，服务端通过Redis+数据库双重判重，对重复请求返回缓存的首次处理结果。Distributed transactions are among the most challenging technical problems. A single payment may coordinate across order, channel, accounting, and balance services. Solutions include TCC (Try-Confirm-Cancel), Saga pattern (compensating transactions for eventual consistency), and local message table pattern. Idempotency ensures repeated requests produce no side effects — each request carries a unique ID with Redis + database dual deduplication.

资金安全Fund Security

资金安全是支付系统的最高优先级。核心保障措施包括：双写账本机制（每笔资金变动同时写入实时账本和清算账本，每日对两套账本进行交叉核对）、资金操作审计日志（所有资金变动记录不可篡改的审计日志，包含操作人、操作时间、变动前后金额）、大额操作多级审批（超过阈值的出款操作需要多人审批后才能执行）、敏感数据加密（银行卡号使用AES-256加密存储，密钥通过KMS管理）和安全传输（所有API通信启用TLS 1.3，内部服务间通过mTLS双向认证）。Fund security is the highest priority. Core measures include: dual-ledger mechanism (simultaneous real-time and clearing ledger writes with daily cross-verification), immutable audit logs for all fund changes, multi-level approval for large disbursements, AES-256 encryption for sensitive data with KMS key management, and TLS 1.3 for all API traffic with mTLS for internal services.

搭建流程与成本Development Process & Cost

搭建一个完整的支付系统（四方支付聚合平台）通常经历以下标准化流程：Building a complete payment system (fourth-party aggregation platform) follows this standardized process:

支付系统整套源码交付报价根据功能范围而定：基础版四方支付系统（包含商户管理、通道管理、订单系统、基础风控）报价 5,000-10,000 USDT；完整版系统（增加智能路由、高级风控、对账系统、跑分模块、多币种支持）报价 10,000-20,000 USDT。持续运营成本包括：服务器（$200-$1,000/月）、通道手续费（按交易量计算）、月度维护费 2,000-5,000 USDT。Full source delivery: basic fourth-party system (merchant management, channel management, orders, basic risk control) 5,000-10,000 USDT; full system (smart routing, advanced risk control, reconciliation, commission module, multi-currency) 10,000-20,000 USDT. Ongoing costs include servers ($200-$1,000/mo), channel fees, and monthly maintenance 2,000-5,000 USDT.

为什么选择大疆科技Why Choose DaJiang Tech

大疆科技在支付系统搭建领域拥有超过6年的深厚积累，累计交付超过60套支付系统，覆盖三方支付、四方支付、跑分系统、代收代付等全品类支付解决方案。选择大疆科技，您将获得以下核心优势：DaJiang Tech has over 6 years of deep expertise in payment system development, delivering 60+ systems across third-party, fourth-party, commission-based, and collection/disbursement solutions:

• 源码交付，完全自主：所有项目100%交付完整源代码，客户拥有全部知识产权。支付系统涉及资金安全，源码自主可控是最基本的安全保障。Full source code delivery: 100% source code handover with complete IP ownership. For payment systems involving fund security, code ownership is the fundamental safety guarantee.
• 高并发验证：自研的支付核心系统已在多个日均交易量超过1000万笔的平台稳定运行，单机QPS达到8000+，支持水平扩展至十万级TPS。High-concurrency proven: Our payment core has run stably on platforms with 10M+ daily transactions, achieving 8000+ QPS per node with horizontal scaling to 100K+ TPS.
• 丰富的通道资源：已对接超过100条支付通道，覆盖银行卡直连、扫码支付、USDT、GCash、GrabPay、TrueMoney、Pix等全球主流支付方式。新通道对接周期通常只需2-3个工作日。Extensive channel network: 100+ integrated channels covering bank cards, QR code, USDT, GCash, GrabPay, TrueMoney, Pix, and more. New channel integration typically takes just 2-3 business days.
• 智能路由引擎：自研的智能路由算法基于实时成功率、响应时间和费率等多维指标动态选择最优通道，将整体支付成功率提升至95%以上。Smart routing engine: Proprietary routing algorithm dynamically selects optimal channels based on real-time success rate, response time, and fee metrics, achieving 95%+ overall payment success rate.
• 完善的风控体系：内置规则引擎+机器学习双层风控，支持实时热更新规则，有效拦截欺诈交易的同时不影响正常用户体验。Comprehensive risk control: Built-in dual-layer risk engine (rules + ML) with real-time hot updates, effectively intercepting fraud without impacting normal user experience.
• 一站式服务：从需求分析、架构设计、系统开发到通道对接、部署上线和运维培训，提供端到端的交付服务，项目完成后提供6个月免费维护。End-to-end service: From requirements to architecture, development, channel integration, deployment, and operations training. 6 months free maintenance after project completion.