System and method for identity and reputation score based on transaction history

• US 10,430,570 B2
• Filed: 10/24/2017
• Issued: 10/01/2019
• Est. Priority Date: 07/14/2011
• Status: Active Grant

• Current Assignee: DocuSign Incorporated
• Original Assignee: DocuSign Incorporated
• Inventors: Gonser, Thomas H., Peterson, Donald G., Rybacki, Douglas P., Carroll, Ashley, Strickland, Michael
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US15/792,027
• Publication Number:
  US 20180060549A1
• Time in Patent Office: 707 Days
• CPC Class Codes: B42D 25/23 Identity cards
• CPC Class Codes: B42D 25/305 Associated digital information record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 16/219 Managing data history or versioning querying versioned data G06F16/2474; querying temporal data G06F16/2477
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/384 using social networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection

Abstract

Techniques for electronic signature process management are described. Some embodiments provide an electronic signature service (“ESS”) configured to manage electronic identity cards. In some embodiments, the ESS generates and manages an electronic identity card for a user, based on personal information of the user, activity information related to the user'"'"'s actions with respect to the ESS, and/or social networking information related to the user. The electronic identity card of a signer may be associated with an electronic document signed via the ESS, so that users may obtain information about the signer of the document. The ESS may also generate a trust score for the user based on activity information related to the user'"'"'s actions with respect to the ESS and/or other factors. The trust score may be used to recommend authentication mechanisms to use with respect to electronic signature transactions.

Claims

1. A method to facilitate a digital transaction, comprising:

accessing, by a computing system operating an electronic signature service, activity information including actions of a user in conducting one or more previous electronic signature transactions using the electronic signature service;

determining a trust score for the user based on the activity information detailing actions from the previous electronic signature transactions including at least one of a type of signature used by the user, a number of documents signed by the user, and a frequency of signing operations conducted by the user;

generating for display, on a display device coupled to the computing system, the trust score in association with a new electronic signature transaction that is associated with the user via the electronic signature service; and

invoking, via the electronic signature service, a security related operation in association with the new electronic signature transaction based on the trust score.

2. The method of claim 1, wherein determining the trust score further comprises:

adjusting the trust score for the user based on activities including a number and type of sending events by the user as a sender, frequency of use by the user as a sender, or the number and type of authentication methods used in sending a document.

3. The method of claim 1, wherein determining the trust score further comprises:

adjusting the trust score for the user based on activities including a user linking an electronic signature service account associated with the user with a social network account associated with the user.

4. The method of claim 1, wherein invoking the security related operation includes recommending an authentication method to a sender based on a signer'"'"'s trust score, wherein the recommended authentication method is one of multiple authentication methods that are provided by the electronic signature service and that include access-code verification, phone-based verification, short message service verification, and knowledge-based verification.

5. The method of claim 1, wherein invoking the security related operation includes providing a warning to a second user associated with the new electronic signature transaction about entering selected sensitive personal information based on the trust score.

6. The method of claim 1, further comprising:

providing information to the user on how to improve their trust score, the information recommending that the user perform actions including providing a valid email address, linking an electronic signature service account associated with the user with a social network account associated with the user, sending a document via the electronic signature service, and signing a document via the electronic signature service; and

in response to the user performing one of the recommended actions, increasing the trust score.

7. The method of claim 1, further comprising presenting a user interface that is configured to:

add a signer to the new electronic signature transaction;

provide a second trust score of the signer to the user operating as a sender; and

enable the user to modify an authentication method for the new electronic signature transaction based on the second trust score.

8. A non-transitory computer-readable storage medium that includes instructions to facilitate a digital transaction between at least two users, wherein the execution of the instructions by a processor enables actions, comprising:

accessing, by a computing system operating an electronic signature services, activity information including information on actions of a user in conducting one or more previous electronic signature transactions using the electronic signature service;

determining a trust score for the user based on the activity information detailing actions from the previous electronic signature transactions including at least one of a type of signature used by the user, a number of documents signed by the user, and a frequency of signing operations conducted by the user;

generating for display, on a display device coupled to the processor, the trust score in association with a new electronic signature transaction that is associated with the user via the electronic signature service; and

invoking, via the electronic signature service, a security related operation in association with the new electronic signature transaction based on the trust score.

9. The non-transitory computer-readable storage medium of claim 8, wherein determining the trust score further comprises:

adjusting the trust score for the user based on activities including a number and type of sending events by the sender, frequency of use by the sender, or the number and type of authentication methods used in sending a document.

10. The non-transitory computer-readable storage medium of claim 8, wherein determining the trust score further comprises:

adjusting the trust score for a signer based on type of signature used by the signer, a number of documents signed by the signer, or frequency of signing.

11. The non-transitory computer-readable storage medium of claim 8, wherein invoking the security related operation includes recommending an authentication method to a sender based on the trust score.

12. The non-transitory computer-readable storage medium of claim 8, wherein invoking the security related operation includes generating user interface controls for selecting one or more of multiple authentication methods provided by the electronic signature service including access-code verification, phone-based verification, short message service verification, and knowledge-based verification;

and

disabling, based on the trust score, one or more of the authentication methods.

13. The non-transitory computer-readable storage medium of claim 8, further comprising providing information to the user on how to improve the trust score.

14. The non-transitory computer-readable storage medium of claim 8, further comprising:

adding a signer to the new electronic signature transaction;

providing a second trust score of the signer to the user; and

enabling the user to modify an authentication method for the new electronic signature transaction based on the second trust score.

15. A computing system configured to facilitate a digital transaction between at least two users, comprising:

a non-transitory computer readable memory for storing instructions;

a processor that executes the instructions to perform actions, comprising;

accessing, by a computing system operating an electronic signature services, activity information including information on actions of a user in conducting one or more previous electronic signature transactions using the electronic signature service;

determining a trust score for the user based on the activity information detailing actions from the previous electronic signature transactions including at least one of a type of signature used by the user, a number of documents signed by the user, and a frequency of signing operations conducted by the user;

generating for display, on a display device coupled to the processor, the trust score in association with a new electronic signature transaction that is associated with the user via the electronic signature service; and

invoking, via the electronic signature service, a security related operation in association with the new electronic signature transaction based on the trust score.

16. The computing system of claim 15, wherein determining the trust score further comprises:

adjusting the trust score for the user based on activities including a number and type of sending events by the sender, frequency of use by the sender, or the number and type of authentication methods used in sending a document.

17. The computing system of claim 15, wherein determining the trust score further comprises:

adjusting the trust score for a signer based on type of signature used by the signer, a number of documents signed by the signer, or frequency of signing.

18. The computing system of claim 15, wherein the processor that executes the instructions performs further actions, wherein invoking the security related operation includes recommending an authentication method to a sender based on the trust score.

19. The computing system of claim 15, wherein the processor that executes the instructions performs further actions, wherein invoking the security related operation includes providing a warning to a signer about entering selected sensitive personal information based on the trust score.

20. The computing system of claim 15, wherein the processor that executes the instructions performs further actions, comprising:

adding a signer to the new electronic signature transaction;

providing a second trust score of the signer to the user; and

enabling the user to modify an authentication method for the new electronic signature transaction based on the second trust score.