Electronic signature framework with keystroke biometric authentication

• US 10,503,919 B2
• Filed: 04/10/2017
• Issued: 12/10/2019
• Est. Priority Date: 04/10/2017
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Inc.
• Inventors: Effendi, Santo, Anderson, Paul C., Phatak, Sarika, Bhandarkar, Mangesh
• Primary Examiner(s): Feild, Lynn D
• Assistant Examiner(s): South, Jessica J
• Application Number:
  US15/483,675
• Publication Number:
  US 20180293393A1
• Time in Patent Office: 974 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

An intended signatory receives an electronic signature request that includes instructions for accessing both an unsigned document and server functionality that enables the intended signatory to electronically sign the document. To gain such access, the intended signatory must pass username and password authentication, which serves as a first authentication factor. After the intended signatory is authenticated, he/she can access the unsigned document. However, once the intended signatory is initially authenticated, it can be assumed that his/her work session is subject to being misappropriated by an unauthorized user. Thus, when a command to apply an electronic signature to the document is invoked, the would-be signatory must pass keystroke biometrics authentication, which serves as a second authentication factor. This second authentication is temporally separated from the first username/password authentication, but it occurs at substantially the same time that the electronic signature is to be applied to the document.

Claims

1. A computer-implemented document processing method that comprises:

electronically receiving, from a first computing device associated with a document originator in an electronic signature workflow, metadata that identifies a document;

electronically transmitting, to a second computing device associated with an intended signatory in the workflow, instructions for accessing the document;

authenticating the intended signatory using a first authentication protocol;

in response to authenticating the intended signatory, providing the second computing device with access to the document;

after the second computing device has been provided access to the document, receiving data input into the document by the intended signatory;

generating keystroke biometrics data based on the data input into the document;

receiving, from the second computing device, a command to apply an electronic signature to the document;

in response to receiving the command, authenticating the intended signatory using the keystroke biometrics data; and

in response to authenticating the intended signatory using the keystroke biometrics data, applying the electronic signature to the document.

2. The method of claim 1, further comprising receiving, from the first computing device, authentication requirements that define the first authentication protocol.

3. The method of claim 1, wherein the instructions for accessing the document are transmitted to the second computing device in response to a request that is received from the second computing device.

4. The method of claim 1, wherein the document comprises a fillable form, and wherein the data input into the document comprises form data added to the fillable form.

5. The method of claim 1, further comprising, after applying the electronic signature to the document, updating a status of the document in an audit data repository.

6. The method of claim 1, further comprising:

making a determination that a keystroke biometrics profile is unavailable for the intended signatory;

prompting the intended signatory to provide a typing sample in response to being authenticated using the first authentication protocol; and

generating the keystroke biometrics profile based on the typing sample.

7. The method of claim 1, wherein at least five minutes elapse between authenticating the intended signatory using the first authentication protocol and authenticating the intended signatory using the keystroke biometrics data.

8. The method of claim 1, wherein authenticating the intended signatory using the keystroke biometrics data comprises comparing the keystroke biometrics data with a baseline keystroke biometrics profile for the intended signatory.

9. The method of claim 1, wherein the first authentication protocol is a username/password authentication.

10. An electronic signature system comprising:

a memory;

a processor that is coupled to, and capable of executing instructions stored in, the memory;

a registration module that is stored in the memory, the registration module comprising means for creating a keystroke biometric profile for an intended signatory; and

an interactivity module that is stored in the memory, the interactivity module comprising

means for performing an initial authentication of the intended signatory and for providing the intended signatory access to an unsigned document in response to performing the initial authentication,

means for receiving, from the intended signatory, data input associated with data entry into the unsigned document,

means for generating keystroke biometrics data based on the data input,

means for performing a subsequent authentication of the intended signatory using the keystroke biometrics data in response to receiving a request from the intended signatory to apply an electronic signature to the unsigned document, and

means for applying the electronic signature to the unsigned document, thereby creating an electronically signed document, in response to successful completion of the subsequent authentication.

11. The electronic signature server of claim 10, further comprising a document status module comprising means for updating a status of the electronically signed document in an audit data repository.

12. The electronic signature server of claim 10, further comprising a configuration module comprising means for marking a signature field in the unsigned document.

13. The electronic signature server of claim 10, wherein the keystroke biometric profile is created for the intended signatory in response to making a determination that no keystroke biometric profile is available for the intended signatory.

14. The electronic signature server of claim 10, wherein the initial authentication is based on a username/password combination.

15. A non-transitory computer readable medium encoded with instructions that, when executed by one or more processors, causes an electronic signature process to be invoked, the electronic signature process comprising:

receiving, from a first computing device associated with a document originator in an electronic signature workflow, metadata that identifies a document;

transmitting, to a second computing device associated with an intended signatory in a workflow, instructions for accessing the document;

providing the second computing device with access to the document;

after the second computing device has been provided access to the document, receiving data input that is later added to the document;

generating keystroke biometrics data based on the data input;

receiving, from the second computing device, a command to apply an electronic signature to the document;

in response to receiving the command, making a determination that the data input from the second computing device was typed by the intended signatory based on a comparison of the keystroke biometrics data with a keystroke biometric profile of the intended signatory; and

in response to making the determination, applying the electronic signature to the document.

16. The non-transitory computer readable medium of claim 15, wherein the electronic signature process further comprises receiving, from the first computing device, instructions to use keystroke biometrics to authenticate the intended signatory.

17. The non-transitory computer readable medium of claim 15, wherein making the determination further comprises:

sending, to a keystroke biometrics authentication server, the keystroke biometrics data; and

receiving, from the keystroke biometrics authentication server, a degree of confidence with respect to whether the keystroke biometrics data correspond to the keystroke biometrics profile for the intended signatory.

18. The non-transitory computer readable medium of claim 15, wherein the electronic signature process further comprises requiring the intended signatory to satisfy a username/password authentication protocol before the second computing device is provided with access to the document.

19. The non-transitory computer readable medium of claim 15, wherein the keystroke biometric profile is stored in a user profile repository.

20. The non-transitory computer readable medium of claim 15, wherein the electronic signature process further comprises updating a status of the document in an audit data repository.