Patent Application
20200287721
The present disclosure relates generally to signature procurement, and more specifically, to electronic signature procurement as a service.
This section is intended to introduce the reader to various aspects of art that may be related to various aspects of the present disclosure, which are described and/or claimed below. This discussion is believed to be helpful in providing the reader with background information to facilitate a better understanding of the various aspects of the present disclosure. Accordingly, it should be understood that these statements are to be read in this light, and not as admissions of prior art.
Organizations, regardless of size, rely upon access to information technology (IT) and data and services for their continued operation and success. A respective organization's IT infrastructure may have associated hardware resources (e.g. computing devices, load balancers, firewalls, switches, etc.) and software resources (e.g. productivity software, database applications, custom applications, and so forth). Over time, more and more organizations have turned to cloud computing approaches to supplement or enhance their IT infrastructure solutions.
Cloud computing relates to the sharing of computing resources that are generally accessed via the Internet. In particular, a cloud computing infrastructure allows users, such as individuals and/or enterprises, to access a shared pool of computing resources, such as servers, storage devices, networks, applications, and/or other computing based services. By doing so, users are able to access computing resources on demand that are located at remote locations, which resources may be used to perform a variety of computing functions (e.g., storing and/or processing large quantities of computing data). For enterprise and other organization users, cloud computing provides flexibility in accessing cloud computing resources without accruing large up-front costs, such as purchasing expensive network equipment or investing large amounts of time in establishing a private network infrastructure. Instead, by utilizing cloud computing resources, users are able redirect their resources to focus on their enterprise's core functions.
In modern communication networks, examples of cloud computing services a user may utilize include so-called infrastructure as a service (IaaS), software as a service (SaaS), and platform as a service (PaaS) technologies. IaaS is a model in which providers abstract away the complexity of hardware infrastructure and provide rapid, simplified provisioning of virtual servers and storage, giving enterprises access to computing capacity on demand. In such an approach, however, a user may be left to install and maintain platform components and applications. SaaS is a delivery model that provides software as a service rather than an end product. Instead of utilizing a local network or individual software installations, software is typically licensed on a subscription basis, hosted on a remote machine, and accessed by client customers as needed. For example, users are generally able to access a variety of enterprise and/or information technology (IT)-related software via a web browser. PaaS acts as an extension of SaaS that goes beyond providing software services by offering customizability and expandability features to meet a user's needs. For example, PaaS can provide a cloud-based developmental platform for users to develop, modify, and/or customize applications and/or automating enterprise operations without maintaining network infrastructure and/or allocating computing resources normally associated with these functions. Certain systems may provide for electronic signature by an entity, for example for verification of approval of certain processes by the entity, for record keeping, and so on. It may be useful to improve electronic signature systems.
A summary of certain embodiments disclosed herein is set forth below. It should be understood that these aspects are presented merely to provide the reader with a brief summary of these certain embodiments and that these aspects are not intended to limit the scope of this disclosure. Indeed, this disclosure may encompass a variety of aspects that may not be set forth below.
The electronic signature techniques described herein may include enabling the creation of an electronic signature via an electronic signature interface when using the cloud-based resources, such as the Flow Designer objects. For example, certain flows, such as human resource flows, may benefit from processes that include electronically signing off on one or more documents. Accordingly, a Flow Designer system may include various development “spokes” to develop process flows and a signature “spoke” or interface to provide signature services as part of the process flows.
In certain embodiments, the signature interface may provide for authentication via services such as OAuth services. The OAuth services may provide for token-based authentication and authorization over an internet connection. For example, a user's account information may be used by a third party signature spoke to sign a document without exposing the user's password. OAuth techniques may provide for an access token to authorize sharing of certain information, such as signature related information. Signature events may be provided as envelope events and recipient events. For example, envelope events may include sending an envelope, delivering an envelope, signing an envelope, declining an envelope, and voiding an envelope. Recipient events may include sending to a recipient, a recipient delivery failure event, a recipient delivery event, and a recipient signing event.
Signature account and credential discovery may also be provided. For example, electronic signature templates may be discovered and used when authoring Flow Designer system flows. In certain embodiments, the flows may be used to create flows that include embedded signatures on a document. However, if a non-embedded approach is desired, the techniques described herein may send, e.g., via email a document directly to a recipient for signature. The recipient may then sign the documents, and an event may trigger, acknowledging the signing of the document. An example flow for human resource purposes may include a hiring manager initiating a request for an offer to a candidate by inputting data into certain fields in a document provided by via the flow. The hiring manager may review the request and modify values in the document's fields as desired, and then approve the offer. The offer may then be transmitted to a recipient, e.g., the candidate. The candidate may then review the offer, modify certain fields such as an employment start date, and then electronically sign the offer. The signed document may then be saved in a cloned database and returned to certain users, for example, for further approval based on the start date entry set by the candidate. In this manner, a process, such as a human resources process may be created to include electronic signatures without having to write code. That is, the Flow Designer system may enable the creation of flows without having to type computer code or instructions.
Various refinements of the features noted above may exist in relation to various aspects of the present disclosure. Further features may also be incorporated in these various aspects as well. These refinements and additional features may exist individually or in any combination. For instance, various features discussed below in relation to one or more of the illustrated embodiments may be incorporated into any of the above-described aspects of the present disclosure alone or in any combination. The brief summary presented above is intended only to familiarize the reader with certain aspects and contexts of embodiments of the present disclosure without limitation to the claimed subject matter.
Various aspects of this disclosure may be better understood upon reading the following detailed description and upon reference to the drawings in which:
One or more specific embodiments will be described below. In an effort to provide a concise description of these embodiments, not all features of an actual implementation are described in the specification. It should be appreciated that in the development of any such actual implementation, as in any engineering or design project, numerous implementation-specific decisions must be made to achieve the developers' specific goals, such as compliance with system-related and enterprise-related constraints, which may vary from one implementation to another. Moreover, it should be appreciated that such a development effort might be complex and time consuming, but would nevertheless be a routine undertaking of design, fabrication, and manufacture for those of ordinary skill having the benefit of this disclosure.
One or more specific embodiments will be described below. In an effort to provide a concise description of these embodiments, not all features of an actual implementation are described in the specification. It should be appreciated that in the development of any such actual implementation, as in any engineering or design project, numerous implementation-specific decisions must be made to achieve the developers' specific goals, such as compliance with system-related and enterprise-related constraints, which may vary from one implementation to another. Moreover, it should be appreciated that such a development effort might be complex and time consuming, but would nevertheless be a routine undertaking of design, fabrication, and manufacture for those of ordinary skill having the benefit of this disclosure.
As used herein, the term “computing system” refers to an electronic computing device that includes, but is not limited to a computer, virtual machine, virtual container, host, server, laptop, and/or mobile device, or to a plurality of electronic computing devices working together to perform the function described as being performed on or by the computing system. As used herein, the term “medium” refers to one or more non-transitory, computer-readable physical media that together store the contents described as being stored thereon. Embodiments may include non-volatile secondary storage, read-only memory (ROM), and/or random-access memory (RAM). As used herein, the term “application” refers to one or more computing modules, programs, processes, workloads, threads and/or a set of computing instructions executed by a computing system. Example embodiments of an application include software modules, software objects, software instances and/or other types of executable code.
As used herein, the term “electronic signature” may refer to an electronic symbol, electronic sound, or process, attached to or logically associated with a contract or other record and executed or adopted by a person with the intent to sign the record. The electronic signature may be specified by certain regulations, such as the Electronic Signatures in Global and National Commerce Act (ESIGN) Act enacted by the United States on Jun. 30, 2000, as part of 15 United States Code (U.S.C). Chapter 96. Certain systems may create templates for subsequent electronic signing. As used herein, the term “template” may refer to a blueprint document for use in more than one transaction involving one or more electronic signatures. The template may be created and stored, for example, by an electronic signature system provided by DocuSign, Inc., of San Francisco, Calif., U.S.A.
As used herein, the term “flow” may refer to data processing of information (e.g., database records) that may be presented to a user in a flow chart-like view. A flow may have inputs but may not have an output. A flow may include one or more “sub-flows” and/or one or more “Actions.” The flow may also include “triggers” and control logic. A “sub-flow” as used herein may refer to data processing of information (e.g., database records) also presented to the user in a flow chart-like view. Unlike the flow, a sub-flow may have both inputs and outputs. A sub-flow may additionally contain Actions, triggers, control logic and/or other sub-flows. A “trigger” may be “fired” or turned on by a change in certain conditions, such as a change in one or more database records. The trigger may also be “fired” or otherwise turned on via a schedule, e.g., daily, weekly, monthly schedule. “Action” as used herein may include one or more “Steps.” Steps may be self-contained code, such as scripts (e.g., Java, JavaScript code) provided by the manufacturer of the software tools used to create the flows, sub-flows, and the like. Steps may also be provided by users and any other entity. As used herein, the terms “flow objects” may refer to flows, sub-flows, Actions, and Steps.
Present embodiments are directed to providing for the creation, discovery, and/or subsequent use of electronic signatures and/or templates via an electronic signature “spoke.” The electronic signature spoke described herein may enable the creation of both embedded electronic signatures and emailed electronic signatures. For example, an embedded electronic signature request may be part of a form in flow. And emailed electronic signature request may be emailed, for example, during execution of a flow. Regardless of signature request type, once a user electronically signs the document, then the flow may receive a notice (e.g., event notice) that the electronic signature has been captured, and may proceed accordingly.
In certain embodiments, the techniques described herein may include processes useful in authenticating with an electronic signature system (e.g., DocuSign) via techniques such as OAuth2 authentication, as further described below. Once authenticated, an account of the electronic signature system may be queried for existing templates, and templates may be selected for further use by a Flow Designer system to create certain flows. A daemon process may also executed at certain times to synchronize changes to the templates, thus maintaining updates current. By providing for an electronic signature spoke, the techniques described herein may enable a more efficient development of processes, including human resource processes, that incorporate electronic signing of certain documents.
With the preceding in mind, the following figures relate to various types of generalized system architectures or configurations that may be employed to provide services to an organization accessing a cloud-platform, such as may be embodied in a multi-instance or multi-tenant framework on which the present approaches may be employed. Correspondingly, these system and platform examples may also relate to systems and platforms on which the techniques discussed herein may be implemented or otherwise utilized. Turning now to
For the illustrated embodiment,
In
To utilize computing resources within the platform 16, network operators may choose to configure the data centers 18 using a variety of computing infrastructures. In one embodiment, one or more of the data centers 18 are configured using a multi-tenant cloud architecture, such that one of the server instances 26 handles requests from and serves multiple customers. Data centers 18 with multi-tenant cloud architecture commingle and store data from multiple customers, where multiple customer instances are assigned to one of the virtual servers 26. In a multi-tenant cloud architecture, the particular virtual server 26 distinguishes between and segregates data and other information of the various customers. For example, a multi-tenant cloud architecture could assign a particular identifier for each customer in order to identify and segregate the data from each customer. Generally, implementing a multi-tenant cloud architecture may suffer from various drawbacks, such as a failure of a particular one of the server instances 26 causing outages for all customers allocated to the particular server instance.
In another embodiment, one or more of the data centers 18 are configured using a multi-instance cloud architecture to provide every customer its own unique customer instance or instances. For example, a multi-instance cloud architecture could provide each customer instance with its own dedicated application server and dedicated database server. In other examples, the multi-instance cloud architecture could deploy a single physical or virtual server 26 and/or other combinations of physical and/or virtual servers 26, such as one or more dedicated web servers, one or more dedicated application servers, and one or more database servers, for each customer instance. In a multi-instance cloud architecture, multiple customer instances could be installed on one or more respective hardware servers, where each customer instance is allocated certain portions of the physical server resources, such as computing memory, storage, and processing power. By doing so, each customer instance has its own unique software stack that provides the benefit of data isolation, relatively less downtime for customers to access the platform 16, and customer-driven upgrade schedules.
It would be beneficial to enable electronic signatures of client devices 20, 22 via certain processes provided by the data centers 18 and/or the virtual servers 26. Accordingly, an electronic signature system 28 may be provided to be used in processes that provide for user signing of certain documents, forms, and the like. In one embodiment, the electronic signature system 28 may be available from DocuSign, Inc., of San Francisco, Calif., USA. The electronic signature system 38 may be communicatively and/or operatively coupled to an electronic signature spoke or interface system 30. The electronic signature spoke 30 may provide, for example, for integration of the electronic signature system 28 into certain systems executing in the servers 18, 26, and/or processing data from the servers 18, 26, such as Flow Designer systems, as further described below.
In the depicted embodiment, the electronic signature spoke 30 may provide for electronic signatures as a service. That is, the electronic signature spoke 30 may enable flows created, for example by a Flow Designer system 112, to operatively couple with the electronic signature system 28. The flows may then provide for electronic signing of a variety of documents, forms, and so on. In the depicted example, the virtual servers 26 and/or the virtual database servers 104 include or are operatively coupled to the electronic signature spoke 30 and to the Flow Designer system 112. Automation processes (e.g., flows) created by the Flow Designer system 112 as further described below may be created and/or used by a user authenticated by the electronic signature system 30, the virtual servers 26 and/or the virtual database servers 104. Further, software development activities, e.g., objects created via the Flow Designer system 112 may be created without resorting to typing in computer code.
The electronic signature system 28 may include one or more user accounts 32. Each user account 32 may create one or more templates 34 having one or more electronic signatures fields. Certain processes, such as a daemon process, a chron process, and the like, may continuously (or at a desired schedule) check for updates in the templates 34 to synchronize changes in the templates 34 with the electronic signature spoke 30. Accordingly, a more efficient creation and execution of automation processes that include electronic signatures may be provided by the techniques described herein.
Although
As may be appreciated, the respective architectures and frameworks discussed with respect to
With this in mind, and by way of background, it may be appreciated that the present approach may be implemented using one or more processor-based systems such as shown in
With this in mind, an example computer system may include some or all of the computer components depicted in
The one or more processors 202 may include one or more microprocessors capable of performing instructions stored in the memory 206. Additionally or alternatively, the one or more processors 202 may include application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), and/or other devices designed to perform some or all of the functions discussed herein without calling instructions from the memory 206.
With respect to other components, the one or more busses 204 includes suitable electrical channels to provide data and/or power between the various components of the computing system 200. The memory 206 may include any tangible, non-transitory, and computer-readable storage media. Although shown as a single block in
It may be beneficial to describe certain computing resources that may be provided once the user has been authenticated via the multifactor authentication techniques described herein. Turning now to
Once a user account 32 is authenticated (e.g., via OAuth2 authentication as further described below), then the user account 32 may be used to interface with and use the Flow Designer system 112. It is to be understood that the Flow Designer system 112 as depicted is an example only and may be included in or implemented using one or more of the virtual servers 26, the virtual DB servers 104, or a combination thereof. In the depicted embodiment, the Flow Designer system 112 includes a flow designer GUI 302, e.g., a visual information flow creation tool. The flow designer GUI 302 may provide for visual programming via natural languages as opposed to entering text representative of a computer program. The flow designer GUI 302 may include executable code or computer instructions suitable for creating, managing, accessing, and/or editing the flow objects 300. In the depicted embodiment, a single flow 301 is shown in the flow objects 300. It is to be understood that more than one flow may be provided in the flow objects 300.
The flow 301 may include a trigger 304 which may be “fired” or otherwise turned on by certain changed condition, such as a change in one or more records stored in a database (e.g., stored in the virtual DB servers 104). The trigger 304 may additionally be “fired” periodically, for example, as part of a schedule (e.g., hourly schedule, daily schedule, weekly schedule, monthly schedule, and so on). The trigger 304 may thus be used to initiate execution of other flow objects 300, such as sub-flow 306, Action 308, Action 310, and sub-flow 312.
In the depicted embodiment, the trigger 304 initiates execution of the sub-flow 306. The sub-flow 306 may include Actions, control logic (e.g., Boolean logic, branching logic, termination logic), other sub-flows, and so on. The sub-flow 306 may additionally take in inputs and provide outputs. For example, output of the sub-flow 306 may be used as input to the Action 308. The Action 308 may use the inputs provided to execute Steps 314, 316. The Action 308 may also include control logic. Steps, such as the Steps 314, 316, and may be self-contained code, such as scripts (e.g., Java, JavaScript code) provided by the manufacturer of the flow designer system 112. As an example, the Flow Designer system 112 may be provided by ServiceNow™ Inc., of Santa Clara, Calif., U.S.A., under the name Flow Designer™. The Steps 314, 316 may be additionally or alternatively provided by other third parties and/or coded by certain users, such as IT users.
Steps may include any number of functionality, such as requesting approval from other users of the servers 26, 104, creating records in a database table, editing the record in the database table, deleting the records in the database table, creating server tasks, logging messages, looking up database information, notifying of certain events (e.g., incidents, change requests, problems, changes to user records), executing scripts, such as JavaScript, sending email, waiting for a condition to occur, and so on. Action 310 may execute following Action 308. In turn, Action 310 may include Steps 318, 320, and upon completion of Step 320, sub-flow 312 may be executed. Once sub-flow 312 finishes execution, the flow 301 finishes. Flows, such as the flow 301, may not have outputs. The flows may be executable from external clients, such as a clients coupled to the client network 12 shown in
The Actions 308, 310 may include electronic signatures techniques. That is, the Actions 308 and/or 310 may include documents, forms, and so on, including templates 34 and/or documents or forms based on the templates 34, that have one or more fields for electronic signing. The Actions 308 and/or 310 may also provide for user management of the accounts 32, and actions (e.g., query actions) for interacting with documents, templates 34, variables, and so on. The Actions 308 and/or 310 may also include or be operatively coupled to triggers (e.g., event triggers) to send electronic signature requests, set field actions, and so on. The Actions 308 and/or 310 may additionally retrieved and store signed documents in the servers 26, 104.
In the depicted embodiment, the graphical flow view 402 may start execution via a trigger 404. More specifically, if a certain user record is updated, then the trigger 404 may “fire” and execute Action 406. The Action 406 may then retrieve a set of tasks assigned to the updated user that have an open state. The retrieved tasks may then be further process via a “Do . . . Until” control logic. More specifically, a Do logic 408 may execute one or more Actions, such as Action 410, until the “Until” control logic 410 has its conditions met. More sub-flows and/or Actions may be added, for example, via the “+” control 414. As shown, natural language and visual composition via the flow designer 302 may be used to enable the creation of executable flow objects 300. The flow objects 300 may then be reused by clients connected to the network 12.
Turning now to
That is, a user may configure (block 502) certain connection information suitable for connecting to the electronic signature system 28 (e.g., DocuSign connection information) and for authenticating into the electronic signature system 28 (e.g., DocuSign service integration authentication information and/or user authentication information). The connection and authentication information 504 may then be securely stored by the electronic signature spoke 30 for subsequent use.
In one example, the connection and authentication information 504 may be used to query all templates 34 belonging, for example, to a user. One or more of the templates 34 may then be used to configure (block 506) a Flow Designer Action. For example, each template 34 may include documents, document fields, information about the sender, security and authentication information, and so on, that may be configured. The templates 34 may be reused, for example, by changing recipient information. Configuring (block 506) the Flow Designer Action may also include configuring an envelope 508. The envelope 508 may include similar information as a template 34 but may be designed for a one-time use as opposed to reuse. Accordingly, the envelope 308 may include documents, document fields, information about the sender, security and authentication information, recipient information, and so on, that may be configured.
Configuring (block 506) the template 34 and/or the envelope 508 for use in the Flow Designer Action may include creating the template 34 and/or the envelope 508, for example, in the electronic signature system 28. Once created, configuring (block 506) the Action may include specifying how the Action will enter certain information into the template 34 and/or the envelope 508, for example, during execution of the action. The information to be entered into the template 34 and/or the envelope 508 may include editable field information, tab information, role information (e.g., user role information), variables, and the like, that may be inserted into the template 34 and/or the envelope 508 during execution of the Action. For example, as the Action executes, certain variables may be calculated, and the variables inserted into the template 34 and/or the envelope 508.
Certain trigger information 510 may also be configured (block 506). For example, webhooks may be configured to receive status information from the electronic signature system 28 as a recipient receives documents and the like for signature, signs documents, and so on. The webhook may provide for callbacks from the electronic signature system 28, such as REST APIs that then update certain tables, objects, and so on, once an event, such as a signing event, has occurred.
During operations, the Action may be executed (block 512) as part of a Flow Designer Flow and/or subflow. The Action may derive certain variables, editable field data, tab information, role information (e.g., user role information), and the like, and insert (or update) the information into the template 34 and/or envelope 508. Likewise, certain triggers 510 may occur, such as a signing event, a receipt of a document event, and so on, during the execution (block 512) of the Action. The process 500 may then process (block 514) signature events, for example, as recipients receive documents for signature, as signatures occur, as signed documents are routed to other parties, and so on. The event processing (block 514) may include updating tables, objects, routing information, notifying certain users of events, and so on, as per Flow/subflow design.
In the depicted embodiment a daemon and/or chron process may execute (block 516) either continuously or at certain times to update changes to the templates 43. For example, a user may add the template 34, remove the template 34, edit a field in the template 34, and so on. When a change is detected (block 516), the process 500 may, for example, reconfigure (block 506) the Flow Designer Action to account for the change. By providing for visual Flow/subflow creation and integration with the electronic signature system 28, the techniques described herein may improve automated processes that include electronic signatures.
Turning now to
An account information 554 may be used to access Actions, Flows and/or subflows 556 that incorporate electronic signature processing. The Actions, Flows and/or subflows 556 may, during execution, access and/or update a set of electronic signature tables 558. For example, recipients may be tracked, status of signatures (unsigned, signed) may be updated, account 32, template 34, and/or envelope 560 information may be updated, and so on. As mentioned above, connection and authentication (e.g., credential) information 504 may be configured and used to work with the templates 34 and/or envelopes 560 accessible via the accounts 32. It is to be noted that in certain embodiments, the tables 558 may be stored in the servers 26, 104.
OAuth (e.g. OAuth2) and/or JWT may be used to authenticate with and interact with the electronic signature system 28 (e.g., DocuSign system). For example, a REST 562 API may use OAuth2 to interface with the electronic signature system 28 during operations. Webhooks may be used to create, for example, asynchronous callbacks 564. The callbacks 564 may execute, for example, a scripted REST API 566 when changes in envelope 560 status occur, changes in recipients occur, changes in templates 34 and so on. The scripted REST API 566 may then query and/or update the tables 558 based on the asynchronous callbacks 564.
The techniques presented and claimed herein are referenced and applied to material objects and concrete examples of a practical nature that demonstrably improve the present technical field and, as such, are not abstract, intangible or purely theoretical. Further, if any claims appended to the end of this specification contain one or more elements designated as “means for [perform]ing [a function] . . . ” or “step for [perform]ing [a function] . . . ”, it is intended that such elements are to be interpreted under 35 U.S.C. 112(f). However, for any claims containing elements designated in any other manner, it is intended that such elements are not to be interpreted under 35 U.S.C. 112(f).
