Obtaining trusted e-signatures
Methods, systems, and computer program products for content management systems. Multiple components are operatively interconnected to carry out operations for establishing a user device trust level. A content management system facilitates interactions between a plurality of user devices and a plurality of shared content objects. The plurality of user devices are network connected to the content management system. One of the user devices issues a request to access a particular one of the content objects. Responsive to the request, a two-step device check is performed before granting access to the particular one of the content objects. A first step of the two-step device check process is based on environmental information, and a second step of the two-step device check process is based at least in part on analysis of the content of the particular one of the content objects. The actual bits of the content object itself are inspected.
1 . A method comprising:
receiving, at a content management system, an e-sign event raised in response to an e-sign request from a user device, wherein the content management system facilitates interactions between a plurality of user devices and a plurality of content objects, the content management system performs acts to determine whether to allow or deny access to individual content objects of the plurality of content objects by respective user devices, the e-sign request corresponds to a content object of the plurality of content objects, and the content management system is associated with an e-signature system;
forwarding the e-sign event, by the content management system, to the e-signature system to execute a multiple-step e-signature trust process, wherein the e-signature system responds to the e-sign event by executing the multiple-step e-signature trust process comprising:
calculating a device trust value based at least in part on an environmental condition corresponding to the user device by at least accessing one or more first modules of the content management system, wherein the device trust value is dynamically determined based at least in part on a risk profile generated by a third party; and
calculating a content access trust value based at least in part on a sensitivity level of contents of a content object, wherein the content access trust value is determined based on at least inspection of the content object by the content management system; and
performing further processing of the e-sign event based upon a combination of the content access trust value and the device trust value when the combination fails to satisfy an adaptive risk tolerance threshold, wherein the adaptive risk tolerance threshold is based on at least the contents of the content object or its metadata.
2 . The method of claim 1 , wherein the environmental condition comprises at least one of, a device term, a network term, or a user term.
3 . The method of claim 1 , wherein the sensitivity level comprises at least one of, a document classification term, or a likelihood of personally identifiable information term.
4 . The method of claim 1 , wherein performing the further processing of the e-sign event comprises reevaluating results of deep content inspection.
5 . The method of claim 1 , wherein performing the further processing comprises at least one of, performing a multi-factor authentication challenge or accessing third party device risk profiles.
6 . The method of claim 1 , wherein the device trust value dynamically determined based at least in part on the risk profile generated by the third party corresponds to a non-CMS user and the third party maintains third party security risks or historical risk scores.
7 . The method of claim 1 , wherein generating the content access trust value comprises inspection, by the content management system, of stored bits that comprise the content of the content object.
8 . The method of claim 1 , wherein performing the further processing further comprises:
generating a second content access trust value based at least in part on inspection of at least some stored bits that comprise the content of at the least one of the content objects, and
evaluating a second rule that depends on both the device trust value and the second content access trust value.
9 . The method of claim 8 , wherein a filter, or a precedence regime or a priority ranking is applied to determine a particular one from among multiple additional further processing options.
10 . The method of claim 1 , wherein the content object is associated with a security label determined by inspection of stored bits that comprise the contents ofa content object.
11 . A non-transitory computer readable medium having stored thereon a sequence of instructions which, when stored in memory and executed by one or more processors causes the one or more processors to perform a set of acts, the set of acts comprising:
receiving, at a content management system, an e-sign event raised in response to an e-sign request from a user device, wherein the content management system facilitates interactions between a plurality of user devices and a plurality of content objects, the content management system performs acts to determine whether to allow or deny access to individual content objects of the plurality of content objects by respective user devices, the e-sign request corresponds to a content object of the plurality of content objects, and the content management system is associated with an e-signature system;
forwarding the e-sign event, by the content management system, to the e-signature system to execute a multiple-step e-signature trust process, wherein the e-signature system responds to the e-sign event by executing the multiple-step e-signature trust process comprising:
calculating a device trust value based at least in part on an environmental condition corresponding to the user device by at least accessing one or more first modules of the content management system, wherein the device trust value is dynamically determined based at least in part on a risk profile generated by a third party; and
calculating a content access trust value based at least in part on a sensitivity level of contents of a content object, wherein the content access trust value is determined based on at least inspection of the content object by the content management system; and
performing further processing of the e-sign event based upon a combination of the content access trust value and the device trust value when the combination fails to satisfy an adaptive risk tolerance threshold, wherein the adaptive risk tolerance threshold is based on at least the contents of the content object or its metadata.
12 . The non-transitory computer readable medium of claim 11 , wherein the environmental condition comprises at least one of, a device term, a network term, or a user term.
13 . The non-transitory computer readable medium of claim 11 , wherein the sensitivity level comprises at least one of, a document classification term, or a likelihood of personally identifiable information term.
14 . The non-transitory computer readable medium of claim 11 , wherein performing the further processing of the e-sign event comprises reevaluating results of deep content inspection.
15 . The non-transitory computer readable medium of claim 11 , wherein performing the further processing comprises at least one of, performing a multi-factor authentication challenge or accessing third party device risk profiles.
16 . The non-transitory computer readable medium of claim 11 , wherein the device trust value dynamically determined based at least in part on the risk profile generated by the third party corresponds to a non-CMS user and the third party maintains third party security risks or historical risk scores.
17 . The non-transitory computer readable medium of claim 11 , wherein generating the content access trust value comprises inspection, by the content management system, of stored bits that comprise the content of the content object.
18 . The non-transitory computer readable medium of claim 11 , wherein performing the further processing further comprises instructions which, when stored in memory and executed by the one or more processors causes the one or more processors to perform acts of:
generating a second content access trust value based at least in part on inspection of at least some stored bits that comprise the content of at the least one of the content objects, and
evaluating a second rule that depends on both the device trust value and the second content access trust value.
19 . A system comprising:
a storage medium having stored thereon a sequence of instructions; and
one or more processors that execute the sequence of instructions to cause the one or more processors to perform a set of acts, the set of acts comprising,
receiving, at a content management system, an e-sign event raised in response to an e-sign request from a user device, wherein the content management system facilitates interactions between a plurality of user devices and a plurality of content objects, the content management system performs acts to determine whether to allow or deny access to individual content objects of the plurality of content objects by respective user devices, the e-sign request corresponds to a content object of the plurality of content objects, and the content management system is associated with an e-signature system;
forwarding the e-sign event, by the content management system, to the e-signature system to execute a multiple-step e-signature trust process, wherein the e-signature system responds to the e-sign event by executing the multiple-step e-signature trust process comprising:
calculating a device trust value based at least in part on an environmental condition corresponding to the user device by at least accessing one or more first modules of the content management system, wherein the device trust value is dynamically determined based at least in part on a risk profile generated by a third party; and
calculating a content access trust value based at least in part on a sensitivity level of contents of a content object, wherein the content access trust value is determined based on at least inspection of the content object by the content management system; and
performing further processing of the e-sign event based upon a combination of the content access trust value and the device trust value when the combination fails to satisfy an adaptive risk tolerance threshold, wherein the adaptive risk tolerance threshold is based on at least the contents of the content object or its metadata.
20 . The system of claim 19 , wherein the device trust value dynamically determined based at least in part on the risk profile generated by the third party corresponds to a non-CMS user and the third party maintains third party security risks or historical risk scores.