Database systems and methods for securely sharing a record within a conversation

Patent metadata

Field	Value
Publication number	US-12430454-B2
Application number	US-202117456927-A
Country	US
Kind code	B2
Filing date	Nov 30, 2021
Priority date	Nov 30, 2021
Publication date	Sep 30, 2025
Grant date	Sep 30, 2025

Abstract

Systems and methods are provided for securely sharing database records in the context of a conversation at a communication platform using a secure sharing service. The secure sharing service identifies an external system user identifier for a participant in the conversation at the communication platform using an identifier associated with the participant at the communication platform, identifies permissions associated with the data record at the external system, and identifies a subset of fields of the data record viewable by the participant using the external system user identifier. The secure sharing service obtains values for the identified subset of fields of the data record from the external computing system and automatically generates a shared data record message associated with the conversation at the communication platform that includes the obtained values for the identified subset of fields of the data record.

First claim

What is claimed is:

1. A method of sharing access to a data record at an external system in a conversation at a communication platform, the method comprising:
receiving an indication of the data record to be shared with a message recipient from a participant in the conversation within a graphical user interface (GUI) display comprising a sequence of utterances of the conversation at the communication platform, the conversation including the participant and the message recipient;
identifying a user identifier for the message recipient at the external system using an identifier associated with the message recipient at the communication platform;
identifying field-level permissions associated with the data record at the external system;
identifying a viewable subset of fields of the data record viewable by the message recipient based at least in part on the field-level permissions associated with the data record using the user identifier;
obtaining values for the viewable subset of fields of the data record from the external system;
automatically generating a shared data record message associated with the conversation at the communication platform, wherein the shared data record message comprises the values retrieved from the external system for only the viewable subset of fields of the data record obtained from the external system that the message recipient would be allowed to view if the message recipient were logged into the external system to view the data record at the external system; and
displaying the shared data record message including the values retrieved from the external system for only the viewable subset of fields of the data record within the GUI display as an utterance by the participant within the sequence of utterances of the conversation.

2. The method of claim 1 , further comprising identifying a second user identifier at the external system for the participant in the conversation using a second identifier associated with the participant at the communication platform, wherein identifying the viewable subset of fields comprises:
identifying a first subset of fields of the data record viewable by the message recipient based on the field-level permissions associated with the data record using the user identifier;
identifying a second subset of fields of the data record viewable by the participant based on the field-level permissions associated with the data record using the second user identifier; and
identifying the viewable subset of fields of the data record that are common to both the first subset and the second subset.

3. The method of claim 2 , wherein:
obtaining the values for the viewable subset of fields comprises retrieving, from the external system over a communications network, the values for the viewable subset of fields of the data record that are common to both the first subset of fields of the data record viewable by the message recipient and the second subset of fields of the data record viewable by the participant; and
automatically generating the shared data record message comprises automatically generating the shared data record message including the values retrieved for the viewable subset of fields of the data record within the conversation at the communication platform.

4. The method of claim 1 , further comprising automatically removing the shared data record message from the conversation at the communication platform in response to a change to the field-level permissions associated with the data record at the external system.

5. The method of claim 1 , further comprising automatically removing the shared data record message from the conversation at the communication platform in response to a change to the field-level permissions associated with the user identifier for the message recipient at the external system.

6. The method of claim 1 , wherein automatically generating the shared data record message comprises:
automatically generating a selectable graphical user interface element for viewing the data record within the conversation at the communication platform; and
in response to selection of the selectable graphical user interface element, automatically generating the shared data record message including the values for the viewable subset of fields of the data record obtained from the external system within the conversation at the communication platform.

7. The method of claim 6 , further comprising automatically removing the shared data record message including the values for the viewable subset of fields of the data record obtained from the external system from the conversation at the communication platform after a threshold duration of time.

8. The method of claim 6 , wherein automatically generating the shared data record message comprises automatically generating a user-specific shared data record message for the message recipient in response to selection of the selectable graphical user interface element by the message recipient.

9. The method of claim 1 , wherein identifying the user identifier comprises mapping the identifier associated with the message recipient at the communication platform to the user identifier for the message recipient at the external system using user identification mapping data.

10. The method of claim 1 , wherein identifying the user identifier comprises automatically assigning a guest user identifier at the external system to the message recipient in the absence of an existing user identifier for the participant at the external system.

11. A non-transitory machine-readable storage medium that provides instructions that, when executed by a processor, are configurable to cause said processor to perform operations comprising:
receiving an indication of a shared data record to be shared with a message recipient from a participant in a conversation within a graphical user interface (GUI) display comprising a sequence of utterances of the conversation at a communication platform, the conversation including the participant and the message recipient;
identifying an external computing system user identifier for the message recipient in the conversation at the communication platform using a communication platform user identifier associated with the message recipient;
identifying field-level permissions associated with the shared data record at an external computing system;
identifying a viewable subset of fields of the shared data record that are viewable by the message recipient based at least in part on the field-level permissions associated with the shared data record using the external computing system user identifier;
obtaining values for the viewable subset of fields of the shared data record from the external computing system over a communications network;
automatically generating a shared data record message within the conversation at the communication platform, wherein the shared data record message includes the values for only the viewable subset of fields of the shared data record obtained from the external computing system that the message recipient would be allowed to view if the message recipient were logged into the external computing system to view the shared data record at the external computing system; and
displaying the shared data record message including the values retrieved from the external computing system for only the viewable subset of fields of the shared data record within the GUI display as an utterance by the participant within the sequence of utterances of the conversation.

12. The non-transitory machine-readable storage medium of claim 11 , wherein the instructions are configurable to cause said processor to:
identify a second external computing system user identi

Assignees

• Salesforce Com Inc
• Salesforce Inc

Inventors

• Shah Mihirkumar

Classifications

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/6209 Primary

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title