# US 10,313,264 B2 · Sharing account data between different interfaces to a service > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,264 B2 - Document ID: US10313264B2 - Status: Granted - Kind: B2 - Application number: 14/289,619 - Filed: 2014-05-28 - Published: 2015-12-03 - Granted: 2019-06-04 - Earliest claimed: 2014-05-28 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: Andrew R. Whalley; Bob Bradley; Kenneth C. McLeod - Web page: https://patentgrep.com/patent/US10313264B2 ## CPC - H04L 47/803: {Application aware} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/53: using third party service providers - H04W 4/00: Services specially adapted for wireless communication networks; Facilities therefor - H04W 12/08: Access security - H04W 12/086: using security domains - H04W 12/12: Detection or prevention of fraud - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Some embodiments provide a method for an electronic device. The method stores user data associated with a web-based third party service based on user interaction with a web domain for the third party service through a web browser. The method receives a request from a service-specific application to utilize the user data stored for the third party service. The method provides the user data to the application only when the application is verified by the web domain for receiving user data associated with the third party service. ## Claims ### Claim 1 A method comprising: upon installation of a service-specific application on an electronic device, identifying a list of web domains associated with the service-specific application, the list including a web domain for a web-based third party service; storing, on the electronic device, user data associated with the web-based third party service, the user data resulting from user interaction with the web domain for the web-based third party service through a web browser; receiving a request from the service-specific application executing on the electronic device to utilize the user data stored for the web-based third party service on the electronic device, the service-specific application having been downloaded from a server that is separate from the web domain for the web-based third party service; and providing the user data to the service-specific application executing on the electronic device only when the web domain has verified the service-specific application as allowed to receive user data associated with the web-based third party service based at least in part on the service-specific application being included on a list of applications obtained from the web domain. ### Claim 2 (depends on 1) The method of claim 1, wherein the user data comprises a password for logging into the web-based third party service. ### Claim 3 (depends on 1) The method of claim 1, wherein the user data comprises data indicating content accessed on the web-based third party service and progress through the content. ### Claim 4 (depends on 3) The method of claim 3, wherein the service-specific application uses the user data to continue accessing the content at a point in the content based on the data indicating the progress through the content. ### Claim 5 (depends on 1) The method of claim 1, wherein the stored user data is tagged with information indicating the web domain. ### Claim 6 (depends on 1) The method of claim 1, further comprising, prior to receiving the request from the service-specific application: sending a request from the electronic device to the web domain for the list of applications allowed to access user data for the web-based third party service; and obtaining, responsive to the request, the list of applications allowed to access user data for the web-based third party service. ### Claim 7 (depends on 1) The method of claim 1, further comprising storing a record in a database to indicate verification of the service-specific application and the web domain to share user data. ### Claim 8 (depends on 1) The method of claim 1, wherein the electronic device is a mobile device. ### Claim 9 (depends on 1) The method of claim 1, wherein the electronic device is a first electronic device, wherein the user interaction with the web domain occurs on a second, different electronic device. ### Claim 10 (depends on 9) The method of claim 9, wherein the first electronic device and second electronic device share user data through a cloud services account. ### Claim 11 (depends on 1) The method of claim 1, further comprising: storing, on the electronic device, user data associated with the web-based third party service resulting from user interaction with the web-based third party service through the service-specific application; receiving a request from the web browser to utilize the user data stored for the web-based third party service; and providing the user data to the web browser only when the service-specific application has verified the web domain to receive user data associated with the web-based third party service. ### Claim 12 (depends on 11) The method of claim 11, wherein the web domain and service-specific application verify each other. ### Claim 13 A non-transitory machine readable medium storing a program for execution by at least one processing unit of an electronic device, the program comprising sets of instructions for: upon installation of a service-specific application on the electronic device, identifying a list of web domains associated with the service-specific application, the list including a web domain for a web-based third party service; storing, on the electronic device, user data associated with the web-based third party service, the user data resulting from user interaction with the web domain for the web-based third party service through a web browser; receiving a request from the service-specific application executing on the electronic device to utilize the user data stored for the web-based third party service, wherein the service-specific application executes on the electronic device independent of the web browser; and providing the user data to the service-specific application executing on the electronic device only when the web domain has verified the service-specific application as allowed to receive user data associated with the web-based third party service based at least in part on the service-specific application being included on a list of applications obtained from the web domain. ### Claim 14 (depends on 13) The machine readable medium of claim 13, wherein the user data comprises a password for logging into the web-based third party service. ### Claim 15 (depends on 13) The machine readable medium of claim 13, wherein the user data comprises data indicating content accessed on the web-based third party service and progress through the content. ### Claim 16 (depends on 13) The machine readable medium of claim 13, wherein the program further comprises sets of instructions for: sending a request from the electronic device to the web domain for the list of applications allowed to access user data for the web-based third party service; and obtaining, responsive to the request, the list of applications allowed to access user data for the web-based third party service. ### Claim 17 (depends on 13) The machine readable medium of claim 13, wherein the program further comprises a set of instructions for storing a record in a database to indicate verification of the service-specific application and the web domain to share user data. ### Claim 18 (depends on 13) The machine readable medium of claim 13, wherein the electronic device is a first electronic device, wherein the user interaction with the web domain occurs on a second, different electronic device. ### Claim 19 (depends on 13) The machine readable medium of claim 13, wherein the program further comprises sets of instructions for: storing user data associated with the web-based third party service resulting from user interaction with the web-based third party service through the service-specific application; receiving a request from the web browser to utilize the user data stored for the web-based third party service; and providing the user data to the web browser only when the service-specific application has verified the web domain to receive user data associated with the web-based third party service. ### Claim 20 An electronic device comprising: a set of processing units for executing instructions; and a machine readable medium storing a program for execution by at least one of the processing units, the program comprising sets of instructions for: upon installation of a service-specific application on an electronic device, identifying a list of web domains associated with the service-specific application, the list including a web domain for a web-based third party service; storing, on the electronic device, user data associated with the web-based third party service, the user data resulting from user interaction with the web domain for the web-based third party service through a web browser; receiving a request from the service-specific application executing on the electronic device to utilize the user data stored for the web-based third party service on the electronic device; and providing the user data to the service-specific application executing on the electronic device only when the web domain has verified the service-specific application as allowed to receive user data associated with the web-based third party service, verification being based at least in part on the service-specific application being included on a list of applications obtained from the web domain. ### Claim 21 (depends on 20) The electronic device of claim 20, wherein the stored user data is tagged with information indicating the web domain. ### Claim 22 (depends on 20) The electronic device of claim 20, wherein the electronic device is a first mobile device, and the user interaction with the web domain occurs on a second, different mobile device. ### Claim 23 (depends on 20) The electronic device of claim 20, wherein the user data comprises data indicating content accessed on the web-based third party service and progress through the content. ### Claim 24 (depends on 23) The electronic device of claim 23, wherein the service-specific application uses the user data to continue accessing the content at a point in the content based on the data indicating the progress through the content.