Sharing account data between different interfaces to a service

• US 10,313,264 B2
• Filed: 05/28/2014
• Issued: 06/04/2019
• Est. Priority Date: 05/28/2014
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Whalley, Andrew R., Bradley, Bob, McLeod, Kenneth C.
• Primary Examiner(s): Meky, Moustafa M
• Assistant Examiner(s): Waugh, Thorne E
• Application Number:
  US14/289,619
• Publication Number:
  US 20150350106A1
• Time in Patent Office: 1,833 Days
• Field of Search: 709203-248
• CPC Class Codes: H04L 47/803 Application aware
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor

Abstract

Some embodiments provide a method for an electronic device. The method stores user data associated with a web-based third party service based on user interaction with a web domain for the third party service through a web browser. The method receives a request from a service-specific application to utilize the user data stored for the third party service. The method provides the user data to the application only when the application is verified by the web domain for receiving user data associated with the third party service.

Claims

1. A method comprising:

upon installation of a service-specific application on an electronic device, identifying a list of web domains associated with the service-specific application, the list including a web domain for a web-based third party service;

storing, on the electronic device, user data associated with the web-based third party service, the user data resulting from user interaction with the web domain for the web-based third party service through a web browser;

receiving a request from the service-specific application executing on the electronic device to utilize the user data stored for the web-based third party service on the electronic device, the service-specific application having been downloaded from a server that is separate from the web domain for the web-based third party service; and

providing the user data to the service-specific application executing on the electronic device only when the web domain has verified the service-specific application as allowed to receive user data associated with the web-based third party service based at least in part on the service-specific application being included on a list of applications obtained from the web domain.

2. The method of claim 1, wherein the user data comprises a password for logging into the web-based third party service.

3. The method of claim 1, wherein the user data comprises data indicating content accessed on the web-based third party service and progress through the content.

4. The method of claim 3, wherein the service-specific application uses the user data to continue accessing the content at a point in the content based on the data indicating the progress through the content.

5. The method of claim 1, wherein the stored user data is tagged with information indicating the web domain.

6. The method of claim 1, further comprising, prior to receiving the request from the service-specific application:

sending a request from the electronic device to the web domain for the list of applications allowed to access user data for the web-based third party service; and

obtaining, responsive to the request, the list of applications allowed to access user data for the web-based third party service.

7. The method of claim 1, further comprising storing a record in a database to indicate verification of the service-specific application and the web domain to share user data.

8. The method of claim 1, wherein the electronic device is a mobile device.

9. The method of claim 1, wherein the electronic device is a first electronic device, wherein the user interaction with the web domain occurs on a second, different electronic device.

10. The method of claim 9, wherein the first electronic device and second electronic device share user data through a cloud services account.

11. The method of claim 1, further comprising:

storing, on the electronic device, user data associated with the web-based third party service resulting from user interaction with the web-based third party service through the service-specific application;

receiving a request from the web browser to utilize the user data stored for the web-based third party service; and

providing the user data to the web browser only when the service-specific application has verified the web domain to receive user data associated with the web-based third party service.

12. The method of claim 11, wherein the web domain and service-specific application verify each other.

13. A non-transitory machine readable medium storing a program for execution by at least one processing unit of an electronic device, the program comprising sets of instructions for:

upon installation of a service-specific application on the electronic device, identifying a list of web domains associated with the service-specific application, the list including a web domain for a web-based third party service;

storing, on the electronic device, user data associated with the web-based third party service, the user data resulting from user interaction with the web domain for the web-based third party service through a web browser;

receiving a request from the service-specific application executing on the electronic device to utilize the user data stored for the web-based third party service, wherein the service-specific application executes on the electronic device independent of the web browser; and

providing the user data to the service-specific application executing on the electronic device only when the web domain has verified the service-specific application as allowed to receive user data associated with the web-based third party service based at least in part on the service-specific application being included on a list of applications obtained from the web domain.

14. The machine readable medium of claim 13, wherein the user data comprises a password for logging into the web-based third party service.

15. The machine readable medium of claim 13, wherein the user data comprises data indicating content accessed on the web-based third party service and progress through the content.

16. The machine readable medium of claim 13, wherein the program further comprises sets of instructions for:

sending a request from the electronic device to the web domain for the list of applications allowed to access user data for the web-based third party service; and

obtaining, responsive to the request, the list of applications allowed to access user data for the web-based third party service.

17. The machine readable medium of claim 13, wherein the program further comprises a set of instructions for storing a record in a database to indicate verification of the service-specific application and the web domain to share user data.

18. The machine readable medium of claim 13, wherein the electronic device is a first electronic device, wherein the user interaction with the web domain occurs on a second, different electronic device.

19. The machine readable medium of claim 13, wherein the program further comprises sets of instructions for:

storing user data associated with the web-based third party service resulting from user interaction with the web-based third party service through the service-specific application;

receiving a request from the web browser to utilize the user data stored for the web-based third party service; and

providing the user data to the web browser only when the service-specific application has verified the web domain to receive user data associated with the web-based third party service.

20. An electronic device comprising:

a set of processing units for executing instructions; and

a machine readable medium storing a program for execution by at least one of the processing units, the program comprising sets of instructions for;

upon installation of a service-specific application on an electronic device, identifying a list of web domains associated with the service-specific application, the list including a web domain for a web-based third party service;

storing, on the electronic device, user data associated with the web-based third party service, the user data resulting from user interaction with the web domain for the web-based third party service through a web browser;

receiving a request from the service-specific application executing on the electronic device to utilize the user data stored for the web-based third party service on the electronic device; and

providing the user data to the service-specific application executing on the electronic device only when the web domain has verified the service-specific application as allowed to receive user data associated with the web-based third party service, verification being based at least in part on the service-specific application being included on a list of applications obtained from the web domain.

21. The electronic device of claim 20, wherein the stored user data is tagged with information indicating the web domain.

22. The electronic device of claim 20, wherein the electronic device is a first mobile device, and the user interaction with the web domain occurs on a second, different mobile device.

23. The electronic device of claim 20, wherein the user data comprises data indicating content accessed on the web-based third party service and progress through the content.

24. The electronic device of claim 23, wherein the service-specific application uses the user data to continue accessing the content at a point in the content based on the data indicating the progress through the content.