Prosecution Insights
Last updated: April 19, 2026
Application No. 18/829,673

SECURED DATA ACCESS FROM A MOBILE DEVICE EXECUTING A NATIVE MOBILE APPLICATION AND A HEADLESS BROWSER

Non-Final OA §DP
Filed
Sep 10, 2024
Examiner
HUANG, CHENG-FENG
Art Unit
2497
Tech Center
2400 — Computer Networks
Assignee
AppBrilliance, Inc.
OA Round
1 (Non-Final)
87%
Grant Probability
Favorable
1-2
OA Rounds
2y 7m
To Grant
99%
With Interview

Examiner Intelligence

Grants 87% — above average
87%
Career Allow Rate
412 granted / 472 resolved
+29.3% vs TC avg
Strong +18% interview lift
Without
With
+17.8%
Interview Lift
resolved cases with interview
Typical timeline
2y 7m
Avg Prosecution
23 currently pending
Career history
495
Total Applications
across all art units

Statute-Specific Performance

§101
15.0%
-25.0% vs TC avg
§103
40.3%
+0.3% vs TC avg
§102
19.5%
-20.5% vs TC avg
§112
8.9%
-31.1% vs TC avg
Black line = Tech Center average estimate • Based on career data from 472 resolved cases

Office Action

§DP
Notice of Pre-AIA or AIA Status The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA . DETAILED ACTION This is a reply to the application filed on 09/10/2024 with preliminary amendment filed on 09/10/2024, in which, claim(s) 1 is pending. Claim(s) 1 is independent. Claim(s) 2-20 have been canceled. Information Disclosure Statement The information disclosure statement (IDS) submitted on 09/10/2024, 01/17/2025 and 05/05/2025, has been reviewed. The submission is in compliance with the provisions of 37 CFR 1.97. Accordingly, the examiner is considering the information disclosure statement. Drawings The drawings filed on 09/10/2024 are accepted by The Examiner. Claim Objections Claim 1 is objected to because of the following informalities: Claim 1 limitation “initiating a secured connection via the wireless transceiver from the headless browser to a remove server” should be “initiating a secured connection via the wireless transceiver from the headless browser to a remote server”. Please correct the typo. Appropriate correction is required. Double Patenting The nonstatutory double patenting rejection is based on a judicially created doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the unjustified or improper timewise extension of the “right to exclude” granted by a patent and to prevent possible harassment by multiple assignees. A nonstatutory double patenting rejection is appropriate where the claims at issue are not identical, but at least one examined application claim is not patentably distinct from the reference claim(s) because the examined application claim is either anticipated by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 1969). A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) may be used to overcome an actual or provisional rejection based on a nonstatutory double patenting ground provided the reference application or patent either is shown to be commonly owned with this application, or claims an invention made as a result of activities undertaken within the scope of a joint research agreement. A terminal disclaimer must be signed in compliance with 37 CFR 1.321(b). The USPTO internet Web site contains terminal disclaimer forms which may be used. Please visit http://www.uspto.gov/forms/. The filing date of the application will determine what form should be used. A web-based eTerminal Disclaimer may be filled out completely online using web-screens. An eTerminal Disclaimer that meets all requirements is auto-processed and approved immediately upon submission. For more information about eTerminal Disclaimers, refer to http://www.uspto.gov/patents/process/file/efs/guidance/eTD-info-I.jsp. Claim 1 is non-provisionally rejected on the ground of nonstatutory obviousness-type double patenting as being unpatentable over: Claims 1-18 of Patent 10,009,773. Although the conflicting claims are not identical, they are not patentably distinct from each other because claim 1 is anticipated by claims 1-18 of Patent 10,009,773. Claim 1 is non-provisionally rejected on the ground of nonstatutory obviousness-type double patenting as being unpatentable over: Claims 1-19 of Patent 10,785,651. Although the conflicting claims are not identical, they are not patentably distinct from each other because claim 1 is anticipated by claims 1-19 of Patent 10,785,651. Claim 1 is non-provisionally rejected on the ground of nonstatutory obviousness-type double patenting as being unpatentable over: Claim 1 of Patent 11,689,927. Although the conflicting claims are not identical, they are not patentably distinct from each other because claim 1 is anticipated by claims 1 of Patent 11,689,927. Claim 1 is non-provisionally rejected on the ground of nonstatutory obviousness-type double patenting as being unpatentable over: Claims 1-19 of Patent 12,133,076. Although the conflicting claims are not identical, they are not patentably distinct from each other because claim 1 is anticipated by claims 1-19 of Patent 12,133,076. Patent 10,009,773 (15/474,981) Instant Application (18/829,673) Claim 1. A mobile device comprising: a wireless transceiver; a processor; a display device; and a memory storing instructions executable by the processor to perform operations comprising: receiving, at a native application, access credential data; providing the access credential data from the native application to a headless browser, the headless browser comprising a web browser not having a corresponding displayed graphical user interface; initiating a secured connection via the wireless transceiver from the headless browser to a remote server that hosts a website; sending, by the headless browser via the secured connection, the access credential data to the remote server; receiving first web page data of the website from the remote server via the secured connection; parsing the first web page data to identify user-specific data; sending the user-specific data to the native application for display in a graphical user interface at the display device, wherein the graphical user interface of the native application includes information based on virtual application programming interface (API) fingerprint data associated with the website, and wherein the virtual API fingerprint data indicates a change to the website subsequent to a previous connection to the website and that indicates service pathways associated with a log in, an authentication, an operation at the remote server, or a combination thereof; receiving a user command via a user input device; sending, by the headless browser via the secured connection, transaction data to the remote server to modify secured data based on the user command; and receiving, by the headless browser via the secured connection, a confirmation of the modification of the secured data. Claim 1. A mobile device comprising: a wireless transceiver; a processor; a display device; and a memory storing instructions executable by the processor to perform operations comprising: receiving, at a native application access credential data; providing the access credential data from the native application to a headless browser; initiating a secured connection via the wireless transceiver from the headless browser to a remove server that hosts a website, the server supporting access to secured data without relying in an application programming interface; sending, by the headless browser via the secured connection, the access credential data to the remote server; receiving first web page data of the website from the remote server via the secured connection; parsing the first web page data to identify user-specific data; sending the user-specific data to the native application for display in a graphical user interface at the display device; receiving a user command via a user input device; sending, by the headless browser via the secured connection, a request to the remote server to access the secured data based on the user command; and receiving, by the headless browser via the secured connection, at least a portion of the secured data. Patent 10,785,651 (15/981,705) Instant Application (18/829,673) Claim 1. A mobile device comprising: a wireless transceiver; a processor; a display device; and a memory storing instructions executable by the processor to perform operations comprising: receiving, at a native application, access credential data; providing the access credential data from the native application to a headless browser; initiating a secured connection from the headless browser to a remote server that hosts a website, the remote server supporting access to secured data without relying on an application programming interface; sending, by the headless browser via the secured connection, the access credential data to the remote server; receiving first web page data of the website from the remote server via the secured connection; parsing the first web page data to identify user-specific data, wherein identifying the user-specific data comprises accessing a mapping between the native application and the website, and wherein the mapping is determined based on a scraping operation performed on the website, through javascript injection or other supported language interpreted by a web browser, or a combination thereof; sending the user-specific data to the native application for display in a graphical user interface at the display device; receiving a user command via a user input device; sending, by the headless browser via the secured connection, a request to the remote server to access the secured data based on the user command; and receiving, by the headless browser via the secured connection, at least a portion of the secured data Claim 1. A mobile device comprising: a wireless transceiver; a processor; a display device; and a memory storing instructions executable by the processor to perform operations comprising: receiving, at a native application access credential data; providing the access credential data from the native application to a headless browser; initiating a secured connection via the wireless transceiver from the headless browser to a remove server that hosts a website, the server supporting access to secured data without relying in an application programming interface; sending, by the headless browser via the secured connection, the access credential data to the remote server; receiving first web page data of the website from the remote server via the secured connection; parsing the first web page data to identify user-specific data; sending the user-specific data to the native application for display in a graphical user interface at the display device; receiving a user command via a user input device; sending, by the headless browser via the secured connection, a request to the remote server to access the secured data based on the user command; and receiving, by the headless browser via the secured connection, at least a portion of the secured data. Patent 11,689,927 (17/018,388) Instant Application (18/829,673) Claim 1. A mobile device comprising: a wireless transceiver: a processor; a display device; and a memory storing instructions executable by the processor to perform operations comprising: retrieving, at a native application, in an insecure medium, access credential data in encrypted form; communicating with a remote server to receive decryption keys in a secure way; receiving instructions from the remote server that used encryption keys need to be rotated; communicating with the remote server to receive new encryption keys; securely decrypting the access credential data at the native application; securely encrypting the access credential data at the native application using the new encryption keys; storing the encrypted access credential data in the insecure medium replacing the existing access credential data, and deleting the new encryption keys; providing the decrypted access credential data from the native application to a headless browser; initiating a secured connection via the wireless transceiver from the headless browser to a remote server that hosts a website, the remote server supporting access to secured data without relying on an application programming interface; sending, by the headless browser and via the secured connection, the access credential data to the remote server; receiving first web page data of the website from the remote server via the secured connection; parsing the first web page data to identify user-specific data; sending the user-specific data to the native application for display in a graphical user interface at, the display device; receiving a user command via a user input device; sending, by the headless browser and via the secured connection, a request to the remote server to access the secured data based on the user command; and receiving, by the headless browser and via the secured connection, at least a portion of the secured data. Claim 1. A mobile device comprising: a wireless transceiver; a processor; a display device; and a memory storing instructions executable by the processor to perform operations comprising: receiving, at a native application access credential data; providing the access credential data from the native application to a headless browser; initiating a secured connection via the wireless transceiver from the headless browser to a remove server that hosts a website, the server supporting access to secured data without relying in an application programming interface; sending, by the headless browser via the secured connection, the access credential data to the remote server; receiving first web page data of the website from the remote server via the secured connection; parsing the first web page data to identify user-specific data; sending the user-specific data to the native application for display in a graphical user interface at the display device; receiving a user command via a user input device; sending, by the headless browser via the secured connection, a request to the remote server to access the secured data based on the user command; and receiving, by the headless browser via the secured connection, at least a portion of the secured data. Patent 12,133,076 (18/195,470) Instant Application (18/829,673) Claim 1. A mobile device comprising: a wireless transceiver: a processor; a display device; and memory storing instructions executable by the processor to perform operations comprising: receiving, at a native application and via the wireless transceiver, access credential data; providing the access credential data from the native application to a headless browser running on the processor; initiating a secured connection from the headless browser to a remote server that hosts a website, the remote server supporting access to secured data; sending, by the headless browser via the secured connection, the access credential data to the remote server; receiving first web page data of the website from the remote server via the secured connection; parsing the first web page data to identify user-specific data, wherein identifying the user-specific data comprises accessing a mapping between the native application and the website, and the mapping is determined based on a scraping operation performed on the website, through a supported language interpreted by a web browser; sending the user-specific data to the native application for display in a graphical user interface on the display device; receiving a user command via a user input device on the mobile device; sending, by the headless browser and via the secured connection, a request to the remote server to access the secured data based on the user command; and receiving, by the headless browser via the secured connection, at least a portion of the secured data. Claim 1. A mobile device comprising: a wireless transceiver; a processor; a display device; and a memory storing instructions executable by the processor to perform operations comprising: receiving, at a native application access credential data; providing the access credential data from the native application to a headless browser; initiating a secured connection via the wireless transceiver from the headless browser to a remove server that hosts a website, the server supporting access to secured data without relying in an application programming interface; sending, by the headless browser via the secured connection, the access credential data to the remote server; receiving first web page data of the website from the remote server via the secured connection; parsing the first web page data to identify user-specific data; sending the user-specific data to the native application for display in a graphical user interface at the display device; receiving a user command via a user input device; sending, by the headless browser via the secured connection, a request to the remote server to access the secured data based on the user command; and receiving, by the headless browser via the secured connection, at least a portion of the secured data. Allowable Subject Matter Claim 1 would be allowable if the Applicant overcomes double patenting rejection issued in this office action by filing a valid eTD. Independent Claim(s) and their respective dependent claims would be allowable over prior arts since the prior arts taken individually or in combination fails to particular discloses, fairly suggest or render obvious the following italic limitations: In claim 1: “initiating a secured connection via the wireless transceiver from the headless browser to a remove server that hosts a website, the server supporting access to secured data without relying in an application programming interface; parsing the first web page data to identify user-specific data; sending the user-specific data to the native application for display in a graphical user interface on the display device; receiving a user command via a user input device; sending, by the headless browser and via the secured connection, a request to the remote server to access the secured data based on the user command; and receiving, by the headless browser via the secured connection, at least a portion of the secured data” in combination with other limitations recited as specified in the independent claim(s). Conclusion Any inquiry concerning this communication or earlier communications from the examiner should be directed to CHENG-FENG HUANG whose telephone number is (571)272-6186. The examiner can normally be reached Monday-Friday: 9 am - 5 pm. Examiner interviews are available via telephone, in-person, and video conferencing using a USPTO supplied web-based collaboration tool. To schedule an interview, applicant is encouraged to use the USPTO Automated Interview Request (AIR) at http://www.uspto.gov/interviewpractice. If attempts to reach the examiner by telephone are unsuccessful, the examiner’s supervisor, Eleni A Shiferaw can be reached on (571) 272-3867. The fax phone number for the organization where this application or proceeding is assigned is 571-273-8300. Information regarding the status of published or unpublished applications may be obtained from Patent Center. Unpublished application information in Patent Center is available to registered users. To file and manage patent submissions in Patent Center, visit: https://patentcenter.uspto.gov. Visit https://www.uspto.gov/patents/apply/patent-center for more information about Patent Center and https://www.uspto.gov/patents/docx for information about filing in DOCX format. For additional questions, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. /CHENG-FENG HUANG/Primary Examiner, Art Unit 2497
Read full office action

Prosecution Timeline

Sep 10, 2024
Application Filed
Feb 21, 2026
Non-Final Rejection — §DP (current)

Precedent Cases

Applications granted by this same examiner with similar technology

Patent 12602495
AUTHENTICATION INFORMATION TRANSMISSION DEVICE USING INAUDIBLE SOUND WAVE COMMUNICATION
2y 5m to grant Granted Apr 14, 2026
Patent 12603780
SYSTEM AND METHOD FOR MANAGING AN OPERATING SYSTEM USING TOKENIZED IDENTITY
2y 5m to grant Granted Apr 14, 2026
Patent 12598161
EXTENDING A TRUST BOUNDARY BETWEEN CLOUD DOMAINS OF THE SAME ENTITY
2y 5m to grant Granted Apr 07, 2026
Patent 12598076
Method for deriving a partial signature with partial verification
2y 5m to grant Granted Apr 07, 2026
Patent 12598197
SYSTEM AND METHODS FOR DETECTING AUTHENTICATION OBJECT FORGERY OR MANIPULATION ATTACKS
2y 5m to grant Granted Apr 07, 2026
Study what changed to get past this examiner. Based on 5 most recent grants.

AI Strategy Recommendation

Get an AI-powered prosecution strategy using examiner precedents, rejection analysis, and claim mapping.
Powered by AI — typically takes 5-10 seconds

Prosecution Projections

1-2
Expected OA Rounds
87%
Grant Probability
99%
With Interview (+17.8%)
2y 7m
Median Time to Grant
Low
PTA Risk
Based on 472 resolved cases by this examiner. Grant probability derived from career allow rate.

Sign in with your work email

Enter your email to receive a magic link. No password needed.

Personal email addresses (Gmail, Yahoo, etc.) are not accepted.

Free tier: 3 strategy analyses per month