• Crowdstrike, Inc. v. Gosecure, Inc.Some claims unpatentable
  PTAB · Aug 12, 2026 · IPR2025-00070 · APJ Neil T Powell · IPR · Final written decision

  Claims 1, 3–7, and 9–21 are unpatentable as obvious; claims 2 and 8 were not shown unpatentable because the asserted art did not meet their construed limitations.

  RulingsFinal written decision

  • Skill levelSkill level petitioner adoptedDecided for petitioner

    “III. ANALYSIS LEVEL OF ORDINARY SKILL A. Petitioner explains the applicable level of skill in the art as follows: As of June 24, 2010, a person of ordinary skill in the art (POSITA) would be a person having a bachelor’s degree in computer science, computer engineering, or an equivalent, as well as two years of industry experience and who would have had a working knowledge of software security analysis, and dynamic malware analysis. Additional graduate education could substitute for professional experience, or significant experience in the field could substitute for formal education. Pet. 8 (Ex. 1003 ¶¶ 30–31). Patent Owner does not dispute Petitioner’s explanation of the level of skill in the art. See Ex. 2031 ¶¶ 15–16. We adopt Petitioner’s uncontested proposed level of ordinary skill in the art, which we find consistent with the level of ordinary skill in the art reflected by the ’872 patent and the prior art of record. See Okajima v.” slip op. at 12

  • Claim Construction › Intrinsic evidence (Phillips canons) › Plain and ordinary meaning to a POSITATerm construed petitioner constructionDecided for petitioner

    “We begin with the claim language in view of the Specification, which weighs heavily against Patent Owner’s position that we should rewrite “computer system” as narrowly referring to a “computing device.” PO Resp. 24. As Petitioner notes, the ’872 patent’s Specification uses “computer system” to refer to a wide range of equipment, from a component of a computing device, to a whole computing device, to a collection of computing devices. Reply 9–10 (citing Ex. 1001, 4:5–8, 11:15–18, 16:50–55). In one example, the Specification refers to “one or more other computer systems (e.g., protected network devices 136).” Ex. 1001, 18:52–53. Thus, the Specification lists “protected network devices 136” as only an example of “other computer systems,” demonstrating that “computer systems” refers to things other than protected network devices. Although Patent Owner may be correct that this passage more than a single computing device,” we find that other disclosures in the ’872 patent do. Specifically, the Specification uses the language “distributed computer system” when referring to numerous components, including “protected network devices” and an “IDS/IPS system.” Ex. 1001, 3:26–28; Reply 10. In addition to showing that a “computer system” is not limited to a single computing device, this conveys that a “computer system” according to the ’872 patent can include an IDS/IPS.” slip op. at 14

  • Obviousness (§103) › Motivation to combine / reasonable expectation of successMotivation foundDecided for petitioner

    “Based on our review of the complete record, we find Petitioner’s arguments and evidence to be more persuasive. Patent Owner does not dispute Petitioner’s argument and evidence that capturing detailed information like Goel’s activity sources, activity targets, and association was recognized as enhancing threat analysis. Pet. 44 (citing Ex. 1003 ¶ 79); see PO Resp. 55–59; Sur-Reply 15–17. Additionally, contrary to Patent Owner’s suggestion, we find that the Petition does not propose incorporating Goel’s kernel hooks into Capalik’s system. See Pet. 41–46. Patent Owner contends that the Petition’s reference to modifying Capalik by “adding lines of code” suggests implementing the code disclosed in Goel include kernel hooks. Id. Notwithstanding Patent Owner’s assertion otherwise, this is an unpersuasive bodily incorporation argument, as the Petition never says an ordinarily skilled artisan would have used the exact lines of code from Goel in Capalik. Rather, the Petition says that an ordinarily skilled artisan would have had sufficient skill to implement straightforward code modifications to identify activity sources, targets, and associations: a [person of ordinary skill in the art] would have understood that modifying Capalik’s system (e.g., Linux-based) to additionally monitor, identify, and store each individual activity of an attack including “activity sources, activity targets, and associations” would have required straightforward modifications to programs/code instructions, which would have been well-within the skillset of a [person of ordinary skill in the art]. Pet. 46. Patent Owner argues that Petitioner does not explain how an ordinarily skilled artisan would have modified Capalik without using kernel hooks. Sur-Reply 17. But Patent Owner does not cite any evidence to counter Dr. Jakobsson’s testimony that an ordinarily skilled artisan would have had the skill to apply Goel’s general teaching of identifying sources, targets, and associations to Capalik’s system. Ex. 1003 ¶ 182. On the whole, the evidence does not support Patent Owner’s position that the combination would have required substantially increased detection risk. Moreover, even if the combination would have somewhat increased detection risk, Petitioner persuades us that an ordinarily skilled artisan still would have had reason to combine the references teachings. Patent Owner’s allegations of increased detection risk do not negate the undisputed evidence that the combination would have provided the advantage of improved threat analysis. Pet. 44 (citing Ex. 1003 ¶¶ 175–182). Ultimately, Patent Owner’s that activity logging be undetectable.” PO Resp. 56 (emphasis added) (citing Ex. 1004 ¶ 6). This exaggerates Capalik’s disclosure. Although the cited paragraph suggests that certain systems unfortunately may be detectable by some users, it does not convey that it is a requirement for the system to be categorically undetectable. See Ex. 1004 ¶ 6.8 In sum, Petitioner persuades us by a preponderance of the evidence that it would have been obvious to modify Capalik “to identify and store unauthorized activities including the activity source, activity target, and association of each activity.” Pet. 41–46; PO Resp. 55–59; Reply 20–22; Sur-Reply 15–17.” slip op. at 47

  • Obviousness (§103) › Objective indicia / secondary considerations › NexusObjective indicia no nexusDecided for patent owner

    “arguments and evidence, we determine that Patent Owner fails to sufficiently show a nexus between any of its objective indicia evidence and the claimed invention. See Fox Factory, Inc. v. SRAM, LLC, 944 F.3d 1366, 1373 (Fed. Cir. 2019) (“The patentee bears the burden of showing that a nexus exists”). A showing of sufficient nexus is required to establish that the evidence relied upon traces its basis to a novel element in the claim, not to something in the prior art. Institut Pasteur & Universite Pierre Et Marie Curie v. Focarino, 738 F.3d 1337, 1347 (Fed. Cir. 2013). Objective evidence that results from something that is not “both claimed and novel in the claim” lacks a nexus to the merits of the invention. In re Kao, 639 F.3d 1057, 1068 (Fed. Cir. 2011) (emphasis omitted). Thus, establishing nexus involves a showing that novel elements in the claim, not prior-art elements, account for the objective evidence of nonobviousness. Id. As discussed above, Petitioner shows that Capalik teaches all limitations of claim 1. Petitioner persuades us that none of claim 1’s elements individually nor any combination thereof is novel over Capalik’s disclosure. Accordingly, claim 1 is not novel over Capalik, which disproves Patent Owner’s assertion of nexus. PO Resp. 73–76. Moreover, even if claim 1 were novel, Patent Owner otherwise fails to show nexus for its commercial success, praise, or copying assertions. Patent Owner’s evidence does not show that Petitioner’s commercial product embodies claim 1. For example, we agree with Petitioner that Patent Owner “failed to analyze any meaningful detail regarding” how the Falcon Platform allegedly meets limitation 1(d). Reply 28–29. In particular, Patent Owner has not sufficiently addressed limitation 1(d) with the following argument: “1[D] The Falcon Platform transmitted to other computer systems” slip op. at 37

  Patent outcomesUS 9,954,872 mixed
  Claim construction§ 103 obviousnesscites Phillips
  Patents in suitUS 9,954,872
• Apple Inc. v. S.M.R Innovations Ltd And Y.M.R Tech LtdAll claims unpatentable
  PTAB · Jan 27, 2026 · IPR2024-01048 · APJ Mary C Hoffman · IPR · Final written decision

  Claims 1, 5–8, 10, 11, 13, 15, 16, 18, and 19 are unpatentable as obvious under § 103 over the four stated combinations.

  RulingsFinal written decision

  • Skill levelSkill level patent owner adoptedDecided for patent owner

    “Patent Owner does not contend that the differences between the parties’ formulations would affect our patentability analysis. PO Resp. 2–4. Petitioner does not dispute that Patent Owner’s declarant, Mr. Ginter, who has a bachelor’s degree and years of experience in wireless communication, qualifies as a POSITA. Tr. 43; Ex. 2009 ¶¶ 5–10. Petitioner also concedes that its challenges do not hinge on which formulation we accept. Tr. 43. We agree that our decision would be the same regardless of the differences between the formulations. We adopt Patent Owner’s proposed formulation, which is supported by declaration testimony and generally consistent with the level of skill reflected in the ’648 patent and the prior art of record. Ex. 2009 ¶¶ 21–25; Exs. 1001, 1004–1009.” slip op. at 10

  • Claim Construction › Intrinsic evidence (Phillips canons) › Plain and ordinary meaning to a POSITATerm construed board ownDecided for petitioner

    “We disagree. Although claim 1 recites step 1b before step 1d, method steps are not ordinarily construed to require a specific order of performance unless the claims or Specification directly or implicitly require that specific order. See Altiris, Inc. v. Symantec Corp., 318 F.3d 1363, 1369–70 (Fed. Cir. 2003). Here, nothing in the express claim language precludes performing step 1d before step 1b. The claim does not expressly recite signaling the device(s) previously “identified as available.” Nor does the claim otherwise specify that step 1b must precede step 1d. For example, the claim does not contain temporal terms like “then,” “next,” or “further.” Although Patent Owner points out that a term of step 1d (i.e., “the” one more available devices) derives antecedent basis from step 1b, this alone does not require performing step 1b before step 1d. PO Resp. 5, 10; Sur-reply 11. Rather, we agree with Petitioner that step 1d’s reliance on step 1b for antecedent basis only serves to clarify that the steps refer to the same device(s), not to determine the performance order. Reply 4, 5. We also agree with Petitioner that claim 1 inconsistently employs antecedent basis for other claim elements, which undermines Patent Owner’s argument that step 1d’s antecedent basis establishes a specific order. Reply 7 (referring to the recited “media content,” “the media content,” and “a media content”).” slip op. at 11

  • Obviousness (§103) › Motivation to combine / reasonable expectation of successUnpatentableMotivation foundDecided for petitioner

    “We disagree. Petitioner met its burden to show that the combination would have been obvious. Zhang teaches a cellular phone (which logically receives cellular calls) and routing media to audio devices on its network. Ex. 1004, 3:25–29. Missing in Zhang is an explicit teaching that its cellular calls (as opposed to other media) are routed. Pasanen explicitly teaches routing cellular calls to networked audio devices. Ex. 1006; 4:20–37. Taken together, routing Zhang’s cellular calls across its network would have been obvious to a POSITA. Patent Owner’s argument that Zhang-Fillebrown’s 802.11 or HomeRF network do not support routing cellular calls discounts Zhang’s teaching that “its network can be built on top of many different kinds of communication media” including but not limited to 802.11 and HomeRF, as well as the “optional HomeRF features” Petitioner claims would sufficient to implement the claimed functionality. Ex. 1001, 4:46–50; Reply 20–22 (citing Ex. 1037 ¶¶ 13–15); Sur-reply 3–6 (arguing that HomeRF’s isochronous mode and DECT protocol are optional and would not have been necessary to practice Zhang’s subject matter). And though Zhang does not discuss transcoding or specific HomeRF features/protocols, which Patent Owner argues are necessary for routing cellular calls across Zhang’s 802.11 or HomeRF network, we agree with Petitioner that the ’648 patent also provides scant technical details as to how its system routes cellular calls over its local network, suggesting that such was well known at the time. Reply 17 (citing, e.g., Ex. 1001 7:9–25).” slip op. at 28

  Patent outcomesUS 10,547,648 unpatentable
  Claim construction§ 103 obviousnesscites Phillips · KSR · Graham
  Patents in suitUS 10,547,648
• Everstar Merchandise Co., Ltd. v. Willis Electric Co., Ltd.Some claims unpatentable
  PTAB · Dec 18, 2025 · PGR2019-00056 · APJ Stacey G White · PGR · Remand

  Claims 2–7, 9–19, 21–25, 27, 30, 31, and 33 are unpatentable as obvious; Petitioner did not prove claims 8, 20, 26, 28, 29, and 32 unpatentable.

  RulingsRemand decision

  • RemandMixed

    “The Federal Circuit found that “[t]he factual record and Willis’s concession on appeal conclusively establish that the cost of copper was a known problem in the art, Debladis ’120 (and Kumada) helped address that issue, and Willis has not disputed that combining the teachings of Kumada and Debladis ’120 was within the skill of an ordinary artisan,” concluding “[n]othing more is required to establish a motivation to combine.” Everstar II, 2025 WL 1501940, 4. The Federal Circuit observed that “Willis has conceded that the combination of Kumada and Debladis ’120 disclose all the limitations in claim 1,” and accordingly, “reverse[d] the Board’s patentability determination as to that claim and vacate[d] the Board’s judgment as to the remaining claims of the ’037 patent,” remanding to us for further proceedings. Id. at 4–5. With those instructions in mind, we review the Petitioner’s allegations regarding claims 2–33.” slip op. at 6

  • Skill levelSkill level board ownDecided for patent owner

    “F. Person of Ordinary Skill in the Art In the First Final Written Decision, we determined that a person of ordinary skill in the art “would have (1) at least two years of experience in the design of decorative lighting, or (2) at least a bachelor’s degree in mechanical engineering, electrical engineering, or an equivalent field, and a basic familiarity with circuits used in decorative lighting.” Paper 40, 12. We see no reason to depart from that earlier determination.” slip op. at 12

  • Claim Construction › Threshold & procedure › Whether a term needs construction (O2 Micro)No construction neededOther

    “The parties agree that we do not need to construe any claim terms. Pet. 8–9; PO Resp. 16–17. We likewise agree. See Nidec Motor Corp. v. Zhongshan Broad Ocean Motor Co., 868 F.3d 1013, 1017 (Fed. Cir. 2017) (citing Vivid Techs., Inc. v. Am. Sci. & Eng’g, Inc., 200 F.3d 795, 803 (Fed. Cir. 1999) (“[O]nly those terms need be construed that are in controversy, and only to the extent necessary to resolve the controversy.”)).” slip op. at 13

  • Obviousness (§103) › Motivation to combine / reasonable expectation of successMotivation foundDecided for petitioner

    “Patent Owner did not dispute that the combined teachings of Kumada and Debladis ’120 disclose each limitation of claim 1. Patent Owner, however, did dispute Petitioner’s proposed reasons for combining Kumada and Debladis ’120, and argues that Debladis ’120 is not analogous art. PO Resp. 36–61. The Federal Circuit stated that substantial evidence only supports the conclusion that a POSA would have been motivated to combine the teachings of Kumada and Debladis ’120. The factual record and Willis’s concession on appeal conclusively establish that the cost of copper was a known problem in the art, Debladis ’120 (and Kumada) helped address that issue, and Willis has not disputed that combining the teachings of Kumada and Debladis ’120 was within the skill of an ordinary artisan. Nothing more is required to establish a motivation to combine. Given that Willis has conceded that the combination of Kumada and Debladis ’120 disclose all the limitations in claim 1, we reverse the Board’s patentability determination as to that claim and vacate the Board’s judgment as to the remaining claims of the ’037 patent. Everstar II, 2025 WL 1501940, 4 (internal citations omitted). The Federal Circuit further noted Patent Owner’s secondary considerations arguments as to claim 1 and stated [t]he cited evidence consists only of a temporal connection between the introduction of Willis’s invention and the UL 588 standards, and deposition testimony of a single witness who seemingly disclaimed any connection between the two. This is not sufficient to rescue a claim as to secondary considerations. Id. at 4, n. 5 (internal citations omitted). Accordingly, the Federal Circuit ruled that claim 1 would have been obvious over Kumada and Debladis ’120. 6. Analysis of Independent Claim 33” slip op. at 17

  Patent outcomesUS 10,222,037 mixed
  Claim construction§ 103 obviousnesscites Phillips · KSR
  Patents in suitUS 10,222,037
• Palo Alto Networks, Inc. v. Centripetal Networks, Inc.No claims unpatentable
  PTAB · Jul 21, 2025 · IPR2021-01150 · APJ Stacey G White · IPR · Remand

  On remand, the Board held that Petitioner had not shown claims 1–18 unpatentable under § 103 over Paxton, Sutton, and Ivershen because the combination did not teach or motivate transmission responsive to correlation.

  RulingsRemand decision

  • RemandOther

    “the Final Written Decision for “not clearly explaining its holding or rationale regarding motivation to combine and whether the proposed combination teaches the final limitation of claim 1: transmitting an indication of the first host responsive to the correlating.” Palo Alto Networks, 122 F.4th at 1384. In the opinion, the Federal Circuit explained that the Final Written Decision “never made a clear finding on whether a person of ordinary skill in the art would have been motivated to modify Paxton by adding Sutton’s step of transmitting a notification of malicious activity after Paxton’s correlation step,” as proposed by Petitioner. Id. at 1385. The Federal Circuit stated that the Board “failed to explain why a person of ordinary skill in the art would not have been motivated to modify Paxton to provide the recited notification as taught by Sutton in response to the correlation disclosed in Paxton.” Id. The Federal Circuit concluded that “[b]y reading Paxton and Sutton in isolation, the Board erred,” and that we vacate and remand for the Board to clarify and explain its holding on whether a person of ordinary skill in the art would have been motivated to transmit the identity of the first host (e.g., to an administrator) as taught by Sutton, responsive to the correlating disclosed by Paxton to improve network security.” slip op. at 2

  • Skill levelSkill level petitioner adoptedDecided for petitioner

    “the alleged invention of the ’903 patent “had a bachelor’s degree in electrical engineering, computer engineering, computer science, or a related field, and approximately 2–3 years of experience in the design or development of telecommunication systems, or the equivalent.” Pet. 13 (citing Ex. 1003 ¶¶ 18–20). Petitioner further notes that “[a]dditional graduate education could substitute for professional experience, or significant experience in the field could substitute for formal education.” Id. Patent Owner’s proposed level of ordinary skill is similar, with Patent Owner contending that the ordinary skilled artisan “would be someone with a bachelor’s degree in computer science, electrical engineering, or related field, and either (1) two or more years of industry experience and/or (2) an advanced degree in computer science or related field.” PO Resp. 12–13 (citing Ex. 2019 ¶¶ 27– 31). Similar to Petitioner, Patent Owner also states that a person of ordinary skill in the art “may have additional industry experience in lieu of a formal degree.” Id. at 13.” slip op. at 10

  • Claim Construction › Threshold & procedure › Whether a term needs construction (O2 Micro)No construction neededOther

    “After review of the current record, we conclude that no express claim construction is necessary for the purposes of this Decision. See, e.g., Nidec Motor Corp. v. Zhongshan Broad Ocean Motor Co., 868 F.3d 1013, 1017 (Fed. Cir. 2017) (quoting Vivid Techs., Inc. v. Am. Sci. & Eng'g, Inc., 200 F.3d 795, 803 (Fed. Cir. 1999)) (“[W]e need only construe terms ‘that are in controversy, and only to the extent necessary to resolve the controversy.’”).” slip op. at 12

  • Obviousness (§103) › Motivation to combine / reasonable expectation of successNot shown unpatentableMotivation not foundNot shown unpatentable

    “responsive to the correlation, we are not persuaded that one of ordinary skill in the art would have been motivated to combine the teachings of these references in the manner advocated by Petitioner. Petitioner contends that this combination would only involve “[t]he application of known techniques (e.g., Sutton’s implementation of rules and data to define security policies, disallowed websites, etc.) to improve similar devices (e.g., servers, gateways, firewalls, etc. in Sutton’s and Paxton’s systems) to provide predictable results in the same way (e.g., to provide packet-filtering functions preventing communications with potentially malicious hosts).” Id. at 22–23.” slip op. at 25

  Patent outcomesUS 10,530,903 not shown unpatentable
  Claim construction§ 103 obviousnesscites Graham
  Patents in suitUS 10,530,903
• Crowdstrike, Inc. v. Gosecure, Inc.Institution denied
  PTAB · May 9, 2025 · IPR2025-00069 · APJ Garth D Baer · IPR · Institution

  The Board denied institution because the petition did not show that the prior art teaches creating a fingerprint at the virtual machine monitor, as claims 1–18 and 21–23 require.

  RulingsInstitution decision

  • PTAB / AIA Trials › Institution threshold (reasonable likelihood / more likely than not)Institution denied meritsInstitution denied

    “Under 35 U.S.C. § 314, an inter partes review may not be instituted “unless . . . there is a reasonable likelihood that the petitioner would prevail with respect to at least 1 of the claims challenged in the petition.” Upon consideration of the Petition in view of the present record and for the reasons explained below, we determine that Petitioner has not shown a reasonable likelihood of prevailing with respect to at least one of the challenged claims. Accordingly, we do not institute an inter partes review on the grounds set forth in the Petition. See 37 C.F.R. § 42.108(a).” slip op. at 2

  • Claim Construction › Intrinsic evidence (Phillips canons) › Plain and ordinary meaning to a POSITAPlain and ordinary meaningDecided for patent owner

    “We disagree with Petitioner’s arguments. Claim 1 recites “a decoy computer system [that] comprises . . . a virtual machine monitor,” and “at the virtual machine monitor: . . . creating, from the stored activities, a fingerprint.” Ex. 1001, 19:4–22. Thus, the claim’s plain language requires creating a fingerprint at the virtual machine monitor, not just at the decoy system, as Petitioner asserts. When, as here, a claim term has “ordinary, simple English words whose meaning is clear and unquestionable,” we may not redraft those words to mean something different. Chef America, Inc. v. Lamb-Weston, Inc., 358 F.3d 1371, 1373–75 (Fed. Cir. 2004). Petitioner offers no explanation how one skilled in the art might read “at the virtual machine monitor” to mean at the decoy system, rather than at the virtual machine monitor. Although the claim’s plain language is decisive, we also disagree with Petitioner’s assertion that the ’697 patent’s specification describes only fingerprint creation outside the virtual machine monitor because, as Patent Owner explains, the specification describes fingerprint generation inside and outside the virtual machine monitor. See Sur-reply 1– 2; see id. at 2 (citing Ex. 1001, 6:65–7:2, 10:13–22). Claim 1’s plain language, however, only covers the latter. Last, Petitioner’s characterization of Patent Owner’s infringement allegations in the related district-court proceedings, even if correct, do not undermine the claim’s plain language.” slip op. at 9

  • Obviousness (§103) › Graham factors (scope of art, differences, level of skill)Not shown unpatentableNot shown unpatentable

    “Petitioner does not contest that Capalik’s fingerprint generation occurs outside the components that Petitioner identifies as the claimed virtual machine monitor. Reply 1–3; see Pet. 18–23 (mapping Capalik’s hypervisor kernel 516 to the claimed virtual machine monitor); id. at 30–31 (mapping Capalik’s processing module 508 and signature generation engine 530 to the claimed fingerprint creation); see also Prelim. Resp. 21–23 (explaining Petitioner’s mapping). Instead, Petitioner asserts that the at-issue claim language—“at the virtual machine monitor”—does not require “that each of the subsequently recited steps must be performed by or in the [virtual machine monitor],” but instead only requires “that the fingerprint is generated by the same decoy system that contains the [virtual machine monitor].” Reply 2. Petitioner argues that the intrinsic record supports its position because “[n]owhere in the ’697 Patent is there any teaching or suggestion that a [virtual machine monitor] creates a fingerprint/signature indicative of attack activity,” and instead, “[t]he ’697 Patent teaches that its signature generation engine is separate from the [virtual machine monitor].” Reply 2 (citing Ex. 1001, 8:12–19). In addition, Petitioner asserts that requiring fingerprint creation at the virtual machine monitor “directly” slip op. at 8

  • Adverse judgmentOther

    “D. Statutory Disclaimer and Remaining Challenged Claims The Petition challenges claims 1–23. Pet. 10. However, because Patent Owner disclaimed claims 19 and 20 (Ex. 2010), the remaining challenged claims are 1–18 and 21–23. See 37 C.F.R. § 42.107(e) (2020) (“No inter partes review will be instituted based on disclaimed claims.”). Of the remaining challenged claims, only claim 1 is independent. Claim 1 is reproduced below:” slip op. at 4

  Claim construction§ 103 obviousness
  Patents in suitUS 9,106,697
• Crowdstrike, Inc. v. Gosecure, Inc.Institution denied
  PTAB · May 6, 2025 · IPR2025-00067 · APJ Garth D Baer · IPR · Institution

  The Board denied institution for claims 1–23 because the cited art did not teach or suggest creating the claimed fingerprint at the virtual machine monitor.

  RulingsInstitution decision

  • PTAB / AIA Trials › Institution threshold (reasonable likelihood / more likely than not)Institution denied meritsDenied

    “Given the deficiencies outlined above, Petitioner has not shown that the prior art teaches or suggests creating a fingerprint at the virtual machine monitor as the challenged claims require. Thus, Petitioner has not shown a reasonable likelihood of prevailing with respect to at least one of the challenged claims. III. CONCLUSION After considering the evidence and arguments presented in the current record, we determine that Petitioner has not demonstrated a reasonable likelihood of success in proving that at least one of the challenged claims of the ’697 patent is unpatentable. We therefore do not institute trial on any challenged claims or grounds raised in the Petition.” slip op. at 10

  • Claim Construction › Intrinsic evidence (Phillips canons) › Plain and ordinary meaning to a POSITAPlain and ordinary meaningDecided for patent owner

    “We disagree with Petitioner’s arguments. Claim 1 recites “a decoy computer system [that] comprises . . . a virtual machine monitor,” and “at the virtual machine monitor: . . . creating, from the stored activities, a fingerprint.” Ex. 1001, 19:4–22. Thus, the claim’s plain language requires creating a fingerprint at the virtual machine monitor, not just at the decoy system, as Petitioner asserts. When, as here, a claim term has “ordinary, simple English words whose meaning is clear and unquestionable,” we may not redraft those words to mean something different. Chef America, Inc. v. Lamb-Weston, Inc., 358 F.3d 1371, 1373–75 (Fed. Cir. 2004). Petitioner offers no explanation how one skilled in the art might read “at the virtual machine monitor” to mean at the decoy system, rather than at the virtual machine monitor. Although the claim’s plain language is decisive, we also disagree with Petitioner’s assertion that the ’697 patent’s specification because, as Patent Owner explains, the specification describes fingerprint generation inside and outside the virtual machine monitor. Sur-reply 1–2; see id. at 2 (citing Ex. 1001, 6:65–7:2, 10:13–22). Claim 1’s plain language, however, only covers the latter. Sur-reply 1–2; see id. at 2 (citing Ex. 1001, 6:65–7:2, 10:13–22). Last, Petitioner’s characterization of Patent Owner’s infringement allegations in the related district-court proceedings, even if correct, do not undermine the claim’s plain language.” slip op. at 9

  • Obviousness (§103) › Motivation to combine / reasonable expectation of successNot reached

    “Given the deficiencies outlined above, Petitioner has not shown that the prior art teaches or suggests creating a fingerprint at the virtual machine monitor as the challenged claims require. Thus, Petitioner has not shown a reasonable likelihood of prevailing with respect to at least one of the challenged claims.” slip op. at 10

  Claim construction§ 103 obviousness
  Patents in suitUS 9,106,697
• Crowdstrike, Inc. v. Gosecure, Inc.Instituted
  PTAB · May 5, 2025 · IPR2025-00070 · APJ Neil T Powell · IPR · Institution

  The Board instituted inter partes review of claims 1–21 on all five asserted §103 grounds, finding a reasonable likelihood that at least one challenged claim would be unpatentable.

  RulingsInstitution decision

  • PTAB / AIA Trials › Institution threshold (reasonable likelihood / more likely than not)InstitutedInstituted

    “We have authority to determine whether to institute an inter partes review. See 35 U.S.C. § 314 (2018); 37 C.F.R. § 42.4(a) (2024). To institute an inter partes review, we must determine that the information presented in the Petition and the Preliminary Response shows “a reasonable likelihood that the petitioner would prevail with respect to at least 1 of the claims challenged in the petition.” 35 U.S.C. § 314(a). For the reasons set forth below, we determine that there is a reasonable likelihood that Petitioner will prevail with respect to at least one challenged claim. We institute an inter partes review of claims 1–21 based on the grounds set forth in the Petition.” slip op. at 2

  • Parallel petitionsDecided for petitioner

    “MULTIPLE PETITIONS CHALLENGING THE ’872 PATENT In addition to challenging the claims of the ’872 patent with the instant Petition, Petitioner filed a petition in IPR2025-00068, which also challenged claims of the ’872 patent. IPR2025-00068, Paper 1 (“the ’68 Petition”). Petitioner ranked the instant Petition first and the ’68 Petition second. Paper 3, 5. Arguing that the circumstances here do not warrant two petitions, Patent Owner suggests that we discretionarily deny the instant Petition, stating that “[i]f the Board is inclined to institute either of [Petitioner’s] Petitions, [Patent Owner] respectfully submits the Board should institute IPR2025-00068.” Paper 8, 5. Because Petitioner ranks the instant Petition higher than the ’68 Petition, we decline to discretionarily deny this Petition due to Petitioner’s filing of the ’68 Petition.” slip op. at 10

  • Skill levelSkill level petitioner adoptedDecided for petitioner

    “Pet. 8 (Ex. 1003 ¶¶ 30–31). Patent Owner does not dispute Petitioner’s explanation of the level of skill in the art. See Prelim. Resp. 13. At this stage of the proceeding and on the present record, we adopt Petitioner’s uncontested proposed level of ordinary skill in the art, which we find consistent with the level of ordinary skill in the art reflected by the ’872 patent and the prior art of record. See Okajima v. Bourdeau, 261 F.3d 1350, 1355 (Fed. Cir. 2001); In re GPAC Inc., 57 F.3d 1573, 1579 (Fed. Cir. 1995); In re Oelrich, 579 F.2d 86, 91 (CCPA 1978).” slip op. at 11

  • Claim Construction › Intrinsic evidence (Phillips canons) › Plain and ordinary meaning to a POSITATerm construed petitioner constructionDecided for petitioner

    “We first look to the claim language itself. It recites “transmitting to one or more computer systems,” not transmitting to “devices.” Ex. 1001, 19:53. Although the claim language “one or more computer systems” may encompass “protected network devices,” we do not see a reason that its plain meaning would be limited to network devices, much less protected network devices. Nor do we see a reason that the plain meaning of “one or more computer systems” is limited to protected network devices to the exclusion of a network that includes protected network devices and one or more other components. In support of its suggestion that the claim language “one or more computer systems” excludes a combination of protected network devices and one or more other components, Patent Owner cites the claim language “for preventing future attacks, to the one or more computer systems.” Prelim. Resp. 20–24; Prelim. Sur-Reply 1–2. But Patent Owner does not provide reasoning or evidence persuading us to read the claim language more narrowly than its plain meaning, which encompasses preventing future attacks to a computer system that includes both protected network devices and one or more other components.” slip op. at 13

  Claim construction§ 103 obviousnessDiscretionary denialcites Phillips
  Patents in suitUS 9,954,872
• Crowdstrike, Inc. v. Gosecure, Inc.Instituted
  PTAB · May 2, 2025 · IPR2025-00068 · APJ Neil T Powell · IPR · Institution

  The Board instituted IPR on claims 1–21 on all asserted grounds, finding a reasonable likelihood that claim 1 would have been obvious over Capalik and King.

  RulingsInstitution decision

  • PTAB / AIA Trials › Institution threshold (reasonable likelihood / more likely than not)InstitutedInstituted

    “We have authority to determine whether to institute an inter partes review. See 35 U.S.C. § 314 (2018); 37 C.F.R. § 42.4(a) (2024). To institute an inter partes review, we must determine that the information presented in the Petition and the Preliminary Response shows “a reasonable likelihood that the petitioner would prevail with respect to at least 1 of the claims challenged in the petition.” 35 U.S.C. § 314(a). For the reasons set forth below, we determine that there is a reasonable likelihood that Petitioner will prevail with respect to at least one challenged claim. We institute an inter partes review of claims 1–21 based on the grounds set forth in the Petition.” slip op. at 2

  • Parallel petitionsDecided for petitioner

    “Patent Owner argued that we should not institute both petitions. Paper 8, 1–5. Patent Owner argued that the challenged claims are not long and Petitioner’s concerns about the construction of “association” in limitation 1(b) are “contrived.” Id. at 1. Patent Owner contends that Petitioner could have addressed all of the challenged claims in one petition. Id. Noting that both the ’70 petition and the instant Petition challenge all claims of the ’872 patent, Patent Owner argued that the number of claims challenged does not necessitate multiple petitions. Id. at 2–3. Patent Owner also argued that Petitioner could have waited until closer to the statutory due the claim language “association” in the related district court proceeding. Id. at 4–5. Considering the facts holistically, we determine the totality of the circumstances here supports Petitioner’s position that two petitions are warranted. Petitioner has challenged a large number of claims directed to complex subject matter. And the task of challenging those claims is complicated by the potential for Patent Owner to argue for a narrow construction of “association” in limitation 1(b). Patent Owner’s suggestion that Petitioner would not have needed to file multiple petitions if it had waited longer to file a petition is not persuasive. Paper 8, 4–5. Patent Owner does not explain why a petitioner should be encouraged to delay the filing of its petition. See id. And the parties appear to agree that Patent Owner has not weighed in on whether “association” should be interpreted narrowly or broadly. Prelim. Reply. 8; Prelim. Sur-Reply 8. The present circumstances, considered as a whole, warrant two petitions challenging the claims of the ’872 patent.” slip op. at 10

  • Skill levelSkill level petitioner adoptedDecided for petitioner

    “III. ANALYSIS A. LEVEL OF ORDINARY SKILL Petitioner explains the applicable level of skill in the art as follows: As of June 24, 2010, a person of ordinary skill in the art (POSITA) would be a person having a bachelor’s degree in computer science, computer engineering, or an equivalent, as well as two years of industry experience. A POSITA would also have had a working knowledge of software security analysis and dynamic malware analysis. Additional graduate education could substitute for professional experience, or significant experience in the field could substitute for formal education. explanation of the level of skill in the art. See Prelim. Resp. 13. At this stage of the proceeding and on the present record, we adopt Petitioner’s uncontested proposed level of ordinary skill in the art, which we find consistent with the level of ordinary skill in the art reflected by the ’872 patent and the prior art of record. See Okajima v. Bourdeau, 261 F.3d 1350, 1355 (Fed. Cir. 2001); In re GPAC Inc., 57 F.3d 1573, 1579 (Fed. Cir. 1995); In re Oelrich, 579 F.2d 86, 91 (CCPA 1978).” slip op. at 11

  • Claim Construction › Intrinsic evidence (Phillips canons) › Plain and ordinary meaning to a POSITATerm construed petitioner constructionDecided for petitioner

    “We first look to the claim language itself. It recites “transmitting to one or more computer systems,” not transmitting to “devices.” Ex. 1001, 19:53. Although the claim language “one or more computer systems” may encompass “protected network devices,” we do not see a reason that its plain meaning would be limited to network devices, much less protected network devices. Nor do we see a reason that the plain meaning of “one or more computer systems” is limited to protected network devices to the exclusion of a network that includes protected network devices and one or more other components. In support of its suggestion that the claim language “one or more computer systems” excludes a combination of protected network devices and one or more other components, Patent Owner cites the claim language “for preventing future attacks, to the one or more computer systems.” Prelim. Resp. 20–24; Prelim. Sur-Reply 1–2. But Patent Owner does not provide reasoning or evidence persuading us to read the claim language more narrowly than its plain meaning, which encompasses preventing future attacks to a computer system that includes both protected network devices and one or more other components.” slip op. at 14

  Claim construction§ 102 anticipation§ 103 obviousnessDiscretionary denialcites Phillips
  Patents in suitUS 9,954,872
• Phison Electronics Corporation v. Vervain, LLCInstitution denied
  PTAB · Apr 28, 2025 · PGR2024-00048 · APJ Stacey G White · PGR · Institution

  The Board denied institution because Petitioner did not show it was more likely than not that claims 1–6 were unpatentable.

  RulingsInstitution decision

  • PTAB / AIA Trials › Institution threshold (reasonable likelihood / more likely than not)Institution denied meritsInstitution denied

    “review under 35 U.S.C. § 324 and 37 C.F.R. § 42.4(a). We may not institute a post-grant review unless “the information presented in the petition . . . , if such information is not rebutted, would demonstrate that it is more likely than not that at least 1 of the claims challenged in the petition is unpatentable.” 35 U.S.C. § 324(a) (2024). Upon considering the evidence and arguments presented, we determine, as discussed below, that Petitioner has not demonstrated that it is more likely than not that at least 1 of the claims challenged in the Petition is unpatentable. Therefore, we deny1 Petitioner’s request to institute post-grant review of claims 1–6.” slip op. at 2

  • Skill levelSkill level petitioner adoptedDecided for petitioner

    “Patent Owner’s declarant, Dr. Khatri, proposes a definition of the person of ordinary skill in the art. Ex. 2001 ¶ 24. Dr. Khatri, however, notes that his opinions would be the same under either his proposal or Petitioner’s proposal. Id. ¶¶ 25–26. Patent Owner states that, for purposes of the Preliminary Response, it “adopts Petitioner’s definition of a person of ordinary skill in the art.” Prelim. Resp. 13 (citing Pet. 22–23; Ex. 2001 ¶¶ 22–26). We determine that the current record supports Petitioner’s description of an ordinarily skilled artisan. For purposes of this Decision, therefore, we adopt Petitioner’s description of an ordinarily skilled artisan. We also note that the applied prior art reflects the appropriate level of skill at the time of the claimed invention. See Okajima, 261 F.3d at 1355.” slip op. at 12

  • Claim Construction › Threshold & procedure › Whether a term needs construction (O2 Micro)No construction neededOther

    “Petitioner proposes constructions for the claim terms “MLC memory modules” and “SLC memory module.” Pet. 23–28. Patent Owner disagrees with Petitioner’s constructions, but does not contest them because it argues that construction of these terms is not necessary to resolve the parties’ disputes. Prelim. Resp. 14. Based on the record presented, we determine that no claim term requires an explicit construction to decide whether Petitioner satisfies the “more likely than not” standard for instituting a post- grant review. See Nidec Motor Corp. v. Zhongshan Broad Ocean Motor Co., 868 F.3d 1013, 1017 (Fed. Cir. 2017).” slip op. at 13

  • Disclosure Requirements (§112) › Written description (Ariad)Written description adequateNot shown unpatentable

    “using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it pertains, or with which it is most nearly connected, to make and use the same.” The Federal Circuit has held that “[t]he written description requirement is met when the disclosure relied on for support ‘reasonably conveys to those skilled in the art that the inventor had possession of the claimed subject matter as of the filing date.’” RAI Strategic Holdings, Inc. v. Philip Morris Prods. S.A., 92 F.4th 1085, 1088 (Fed. Cir. 2024) (quoting Ariad Pharms., Inc. v. Eli Lilly & Co., 598 F.3d 1336, 1351 (Fed. Cir. 2010) (en banc) (citation omitted)). The written description inquiry is a question of fact, is context specific, and must be determined on a case-by-case basis. Ariad, 598 F.3d at 1351 (citing Ralston Purina Co. v. Far-Mar-Co, Inc., 772 F.2d 1570, 1575 (Fed. Cir. 1985); Capon v. Eshhar, 418 F.3d 1349, 1357–58 (Fed. Cir. 2005)). “[T]he level of detail required to satisfy the written description requirement varies depending on the nature and scope of the claims and on the complexity and predictability of the relevant technology.” Id. (citing Capon, 418 F.3d at 1357–58). Factors used to evaluate the sufficiency of a disclosure include: 1) “the existing knowledge in the particular field”; 2) “the extent and content of the prior art”; 3) “the maturity of the science or technology”; and 4) “the predictability of the aspect at issue.” Id. (citing Capon, 418 F.3d at 1359). As support for the term “memory space,” the ’612 patent explains that because “the SLC NAND flash is used to boost the lifetime (endurance) of the storage system, it can be considerably lesser in amount than the MLC NAND flash.” Ex. 1001, 5:20–23; see Ex. 2001 ¶ 51. As an example, the ’612 specification states that “a system may set SLC NAND flash equal to 12.5% or 25% of MLC NAND flash (total non-volatile memory storage space=MLC+SLC).” Ex. 1001, 5:23–25; see Ex. 2001 ¶¶ 51, 62. In addition, we find persuasive Dr. Khatri’s testimony that one of ordinary skill in the art would have understood that “there are two spaces—MLC and SLC—where data is stored, and the total memory space is the combination of the two.” Ex. 2001 ¶ 51. Further, the ’612 patent’s Figure 1 depicts “memory space,” e.g., dynamic random-access memory (DRAM) 20, one or more disks 24, MLC NAND flash memory module 26, and SLC NAND flash memory module 28. Ex. 1001, 5:37–45, Fig. 1; see Ex. 2001 ¶ 64. The ’612 patent’s Figure 4 also depicts “memory space,” e.g., NAND flash memory bank 56 comprising “a plurality of MLC NAND flash memory modules 60a and a plurality of SLC NAND flash memory modules 62a” and NAND flash memory bank 58 comprising “a plurality of MLC NAND flash memory modules 60b and a plurality of SLC NAND flash memory modules 62b.” Ex. 1001, 7:8–14, Fig. 4; see Ex. 2001 ¶ 64. On the record before us, we find the above noted disclosures to be sufficient to support the disputed claim language. For these reasons, the ’612 patent’s disclosure “reasonably conveys to those skilled in the art that the inventor had possession of the claimed subject matter as of the filing date.” See Ariad, 598 F.3d at 1351.” slip op. at 15

  Claim construction§ 103 obviousness§ 112 disclosurecites Phillips · KSR · Graham · Nautilus
  Patents in suitUS 11,854,612
• Google LLC v. Metarail, Inc.Institution denied
  PTAB · Apr 24, 2025 · IPR2024-01271 · APJ Frances L Ippolito · IPR · Institution

  The Board denied institution because Petitioner did not show a reasonable likelihood that claims 1–21 were unpatentable over either asserted obviousness ground.

  RulingsInstitution decision

  • PTAB / AIA Trials › Institution threshold (reasonable likelihood / more likely than not)Institution denied meritsInstitution denied

    “Under 35 U.S.C. § 314(a), an inter partes review may not be instituted unless the information presented in the Petition and any response thereto shows “there is a reasonable likelihood that the petitioner would prevail with respect to at least 1 of the claims challenged in the petition.” Considering the arguments presented and the evidence of record, we conclude that there is not a reasonable likelihood that Petitioner would prevail in challenging at least one of claims 1–21 of the ’342 patent as unpatentable under the grounds presented in the Petition. Pursuant to § 314, we hereby do not institute an inter partes review as to these claims of the ’342 patent.” slip op. at 2

  • Obviousness (§103) › Graham factors (scope of art, differences, level of skill)Not shown unpatentableNot shown unpatentable

    “(3) Discussion We observe first that “[Halevy’s] first step in processing a web source is to locate the forms in the source and to extract the text corresponding to the fields in the form.” Ex. 1006 ¶ 53. According to Halevy, the “web source is subsequently classified into the ontology classes.” Id. ¶ 55. Then, the “forms on the page are classified into the classes in the ontology.” Id. ¶ 57 (emphasis added). Halevy explains that this classification is used to predict what kinds of objects are in the databases queried by the form. Id. For “Schema Matching,” Halevy discloses “a mapping between the fields in the form and the SO-properties of the SO-classes[.]” Id. ¶¶ 61–62. Missing, however, from Halevy’s disclosure is any teaching or suggestion that fields are mapped “to one another using normalized variables stored in a normalized variable data database” as required by claim 1.” slip op. at 21

  • Skill levelSkill level petitioner adoptedOther

    “Petitioner contends that a POSITA “would have had a bachelor’s degree in computer science or a related field, and at least two years of experience with web programming and search engine systems[; m]ore education could substitute for experience, and vice versa.” Pet. 8 (citing Ex. 1003 ¶ 32). Patent Owner does not contest Petitioner’s proposal. Prelim. Resp. 9 (citing Ex. 2001 ¶¶ 35–36) (“Patent Owner and its expert apply this definition.”). For purposes of this Decision, we adopt Petitioner’s proposal as reasonable and consistent with the prior art. See Okajima v. Bourdeau, 261 F.3d 1350, 1355 (Fed. Cir. 2001) (the prior art may reflect an appropriate level of skill in the art).” slip op. at 10

  • Claim Construction › Threshold & procedure › Whether a term needs construction (O2 Micro)No construction neededOther

    “Neither Petitioner nor Patent Owner present claim construction in the Petition or Preliminary Response. Pet. 9; see generally Prelim. Resp. Nonetheless, Petitioner contends that Patent Owner’s construction of “universal variable map” is too narrow, but does not appear to offer an alternative construction other than to state that a “universal variable map” includes “a database that links variables from different websites to each other.” See Reply 1-2 (emphasis omitted) (“PO’s arguments for why Halevy’s ‘form database’ is not a universal variable map are all premised on improperly narrowing the term’s scope by adding restrictions that are unsupported by the intrinsic record.”). In the Sur-Reply, Patent Owner reiterates that it has not proposed a construction for “universal variable map.” Sur-Reply 1 (“Patent Owner did not present any claim construction arguments regarding that term, nor does that term’s construction have any bearing on the arguments set forth in the POPR for denying the Petition.”). Based on our review of the preliminary record, we do not need to construe any terms expressly to reach our decision. See Realtime Data LLC v. Iancu, 912 F.3d 1368, 1375 (Fed. Cir. 2019) (“The Board is required to construe ‘only those terms . . . that are in controversy, and only to the extent necessary to resolve the controversy.’” (quoting Vivid Techs., Inc. v. Am. Sci. & Eng’g, Inc., 200 F.3d 795, 803 (Fed. Cir. 1999))).” slip op. at 11

  Claim construction§ 103 obviousnesscites KSR · Graham
  Patents in suitUS 10,262,342

Holdings, summaries, rulings, issues, outcomes, winners and claim constructions shown for a decision were generated by a large language model reading the opinion. They are a guide to the decision, not the decision. Confirm every one against the court's own text before relying on it. Outcomes read from the patent owner’s side. Party names are extracted from the decision and are missing on about 900 short Director denials and scans, which carry the trial number instead.