Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 1 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 1 of 38
`
`EXHIBIT 5
`EXHIBIT 5
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`

`

`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 2 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 2 of 38
`PTO/SB/05 (01-04)
`Approvedfor use through 07/31/2006. OMB 0651-0032
`U.S. Patent and Trademark Office. US. DEPARTMENT OF COMMERCE
`Underthe Paperwork Reduction Act of 1995, no personsare required to respondto a collectionofinformation unlessit displays a valid OMBcontrol number.
`
`
`43426.00065
`
`
`
`UTILITY
`Shlomo Touboul
`
`
`
`PATENT APPLICATION
` METHOD AND SYSTEM FOR GACHING AT
`
`
`
`O
`SECURE GATEWAYS
`TRANSMITTAL
`
`
`
`(Only for new nonprovisional applications under 37 C.F.R. 1.53(b))
`
`Mail Stop Patent Application
`Commissionerfor Patents
`P.O. Box 1450
`Alexandria VA 22313-1450
`7. J CD-ROM or CD-R in duplicate, large table or
`Computer Program (Appendix)
`8. Nucleotide and/or Amino Acid Sequence Submission
`(if applicable, ail necessary)
`a. L] Computer Readable Form (CRF)
`Specification SequenceListing on:
`i. (J CD-ROM or CD-R (2 copies); or
`ii. ] Paper
`
`
`
`050304
`
`Attorney Docket No.
`
`First Inventor
`
`ADDRESSTO:
`
`APPLICATION ELEMENTS
`
`Mn
`yOeosO
`N
`
`iK
`
`(Mh
`
`See MPEP chapter 600 concerning utility patent application contents.
`
`Fee Transmittal Form (e.g., PTO/SB/17)
`(Submit an original and a duplicate for fee processing)
`Applicant claims small entity status.
`See 37 CFR 1.27.
`[Total Pages
`Specification
`(preferred arrangementset forth below)
`- Descriptive title of the Invention
`- Cross Reference to Related Applications
`- Statement Regarding Fed sponsored R & D
`- Reference to sequencelisting, a table,
`or a computerprogramlisting appendix
`- Backgroundof the Invention
`- Brief Summary of the Invention
`- Brief Description of the Drawings( iffiled)
`- Detailed Description
`- Claim(s)
`- Abstract of the Disclosure
`
`Assignment Papers (cover sheet & document(s))
`37 C.F.R. 3.73(b) Statement
`[[) Powerof
`(whenthere is an assignee) -
`Attorney
`
`English Translation Document(if applicable)
`Information Disclosure
`(J Copies of IDS
`4._Drawing(s) (35 U.S.C. 113)
`[Total Sheets _3
` }
`Citations
`Statement (IDS)/PTO-1449
`§. Oath or Declaration
`_2
`[Total Sheets
`]
`Preliminary Amendment
`a.
`[EX] Unsigned
`Return Receipt Postcard (MPEP 503)
`b. LJ Copy from a prior application (37 CFR 1.63 (d))
`(Should be specifically itemized)
`(for a continuation/divisional with Box 18 completed)
`Certified Copy of Priority Document(s)
`i (J DELETION OF INVENTOR(S)
`(if foreign priority is claimed)
`Signed statement attached deleting inventor(s)
`Nonpublication Request under 35 U.S.C. 122
`namedin the prior application, see 37 CFR
`(b)(2)(B)(i). Applicant must attach form PTO/SB/35
`1.63(d)(2) and 1.33(b).
`or its equivalent.
`6.L] Application Data Sheet. See 37 CFR 1.76
`Other: General Authorization to Petition for Extensions
`
`18. If a CONTINUING APPLICATION, check appropriate box, and supply the requisite information below andin the first sentenceofthe
`specification following thetitle, or in an Application Data Sheet under 37 CFR 1.76:
`0 Continuation
`OO Divisional
`of prior application No: 09 / 539,667
`& Continuation-in-part (CIP)
`Art Unit: 2131
`Prior application information:
`Examiner Christopher A. Revak
`For CONTINUATIONor DIVISIONAL APPSonly:The entire disctosure of the prior application, from which an oath or declaration is supplied under Box 5b,
`is considered a part of the disclosure of the accompanyingordivisional application and is hereby incorporated by reference. The incorporation can only
`be relied upon whena portion has been inadvertently omitted from the submitted application parts.
`19. CORRESPONDENCE ADDRESS
`
`[KI] CustomerNumber
`
` -
`
`OR © Correspondence address below
`
`Address
`
`
`
`Name (Print/Type)
`
`Marc A. Sockol
`
`Registration No. (Attorney/Agent) PRR
`
`This collection of information is required by 37 CFR 1.53(b). The information is required to obtain or retain a benefit by the public which is to file (and by the USPTOto
`process)an application. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 minutes to complete,including gathering,
`preparing, and submitting the completed application form to the USPTO.Time will vary depending upon the individual case. Any comments on the amountof time you
`require to complete this form and/or suggestions for reducing this burden, should be sent to the Chief Information Officer, U.S. Patent and Trademark Office, U.S.
`Department of Commerce, P.O. Box 1450, Alexandria, VA 22313-1450. DO NOT SEND FEES OR COMPLETED FORMSTO THIS ADDRESS. SEND TO: Mail Stop
`Patent Application, Commissionerfor Patents, P.O. Box 1450, Alexandria, VA 22313-1450.
`
`

`

`CTvoeoso
`
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 3 of 38
`Express YigibbabellYogVESRISSOW/SAUSDocument 349-6 Filed 01/04/19 Page 3 9,28, 1003
`Approvedfor use through 07/31/2006. OMB 0651-0032
`U.S. Patent and Trademark Office: U.S. DEPARTMENT OF COMMERCE
`Under the Paperwork Reduction Act of 1995, no persons are required to respond to a collection of information unless it displays a valid OMB control number.
`
`
`
`
`
`
`FEE TRANSMITTAL.
`for FY 2004
`
`
`
`Hi
`First Named Inventor|Shlomo Touboul
`Effective 10/01/2003. Patent fees are subject to annualrevision.
`
`
`
`
`
`
`Attorney Docket No.|43426.00065
`
`Art Unit
`
`OJ Check
`
`O Creditcard
`
`[J Money (J Other 1) None
`Order
`
`I Deposit Account:
`
`Deposit
`Account
`Number
`
`05-0150
`
`Fee Description
`Surcharge- latefiling fee or oath
`Surcharge- late provisionalfiling fee
`or cover sheet.
`
`Fee Paid
`
`Deposit
`Account
`Name
`
`Squire, Sanders & DempseyL.L.P.
`
`The Director is authorized to: (check all that apply)
`& Charge fee(s) indicated below {& Credit any overpayments
`[J Charge any additional fee(s) during the pendencyofthis application
`D0 Chargefee(s) indicated below, except for the filing fee
`to the above-identified deposit account.
`
`FEE CALCULATION
`BASIC FILING FEE
`
`Fee Paid
`770
`
`Fee Description
`
`Utility filing fee
`Designfiling fee
`Plantfiling fee
`Reissuefiling fee
`Provisionalfilling fee
`
`265
`
`80
`
`SUBTOTAL(1)
`
`it greater; For Reissues, see above
`
`Non-English specification
`Forfiling a request for reexamination
`Requesting publication of SIR prior to
`Examiner action
`Requesting publication of. SIR after
`Examiner action
`Extension for reply within first month
`Extension for reply within second
`month
`Extensionfor reply within third month
`Extensionfor reply within fourth
`month
`Extension for reply within fifth month
`Notice of Appeal
`Filing a brief in support of an appeal
`Requestfor oral hearing
`Petition to institute a public use
`proceeding
`Petition to revive — unavoidable
`Petition to revive — unintentional
`Utility issue fee (or reissue)
`Design issue fee
`2. EXTRA CLAIM FEES FOR UTILITY AND REISSUE
`Extra
`Fee from
`Plant issue fee
`Claims
`below
`Petitions to the Commissioner
`[as J-2o~ =[25J
`Processing fee under 37 CFR 1.17 (q)}
`Submission of Information Disclosure
`Stmt
`Recording each patent assignment
`per property (times numberof
`properties)
`Filing a submissionafter final rejection
`(37 CFR § 1.129(a))
`For each additional invention to be
`examined (37 CFR § 1.129(b))
`Request for Continued Examination (RCE)
`Request for expedited examination
`of a design application
`
`Fee Description
`Claims in excess of 20
`Independent claims in excess of 3
`Multiple dependentclaim,if not paid
`** Reissue independentclaims over
`original patent
`“* Reissue claims in excess of 20 and
`overoriginal patent
`
`Otherfee (specify)
`SUBTOTAL (2)|($) 1310
`SUBTOTAL(3)
`“Reduced by Basic Filing Fee Paid
`
`SUBMITTED BY
`
`
`Registration No.
`Name (Print/Type)
`Mare A. Sockol
`(Attorney/Agent)
`
`May 3, 2004
`:
`(ome
`WARNING: Information on this form may become public. Credit card information should not be
`included on this form. Provide credit card information and authorization on PTO-2038.
`This collection of information is required by 37 CFR 1.17 and 1.27. The information is required to obtain or retain a benefit by the public which is to file (and by the USPTOto process) an
`application. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 minutes to complete, including gathering, preparing, and submitting the
`completed application form to the USPTO.Time will vary depending upon theindividual case. Any comments on the amountof time you require to complete this form and/or suggestions
`for reducing this burden, should be sent to the Chief Information Officer, U.S. Patent and Trademark Office, U.S. Department of Commerce, P.O. Box 1450, Alexandria, VA 22313-1450.
`DO NOT SEND FEES OR COMPLETED FORMSTO THIS ADDRESS. SEND TO: Commissionerfor Patents, P.O. Box 1450, Alexandria, VA 22313-1450.
`‘f you need assistance in completing this form, call 1-800-PTO-9199 (1-800-786-9199) and select option 2.
`.
`
`650.856.6500
`
`

`

`Case 3:17-cv-05659-WHA Document349-6 Filed 01/04/19 Page4 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 4 of 38
`
`Express Mail Label No. EL 806 908 759 US
`
`PATENT
`Attorney Docket No.: 43426.00065
`
`IN THE UNITED STATES PATENT AND TRADEMARK OFFICE
`
`In Re Application of:
`
`Shlomo Touboul
`
`Examiner:
`
`Unknown
`
`AT SECURE GATEWAYS
`
`Serial No:
`
`Unknown
`
`Art Unit:
`
`Unknown
`
`Filed:
`
`For:
`
`May3, 2004
`
`METHOD AND SYSTEM FOR CACHING
`
`BOX PATENT APPLICATION
`Commissionerfor Patents
`Washington, D.C. 20231
`
`GENERAL AUTHORIZATION TO PETITION FOR EXTENSIONS OF TIME
`
`DearSir:
`
`With reference to the subject application, and pursuant to 37 C.F.R. § 1.136, Applicant
`
`hereby authorizes and requests the Commissionerto treat any correspondence requiring a
`
`petition for extension of time as containing such a request therefore for the appropriate length of
`
`time. This general authorizationis effective during the pendencyofthis application, including
`any division or continuing application therefrom.
`.
`Whereno checkis received by the Commissioner, you are hereby authorized to charge
`
`paymentof the requisite petition fees, or charge any additional fee required under 37 C.F.R. §
`
`1.17, or credit any overpayment of same, to Deposit Account No. 05-0150.
`
`Date: S| 3 [2 4
`Squire, Sanders & Dempsey L.L.P.
`
`600 Hansen Way
`Palo Alto, CA 94304-1043
`Telephone (650) 856-6500
`Facsimile (650) 843-8777
`
`Respectfully submitted,
`By: PAS
`
`Marc A. Sockol
`Attorney for Applicant
`Reg. No. 40,823
`
`In re Touboul
`
`Page | of 1
`
`.
`
`68384
`
`

`

`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 5 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 5of 38
`PTO/SB/05 (01-04)
`Approvedfor use through 07/31/2006. OMB 0651-0032
`U.S. Patent and Trademark Office. US. DEPARTMENT OF COMMERCE
`Underthe Paperwork Reduction Act of 1995, no personsare required to respondto a collectionofinformation unlessit displays a valid OMBcontrol number.
`
`
`43426.00065
`
`
`
`UTILITY
`Shlomo Touboul
`
`
`
`PATENT APPLICATION
` METHOD AND SYSTEM FOR GACHING AT
`
`
`
`O
`SECURE GATEWAYS
`TRANSMITTAL
`
`
`
`(Only for new nonprovisional applications under 37 C.F.R. 1.53(b))
`
`Mail Stop Patent Application
`Commissionerfor Patents
`P.O. Box 1450
`Alexandria VA 22313-1450
`7. J CD-ROM or CD-R in duplicate, large table or
`Computer Program (Appendix)
`8. Nucleotide and/or Amino Acid Sequence Submission
`(if applicable, ail necessary)
`a. L] Computer Readable Form (CRF)
`Specification SequenceListing on:
`i. (J CD-ROM or CD-R (2 copies); or
`ii. ] Paper
`
`
`
`050304
`
`Attorney Docket No.
`
`First Inventor
`
`ADDRESSTO:
`
`APPLICATION ELEMENTS
`
`Mn
`yOeosO
`N
`
`iK
`
`(Mh
`
`See MPEP chapter 600 concerning utility patent application contents.
`
`Fee Transmittal Form (e.g., PTO/SB/17)
`(Submit an original and a duplicate for fee processing)
`Applicant claims small entity status.
`See 37 CFR 1.27.
`[Total Pages
`Specification
`(preferred arrangementset forth below)
`- Descriptive title of the Invention
`- Cross Reference to Related Applications
`- Statement Regarding Fed sponsored R & D
`- Reference to sequencelisting, a table,
`or a computerprogramlisting appendix
`- Backgroundof the Invention
`- Brief Summary of the Invention
`- Brief Description of the Drawings( iffiled)
`- Detailed Description
`- Claim(s)
`- Abstract of the Disclosure
`
`Assignment Papers (cover sheet & document(s))
`37 C.F.R. 3.73(b) Statement
`[[) Powerof
`(whenthere is an assignee) -
`Attorney
`
`English Translation Document(if applicable)
`Information Disclosure
`(J Copies of IDS
`4._Drawing(s) (35 U.S.C. 113)
`[Total Sheets _3
` }
`Citations
`Statement (IDS)/PTO-1449
`§. Oath or Declaration
`_2
`[Total Sheets
`]
`Preliminary Amendment
`a.
`[EX] Unsigned
`Return Receipt Postcard (MPEP 503)
`b. LJ Copy from a prior application (37 CFR 1.63 (d))
`(Should be specifically itemized)
`(for a continuation/divisional with Box 18 completed)
`Certified Copy of Priority Document(s)
`i (J DELETION OF INVENTOR(S)
`(if foreign priority is claimed)
`Signed statement attached deleting inventor(s)
`Nonpublication Request under 35 U.S.C. 122
`namedin the prior application, see 37 CFR
`(b)(2)(B)(i). Applicant must attach form PTO/SB/35
`1.63(d)(2) and 1.33(b).
`or its equivalent.
`6.L] Application Data Sheet. See 37 CFR 1.76
`Other: General Authorization to Petition for Extensions
`
`18. If a CONTINUING APPLICATION, check appropriate box, and supply the requisite information below andin the first sentenceofthe
`specification following thetitle, or in an Application Data Sheet under 37 CFR 1.76:
`0 Continuation
`OO Divisional
`of prior application No: 09 / 539,667
`& Continuation-in-part (CIP)
`Art Unit: 2131
`Prior application information:
`Examiner Christopher A. Revak
`For CONTINUATIONor DIVISIONAL APPSonly:The entire disctosure of the prior application, from which an oath or declaration is supplied under Box 5b,
`is considered a part of the disclosure of the accompanyingordivisional application and is hereby incorporated by reference. The incorporation can only
`be relied upon whena portion has been inadvertently omitted from the submitted application parts.
`19. CORRESPONDENCE ADDRESS
`
`[KI] CustomerNumber
`
` -
`
`OR © Correspondence address below
`
`Address
`
`
`
`Name (Print/Type)
`
`Marc A. Sockol
`
`Registration No. (Attorney/Agent) PRR
`
`This collection of information is required by 37 CFR 1.53(b). The information is required to obtain or retain a benefit by the public which is to file (and by the USPTOto
`process)an application. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 minutes to complete,including gathering,
`preparing, and submitting the completed application form to the USPTO.Time will vary depending upon the individual case. Any comments on the amountof time you
`require to complete this form and/or suggestions for reducing this burden, should be sent to the Chief Information Officer, U.S. Patent and Trademark Office, U.S.
`Department of Commerce, P.O. Box 1450, Alexandria, VA 22313-1450. DO NOT SEND FEES OR COMPLETED FORMSTO THIS ADDRESS. SEND TO: Mail Stop
`Patent Application, Commissionerfor Patents, P.O. Box 1450, Alexandria, VA 22313-1450.
`
`

`

`CTvoeoso
`
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 6 of 38
`Express YigibbabellYogVESRISSOWSAUSDocument 349-6 Filed 01/04/19 Page 6 9F,28,, 1003
`Approvedfor use through 07/31/2006. OMB 0651-0032
`U.S. Patent and Trademark Office: U.S. DEPARTMENT OF COMMERCE
`Under the Paperwork Reduction Act of 1995, no persons are required to respond to a collection of information unless it displays a valid OMB control number.
`
`
`
`
`
`
`FEE TRANSMITTAL.
`for FY 2004
`
`
`
`Hi
`First Named Inventor|Shlomo Touboul
`Effective 10/01/2003. Patent fees are subject to annualrevision.
`
`
`
`
`
`
`Attorney Docket No.|43426.00065
`
`Art Unit
`
`OJ Check
`
`O Creditcard
`
`[J Money (J Other 1) None
`Order
`
`I Deposit Account:
`
`Deposit
`Account
`Number
`
`05-0150
`
`Fee Description
`Surcharge- latefiling fee or oath
`Surcharge- late provisionalfiling fee
`or cover sheet.
`
`Fee Paid
`
`Deposit
`Account
`Name
`
`Squire, Sanders & DempseyL.L.P.
`
`The Director is authorized to: (check all that apply)
`& Charge fee(s) indicated below {& Credit any overpayments
`[J Charge any additional fee(s) during the pendencyofthis application
`D0 Chargefee(s) indicated below, except for the filing fee
`to the above-identified deposit account.
`
`FEE CALCULATION
`BASIC FILING FEE
`
`Fee Paid
`770
`
`Fee Description
`
`Utility filing fee
`Designfiling fee
`Plantfiling fee
`Reissuefiling fee
`Provisionalfilling fee
`
`265
`
`80
`
`SUBTOTAL(1)
`
`it greater; For Reissues, see above
`
`Non-English specification
`Forfiling a request for reexamination
`Requesting publication of SIR prior to
`Examiner action
`Requesting publication of. SIR after
`Examiner action
`Extension for reply within first month
`Extension for reply within second
`month
`Extensionfor reply within third month
`Extensionfor reply within fourth
`month
`Extension for reply within fifth month
`Notice of Appeal
`Filing a brief in support of an appeal
`Requestfor oral hearing
`Petition to institute a public use
`proceeding
`Petition to revive — unavoidable
`Petition to revive — unintentional
`Utility issue fee (or reissue)
`Design issue fee
`2. EXTRA CLAIM FEES FOR UTILITY AND REISSUE
`Extra
`Fee from
`Plant issue fee
`Claims
`below
`Petitions to the Commissioner
`[as J-2o~ =[25J
`Processing fee under 37 CFR 1.17 (q)}
`Submission of Information Disclosure
`Stmt
`Recording each patent assignment
`per property (times numberof
`properties)
`Filing a submissionafter final rejection
`(37 CFR § 1.129(a))
`For each additional invention to be
`examined (37 CFR § 1.129(b))
`Request for Continued Examination (RCE)
`Request for expedited examination
`of a design application
`
`Fee Description
`Claims in excess of 20
`Independent claims in excess of 3
`Multiple dependentclaim,if not paid
`** Reissue independentclaims over
`original patent
`“* Reissue claims in excess of 20 and
`overoriginal patent
`
`Otherfee (specify)
`SUBTOTAL (2)|($) 1310
`SUBTOTAL(3)
`“Reduced by Basic Filing Fee Paid
`
`SUBMITTED BY
`
`
`Registration No.
`Name (Print/Type)
`Mare A. Sockol
`(Attorney/Agent)
`
`May 3, 2004
`:
`(ome
`WARNING: Information on this form may become public. Credit card information should not be
`included on this form. Provide credit card information and authorization on PTO-2038.
`This collection of information is required by 37 CFR 1.17 and 1.27. The information is required to obtain or retain a benefit by the public which is to file (and by the USPTOto process) an
`application. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 minutes to complete, including gathering, preparing, and submitting the
`completed application form to the USPTO.Time will vary depending upon theindividual case. Any comments on the amountof time you require to complete this form and/or suggestions
`for reducing this burden, should be sent to the Chief Information Officer, U.S. Patent and Trademark Office, U.S. Department of Commerce, P.O. Box 1450, Alexandria, VA 22313-1450.
`DO NOT SEND FEES OR COMPLETED FORMSTO THIS ADDRESS. SEND TO: Commissionerfor Patents, P.O. Box 1450, Alexandria, VA 22313-1450.
`‘f you need assistance in completing this form, call 1-800-PTO-9199 (1-800-786-9199) and select option 2.
`.
`
`650.856.6500
`
`

`

`Case 3:17-cv-05659-WHA Document349-6 Filed 01/04/19 Page7 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 7 of 38
`
`Express Mail Label No. EL 806 908 759 US
`
`PATENT
`Attorney Docket No.: 43426.00065
`
`IN THE UNITED STATES PATENT AND TRADEMARK OFFICE
`
`In Re Application of:
`
`Shlomo Touboul
`
`Examiner:
`
`Unknown
`
`AT SECURE GATEWAYS
`
`Serial No:
`
`Unknown
`
`Art Unit:
`
`Unknown
`
`Filed:
`
`For:
`
`May3, 2004
`
`METHOD AND SYSTEM FOR CACHING
`
`BOX PATENT APPLICATION
`Commissionerfor Patents
`Washington, D.C. 20231
`
`GENERAL AUTHORIZATION TO PETITION FOR EXTENSIONS OF TIME
`
`DearSir:
`
`With reference to the subject application, and pursuant to 37 C.F.R. § 1.136, Applicant
`
`hereby authorizes and requests the Commissionerto treat any correspondence requiring a
`
`petition for extension of time as containing such a request therefore for the appropriate length of
`
`time. This general authorizationis effective during the pendencyofthis application, including
`any division or continuing application therefrom.
`.
`Whereno checkis received by the Commissioner, you are hereby authorized to charge
`
`paymentof the requisite petition fees, or charge any additional fee required under 37 C.F.R. §
`
`1.17, or credit any overpayment of same, to Deposit Account No. 05-0150.
`
`Date: S| 3 [2 4
`Squire, Sanders & Dempsey L.L.P.
`
`600 Hansen Way
`Palo Alto, CA 94304-1043
`Telephone (650) 856-6500
`Facsimile (650) 843-8777
`
`Respectfully submitted,
`By: PAS
`
`Marc A. Sockol
`Attorney for Applicant
`Reg. No. 40,823
`
`In re Touboul
`
`Page | of 1
`
`.
`
`68384
`
`

`

`“—
`
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 8 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 8 of 38
`
`UNITED STATES PATENT APPLICATION
`
`FOR
`
`Method and System for Caching at Secure Gateways
`
`Inventor:
`
`Shlomo Toubol
`
`Preparedby:
`
`MARCA. BERGER
`
`P. O. BOX 2085
`
`REHOVOT 76120
`
`ISRAEL
`
`08-93 15207
`
`ATTORNEY DOCKET No.: 43426.00065
`
`Please direct communicationsto:
`Squire, Sanders & Dempsey L.L.P.
`600 Hansen Way
`Palo Alto, CA 94304-1043
`(650) 856-6500
`
`“Express Mail” mailing label number:_EL 806 908 759 US
`
`
`Date of Deposit:_May 3, 2004
`I hereby certify that I am causing this paper or fee to be deposited with the United States Postal
`Service “Express Mail Post Office to Addressee” service on the date indicated above and that
`this paper or fee has been addressed to the Assistant Commissioner for Patents, Washington, D.
`C. 20231
`Marc A. Sockol
`(Typed or printed nameef person mailing paper or fee)
`
`(Signature of person mailing paper or fee)
`May
`3, 2004
`
`(Date signed)
`
`

`

`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 9 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 9 of 38
`
`Method and System for Caching at Secure Gateways
`
`CROSS REFERENCES TO RELATED APPLICATIONS
`
`This application is a continuation-in-part of assignee’s pending
`application U.S. Serial No. 09/539,667, filed on March 30, 2000, and entitled
`SYSTEM AND METHOD FOR PROTECTING A COMPUTER AND A
`
`NETWORK FROM HOSTILE DOWNLOADABLES, whichis a continuation of
`U.S. Serial No. 08/964,388 (now U.S. Patent No. 6,092,194), filed on November
`6,
`1997 and entitled SYSTEM AND METHOD FOR PROTECTING A
`COMPUTER AND A NETWORK FROM HOSTILE DOWNLOADABLES.
`
`FIELD OF THE INVENTION
`
`The present invention relates to computer security and network
`
`gateways.
`
`BACKGROUNDOF THE INVENTION
`
`A network gateway computer conventionally serves as a proxy
`between a groupof inter-connected computers, referred to as an intranet, such as a
`corporate intranet or customers of an Internet service provide, and the myriads of
`server computers on the Internet. The gateway computer is networked with the
`intranet computers in such a way that outgoing requests and responses from the
`intranet computersto the Internet, and incoming requests and responses from the
`Internet to the intranet computers are routed through the gateway computer.
`Typically, a request is issued as an HTTP protocol request that
`includes a URI for a file, such as an HTML page, a JPEG image or a PDF
`document, residing on one or more server computers on the Internet. Similarly, a
`response is typically an HTTP response including a requested file, sent back to a
`client in response to a request.
`Network gateways are generally connected to an intranet with
`high-speed lines, so that the bandwidth between the intranet computers and the
`gateway computer is much higher than the bandwidth between the gateway
`computer andrest of the Internet.
`Two important functions of computer gatewaysare (i) to restrict
`outsiders from unauthorized access to a computer intranet, and (ii) to protect the
`intranet computers from software containing computer viruses and from spam.
`
`-1-
`
`10
`
`15
`
`20
`
`25
`
`30
`
`35
`
`40
`
`

`

`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 10 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 10 of 38
`
`Computer gateways may contain conventional firewall software that restricts
`outside communication with the intranet, anti-virus software that
`identifies
`computer viruses residing within files retrieved from the Internet, and anti-spam
`software that filters out unwanted content.
`
`Current gateway systems cause latency because clients do not
`access websites directly, and because current gateway systems apply security
`protocols to protect intranet members. Accordingly, systems and methods for
`reducing network access latency without compromising network safety are
`needed.
`
`

`

`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 11 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 11 of 38
`
`SUMMARYOF THE INVENTION
`
`10
`
`15
`
`20
`
`25
`
`invention provides a method and system for
`The present
`improving performance of gateway computers. Specifically, the present invention
`mitigates network latency caused by processing time at a gateway computer.
`There thus provided in accordance with a_preferredis
`
`
`embodiment of the present
`invention a computer gateway for an intranet of
`computers, including a scanner for scanning incoming files from the Internet and
`deriving security profiles therefor, the security profiles being lists of computer
`commandsthat the files are programmedto perform,a file cache for storing files,
`a security profile cache for storing security profiles for files, and a security policy
`cache for storing security policies for intranet computers within an intranet, the
`security policies including a list of restrictions for files that are transmitted to
`intranet computers.
`further provided in accordance with a preferred
`.
`There is
`embodimentof the present invention a method for operation of a network gateway
`for an intranet of computers,
`including receiving a request from an intranet
`computerfor a file on the Internet, determining whether the requested file resides
`within a file cache at the network gateway, if the determining is affirmative then
`retrieving a security profile for the requested file from a security profile cache at
`the network gateway, the security profile including a list of at least one computer
`commandthat the file is programmedto perform, and if the determining is not
`affirmative then retrieving the requested file from the Internet, scanning the
`retrieved file to determine computer commandsthat the file is programmed to
`perform, deriving a security profile for the retrieved file, storing the retrieved file
`within the file cache, and storing the security profile for the retrieved file within a
`security profile cache, retrieving a security policy for the intranet computer from a
`security policy cache at
`the network gateway,
`the security policy defining
`restrictions for transmitting files to the intranet computer, and comparing the
`security profile for the requested file vis a vis the security policy for the intranet
`computer, to determine whether transmission of the requested file to the intranet
`computeris to be restricted.
`There is yet further provided in accordance with a preferred
`embodimentof the present invention a computer-readable storage medium storing
`program code for causing a computer to perform the steps of receiving a request
`from an intranet computer for a file on the Internet, determining whether the
`requested file resides within a file cache at
`the network gateway,
`if the
`determining is affirmative then retrieving a security profile for the requestedfile
`from a security profile cache at
`the network gateway,
`the security profile
`including a list of at least one computer commandthat the file is programmed to
`
`30
`
`35
`
`40
`
`-3-
`
`

`

`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 12 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 12 of 38
`
`perform, and if the determining is not affirmative then retrieving the requestedfile
`from the Internet, scanning the retrieved file to determine computer commands
`that the file is programmedto perform, deriving a security profile for the retrieved
`file, storing the retrieved file within the file cache, and storing the security profile
`for the retrieved file within a security profile cache, retrieving a security policy for
`the intranet computer from a security policy cache at the network gateway, the
`security policy defining restrictions for transmitting files to the intranet computer,
`and comparing the security profile for the requested file vis a vis the security
`policy for the intranet computer,
`to determine whether transmission of the
`requested file to the intranet computeris to be restricted.
`There is moreover provided in accordance with a preferred
`embodimentof the present invention a method for operation of a network gateway
`for an intranet of computers,
`including receiving a request from an intranet
`computer for a file on the Internet, retrieving a security profile for the requested
`file from a security profile cache at the network gateway,
`the security profile
`including a list of at least one computer commandthat the file is programmedto
`perform, retrieving a security policy for the intranet computer from a security
`policy cache at the network gateway, the security policy defining restrictions on
`files that can be transmitted to the intranet computer, and comparing the security
`profile for the requested file vis a vis the security policy for the intranet computer,
`to determine whether transmission of the requested file to the intranet computeris
`to be restricted.
`
`There is additionally provided in accordance with a preferred
`embodiment of the present invention a computer-readable storage medium storing
`program code for causing a computer to perform the steps of receiving a request
`from an intranet computer for a file on the Internet, retrieving a security profile
`for the requested file from a security profile cache at the network gateway, the
`security profile including a list of at least one computer commandthatthefile is
`programmed to perform, retrieving a security policy for the intranet computer
`from a security policy cache at the network gateway, the security policy defining
`restrictions on files that can be transmitted to the intranet computer, and
`comparing the security profile for the requested file vis a vis the security policy
`for the intranet computer, to determine whether transmission of the requested file
`tothe intranet computeris to be restricted.
`There is
`further provided in accordance with a preferred
`embodimentof the present invention a method for operation of a network gateway
`for an intranet of computers,
`including retrieving a requested file from the
`Internet, scanning the retrieved file to determine computer commandsthatthe file
`is programmed to perform, deriving a security profile for the retrieved file, the
`security profile including a list of at
`least one computer command that the
`
`-4-
`
`10
`
`15
`
`20
`
`25
`
`30
`
`35
`
`40
`
`

`

`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 13 of 38
`Case 3:17-cv-05659-WHA Document 349-6 Filed 01/04/19 Page 13 of 38
`
`retrieved file is programmed to perform, storing the retrieved file within a file
`cache, and storing the security profile for the retrieved file within a security
`profile cache.
`
`There is yet further provided in accordance with a preferred
`embodiment of the present invention a computer-readable storage medium storing
`program code for causing a computer to perform the steps of retrieving a
`requested file from the Internet, scanning the retrieved file to determine computer
`commandsthatthe file is programmed to perform, deriving a security profile for
`the retrieved file, the security profile including a list of at least one computer
`commandthat the retrieved file is programmed to perform, storing the retrieved
`file within a file cache, and storing the security profile for the retrieved file within
`a security profile cache.
`There is moreover provided in accordance with a preferred
`embodiment of the present
`invention a computer gateway for an intranet of
`computers,
`including a file cache for storing files, a security profile cache for
`storing security profiles for files, the security profiles being lists of computer
`commandsthatthe files are programmed to perform, and a security policy cache
`for storing security policies for intranet computers within an intranet, the security
`policies including a list of restrictions for files that are transmitted to intranet
`
`10
`
`15
`
`20
`
`computers.
`
`There is additionally provided in accordance with a preferred
`embodimentofthe present invention a method for operation of a network gateway
`for an intranet of computers,
`including receiving a request from an intranet
`computer for a file on the Internet, determining whether the requested file resides
`