`. Approved for use through 04/30/2003. OMB 0651-0032
`U. S. Patent and Trademark Office. U. S. DEPARTMENT OF COMMERCE
`Under the Papenrvork Reduction Act of 1995. no persons are required to respond to a collection of information unless it displays a valid OMB control number.
`000479.00111
`
`
`
`UTILITY
`
`\fictor Larson
`
`
`
`PATENT APPLICATION
`
`An Agile Network Protocol For Secure Communications Using Secure
`TRANS M ITTAL
`
`
`
`
`Domain Names
`
`Express Mail Label No.
`(Only fornew nonprovisional applications under 37 CF. R. 1. 53(b))
`
`
`Commissioner for Patents
`
`
`APPLICATION ELEMENTS
`PO. Box 1450
`
`Mail Stop PatentApplication
`ADDRESS TO'
`
`
`See MPEP chapter 600 concerning utility patent application contents.
`Alexandria VA 22313—1450
`
`
` Fee Transmittal Form (e.g., PTOISBI17)
`
`7. 1:] CD-ROM or CD-R in duplicate, large table or
`
`Computer Program (Appendix)
`(Submit an original and a duplicate for fee processing)
`
`2. E]
`Applicant claims small entity status.
`8. Nucleotide andlor Amino Acid Sequence Submission
`
`
`See 37 CFR 1.27.
`(if applicable, all necessary)
`1E Specification
`[Total Pages [3.3:] ]
`a. C] Computer Readable Form (CRF)
`
`
`(preferred arrangement set forth below)
`b. Specification Sequence Listing on:
`
`- Descriptive title of the Invention
`i. E] CD-ROM or CD-R (2 copies)' or
`- Cross Reference to Related Applications
`ii. D paper
`'
`
`
`- Statement Regarding Fed sponsored R & D
`
`c. I] Statements veri
`in- identit of above co-ies
`- Reference to sequence listing, a table.
`
`or a computer program listing appendix
`ACCOMPANYING APPLICATIONS PARTS
`
`- Background of the Invention
`- Brief Summary of the Invention
`
`
`- Brief Description of the Drawings ( if filed)
`- Detailed Description
`- Claim(s)
`- Abstract of the Disclosure
`
`till
` [93I...
`IIIIIIIIII
`
`II
`IIit
`
`9
`
`10/71484
`
`
`
`
`
`
`
`
`
`
`
`
`
`9. E Assignment Papers (cover sheet 8. document(s))
`
`
`10. E]
`37 CFR, 3.73(b) Statement
`E] Power of
`
`
`(when there is an assignee)
`Attorney
`
`
`
`
`
`
`
`Preliminary Amendment
`
`
`
`
`Return Receipt Postcard (MPEP 503)
`(Should be specifically itemized)
`
`
`Certified Copy of Priority Document(s)
`
`
`(if foreign priority is claimed)
`Nonpublication Request under 35 U.S.C. 122
`
`
`
`(b)(2)(B)(i). Applicant must attach form PTO/SB/35
`
`
`
`or its equivalent.
`
`
`
`Other:
`
`
`6. E Application Data Sheet. See 37 CFR 1.76
`
` 18. If a CONTINUING APPLICATION, check appropriate box, and supply the requisite information below and in a preliminary amendment,
`
`
`or in an Application Data Sheet under 37 CFR 1. 76:
`
`E Continuation
`D Divisional
`El Continuation-in-part (CIP)
`of prior application No: pg] 558 210
`Prior application information:
`Examiner Krisna Lim
`Art Unit: L53
`For CONTINUATION or DIVISIONAL APPS only: The entire disclosure of the prior application, from which an oath or declaration Is supplied
`
`
`under Box 5b, Is considered a part of the disclosure of the accompanying or divisional application and is hereby Incorporated by reference.
`The incorporation can only be relied upon when a portion has been lnadvertently omitted from the submitted application parts.
`19. CORRESPONDENCE ADDRESS
`
`
`22907
`
`
`
`8 Customer Number or Bar Code Label
`or Cl
`Correspondence address below
`
`
`Insert Customer No. or Attach bar code label here
`
`
`
`
`
`
`
`
`
`
`
`
`
`11. E]
`
`English Translation Document (if applicable)
`
`[Total Sheetslll
`
`4. E Drawing(s) (35 U. S. C. 1 13)
`IX Formal
`[I Informal
`[Total Sheets :1]
`5. Oath or Declaration
`a. E Newly executed (original or copy)
`b. E] Copy from a prior application (37 CFR 1.63 (d))
`(for a continuation/divisional with Box 18 completed)
`i. D DELETION OF |NVENTOR§St
`Signed statement attached deleting inventor(s)
`named in the prior application, see 37 CFR
`1.63(d)(2) and 1.33(b).
`
`12. E Information Disclosure
`Statement (lDS)/PTO-1449
`
`E] Copies of IDS
`Citations
`
`13. E]
`14. IX
`
`15. E]
`
`16. E]
`
`
`
`
`
`
`
`
`
`F_-
`
`Name (Print/Type)
`
`Ross A. Dannenberg
`
`Registration No. (Aftomey/Agent)
`
`49024
`
`
`
`‘.
`This collection of information is required by 37 CFR 1.53(b). The information is requrred to obtain or retain a benefit by the public which is to file (and by the
`USPTO to process) an application. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 minutes to complete.
`including gathering. preparing, and submitting the completed application form to the USPTO. Time will vary depending upon the individual use. Any comments on
`the amount of time you require to complete this form and/or suggestions for reducing this burden, should be sent to the Chief Information Ofiicer. US Patent and
`Trademark Office, US. Department at Commerce, Po. Box 1450. Alexandria. VA 22313-1450. DO NOT SEND FEES OR COMPLETED FORMS TO THIS
`ADDRESS. SEND TO: Mall Stop Patent Appllcatlon, Commissloner for Patents, PO. Box 1450, Alexandfla, VA 22313-1450.
`
`
`
`
`
`
`
`
`
`Petitioner Apple - EX. 1002, p. 1
`
`Petitioner Apple - Ex. 1002, p. 1
`
`
`
`r luluuii: \uuw,
`Approved for use through 07f31r20CB. OMB 0651-0032
`US. Patent and Trademark Office: US. DEPARTMENT OF COMMERCE
`Under the Paperwork Reduction Act of 1995. no persons are required to respond to a collection of information unless it displays a valid OMB control number.
`
`FEE TRANSMITTAL
`
`Application Number
`
`WW"
`
`for FY 2004 I
`
`Effective 10/01/2003. Patent fees are subject to annual revision.
`
`Filing Date
`First Named inventor
`Examiner Name
`
`November18, 2003
`Victor Larson
`TBA
`
`[:I Applicant claims small entity status. See 37 CFR 1.27
`
`Art Unit
`
`TBA
`
`TOTAL AMOUNT OF PAYMENT
`
`(5)
`
`1036
`
`AttorneyDocketNo.
`
`00047900111
`
`DCheck
`
`METHOD OF PAYMENT (check all that apply)
`.
`E] Credit card E] Money E] Other E] None
`Order
`
`FEE CALCULATION (continued
`3. ADDITIONAL FEES
`'
`Small Enti
`
`Fee Description
`
`Surcharge - late filing fee or oath
`Surcharge - late provisional filing fee
`of COVEI‘ sheet.
`
`Non—English specification
`For filing a request for reexamination
`Requesting publication of SIR prior to
`Examiner action
`Requesting publication of SIR any
`Examiner action
`Extension for reply within first month
`.
`_
`.
`Extenston for reply Within second
`month
`Extension for reply within third month
`Extension for reply within fourth
`month
`Extension for reply within fifth month
`
`Notice of Appeal
`Filing a brief in support of an appeal
`Request for oral hearing
`Petition to institute a public use
`proceeding
`Petition to revive - unavoidable
`
`Petition to revive — unintentional
`Utility issue fee (or reissue)
`Design issue tee
`Plant issue fee
`
`40
`
`Petitionstothe Commissioner
`,
`Processing fee under 37 CFR 1.17 (q)
`Submission otlntormation Disclosure
`Stmt
`Recording each patent assignment
`per property (times number of
`properties)
`Filing a submission after final rejection
`(37 CFR § 1.129(a))
`For each additional invention to be
`examined (37 CFR 5 1-129(b))
`335 Request for Continued Examination (RCE)
`
`385
`
`385
`
`
`
`E Deposit Account:
`.
`Deposit
`Account
`Number
`
`19-0733
`
`1
`
`‘
`Deposit
`Banner & WitCOff, LTD.
`figgnt
`-
`The Director is authorized to: (check all that apply)
`‘
`E Charge fee(s) indicated below E Credit any overpayments .
`I] Charge any additional fee(s) dunng the pendency of this application
`El Charge fee(s) indicated below, except for the filing fee
`to the above-identified deaosrt account.
`FEE CALCULATION
`BASIC FILING FEE
`
`1.
`
`Fee Description
`
`Utility filing fee
`Design filing fee
`Plant filing fee
`Reissue filing fee
`Provisional filling fee
`
`80
`
`SUBTOTAL (1)
`
`2. EXTRA CLAIM FEES FOR UTILITY AND REISSUE
`Extra
`Fee from
`Claims
`below
`
`Fee
`Paid
`
`otal Claims -20 --
`Independent
`Claims E1 -3 "
`
`= E]
`X
`= E X
`
`=
`=
`
`Small Entl
`Fee
`(5)
`9
`43
`
`43
`
`9
`
`Fee Description
`Claims in excess of 20
`Independent claims in excess of 3
`Multiple dapendem claim if not Paid
`" Reissue independent claims over
`original patent
`“ Reissue claims in excess of 20 and
`over on'ginal patent
`
`'
`
`- Ieater: For Reissues, see above
`
`SUBMITTED BY
`
`1806
`
`8021
`
`2809
`
`2810
`
`2801
`
`1802
`
`900
`
`Request for expedited examination
`of a design application
`
`Other fee (specify)
`
`'Reduced by Basic Filing Fee Paid
`
`SUBTOTAL (3)
`
`($) 40
`
`Registration No.
`(202) 824—3153
`Telephone
`49,024
`(Aftomey/Agent)
`RA 5 A Dannen‘
`Name (Print/Type)
`’
`—rceal=—-_~;gm m
`WARNING: Information on this form may become public. Credit card information should not be
`Included on this form. Provide credit card information and authorization on PTO-2038.
`This ooiledion of information is required by 37 CFR 117 and 1.27. The infonnation is required to obtain or retain a benefit by the public which is to file (and by the USPTO to process) an
`appIi-tion. Confidentiality is governed by 35 U‘S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 minutes to complete, including gathering, preparing, and submitting the
`completed appli-tion form to the USPTO. Time will vary depending upon the individual case. Any comments on the amount of time you require to complete this form and/or suggestions
`for reducing this burden, should be sent to the Chief Information Officer, US. Patent and Trademark Office. US. Department of Commerce, PO. Box 1450, Alexandria. VA 22313-1450.
`DO NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: Commissioner for Patents, PO. Box 1450, Alexandria. VA 22313-1450.
`Ilyou need assistance in completing this form, call 1-800-PTO—9199 (1-800-786—9199) and select option 2.
`
`Petitioner Apple - EX. 1002, p. 2
`
`Petitioner Apple - Ex. 1002, p. 2
`
`
`
`PTOISBI05 (05-03)
`. Approved for use through 04/30/2003. OMB 0651-0032
`U. S. Patent and Trademark Office. U. S. DEPARTMENT OF COMMERCE
`Under the Papenrvork Reduction Act of 1995. no persons are required to respond to a collection of information unless it displays a valid OMB control number.
`000479.00111
`
`
`
`UTILITY
`
`\fictor Larson
`
`
`
`PATENT APPLICATION
`
`An Agile Network Protocol For Secure Communications Using Secure
`TRANS M ITTAL
`
`
`
`
`Domain Names
`
`Express Mail Label No.
`(Only fornew nonprovisional applications under 37 CF. R. 1. 53(b))
`
`
`Commissioner for Patents
`
`
`APPLICATION ELEMENTS
`PO. Box 1450
`
`Mail Stop PatentApplication
`ADDRESS TO'
`
`
`See MPEP chapter 600 concerning utility patent application contents.
`Alexandria VA 22313—1450
`
`
` Fee Transmittal Form (e.g., PTOISBI17)
`
`7. 1:] CD-ROM or CD-R in duplicate, large table or
`
`Computer Program (Appendix)
`(Submit an original and a duplicate for fee processing)
`
`2. E]
`Applicant claims small entity status.
`8. Nucleotide andlor Amino Acid Sequence Submission
`
`
`See 37 CFR 1.27.
`(if applicable, all necessary)
`1E Specification
`[Total Pages [3.3:] ]
`a. C] Computer Readable Form (CRF)
`
`
`(preferred arrangement set forth below)
`b. Specification Sequence Listing on:
`
`- Descriptive title of the Invention
`i. E] CD-ROM or CD-R (2 copies)' or
`- Cross Reference to Related Applications
`ii. D paper
`'
`
`
`- Statement Regarding Fed sponsored R & D
`
`c. I] Statements veri
`in- identit of above co-ies
`- Reference to sequence listing, a table.
`
`or a computer program listing appendix
`ACCOMPANYING APPLICATIONS PARTS
`
`- Background of the Invention
`- Brief Summary of the Invention
`
`
`- Brief Description of the Drawings ( if filed)
`- Detailed Description
`- Claim(s)
`- Abstract of the Disclosure
`
`till
` [93I...
`IIIIIIIIII
`
`II
`IIit
`
`9
`
`10/71484
`
`
`
`
`
`
`
`
`
`
`
`
`
`9. E Assignment Papers (cover sheet 8. document(s))
`
`
`10. E]
`37 CFR, 3.73(b) Statement
`E] Power of
`
`
`(when there is an assignee)
`Attorney
`
`
`
`
`
`
`
`Preliminary Amendment
`
`
`
`
`Return Receipt Postcard (MPEP 503)
`(Should be specifically itemized)
`
`
`Certified Copy of Priority Document(s)
`
`
`(if foreign priority is claimed)
`Nonpublication Request under 35 U.S.C. 122
`
`
`
`(b)(2)(B)(i). Applicant must attach form PTO/SB/35
`
`
`
`or its equivalent.
`
`
`
`Other:
`
`
`6. E Application Data Sheet. See 37 CFR 1.76
`
` 18. If a CONTINUING APPLICATION, check appropriate box, and supply the requisite information below and in a preliminary amendment,
`
`
`or in an Application Data Sheet under 37 CFR 1. 76:
`
`E Continuation
`D Divisional
`El Continuation-in-part (CIP)
`of prior application No: pg] 558 210
`Prior application information:
`Examiner Krisna Lim
`Art Unit: L53
`For CONTINUATION or DIVISIONAL APPS only: The entire disclosure of the prior application, from which an oath or declaration Is supplied
`
`
`under Box 5b, Is considered a part of the disclosure of the accompanying or divisional application and is hereby Incorporated by reference.
`The incorporation can only be relied upon when a portion has been lnadvertently omitted from the submitted application parts.
`19. CORRESPONDENCE ADDRESS
`
`
`22907
`
`
`
`8 Customer Number or Bar Code Label
`or Cl
`Correspondence address below
`
`
`Insert Customer No. or Attach bar code label here
`
`
`
`
`
`
`
`
`
`
`
`
`
`11. E]
`
`English Translation Document (if applicable)
`
`[Total Sheetslll
`
`4. E Drawing(s) (35 U. S. C. 1 13)
`IX Formal
`[I Informal
`[Total Sheets :1]
`5. Oath or Declaration
`a. E Newly executed (original or copy)
`b. E] Copy from a prior application (37 CFR 1.63 (d))
`(for a continuation/divisional with Box 18 completed)
`i. D DELETION OF |NVENTOR§St
`Signed statement attached deleting inventor(s)
`named in the prior application, see 37 CFR
`1.63(d)(2) and 1.33(b).
`
`12. E Information Disclosure
`Statement (lDS)/PTO-1449
`
`E] Copies of IDS
`Citations
`
`13. E]
`14. IX
`
`15. E]
`
`16. E]
`
`
`
`
`
`
`
`
`
`F_-
`
`Name (Print/Type)
`
`Ross A. Dannenberg
`
`Registration No. (Aftomey/Agent)
`
`49024
`
`
`
`‘.
`This collection of information is required by 37 CFR 1.53(b). The information is requrred to obtain or retain a benefit by the public which is to file (and by the
`USPTO to process) an application. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 minutes to complete.
`including gathering. preparing, and submitting the completed application form to the USPTO. Time will vary depending upon the individual use. Any comments on
`the amount of time you require to complete this form and/or suggestions for reducing this burden, should be sent to the Chief Information Ofiicer. US Patent and
`Trademark Office, US. Department at Commerce, Po. Box 1450. Alexandria. VA 22313-1450. DO NOT SEND FEES OR COMPLETED FORMS TO THIS
`ADDRESS. SEND TO: Mall Stop Patent Appllcatlon, Commissloner for Patents, PO. Box 1450, Alexandfla, VA 22313-1450.
`
`
`
`
`
`
`
`
`
`Petitioner Apple - EX. 1002, p. 3
`
`Petitioner Apple - Ex. 1002, p. 3
`
`
`
`r luluuii: \uuw,
`Approved for use through 07f31r20CB. OMB 0651-0032
`US. Patent and Trademark Office: US. DEPARTMENT OF COMMERCE
`Under the Paperwork Reduction Act of 1995. no persons are required to respond to a collection of information unless it displays a valid OMB control number.
`
`FEE TRANSMITTAL
`
`Application Number
`
`WW"
`
`for FY 2004 I
`
`Effective 10/01/2003. Patent fees are subject to annual revision.
`
`Filing Date
`First Named inventor
`Examiner Name
`
`November18, 2003
`Victor Larson
`TBA
`
`[:I Applicant claims small entity status. See 37 CFR 1.27
`
`Art Unit
`
`TBA
`
`TOTAL AMOUNT OF PAYMENT
`
`(5)
`
`1036
`
`AttorneyDocketNo.
`
`00047900111
`
`DCheck
`
`METHOD OF PAYMENT (check all that apply)
`.
`E] Credit card E] Money E] Other E] None
`Order
`
`FEE CALCULATION (continued
`3. ADDITIONAL FEES
`'
`Small Enti
`
`Fee Description
`
`Surcharge - late filing fee or oath
`Surcharge - late provisional filing fee
`of COVEI‘ sheet.
`
`Non—English specification
`For filing a request for reexamination
`Requesting publication of SIR prior to
`Examiner action
`Requesting publication of SIR any
`Examiner action
`Extension for reply within first month
`.
`_
`.
`Extenston for reply Within second
`month
`Extension for reply within third month
`Extension for reply within fourth
`month
`Extension for reply within fifth month
`
`Notice of Appeal
`Filing a brief in support of an appeal
`Request for oral hearing
`Petition to institute a public use
`proceeding
`Petition to revive - unavoidable
`
`Petition to revive — unintentional
`Utility issue fee (or reissue)
`Design issue tee
`Plant issue fee
`
`40
`
`Petitionstothe Commissioner
`,
`Processing fee under 37 CFR 1.17 (q)
`Submission otlntormation Disclosure
`Stmt
`Recording each patent assignment
`per property (times number of
`properties)
`Filing a submission after final rejection
`(37 CFR § 1.129(a))
`For each additional invention to be
`examined (37 CFR 5 1-129(b))
`335 Request for Continued Examination (RCE)
`
`385
`
`385
`
`
`
`E Deposit Account:
`.
`Deposit
`Account
`Number
`
`19-0733
`
`1
`
`‘
`Deposit
`Banner & WitCOff, LTD.
`figgnt
`-
`The Director is authorized to: (check all that apply)
`‘
`E Charge fee(s) indicated below E Credit any overpayments .
`I] Charge any additional fee(s) dunng the pendency of this application
`El Charge fee(s) indicated below, except for the filing fee
`to the above-identified deaosrt account.
`FEE CALCULATION
`BASIC FILING FEE
`
`1.
`
`Fee Description
`
`Utility filing fee
`Design filing fee
`Plant filing fee
`Reissue filing fee
`Provisional filling fee
`
`80
`
`SUBTOTAL (1)
`
`2. EXTRA CLAIM FEES FOR UTILITY AND REISSUE
`Extra
`Fee from
`Claims
`below
`
`Fee
`Paid
`
`otal Claims -20 --
`Independent
`Claims E1 -3 "
`
`= E]
`X
`= E X
`
`=
`=
`
`Small Entl
`Fee
`(5)
`9
`43
`
`43
`
`9
`
`Fee Description
`Claims in excess of 20
`Independent claims in excess of 3
`Multiple dapendem claim if not Paid
`" Reissue independent claims over
`original patent
`“ Reissue claims in excess of 20 and
`over on'ginal patent
`
`'
`
`- Ieater: For Reissues, see above
`
`SUBMITTED BY
`
`1806
`
`8021
`
`2809
`
`2810
`
`2801
`
`1802
`
`900
`
`Request for expedited examination
`of a design application
`
`Other fee (specify)
`
`'Reduced by Basic Filing Fee Paid
`
`SUBTOTAL (3)
`
`($) 40
`
`Registration No.
`(202) 824—3153
`Telephone
`49,024
`(Aftomey/Agent)
`RA 5 A Dannen‘
`Name (Print/Type)
`’
`—rceal=—-_~;gm m
`WARNING: Information on this form may become public. Credit card information should not be
`Included on this form. Provide credit card information and authorization on PTO-2038.
`This ooiledion of information is required by 37 CFR 117 and 1.27. The infonnation is required to obtain or retain a benefit by the public which is to file (and by the USPTO to process) an
`appIi-tion. Confidentiality is governed by 35 U‘S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 minutes to complete, including gathering, preparing, and submitting the
`completed appli-tion form to the USPTO. Time will vary depending upon the individual case. Any comments on the amount of time you require to complete this form and/or suggestions
`for reducing this burden, should be sent to the Chief Information Officer, US. Patent and Trademark Office. US. Department of Commerce, PO. Box 1450, Alexandria. VA 22313-1450.
`DO NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: Commissioner for Patents, PO. Box 1450, Alexandria. VA 22313-1450.
`Ilyou need assistance in completing this form, call 1-800-PTO—9199 (1-800-786—9199) and select option 2.
`
`Petitioner Apple - EX. 1002, p. 4
`
`Petitioner Apple - Ex. 1002, p. 4
`
`
`
`Docket No. 000479001 11
`
`AN AGILE NETWORK PROTOCOL FOR SECURE COMMUNICATIONS USING
`
`SECURE DOMAIN NAMES
`
`CROSS-REFERENCE TO RELATED APPLICATIONS
`
`This application claims priority from and is a continuation patent application of co-
`
`pending U.S. application serial number 09/558,210,
`
`filed April 26, 2000, which is a
`
`continuation-in-part patent application of previously-filed US. application serial number
`
`09/504,783, filed on February 15, 2000, now US. Pat. No. 6,502,135, issued December 31,
`
`2002, which claims priority from and is a continuation-in-part patent application of previously-
`
`filed US. application serial number 09/429,643, filed on October 29, 1999. The subject matter
`
`of US. application serial number 09/429,643, which is bodily incorporated herein, derives from
`
`provisional US. application numbers 60/106,261 (filed October 30, 1998) and 60/ 137,704 (filed
`
`June 7, 1999). The present application is also related \to US. application serial number (Atty
`
`Docket No. 47986838), filed April 26, 2000, and which is incorporated by reference herein.
`
`BACKGROUND OF THE INVENTION
`
`A tremendous variety of methods have been proposed and implemented to provide
`
`security and anonymity for communications over the Internet. The variety stems, in part, from
`
`the different needs of different Internet users. A basic heuristic framework to aid in discussing
`
`these different security techniques is illustrated in FIG. 1. Two terminals, an originating terminal
`
`100 and a destination terminal 110 are in communication over the Internet. It is desired for the
`
`communications to be secure, that is, immune to eavesdropping. For example, terminal 100 may
`
`transmit secret information to terminal 110 over the Internet 107. Also, it may be desired to
`
`prevent an eavesdropper from discovering that terminal 100 is in communication with terminal
`
`1 10. For example, if terminal 100 is a user and terminal 1 10 hosts a web site, terminal 100’s user
`
`may not want anyone in the intervening networks to know what web sites he is "visiting."
`
`Anonymity would thus be an issue, for example, for companies that want to keep their market
`
`research interests private and thus would prefer to prevent outsiders from knowing which web-
`
`sites or other Internet resources they are “visiting.” These two security issues may be called data
`
`security and anonymity, respectively.
`
`Petitioner Apple - EX. 1002, p. 5
`
`Petitioner Apple - Ex. 1002, p. 5
`
`
`
`Docket No. 000479.001 l 1
`
`Data security is usually tackled using some form of data encryption. An encryption key
`
`48 is known at both the originating and terminating terminals 100 and 110. The keys may be
`
`private and public at the originating and destination terminals 100 and 110, respectively or they
`
`may be symmetrical keys (the same key is used by both parties to encrypt and decrypt). Many
`
`encryption methods are known and usable in this context.
`
`To hide traffic from a local administrator or ISP, a user can employ a local proxy server
`
`in communicating over an encrypted channel with an outside proxy such that
`
`the local
`
`administrator or ISP only sees the encrypted traffic. Proxy servers prevent destination servers
`
`from determining the identities of the originating clients. This system employs an intermediate
`
`server interposed between client and destination server. The destination server sees only the
`
`lntemet Protocol (IP) address of the proxy server and not the originating client. The target server
`
`only sees the address of the outside proxy. This scheme relies on a trusted outside proxy server.
`
`Also, proxy schemes are vulnerable to traffic analysis methods of determining identities of
`
`transmitters and receivers. Another important limitation of proxy servers is that the server knows
`
`the identities of both calling and called parties. In many instances, an originating terminal, such
`
`as terminal A, would prefer to keep its identity concealed from the proxy, for example, if the
`
`proxy server is provided by an lntemet service provider (ISP).
`
`To defeat traffic analysis, a scheme called Chaum’s mixes employs a proxy server that
`
`transmits and receives fixed length messages, including dummy messages. Multiple originating
`
`terminals are connected through a mix (a server) to multiple target servers. It is difficult to tell
`
`which of the originating terminals are communicating to which of the connected target servers,
`
`and the dummy messages confuse eavesdroppers’ efforts to detect communicating pairs by
`
`analyzing traffic. A drawback is that there is a risk that the mix server could be compromised.
`
`One way to deal with this risk is to spread the trust among multiple mixes. If one mix is
`
`compromised, the identities of the originating and target terminals may remain concealed. This
`
`strategy requires a number of alternative mixes so that
`
`the intermediate servers interposed
`
`between the originating and target terminals are not determinable except by compromising more
`
`than one mix. The strategy wraps the message with multiple layers of encrypted addresses. The
`
`first mix in a sequence can decrypt only the outer layer of the message to reveal
`
`the next
`
`destination mix in sequence. The second mix can decrypt the message to reveal the next mix and
`
`so on. The target server receives the message and, optionally, a multi-layer encrypted payload
`
`Petitioner Apple - Ex. 1002, p. 6
`
`Petitioner Apple - Ex. 1002, p. 6
`
`
`
`Docket No. 000479.001] 1
`
`containing return information to'send data back in the same fashion. The only way to defeat such
`
`a mix scheme is to collude among mixes. If the packets are all fixed-length and intermixed with
`
`dummy packets, there is no way to do any kind of traffic analysis.
`Still another anonymity technique, called ‘cromwds,’ protects the identity of the originating
`
`terminal from the intermediate proxies by providing that originating terminals belong to groups
`
`of proxies called crowds. The crowd proxies are interposed between originating and target
`
`terminals. Each proxy through which the message is sent is randomly chosen by an upstream
`
`proxy. Each intermediate proxy can send the message either to another randomly chosen proxy
`
`in the “crowd” or to the destination. Thus, even crowd members cannot determine if a preceding
`
`proxy is the originator of the message or if it was simply passed from another proxy.
`
`ZKS (Zero-Knowledge Systems) Anonymous lP Protocol allows users to select up to any
`
`of five different pseudonyms, while desktop sofiware encrypts outgoing traffic and wraps it in
`
`User Datagram Protocol (UDP) packets. The first server in a 2+-hop system gets the UDP
`
`packets, strips off one layer of encryption to add another, then sends the traffic to the next server,
`
`which strips off yet another layer of encryption and adds a new one. The user is permitted to
`
`control the number of hops. At the final server, traffic is decrypted with an untraceable IP 0
`
`address. The technique is called onion-routing. This method can be defeated using traffic
`
`analysis. For a simple example, bursts of packets from a user during low-duty periods can reveal
`
`the identities of sender and receiver.
`
`Firewalls attempt to protect LANs from unauthorized access and hostile exploitation or
`
`damage to computers connected to the LAN. Firewalls provide a server through which all access
`
`to the LAN must pass. Firewalls are centralized systems that require administrative overhead to
`
`maintain. They can be compromised by virtual-machine applications (“applets”). They instill a
`
`false sense of security that leads to security breaches for example by users sending sensitive
`
`information to servers outside the firewall or encouraging use of modems to sidestep the firewall
`
`security. Firewalls are not useful for distributed systems such as business travelers, extranets,
`
`small teams, etc.
`
`SUMMARY OF THE INVENTION
`
`A secure mechanism for communicating over the intemet, including a protocol referred
`
`to as the Tunneled Agile Routing Protocol (TARP), uses a unique two-layer encryption format
`
`and special TARP routers. TARP routers are similar in function to regular lP routers. Each
`
`Petitioner Apple - Ex. 1002, p. 7
`
`Petitioner Apple - Ex. 1002, p. 7
`
`
`
`Docket No. 000479.001 l l
`
`TARP router has one or more IP addresses and uses normal IP protocol to send IP packet
`
`messages (“packets” or “datagrams”). The IP packets exchanged between TARP terminals via
`
`TARP routers are actually encrypted packets whose true destination address is concealed except
`
`to TARP routers and servers. The normal or “clear” or “outside” IP header attached to TARP IP
`
`packets contains only the address of a next hop router or destination server. That is, instead of
`
`indicating a final destination in the destination field of the IP header, the TARP packet’s IP
`
`header always points to a next-hop in a series of TARP router hops, or to the final destination.
`
`This means there is no overt indication from an intercepted TARP packet of the true destination
`
`of the TARP packet since the destination could always be next-hop TARP router as well as the
`
`final destination.
`
`Each TARP packet’s true destination is concealed behind a layer of encryption generated
`
`using a link key. The link key is the encryption key used for encrypted communication between
`
`the hops intervening between an originating TARP terminal and a destination TARP terminal.
`
`Each TARP router can remove the outer layer of encryption to reveal the destination router for
`
`each TARP packet. To identify the link key needed to decrypt the outer layer of encryption of a
`
`TARP packet, a receiving TARP or routing terminal may identify the transmitting terminal by
`
`the sender/receiver IP numbers in the cleartext IP header.
`
`Once the outer layer of encryption is removed, the TARP router determines the final
`
`destination. Each TARP packet l40 undergoes a minimum number of hops to help foil traffic
`
`analysis. The hops may be chosen at random or by a fixed value. As a result, each TARP packet
`
`may make random trips among a number of geographically disparate routers before reaching its
`
`destination. Each trip is highly likely to be different for each packet composing a given message
`
`because each trip is independently randomly determined. This feature is called agile routing. The
`
`fact that different packets take different routes provides distinct advantages by making it difficult
`
`for an interloper to obtain all the packets forming an entire multi—packet message. The associated
`
`advantages have to do with the inner layer of encryption discussed below. Agile routing is
`
`combined with another feature that furthers this purpose; a feature that ensures that any message
`
`is broken into multiple packets.
`
`The IP address of a TARP router can be changed, a feature called 1P agility. Each TARP
`
`router, independently or under direction from another TARP terminal or router, can change its IP
`
`address. A separate, unchangeable identifier or address is also defined. This address, called the
`
`Petitioner Apple - EX. 1002, p. 8
`
`Petitioner Apple - Ex. 1002, p. 8
`
`
`
`Docket No. 000479.001 l l
`
`TARP address, is known only to TARP routers and terminals and may be correlated at any time
`
`by a TARP router or a TARP terminal using a Lookup Table (LUT). When a TARP router or
`
`terminal changes its IP address, it updates the other TARP routers and terminals which in turn
`
`update their respective LUTs.
`
`The message payload is hidden behind an inner layer of encryption in the TARP packet
`
`that can only be unlocked using a session key. The session key is not available to any of the
`
`intervening TARP routers. The session key is used to decrypt the payloads of the TARP packets
`
`permitting the data stream to be reconstructed.
`
`Communication may be made private using link and session keys, which in turn may be
`
`shared and used according to any desired method. For example, public/private keys or symmetric
`
`keys may be used.
`
`To transmit a data stream, a TARP originating terminal constructs a series of TARP
`
`packets from a series of IP packets generated by a network (IP) layer process. (Note that the
`
`terms “network layer,” “data link layer,” “application layer,” etc. used in this specification
`
`correspond to the Open Systems Interconnection (OSI) network terminology.) The payloads of
`
`these packets are assembled into a block and chain-block encrypted using the session key. This
`
`assumes, of course, that all the IP packets are destined for the same TARP terminal. The block is
`
`then interleaved and the interleaved encrypted block is broken into a series of payloads, one for
`
`each TARP packet to be generated. Special TARP headers IPT are then added to each payload
`
`using the IP headers from the data stream packets. The TARP headers can be identical to normal
`
`IP headers or customized in some way. They should contain a formula or data for deinterleaving
`
`the data at the destination TARP terminal, a time—to-Iive (TTL) parameter to indicate the number
`
`of hops still to be executed, a data type identifier which indicates whether the payload contains,
`
`for example, TCP or UDP data, the sender’s TARP address, the destination TARP address, and
`
`an indicator as to whether the packet contains real or decoy data or a formula for filtering out
`
`decoy data if decoy data is spread in some way through the TARP payload data.
`
`Note that although chain-block encryption is discussed here with reference to the session
`
`key, any encryption method may be used. Preferably, as in chain block encryption, a method
`
`should be used that makes unauthorized decryption difficult without an entire result of the
`
`encryption process. Thus, by separating the encrypted block among multiple packets and making
`
`Petitioner Apple - Ex. 1002, p. 9
`
`Petitioner Apple - Ex. 1002, p. 9
`
`
`
`Docket No. 000479.001 l 1
`
`it difficult for an interloper to obtain access to all of such packets,
`
`the contents of the
`