`
`Paper No. 1
`
`UNITED STATES PATENT AND TRADEMARK OFFICE
`
`____________________
`
`BEFORE THE PATENT TRIAL AND APPEAL BOARD
`
`___________________
`
`RPX CORPORATION,
`Petitioner,
`v.
`
`VIRNETX, INC. AND SCIENCE APPLICATION INTERNATIONAL
`CORPORATION,
`Patent Owner
`
`Patent No. 7,490,151
`Issued: Feb. 10, 2009
`Filed: Sep. 30, 2002
`Inventors: Edmund C. Munger, et al
`Title: Establishment of a Secure Communication Link Based Domain Name
`Service (DNS) Request
`____________________
`
`Inter Partes Review No. IPR2014-00173
`__________________________________________________________________
`
`PETITION FOR INTER PARTES REVIEW
`
`RPX Corporation Exhibit 1078
`RPX Corporation v. VirnetX, Inc. et al.
`Case IPR2014-00173
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`TABLE OF CONTENTS
`
`I.
`
`Compliance With Requirements For A Petition For Inter
`Partes Review ...................................................................................................... 1
`A. Certification the ’151 Patent May Be Contested by Petitioner.......1
`B.
`Fee for Inter Partes Review (§ 42.15(a)) ...........................................1
`
`II. Mandatory Notices (37 CFR § 42.8(b)) ........................................................ 1
`A. Real Party in interest (§ 42.8(b)(1))...................................................1
`B. Other Proceedings (§ 42.8(b)(2))........................................................4
`C. Designation of Lead and Backup Counsel ........................................4
`D.
`Service Information (§42.8(b)(4)) ......................................................5
`E.
`Proof of Service (§§ 42.6(e) and 42.105(a)) .......................................5
`
`III.
`
`Identification of Claims Being Challenged (§ 42.104(b)) ..................... 5
`
`IV. Relevant Information Concerning the Contested Patent ...................... 6
`A.
`Effective Filing Date and Prosecution History of the ’151 patent..6
`B.
`Person of Ordinary Skill in the Art...................................................8
`C. Construction of Terms Used in the Claims.......................................8
`1.
`Domain Name Server (Claims 1-16) ..........................................9
`2.
`Domain Name ...........................................................................10
`3.
`Domain Name Server (DNS) Proxy Module (Claims 1, 7)......10
`4.
`DNS Request (Claims 1-16) .....................................................10
`5.
`Domain Name Server Module (Claim 13)................................11
`6.
`Secure Server (Claims 1-16).....................................................11
`7.
`IP Address Hopping Scheme (Claims 5 and 11) ......................11
`8.
`Automatically Initiating/Creating an Encrypted Channel
`(Claims 1-16) ............................................................................12
`Client (Claims 1-16) .................................................................13
`9.
`10. Determining (Claims 1, 2, 7, 8, 13, and 14) .............................13
`11.
`Forwarding the DNS Request (Claims 1, 7, and 13) ................14
`
`i
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`12.
`
`Intercepting (Claims 1, 7, and 13) ............................................14
`
`V.
`
`B.
`
`Precise Reasons for Relief Requested ...................................................... 14
`A. Claims 1-16 Are Anticipated By Aventail (Ex. 1007) ....................14
`1.
`Aventail Anticipates Claim 1....................................................14
`2.
`Aventail Anticipates Claim 7....................................................18
`3.
`Aventail Anticipates Claim 13..................................................23
`4.
`Aventail Anticipates Claim 2, 8 and 14....................................23
`5.
`Aventail Anticipates Claim 3, 9 and 15....................................25
`6.
`Aventail Anticipates Claims 4, 10 and 16 ................................27
`7.
`Aventail Anticipates Claim 5 and 11........................................28
`8.
`Aventail Anticipates Claim 6 and 12........................................29
`Aventail Connect In View of Aventail Extranet Center Renders
`Claims 1-16 Obvious .........................................................................29
`C. Aventail in View of RFC 1035 Render Claims 3, 9 and 15 Obvious
`30
`D. Aventail In View of Reed I Renders Claims 5 and 11 Obvious ....32
`E.
`Claims 1-16 Are Anticipated by U.S. Patent No. 6,496,867 (Beser)
`35
`Beser Anticipates Claim 1 ........................................................35
`1.
`Beser Anticipates Claim 7 ........................................................39
`2.
`Beser Anticipates Claim 13 ......................................................41
`3.
`Beser Anticipates Claims 2, 8, and 14......................................42
`4.
`Beser anticipates Claims 3, 9, and 15 .......................................44
`5.
`Beser Anticipates Claims 4, 10 and 16.....................................45
`6.
`Beser Anticipates Claims 5 and 11...........................................46
`7.
`Beser Anticipates Claims 6 and 12...........................................46
`8.
`Beser in View of RFC 2401 Renders Obvious Claims 1-16...........48
`1.
`Claims 1, 7, and 13 Would Have Been Obvious ......................50
`2.
`Dependent Claims 2-6, 8-12, and 14-16...................................53
`3.
`Dependent Claims 5 and 11 ......................................................53
`
`F.
`
`ii
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`G.
`
`H.
`
`I.
`
`J.
`
`Beser in View of Blum Renders Obvious Claims 1-16...................55
`1.
`Claims 1, 7, and 13 Would Have Been Obvious ......................55
`2.
`Claims 2-6, 8-12, and 14-16 Would Have Been Obvious........58
`Beser in View of RFC 2401, and Further in View of Blum Renders
`Claims 1-16 Obvious .........................................................................59
`Claims 1-4, 7-10, and 13-16 Are Anticipated by Kiuchi................60
`1.
`Kiuchi Anticipates Claim 1.......................................................60
`2.
`Kiuchi Anticipates Claim 7.......................................................67
`3.
`Kiuchi Anticipates Claim 13.....................................................69
`4.
`Kiuchi Anticipates Claims 2, 8, and 14 ....................................71
`5.
`Kiuchi Anticipates Claims 3, 9, and 15 ....................................73
`6.
`Kiuchi Anticipates Claims 4, 10 and 16 ...................................74
`Claims 1-4, 7-10, and 13-16 Are Obvious Based on Kiuchi in View
`of RFC 1034 .......................................................................................74
`
`VI.
`
`Conclusion ......................................................................................................... 77
`
`Attachment A. Proof of Service of the Petition
`
`Attachment B. List of Evidence and Exhibits Relied Upon in Petition
`
`iii
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`I.
`
`Compliance With Requirements For A Petition For Inter Partes Review
`A.
`Certification the ’151 Patent May Be Contested by Petitioner
`
`Petitioner certifies that U.S. Patent No. 7,490,151 (the ’151 Patent) (Ex.
`
`1001) is available for inter partes review. Petitioner certifies that it is not barred or
`
`estopped from requesting inter partes review of the claims of the ’151 patent on
`
`the grounds identified in this Petition. Neither Petitioner, nor any party in privity
`
`with Petitioner, has filed a civil action challenging the validity of any claim of the
`
`’151 patent. As explained below, the ’151 patent has not been the subject of a
`
`prior inter partes review by Petitioner or a privy of Petitioner, and neither
`
`Petitioner, nor any party in privity with Petitioner, has been served with a
`
`complaint alleging infringement of any claim of the ’151 patent.
`
`B.
`
`Fee for Inter Partes Review (§ 42.15(a))
`
`The Director is authorized to charge the fee specified by 37 CFR § 42.15(a)
`
`to Deposit Account No. 20-0780.
`
`II. Mandatory Notices (37 CFR § 42.8(b))
`
`A.
`
`Real Party in interest (§ 42.8(b)(1))
`
`The real party in interest of this petition pursuant to § 42.8(b)(1) is RPX
`
`Corporation (“RPX”) located at One Market Plaza, Steuart Tower, Suite 800, San
`
`Francisco, California 94105.
`
`RPX is the leading provider of patent risk solutions, offering defensive
`
`buying, acquisition syndication, patent intelligence, insurance services, and
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`advisory services. RPX has over 160 clients who have availed themselves of its
`
`services, which include, inter alia, market intelligence, patent strategy services,
`
`and defensive patent acquisition and licensing.1
`
`As part of its mission to achieve a more rational patent marketplace, RPX
`
`pursues efforts to improve patent quality and reduce patent litigation. For
`
`example, RPX has established a Research & Development program (“RPX R&D”)
`
`through which it advances a variety of initiatives to address and improve patent
`
`quality. The initiatives under this program include increasing transparency by
`
`collecting information regarding enforcement activities of entities or patents,
`
`tracking patent sales, collecting and evaluating prior art, and compiling databases
`
`of this information, which RPX makes available to its clients. In addition, as part
`
`of its RPX R&D program, RPX contests patents of questionable validity by filing
`
`requests for post-issuance review with the PTO. See http://www.rpxcorp.com/rpx-
`
`researchanddevelopment.
`
`RPX has solicited contributions from its clients to help fund its RPX R&D
`
`service through an addendum agreement which is being filed under seal with this
`
`1
`
`RPX observes that the ’151 patent has been asserted against some of its
`
`clients.
`
`2
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`petition. Ex. 1072.2 As reflected in the addendum agreement, RPX has sole
`
`discretion over and controls the decision of which patents to contest through PTO
`
`post-issuance proceedings, the grounds that are raised in any petition filed by RPX
`
`requesting initiation of such proceedings, the conduct of RPX in such proceedings
`
`and the decision to continue or terminate the participation of RPX in any such
`
`proceeding. RPX also is solely responsible for payment of any expenses of
`
`preparing and filing petitions seeking post-issuance review of patents, and for any
`
`expenses associated with any proceedings that result from such petitions.
`
`RPX has exercised its sole discretion in deciding to file the present petition
`
`concerning the ’151 patent and was solely responsible for selecting the claims of
`
`the ’151 patent being challenged and the grounds presented in it. RPX alone shall
`
`control the participation of RPX in any proceeding initiated on the basis of this
`
`petition, and alone shall control any decision by RPX to continue or terminate its
`
`participation in any proceeding established on the basis of this petition. In
`
`addition, RPX alone is responsible for paying the costs of preparing and filing this
`
`petition, and for any subsequent costs in connection with any proceeding
`
`established on the basis of this petition. RPX, thus, is the sole real party in interest
`
`of the present petition and is not in privity with any other entity in connection with
`
`2 An executed copy of the agreement is also being filed under seal. Ex. 1073.
`
`3
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`this petition.
`
`B.
`
`Other Proceedings (§ 42.8(b)(2))
`
`The ’151 patent is the subject of a number of civil actions including: (i) Civ.
`
`Act. No. 6:13-cv-00211-LED (E.D. Tex.), filed February 26, 2013; (ii) Civ. Act.
`
`No. 6:12-cv-00855-LED (E.D. Tex.), filed November 6, 2012; (iii) Civ. Act. No.
`
`6:10-cv-00417-LED (E.D. Tex.), filed August 11, 2010, (iv) Civ. Act. No. 6:13-cv-
`
`00351-LED (E.D. Tex), filed April 22, 2013.
`
`The ’151 patent is also the subject of merged inter partes reexamination
`
`Nos. 95/001,697 and 95/001,714. In the merged proceedings, the Office issued a
`
`Non-Final Action on April 20, 2012 rejecting all 16 claims of the ’151 patent,
`
`including rejections based on several prior art references relied upon in this
`
`Petition. In sum, the Office has rejected each of claims 1-16 as being anticipated
`
`or obvious based on Ex. 1007 (Aventail), Ex. 1009 (Beser), and Ex. 1067 (Kiuchi)
`
`as well as over several other prior art references.
`
`The ’151 patent is the subject of IPR petitions No. IPR2013-00354 filed by
`
`Apple Inc. and IPR2013-00376 filed by New Bay Capital LLC. Petitioner
`
`observes that the grounds presented in this petition closely parallel the grounds
`
`presented in the petitions filed by Apple and New Bay Capital.
`
`C.
`
`Designation of Lead and Backup Counsel
`
`4
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`Lead Counsel
`Greg Howison
`Reg. No. 30646
`ghowison@dalpat.com
`972-680-6050
`
`Backup Lead Counsel
`Peter J Thoma
`Reg. No. 28121
`pthoma@dalpat.com
`972-680-6053
`
`D.
`
`Service Information (§42.8(b)(4))
`
`Service on Petitioner may be made by mail to: Howison & Arnott, L.L.P.,
`
`P.O. Box 741715, Dallas, Texas 75374-1715. By hand delivery to: Lincoln
`
`Centre II, 5420 LBJ Freeway, Suite 660 Dallas, Texas 75240-2318.
`
`The fax number for lead and backup counsel is 972-479-0464.
`
`Proof of Service (§§ 42.6(e) and 42.105(a))
`E.
`Proof of service of this petition is provided in Attachment A.
`
`III.
`
`Identification of Claims Being Challenged (§ 42.104(b))
`Claims 1-16 of the ’151 patent are unpatentable for the following reasons:
`
`(i)
`
`Claims 1-16 are anticipated under § 102(b) by Aventail (Ex. 1007);
`
`(ii) Claims 1-16 are obvious under § 103 based on Aventail (Ex. 1007);
`
`(iii) Claims 3, 9 and 15 are obvious under § 103 based on Aventail (Ex.
`1007) in view of RFC 1035 (Ex. 1017);
`
`(iv) Claims 5 and 11 are obvious under § 103 based on Aventail (Ex.
`1007) in view of Reed (Ex. 1014);
`
`(v)
`
`Claims 1-16 are anticipated under § 102(e) by Beser (Ex. 1009);
`
`(vi) Claims 1-16 are obvious under § 103 based on Beser (Ex. 1009) in
`view of RFC 2401 (Ex. 1010);
`
`5
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`(vii) Claims 1-16 are obvious under § 103 based on Beser (Ex. 1009) in
`view of Blum (Ex. 1011);
`
`(viii) Claims 1-16 are obvious under § 103 based on Beser (Ex. 1009) in
`view of RFC 2401 (Ex. 1010), further in view of Blum (Ex. 1011);
`
`(ix) Claims 1-4, 7-10, and 13-16 are anticipated under § 102(b) by
`(“Kiuchi”) (Ex. 1067);
`
`(x)
`
`Claims 1-4, 7-10, and 13-16 are obvious under § 103 based on
`Kiuchi (Ex. 1067) in view of RFC 1034 (Ex. 1016).
`
`Petitioner’s proposed construction of the contested claims, evidence relied upon,
`
`and the precise reasons why the claims are unpatentable are provided in § IV, and
`
`the evidence relied upon in support of this petition is listed in Attachment B.
`
`Petitioner requests expedited briefing during the preliminary proceedings.
`
`The grounds of Petitioner’s challenge are substantially identical to the grounds
`
`advanced by the petitioners in IPR2013-00348, IPR2013-00349, and IPR2013-
`
`00375. Patent Owner already has filed a preliminary response in each of those
`
`proceedings that addresses the claim constructions, prior art references, and
`
`grounds of invalidity advanced in this petition. Petitioner observes the Board has
`
`discretion to set the deadline for any preliminary response. 35 U.S.C. § 313.
`
`IV. Relevant Information Concerning the Contested Patent
`
`A.
`
`Effective Filing Date and Prosecution History of the ’151 patent
`
`The ’151 patent issued from U.S. Application No. 10/259,494, filed
`
`6
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`September 30, 2002. The ’494 application is a division of U.S. Application No.
`
`09/504,783, filed on February 15, 2000, now U.S. Patent No. 6,502,135, which is a
`
`continuation-in-part of U.S. Application No. 09/429,653, filed on October 29,
`
`1999, now U.S. Patent No. 7,010,604. The ’494, ’783 and ’653 applications each
`
`claim priority under 35 U.S.C. 119(e) to Provisional Application Nos. 60/106,261,
`
`filed October 30, 1998 and 60/137,704, filed June 7, 1998.
`
`Claims 1, 7 and 13 of the ’151 patent are independent claims. Claims 2-6
`
`depend from claim 1, claims 8-12 depend from claim 7, and claims 14-16 depend
`
`from claim 13. So, claims 2-6, 8-12, and 14-16 cannot enjoy an effective filing
`
`date earlier than that of claims 1, 7 and 13, respectively, from which they depend.
`
`Claims 1, 7 and 13 of the ’151 patent rely on information first presented in
`
`the ’783 application. For example, claim 1 of the ’151 patent specifies
`
`“determining whether the intercepted DNS request corresponds to a secure server”
`
`and subsequent steps involving the DNS request. Similarly, claims 7 and 13
`
`include limitations involving DNS requests (e.g., “intercepting a DNS request
`
`sent by a client . . .” and “determining whether the intercepted DNS request
`
`corresponds to a secure server . . .”, respectively). The first application that recites
`
`the term “DNS” is the ’783 application. Because none of the ’653, ’261 or ’704
`
`applications disclose or even suggest use in any manner of DNS requests or proxy
`
`servers, these earlier filed applications do not describe or enable the subject matter
`
`7
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`defined by at least claims 1, 7 and 13 of the ’151 patent. Accordingly, the effective
`
`filing date of claims 1-16 of the ’151 patent is no earlier than February 15, 2000.
`
`B.
`
`Person of Ordinary Skill in the Art
`
`A person of ordinary skill in the art in the field of the ’151 patent would
`
`have been someone with a good working knowledge of networking protocols,
`
`including those employing security techniques, as well as computer systems that
`
`support these protocols and techniques. The person also would be very familiar
`
`with Internet standards related to communications and security, and with a variety
`
`of client-server systems and technologies. The person would have gained this
`
`knowledge either through education and training, several years of practical
`
`working experience, or through a combination of these. Ex. 1003 ¶ 66.
`
`C.
`
`Construction of Terms Used in the Claims
`
`In an IPR, claims must be given their broadest reasonable construction in
`
`light of the specification. 37 CFR 42.100(b). To do this, the Board should
`
`consider subject matter that Patent Owner contends infringes the claims, and
`
`constructions Patent Owner has advanced in litigation. Petitioner also notes the
`
`specification has not expressly defined any of the claim terms. Consequently, the
`
`words in the claims should be used to determine the broadest reasonable
`
`construction. “[I]t is the Patent Owner’s burden to precisely define the invention
`
`in the claims.” AirCraft Medical LTD. v. Verathon Inc., Ctrl No. 95/000,161,
`
`8
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`Appeal 2012-007851, p. 16 (PTAB Dec. 11, 2012) (citing In re Morris, 127 F.3d
`
`1048, 1056 (Fed. Cir. 1997)). Of course, the specification must also be consulted
`
`to determine the broadest reasonable construction of the claims.
`
`Domain Name Server (Claims 1-16)
`1.
`The ’151 patent does not define the phrase “Domain Name Server” or
`
`“DNS.” Patent Owner has asserted a “domain name service” is “a lookup service
`
`that returns an IP address for a requested domain name.” Ex. 1046 at 13-14. A
`
`person of ordinary skill in the art also would recognize that a domain name server
`
`performs domain name resolution according to Internet standards, namely, RFC
`
`1034 and RFC 1035 (Exs. 1016 & 1017). Under these standards an IP address will
`
`not always be returned – an error also may be returned. Ex. 1003 ¶¶ 114-123
`
`(citing Exs. 1016-17; Ex. 1016 at 15-16, 18-19; Ex. 1017 at 19, 31). Petitioner
`
`agrees with Apple that the broadest reasonable construction of “Domain Name
`
`Server” includes “a computer or computer-based process that will return an IP
`
`address or an error code in response to a domain name resolution request.”
`
`In its oppositions to the Apple and New Bay petitions, Patent Owner
`
`contends a “domain name service” is not an independent term, but rather, is part of
`
`the term “domain name service (DNS) request.” Ex. 1070 at 29-33. Patent
`
`Owner’s assertion is inconsistent with the claim language. Claim 1 defines “DNS”
`
`as an abbreviation for “domain name server.” Several other claims use “DNS” as
`
`9
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`an adjective to describe other devices, e.g., a “DNS proxy module” (claim 7) or a
`
`“DNS function” (claims 7 & 13). The claims thus define DNS as a distinct term,
`
`and the Board should reject Patent Owner’s illogical proposed construction which
`
`seeks to avoid construing DNS. See Ex. 1070 at 29.
`
`Domain Name
`2.
`The ’151 patent does not define the term “domain name.” A person of
`
`ordinary skill in the art would understand that a “domain name” is “a name
`
`corresponding to an IP address.” Ex. 1003 ¶¶ 191-193. Petitioner therefore agrees
`
`with Apple’s proposed construction. Also, Patent Owner has asserted that a
`
`“domain name” means “a name corresponding to an IP address.” The district
`
`court adopted Patent Owner’s construction, and therefore, Patent Owner now is
`
`estopped from arguing for a different construction (as it attempts to do in Ex. 1070
`
`at 27). See Data General Corp. v. Johnson, 78 F.3d 1556, 1565 (Fed. Cir. 1996).
`
`3.
`
`Domain Name Server (DNS) Proxy Module (Claims 1, 7)
`
`Petitioner agrees with Patent Owner that the broadest reasonable
`
`construction of a “DNS proxy module” is “a component that responds to a DNS
`
`request in place of a DNS.” Ex. 1070 at 34-36. Petitioner notes that Patent Owner
`
`has admitted that the DNS proxy module can be distributed across different
`
`computers or processes. Ex. 1070 at 35.
`
`DNS Request (Claims 1-16)
`4.
`The ’151 patent does not explicitly define the term “DNS request.”
`
`10
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`Consistent with the definition of domain name server, see § 1, above, a “DNS
`
`request” is a request to resolve a domain name into an IP address.
`
`5.
`
`Domain Name Server Module (Claim 13)
`
`Petitioner agrees with Patent Owner and Apple that “domain name server
`
`module” should be given its plain and ordinary meaning and requires no
`
`construction. Ex. 1070 at 36.
`
`6.
`
`Secure Server (Claims 1-16)
`
`Petitioner agrees with Patent Owner, Apple, and New Bay Capital that the
`
`broadest reasonable construction of “secure server” is “a server that requires
`
`authorization for access and that can communicate in an encrypted channel.” Ex.
`
`1070 at 38-39; see Ex. 1046 at 24. Also, several claims recite a “secure sewer.”
`
`While Petitioner believes this is a typographical error, Patent Owner has not, as of
`
`the date of this petition, corrected this error in the claims.
`
`7.
`
`IP Address Hopping Scheme (Claims 5 and 11)
`
`The ’151 patent does not define the term “IP address hopping scheme.” It
`
`does refer to a variety of schemes that route traffic through intermediary network
`
`devices according to a pre-defined scheme as “IP hopping schemes.” See, e.g., Ex.
`
`1001 at 5:36-6:3, 14:39-63. These schemes use a wide variety of routing concepts
`
`and strategies that are used to obfuscate the IP address of the sender, receiver, or
`
`both. The broadest reasonable construction of “IP address hopping scheme” thus
`
`encompasses any type of scheme for routing IP traffic from a client to a destination
`
`11
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`through intermediary devices. Also, claim 5 recites an “IF” hopping scheme,
`
`which the Petitioner understands to be a typographical error. Patent Owner has
`
`not, as of the date of this petition, corrected this error.
`
`Patent Owner’s proposed construction differs by adding the phrase “in a way
`
`that creates a VPN.” Ex. 1070 at 39-41. This construction is illogical – the claims
`
`that use “IP hopping scheme” clearly state that a VPN is being created which uses
`
`that scheme. See, e.g., Ex. 1001 at claim 5 (“wherein automatically initiating the
`
`encrypted channel between the client and the secure sewer comprises establishing
`
`an IF address hopping scheme between the client and the secure server); id. at
`
`claim 11 (“wherein automatically initiating the encrypted channel between the
`
`client and the secure sewer comprises establishing an IP address hopping scheme
`
`between the client and the secure server.”). Patent Owner’s additional terms are
`
`unnecessary and would only cause confusion.
`
`8.
`
`Automatically Initiating/Creating an Encrypted Channel
`(Claims 1-16)
`
`Petitioner agrees with Patent Owner and New Bay Capital that the broadest
`
`reasonable construction of “automatically initiating an encrypted channel” in
`
`claims 1 and 7 is “initiating the encrypted channel without involvement of a user.”
`
`Ex. 1070 at 41-42. Petitioner agrees with Patent Owner and New Bay that the
`
`broadest reasonable construction of “automatically creating a secure channel” in
`
`claim 13 is “creating the secure channel without involvement of a user.” Id.
`
`12
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`Client (Claims 1-16)
`9.
`The ’151 patent does not define the term “client.” The claims user the term
`
`“client” to refer to a computer that sends the request that initiates an encrypted
`
`channel with a secure server – e.g., in claim 1 the client sends a DNS request, and
`
`in claim 4 the client “comprises a web browsers into which a user enters a URL
`
`resulting in a the DNS request.” The logical meaning of “client” from the claims is
`
`simply the computer that sends the request that initiates the VPN.
`
`Patent Owner, however, asserts a “client computer” is “the user’s computer.”
`
`Ex. 1070 at 42-45. Patent Owner’s definition is inconsistent with the claim
`
`language. First, the term used in the claims is not the “client’s computer” but
`
`rather simply the “client.” Also, the District Court in concurrent litigation
`
`recognized that intermediary computers participate in VPNs. See, e.g., Ex. 1049 at
`
`8 n.2. Petitioner thus agrees with New Bay Capital that the broadest reasonable
`
`construction of “client” is a computer that generates or sends the request that
`
`initiates a secure or encrypted channel with a secure server.
`
`10. Determining (Claims 1, 2, 7, 8, 13, and 14)
`
`Petitioner agrees with Patent Owner that the ordinary meaning of the term
`
`“determining” should be used. Ex. 1070 at 45. Petitioner also agrees with Patent
`
`Owner that the “determining” step can be made by a client computer or by another
`
`computer participating in a VPN. See Ex. 1070 at 45 (“It is sufficient to note, as
`
`13
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`the district court did, that nothing in claim 1 prevents the client computer from
`
`performing the ‘determining’ step.”).
`
`11.
`
`Forwarding the DNS Request (Claims 1, 7, and 13)
`
`Petitioner agrees with Patent Owner and Apple that “forwarding the DNS
`
`request to a DNS function” should be given its plain and ordinary meaning and
`
`requires no construction. Ex. 1070 at 46.
`
`12.
`
`Intercepting (Claims 1, 7, and 13)
`
`Petitioner agrees with Patent Owner and Apple that “intercepting” should be
`
`given its plain and ordinary meaning and requires no construction. Ex. 1070 at 47.
`
`V.
`
`Precise Reasons for Relief Requested
`
`A.
`
`Claims 1-16 Are Anticipated By Aventail (Ex. 1007)
`
`Aventail (Ex. 1007) is a printed publication that was publicly distributed no
`
`later than January 31, 1999. Ex. 1003 ¶¶ 215-222 (citing Ex. 1007; Ex. 1007 at
`
`77, 127); Ex. 1005 at ¶¶ 11-36 (citing Exs. 1007, 1058-61; Ex. 1007 at 5, 10-12,
`
`14, 127); Ex. 1006 at ¶¶ 11-24 (citing Ex. 1007). Aventail is prior art to the ’151
`
`patent at least under 35 U.S.C. §§ 102(a) and (b). A concise summary of the
`
`systems and processes described in Aventail is provided at ¶¶ 262 to 356 of Ex.
`
`1003 and at ¶¶14 to 78 of Ex. 1005.
`
`1.
`
`Aventail Anticipates Claim 1
`
`Aventail shows a client computer running Aventail Connect will intercept a
`
`connection request made on the client. Ex. 1003 ¶¶ 266-272, 276 (citing Ex. 1007;
`
`14
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`Ex. 1007 at 7, 11-13, 76-77). This is the same technique described in the ’151
`
`patent. Ex. 1003 at ¶ 277 (citing Ex. 1001 at 37:60-38:11). The request will be
`
`evaluated at the client computer or at a DNS proxy server (e.g., the Aventail
`
`Extranet Server or “AES”). Ex. 1003 ¶¶ 267, 272, 280-287 (citing Ex. 1007 at 7,
`
`11-16, 45, 65; Ex. 1006 at ¶¶40-43) (client computer); ¶¶ 286-287, 296-297 (citing
`
`Ex. 1007 at 11-12, 15-16, 65; Ex. 1006 at ¶¶40-43) (Extranet Server). For
`
`example, the client computer could be configured to proxy all connection requests
`
`to a DNS proxy server for handling and resolution by enabling the “DNS Proxy
`
`Option” in the Aventail Connect client. Ex. 1003 ¶¶ 286-287, 296-303, 311-321
`
`(citing Ex. 1007 at 11-12, 14-16, 19, 31, 46-62, 62, 65-66, 76-77, 130, 142, 168-
`
`172; Ex. 1006 at ¶¶32, 40-43; Ex. 1017 at 19, 31). The Aventail Connect client
`
`can also evaluate connection requests locally. Ex. 1003 ¶¶ 279-284, 289-295, 307
`
`(citing Ex. 1007 at 13-16, 45-46, 62). A “DNS Proxy Module” per claim 1 can
`
`reside on the same or different computer as the one where the DNS request
`
`originates. See § IV.C.2. It also can be a “process” performed on a single or
`
`multiple computers. Id. Thus, a client computer running Aventail Connect, the
`
`server computer running AES, or both, comprise “a DNS proxy module.” Aventail
`
`thus describes “[a] data processing device, comprising memory storing a domain
`
`name server (DNS) proxy module that intercepts DNS requests sent by a client
`
`and, for each intercepted DNS request, performs the steps.” Ex. 1003 ¶¶ 357-360
`
`15
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`(citing Ex. 1001, Ex. 1001 at 37:30-38:11, 38:39-39:14; Ex. 1006 at ¶¶40-43; Ex.
`
`1007 at 5-16, 19, 23-24, 35, 40-46, 62, 65, 130, 142, 168-172; Ex. 1017 at 19, 31);
`
`see id. at ¶¶ 75-78 (citing Ex. 1019 at 10, 13; Ex. 1020 at 36-38; Ex. 1027 at 3-5;
`
`Ex. 1028 at 15).
`
`Aventail shows that redirection rules are used to identify DNS requests made
`
`on a client computer containing a domain name or IP address on a private network
`
`requiring secure communications. Ex. 1003 ¶¶ 267-268, 274, 279-287, 303-317,
`
`321 (citing Ex. 1007 at 7-8, 10-16, 19, 23-24, 35, 40-45, 62, 65-66; Ex. 1006 at
`
`¶¶40-43). If a domain name in a request matches a domain name in a redirection
`
`rule, Aventail Connect would flag that request to be proxied to the proxy server for
`
`handling. Id. Aventail thus describes the step of “determining whether the
`
`intercepted DNS request corresponds to a secure server.” Ex. 1003 ¶¶ 361-370
`
`(citing Ex. 1007 at 5-7, 10-16, 44-45, 65-66, 76; Ex. 1006 at ¶¶40-43).
`
`Aventail shows that if a DNS request containing a domain name or an IP
`
`address does not match a local name resolution rule or a redirection rule, it will be
`
`handed off to client operating system for handling, which will perform a DNS
`
`lookup and returns the IP address “as if Aventail Connect were not running.” Ex.
`
`1003 ¶¶ 267, 272-273, 283-281, 314 (citing Ex. 1007 at 5-7, 10-16, 45; Ex. 1019 at
`
`14). Domain names and IP addresses that match a redirection rule are “secure”
`
`destinations (e.g., hosts on a private network), while other domains are “non-
`
`16
`
`
`
`Petition for Inter Partes Review of U.S. Patent No. 7,490,151
`
`secure” (e.g., public websites). Ex. 1003 ¶ 313 (citing Ex. 1007 at 11-12, 14-16).
`
`Aventail also shows Aventail Connect can be configured to perform local name
`
`resolution on domain names in a request. Ex. 1003 ¶¶ 279-284, 289-295, 307
`
`(citing Ex. 1007 at 13-16, 45-46, 62). Locally resolved domain name are not
`
`secure destinations because requests containing them will not be forwarded to the
`
`proxy server (AES). Id. Aventail thus shows “(ii) when the intercepted DNS
`
`request does not correspond to a secure server, forwarding the DNS request to a
`
`DNS function that returns an IP address of a nonsecure computer, and.” Ex. 1003
`
`¶¶ 371-377 (citing Ex. 1001 at 37:60-38:6; Ex. 1007 at 5-6, 10-16, 19, 23-24, 31,
`
`35, 40-66, 76-77, 80-81, 83, 89, 99, 108, 129-131, 139, 141-142, 144-145, 149,
`
`154-158,