`
`UNITED STATES PATENT AND TRADEMARK OFFICE
`
`__________________
`
`
`BEFORE THE PATENT TRIAL AND APPEAL BOARD
`
`___________________
`
`
`PALO ALTO NETWORKS, INC.,
`Petitioner,
`
`v.
`
`FINJAN, INC.,
`Patent Owner.
`
`____________________
`
`Case IPR2016-00151
`U.S. Patent No. 8,141,154
`__________________________________________________________
`
`DECLARATION OF NENAD MEDVIDOVIC, PH.D.
`ON THE VALIDITY OF CLAIMS 1–8, 10, AND 11 OF U.S. PATENT NO.
`8,141,154 IN SUPPORT OF PATENT OWNER’S RESPONSE
`
`
`
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 1
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`
`TABLE OF CONTENTS
`
`Page
`
`I.
`
`II.
`
`QUALIFICATIONS ...................................................................................... 1
`
`SCOPE OF ASSIGNMENT AND APPROACH ........................................ 5
`
`III. APPLICABLE STANDARDS AND CONTROLLING
`PRINCIPLES ................................................................................................. 7
`
`A.
`
` OBVIOUSNESS ........................................................................................ 7
`
`B.
`
`
`
`PERSON OF ORDINARY SKILL IN THE ART ......................................... 9
`
`IV. SUMMARY OF MY OPINIONS ............................................................... 11
`
`V. OVERVIEW OF THE ‘154 PATENT ....................................................... 11
`
`VI. CLAIM CONSTRUCTION ........................................................................ 14
`
`VII. Dr. Rubin’s Description of the Background of the ‘154 Patent .................... 15
`
`VIII. ROSS IS NOT PRIOR ART ....................................................................... 16
`
`A.
`
`
`
`The Invention Disclosure Document Supports All Elements of the
`‘154 Patent Claims .............................................................................. 16
`
`IX. DISCUSSION AND OPINIONS REGARDING THE
`CONTRAST BETWEEN THE CLAIMS OF THE ‘154 PATENT
`AND THE PRIOR ART .............................................................................. 23
`
`A.
`
`
`
`B.
`
`
`
`TEACHINGS OF ROSS ........................................................................... 24
`
`Dr. Rubin’s Discussion of Ross .......................................................... 25
`
`X.
`
`The Claims of the ‘154 Patent are Not Unpatentable Over Ross .................. 26
`
`A.
`
`
`
`Ross does not disclose processing content received over a network,
`the content including a call to a first function, and the call including
`an input (claims 1, 4, 6, and 10) .......................................................... 27
`
`i
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 2
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`
`Ross Does Not Disclose the Content Including a Call to a
`First Function .......................................................................... 27
`
`Ross Does not Teach or Suggest Receiving Content Over a
`Single Network, the Content Including a Call to a First
`Function ................................................................................... 32
`
`Ross’s Third Device Embodiment Fails to Disclose
`“Processing Content Received Over a Network .................. 35
`
`1.
`
`2.
`
`3.
`
`B.
`
`
`
`C.
`
`
`
`D.
`
`
`
`Ross does not disclose “a Content Processor…for invoking a
`second function with the input” .......................................................... 37
`
`Ross does not disclose [a receiver] for receiving an indicator from
`the security computer whether it is safe to invoke the second
`function with the input ........................................................................ 38
`
`Ross does not disclose “calling a second function with a modified
`input variable” (claims 6 and 10) ........................................................ 39
`
`XI. SECONDARY CONSIDERATIONS OF NON-OBVIOUSNESS .......... 40
`
`Commercial Success............................................................................ 40
`
`Long-Felt But Unresolved Need and Recognition of a problem ........ 44
`
`Skepticism and Unexpected Results ................................................... 44
`
`Failure of Others .................................................................................. 45
`
`A.
`
`
`
`B.
`
`
`
`C.
`
`
`
`D.
`
`
`
`
`
`ii
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 3
`
`

`

`
`I, Nenad Medvidovic, Ph.D., declare and state as follows:
`
`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`I.
`
`QUALIFICATIONS
`1.
`
`I make this Declaration based upon my own personal knowledge,
`
`information, and belief, and I would and could competently testify to the matters
`
`set forth herein if called upon to do so.
`
`2.
`
`I received a Bachelor of Science (“BS”) degree, Summa Cum Laude,
`
`from Arizona State University’s Computer Science and Engineering department.
`
`3.
`
`I received a Master of Science (“MS”) degree from the University of
`
`California at Irvine’s Information and Computer Science department.
`
`4.
`
`I received a Doctor of Philosophy (“PhD”) degree from the University
`
`of California at Irvine’s Information and Computer Science department. My
`
`dissertation was entitled, “Architecture-Based Specification-Time Software
`
`Evolution.”
`
`5.
`
`I am employed by the University of Southern California (“USC”) as a
`
`faculty member in the Computer Science Department, and have been since
`
`January, 1999. I currently hold the title of Professor with tenure. Between
`
`January, 2009 and January 2013, I served as the Director of the Center for Systems
`
`and Software Engineering at USC. Between July, 2011, and July, 2015, I served as
`
`my Department’s Associate Chair for PhD Affairs.
`
`
`
` - 1 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 4
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`6.
`
`I teach graduate and undergraduate courses in Software Architecture,
`
`
`
`Software Engineering, and Embedded Systems, and advise PhD students. I have
`
`graduated 15 PhD students and advise 7 students currently pursuing a PhD.
`
`7.
`
`I served as Program Co-Chair for the flagship conference in my
`
`field—International Conference on Software Engineering (“ICSE”)—held in May
`
`2011. I have served as Chair or Co-Chair for various other conferences in the
`
`Software Engineering field, including: the Fifth Working IEEE/IFIP Conference
`
`on Software Architecture, the Third IEEE International Conference on Self-
`
`Adaptive and Self-Organizing Systems, the Fifteenth International ACM SIGSOFT
`
`Symposium on Component Based Software Engineering, the IEEE/CSSE/ISE
`
`Workshop on Software Architecture Challenges for the 21st Century, and the
`
`Doctoral Symposium at the Sixteenth ACM SIGSOFT International Symposium
`
`on the Foundations of Software Engineering.
`
`8.
`
`I serve or have served as an editor of several peer-reviewed journals,
`
`including: “IEEE Transactions on Software Engineering,” “ACM Transactions on
`
`Software Engineering and Methodology”, “Journal of Software Engineering for
`
`Robotics,” “Elsevier Information and Software Technology Journal,” “Journal of
`
`Systems and Software,” “Journal of Software Engineering Research and
`
`Development,” and “Springer Computing Journal.” Additionally, I have served as
`
`a guest editor of several special issues for different journals.
`
`
`
` - 2 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 5
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`9.
`
`Between September 2013 and September 2015 I served as Chair of
`
`
`
`the ICSE Steering Committee. I am currently a member of the Steering Committee
`
`of the European Conference on Software Engineering. I previously served as a
`
`member of the Steering Committees of ICSE and of the Working IEEE/IFIP
`
`Conference on Software Architecture.
`
`10. Since July, 2015, I have served as Chair of the Association for
`
`Computing Machinery’s Special Interest Group on Software Engineering (ACM
`
`SIGSOFT), the largest professional organization in my field of work.
`
`11.
`
`I co-authored “Software Architecture: Foundations, Theory, and
`
`Practice,” a widely used textbook in the field of Software Systems’ Architecture.
`
`12.
`
`I have served as editor of various books in the Software Engineering
`
`field including: “Proceedings of the 3rd International Conference on Self-Adaptive
`
`and Self-Organizing Systems,” “Proceedings of the Warm-Up Workshop for the
`
`32nd International Conference on Software Engineering,” and “Proceedings of the
`
`5th Working IEEE/IFIP Conference on Software Architecture.”
`
`13.
`
`I have authored or co-authored over 200 papers in the Software
`
`Engineering field. My most cited paper has been cited nearly 2,500 times. A
`
`paper I co-authored in the 1998 International Conference on Software Engineering,
`
`my field’s flagship conference, was given ten years later, in 2008, that
`
`conference’s Most Influential Paper Award.
`
`
`
` - 3 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 6
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`14.
`
`I have served as referee or reviewer for over twenty peer-reviewed
`
`
`
`journals, including: “ACM Transactions on Software Engineering and
`
`Methodology,” “IEEE Transactions on Software Engineering,” “Journal of
`
`Software Engineering for Robotics,” “IEEE Software,” “IEEE Transactions on
`
`Industrial Informatics,” “Elsevier Information and Software Technology Journal,”
`
`“Journal of Systems and Software,” “Journal of Automated Software Engineering,”
`
`“IEEE Transactions on Parallel and Distributed Systems,” “IEEE Computer,” and
`
`“IEEE Proceedings – Software Engineering.”
`
`15.
`
`I have been named a Distinguished Scientist of the Association for
`
`Computing Machinery (“ACM”). I have been elected a Fellow the Institute of
`
`Electrical and Electronics Engineers (IEEE), IEEE’s highest grade that is granted
`
`to less than 0.1% of its membership annually.
`
`16.
`
`I am very familiar with and have substantial expertise in the area of
`
`software systems development / software engineering, software architecture,
`
`software design, and distributed systems.
`
`17.
`
`I have reviewed in detail U.S. Patent No. 8,141,154 (Ex. 1001, the
`
`“‘154 Patent”); the Petition for Inter Partes Review of the ‘154 Patent filed in Case
`
`No. IPR2015-01979 (Paper No. 2, “Petition”); Dr. Rubin’s declaration filed in
`
`Case No. IPR2015-01979 (Ex. 1002, “Rubin Decl.”); the Board’s Institution
`
`Decision in Case No. IPR2015-01979 (Paper 8, the “Institution Decision”); Patent
`
`
`
` - 4 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 7
`
`

`

`
`Owner’s Request for Rehearing in Case No. IPR2015-01979 (Paper No. 11,
`
`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`“Rehearing Request”); the Board’s Decision Denying Request for Rehearing
`
`(Paper No. 12, “Decision Denying Rehearing”); the deposition transcript of Dr.
`
`Aviel Rubin (Exhibit 2005); Patent Application Pub. No. US 2005/0108562 A1
`
`(Exhibit 1003, “Khazan”); Sirer et al., Design and Implementation of a Distributed
`
`Virtual Machine for Networked Computers (Exhibit 1004, “Sirer”); and U.S.
`
`Patent No. 7,437,362 B1 (Exhibit 1005, “Ben-Natan”).
`
`18.
`
`I understand that I am submitting a declaration in connection with the
`
`above-referenced Inter Partes review (“IPR”) proceeding involving the ‘154
`
`Patent.
`
`II.
`
`SCOPE OF ASSIGNMENT AND APPROACH
`19.
`
`I have been retained as an expert on behalf of Patent Owner, Finjan,
`
`Inc., (“Finjan”), to provide information and opinions to the Patent Trial and Appeal
`
`Board (hereinafter “the Board”) to assist in the determination of the validity of
`
`certain of Finjan’s patent claims of the ‘154 Patent for which the Board has
`
`instituted an IPR proceeding. Specifically, counsel for Finjan asked me to provide
`
`opinions regarding the validity of claims 1-8, 10, and 11 of the ‘154 Patent in view
`
`of certain prior art references cited by Petitioner Palo Alto Networks, Inc.
`
`(“PAN”).
`
`
`
` - 5 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 8
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`20.
`
`I have been informed by counsel and I understand that the analysis of
`
`
`
`whether a patent is anticipated or obvious is performed from the perspective of a
`
`person of ordinary skill in the art at the time of the patented inventions. The
`
`relevant timeframe for the claims of the ‘154 Patent is May–December 2005.
`
`21.
`
`In reaching the opinions expressed in this declaration, I adopt the
`
`claim constructions set forth by the Board in its Institution Decision. See
`
`Institution Decision at 4-5.
`
`22.
`
`I have reviewed the documents cited by Dr. Rubin in his declaration.
`
`I intend the full page range of all exhibits attached to his declaration be considered
`
`as part of this declaration.
`
`23.
`
`I am being compensated for my time spent in connection with this
`
`matter at the rate of $350 per hour for regular work, and $500 an hour for
`
`deposition and trial testimony. My compensation is in no way contingent on the
`
`outcome of this case.
`
`24. To the extent that I am presented with new information concerning the
`
`subject matter of this declaration or affecting any assumptions made herein, I
`
`reserve the right to supplement this declaration accordingly.
`
`
`
` - 6 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 9
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`
`III. APPLICABLE STANDARDS AND CONTROLLING PRINCIPLES
` OBVIOUSNESS
`A.
`25. Counsel has informed me, and I understand, that an issued patent
`
`claim is invalid as obvious if it can be shown that the differences between the
`
`patented subject matter and the prior art are such that the subject matter as a whole
`
`would have been obvious, at the time the invention was made, to a person having
`
`ordinary skill in the art. Relevant considerations include the level of ordinary skill
`
`in the art; the scope and content of the prior art; differences between the prior art
`
`and the claims at issue; and the so-called objective secondary factors of
`
`nonobviousness.
`
`26. Counsel has informed me, and I understand, that in order to evaluate
`
`the obviousness of any claim of the ‘154 Patent over a given prior art combination,
`
`I should analyze whether the prior art references, included collectively in the
`
`combination, disclose each and every element of the allegedly invalid claim as
`
`those references are read by the person of ordinary skill in the art at the time of the
`
`invention. Then I am to determine whether that combination makes the claims of
`
`the ‘154 Patent obvious to the person of ordinary skill in the art by a
`
`preponderance of the evidence, at the time of the inventions. I understand that
`
`such preponderance of the evidence is satisfied if the proposition is more likely to
`
`be true than not true.
`
`
`
` - 7 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 10
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`27. Counsel has informed me, and I understand, that the obviousness
`
`
`
`inquiry requires that the prior art be considered in its entirety. I am further
`
`informed and I understand that an invention cannot be obvious to try where “the
`
`breadth of the[] choices and the numerous combinations indicate that the[]
`
`disclosures would not have rendered the claimed invention obvious to try.”
`
`28. Counsel has informed me, and I understand, that even where all of the
`
`claim limitations are expressly disclosed in the prior art references, there must be
`
`some showing that a person of ordinary skill in the art would have been motivated
`
`to combine such prior art references and that there would have been a reasonable
`
`expectation of successfully achieving the claimed invention from such
`
`combination.
`
`29. Counsel has informed me, and I understand, in considering the
`
`obviousness of a claimed invention, one should not view the invention and the
`
`prior art with the benefit of hindsight. It is for that reason, I am informed and I
`
`understand, that obviousness is assessed by the person of ordinary skill in the art at
`
`the time the invention was made. In this regard, I am informed and I understand
`
`that the invention cannot be used as a guide to selecting and understanding the
`
`prior art. I understand that the appropriate standard is to determine whether a
`
`person of skill in the art would be motivated to combine references, not whether
`
`they could.
`
`
`
` - 8 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 11
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`30. Counsel has informed me, and I understand, that obviousness cannot
`
`
`
`be predicated on what was unknown at the time of the invention, even if the
`
`inherency of a certain feature is later established. Counsel has also informed me,
`
`and I understand, that unknown properties of the prior art may not be relied upon
`
`to provide the rationale for modifying or combining the prior art to reach the
`
`claimed subject matter.
`
`31. Counsel has informed me, and I understand, that a reference may be
`
`said to teach away when a person of ordinary skill, upon reading the reference,
`
`would be discouraged from following the path set out in the reference, or would be
`
`led in a direction divergent from the path that was taken by the applicant.
`
`32. Counsel has informed me, and I understand, that the “time of
`
`invention” applicable to the inventions of claims 1-8, 10, and 11 of the’154 Patent
`
`is no later than December 12, 2005, which I understand to be the priority date of
`
`the ‘154 Patent.
`
`
`PERSON OF ORDINARY SKILL IN THE ART
`B.
`33. Counsel has informed me, and I understand, that the “person of
`
`ordinary skill in the art” (“POSA”) is a hypothetical person who is presumed to be
`
`familiar with the relevant scientific field and its literature at the time of the
`
`invention. This hypothetical person is also a person of ordinary creativity capable
`
`of understanding the scientific principles applicable to the pertinent field.
`
`
`
` - 9 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 12
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`34.
`
`I am informed by counsel and I understand that the level of ordinary
`
`
`
`skill in the art may be determined by reference to certain factors, including (1) the
`
`type of problems encountered in the art, (2) prior art solutions to those problems,
`
`(3) the rapidity with which innovations are made, (4) the sophistication of the
`
`technology, and (5) the educational level of active workers in the field. I further
`
`understand that the ‘154 Patent claims a priority date of December 12, 2005.
`
`35.
`
`It is my opinion that the person of ordinary skill in the art in the field
`
`of the ‘154 Patent would be someone with a bachelor’s degree in computer science
`
`or related field, and either (1) two or more years of industry experience and/or (2)
`
`an advanced degree in computer science or related field.
`
`36. Based on my training and experience, I believe that I am a person of
`
`greater-than-ordinary skill in the relevant art and, as of 2005, was a person of at
`
`least ordinary skill in the relevant art, which permits me to give an opinion about
`
`the qualifications of one of ordinary skill at the time of the invention.
`
`37.
`
`I note that Dr. Rubin’s opinion on person of ordinary skill in the art in
`
`his declaration is (Exhibit 1002 at ¶ 25):
`
`38. The relevant technology field for the ’154 patent is security programs,
`
`including content scanners for program code. Based on this, and the four factors
`
`above, it is my opinion that a POSA would hold a bachelor’s degree or the
`
`equivalent in computer science (or related academic fields) and three to four years
`
`
`
` - 10 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 13
`
`

`

`
`of additional experience in the field of computer security, or equivalent work
`
`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`experience. This definition of the POSA applies to the time of the alleged
`
`invention of 2005.
`
`39. My opinions stated in this declaration would be the same if rendered
`
`from the perspective of a person of ordinary skill in the art set out by Dr. Rubin.
`
`IV. SUMMARY OF MY OPINIONS
`40.
`In this declaration I explain that the person of ordinary skill in the art
`
`understands, and I conclude, that claims 1-8, 10, and 11 of the ‘154 Patent are not
`
`obvious over Ross.
`
`V. OVERVIEW OF THE ‘154 PATENT
`41. The ‘154 Patent was filed June 14, 2010, and claims priority to U.S.
`
`Patent No. 7,757,289, filed December 12, 2005. The systems and methods of the
`
`‘154 Patent are generally directed to systems and methods for protecting a
`
`computer from dynamically generated malicious content. Dynamically generated
`
`malicious content gets its name because it takes advantage of the dynamic features
`
`of web content, to evade traditional detection when received over the network. For
`
`example, dynamic web pages can include input that initially appears to be merely
`
`innocuous text embedded within HTML pages, only to subsequently generate
`
`malicious content on the fly. ‘154 Patent at 3:30–4:8.
`
`
`
` - 11 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 14
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`42. The ‘154 Patent describes a system that protects against such
`
`
`
`dynamically generated malicious content by processing content received over a
`
`network and transmitting input within the received content to a security computer.
`
`See ‘154 Patent at 5:4–25. The ‘154 Patent discloses that a second function is then
`
`only invoked with the input if the security computer has deemed that such
`
`invocation is safe. See ‘154 Patent at 5:4–25. Thus, even if the input was yet
`
`unknown when the content was received over the network, the claimed invention
`
`can still protect against dynamically generated malicious content by including the
`
`security computer lookup when the received content is processed. In one
`
`implementation, the call to the first function can be a call to a substitute function
`
`that is found in the content received over the network (e.g.
`
`Substitute_document.write(‘<h1>hello</h1>’):”
`
`
`
` - 12 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 15
`
`

`

`
`
`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`
`
`‘154 Patent at 10:41–59.
`
`43.
`
`In other implementations, the first function can be a non-substitute
`
`function found in the content received over the network upon invocation of which
`
`the input is sent to the security computer for inspection. Using this method, the
`
`security computer can inspect function inputs that are dynamically generated and,
`
`therefore, may not be identifiable or scannable using traditional scanning
`
`techniques. Notably, each independent claim of the ‘154 Patent recites that the call
`
`to the first function be found in the content received over a network, a feature that
`
`is disclosed nowhere in the references cited in the Petition.
`
`
`
` - 13 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 16
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`
`VI. CLAIM CONSTRUCTION
`44.
`I understand that during inter partes review, claims must be “given
`
`their broadest reasonable interpretation consistent with the specification.” The
`
`broadest reasonable interpretation does not mean the broadest possible
`
`interpretation. Rather, the meaning given to a claim term must be consistent with
`
`the ordinary and customary meaning of the term (unless the term has been given a
`
`special definition in the specification), and must be consistent with the use of the
`
`claim term in the specification and drawings. Thus, even under the broadest
`
`reasonable interpretation, the board’s construction cannot be divorced from the
`
`specification and the record evidence, and must be consistent with the one that
`
`those skilled in the art would reach.
`
`45.
`
`In my opinion the person of ordinary skill in the art would adopt the
`
`following claim construction, consistent with the Board’s adoption of this
`
`construction in its Institution Decision (Paper No. 10) and consistent with the
`
`broadest reasonable construction of these terms in view of the specification of the
`
`‘154 Patent:
`
`Claim Term
`
`Construction
`
`“dynamically generated” No construction
`
`
`
` - 14 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 17
`
`

`

`
`
`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`VII. DR. RUBIN’S DESCRIPTION OF THE BACKGROUND OF THE
`‘154 PATENT
`46. Dr. Rubin has provided a State of the Art section related to the ‘154
`
`Patent. Rubin Decl. at ¶¶ 54–87. I disagree with Dr. Rubin’s description to the
`
`background of the State of the Art at the time of the ‘154 Patent to the extent that it
`
`contradicts what I have written in my declaration. I also note that, in many cases,
`
`Dr. Rubin relies on his own opinion on the alleged knowledge of a POSA for
`
`various topics, with no support. Furthermore, I do not agree that the material he
`
`does cite is representative of the knowledge of a POSA.
`
`47. When Dr. Rubin does cite to external support, he typically does not
`
`sufficiently explain what he is referencing, nor sufficiently explain why it supports
`
`his assertions. In most cases, Dr. Rubin does not cite the ‘154 Patent or Ross.
`
`Often, Dr. Rubin expands the alleged teaching of the documents to allege that
`
`specific combinations of technology were known to a POSA at the time of the
`
`invention of the ‘154 Patent. It is my opinion he is using his own hindsight bias in
`
`an attempt to import knowledge into his analysis that would not be known to a
`
`POSA.
`
`48. For example, Dr. Rubin’s discussions of “Dynamic Malware” and
`
`“Content Modification, Hooking, etc.” are unsupported by any evidence that would
`
`demonstrate that these issues and techniques were known to a POSITA in 2005.
`
`
`
` - 15 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 18
`
`

`

`
`Instead, Dr. Rubin is using “hindsight bias” in an attempt to reconstruct the claims.
`
`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`That is, he appears to have taken what he perceived to be the invention of the ‘154
`
`Patent and reverse engineered it based on unsupported statements on what was
`
`known in the art. I understand that this impermissible under the law.
`
`VIII. ROSS IS NOT PRIOR ART
` THE INVENTION DISCLOSURE DOCUMENT SUPPORTS ALL ELEMENTS
`A.
`OF THE ‘154 PATENT CLAIMS
`
`49.
`
`I have reviewed the invention disclosure document that Mr. Yuval
`
`Ben-Itzhak sent to Dr. Marc Berger on October 31, 2005. As demonstrated below,
`
`this document discloses the invention claimed in the ‘154 Patent.
`
`Claim
`1[a] A system for
`protecting a
`computer from
`dynamically
`generated malicious
`content, comprising:
`1[b] a content
`processor
`
`1[c] (i) for
`processing content
`received over a
`
`Disclosure in Ex. 2007.
`“The present invention relates to the field of securing
`computer applications, networks and services. More
`particularly, the present invention relates to a method and
`system for inspecting dynamically generated executable
`code using a remote process.” Ex. 2007 at 3.
`
`The invention disclosure discloses a “content processor”
`(e.g. an operating system).
`
`“Having the traffic/content received at the Client machine,
`220, and being executed by the operating system, the
`altered executable code will behave differently as originally
`provided from the Internet, 200, it will forward as the
`security gateway, 210, data the dynamically created code
`functions are expected to execute – for inspection, 240. Ex.
`2007 at 11.
`The invention disclosure discloses processing content
`received over a network (e.g. altered code), the content
`including a call to a first function (e.g. Finjan_write(“<h1>
`
`
`
` - 16 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 19
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`hello!</h1>“);), and the call including an input (e.g. “<h1>
`hello!</h1>“).
`
`
`
`network, the content
`including a call to a
`first function, and
`the call including an
`input, and
`
`
`
`Ex. 2007 at 19;
`
`“FIG. 6 shows and [sic] example of the altered code as made
`by the security gateway described in this invention. Note
`that the original function document.write was replaced by a
`custom function Finjan_write() and that a new code was
`appended to the original code to support such custom
`function.” Ex. 2007 at 13.
`
`“Finding such functions and/or commands and/or operator,
`the security gateway, 210, will alter the executable code to
`replace/rename these functions and/or commands and/or
`operator with custom functions as well as appending
`inspected code calls following by sending such
`traffic/content, 250, to the Client machine, 200.” Ex. 2007
`at 11.
`
`“Having known executable type, the security gateway alters
`the code to rename original dynamic code creation functions
`and appending inspected code calls 308. Having altered the
`downloadable, the downloadable content is forwarded to the
`Client machine, 312. Ex. 2007 at 12.
`The invention disclosure form discloses invoking a second
`function (e.g. document.write()) with the input (e.g.
`
`1[d] (ii) for
`invoking a second
`
`
`
` - 17 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 20
`
`

`

`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`sometext), only if a security computer indicates that such
`invocation is safe (e.g. if Inspection_result = True).
`
`
`
`function with the
`input, only if a
`security computer
`indicates that such
`invocation is safe;
`
`Ex. 2007 at 19.
`
`“Since in this example no malicious code is included in the
`Finjan_write function, but just HTML text, the security
`gateway will reply with the original data and enable
`execution of the original code without change.” Ex. 2007 at
`13.
`
`“Having no malicious code detected in such data, the
`security gateway, 210, will reply to the client machine, 220,
`with the original data for execution. Having a malicious
`code detected, the security gateway, 210, will reply to the
`Client machine, 220, with a data that will represent no
`execution (e.g. a NULL value).” Ex. 2007 at 12.
`
`The invention disclosure document discloses a transmitter
`(e.g. the Client machine 220) for transmitting the input to
`the security computer for inspection (“data the dynamically
`created code functions are expected to execute – for
`inspection, 240”), when the first function (e.g.
`Finjan_write()) is invoked.
`
`1[e] a transmitter for
`transmitting the
`input to the security
`computer for
`inspection, when the
`first function is
`invoked; and
`
`
`
` - 18 -
`
`
`
`PROTECTIVE ORDER MATERIAL
`
`Patent Owner Finjan, Inc., Exhibit 2035, p. 21
`
`

`

`
`
`Declaration of Dr. Nenad Medvidovic
`IPR2016-00151 (U.S. Patent No. 8,141,154)
`
`
`
`Ex. 2007 at 19.
`
`“Having the altered code executed on the client machine and
`the Finjan_write function will be called for execution, the
`data will be send [sic] to the remote security gateway for
`inspection – Call_gateway_to_inspect_content
`(sometext);.” Ex. 2007 at 13.
`
`“Having the traffic/content received at the client machine,
`220, and being executed by the operating system, the altered
`executable code will behave differently as originally
`provided from the Internet, 200, as it will forward the
`security gateway, 210, data the dynamically created code
`functions are expected to execute for inspection, 240.” Ex.
`2007 at 11.
`The invention disclosure discloses receiving an indicator
`(e.g. “Inspection_result”) from the security computer
`whether it is safe to invoke the second function with the
`input (e.g. sometext).
`
`1[f] a receiver for
`receiving an
`indicator from the
`security computer
`whether it is safe to
`invoke the second
`function with the
`input.
`
`