What does a half billion dollar (and counting) quartet of patents look like?
VirnetX have just had their $336 million patent judgement against Apple for the use of their Facetime product upheld. This comes on the back of recent wins against Microsoft ($200m) and Siemens - and VirnetX are going back for another bite from Apple, as well as launching a $258 million lawsuit against Cisco.
In this blog, we:
- review the four patents being asserted by VirnetX and why they were granted,
- look for potentially relevant prior art missed to date by the USPTO, and show the connection between these patents and patents owned by Apple, Microsoft, Cisco and others,
- Compare the relative dominance of the leading VirnetX patent to the closest found prior art.
About VirnetX and its patents
VirnetX is a publicly listed technology company whose shares have surged recently on the back of patent assertion wins against both Microsoft, Apple and Siemens. No doubt due to these victories, the share price of VirnetX has risen tenfold since January 2010.
VirnetX claim to have 46 patents and over 100 pending applications. However for the purpose of this blog, we will concentrate on the four patents and their claims successfully asserted against Apple, as recently affirmed by the Eastern District of Texas.
1) US6502135 ('135) was filed in 2000, and claims priority back to 1998. Claims 1, 3, 7, 8 were held to be asserted by the judgement in the Apple case. This patent has 33 backward citations according to Espacenet, 165 forward citations, and an AmberScore (our normalised measure of patent dominance) value of 12.
1. A method of transparently creating a virtual private network (VPN) between a client computer and a target computer, comprising the steps of:
(1) generating from the client computer a Domain Name Service (DNS) request that requests an IP address corresponding to a domain name associated with the target computer;
(2) determining whether the DNS request transmitted in step (1) is requesting access to a secure web site; and
(3) in response to determining that the DNS request in step (2) is requesting access to a secure target web site, automatically initiating the VPN between the client computer and the target computer.
In other words, a client computer (for example your smartphone) requests from a domain name server an IP address associated with a second computer, for example your friend's smartphone. If this IP address is for a secure website, a 'virtual private network' is established.
As a matter of interest, a virtual private network, according to Wikipedia, means:
A virtual private network (VPN) extends a private network and the resources contained in the network across public networks like the internet. It enables a host computer to send and receive data across shared or public networks as if it were a private network with all the functionality, security and management policies of the private network. This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two.
And why was the patent granted? The applicant argued in a submission to the USPTO dated 13 June 2002 that this patent was inventive over the prior art raised by examiner, 'Boden' (US6330562) in view of 'Risley' (US6332158):
does not disclose establishing a VPN (virtual private network) based on a DNS request for a IP address.
And this argument appeared to have been persuasive.

2) US7418504 was filed in 2003. Claims 1, 2, 5, 16, 21 and 27 were held to be asserted. This patent has 102 backward citations, 26 forward citations and an AmberScore value of 5.2. Claim 1 appears to be similar to claim one of the '135 patent:
A system for providing a domain name service for establishing a secure communication link, the system comprising: a domain name service system configured to be connected to a communication network, to store a plurality of domain names and corresponding network addresses, to receive a query for a network address, and to comprise an indication that the domain name service system supports establishing a secure communication link.
Again this appears to be similar to the '135 patent.
3) US7490151 was filed in 2002. Claims 1 and 13 held to be asserted. Has 116 backward citations and 9 forward citations, and an AmberScore value of 5.0. Claim 1 reads:
1. A data processing device, comprising memory storing a domain name server (DNS) proxy module that intercepts DNS requests sent by a client and, for each intercepted DNS request, performs the steps of:
(i) determining whether the intercepted DNS request corresponds to a secure server;
(ii) when the intercepted DNS request does not correspond to a secure server, forwarding the DNS request to a DNS function that returns an IP address of a nonsecure computer, and
(iii) when the intercepted DNS request corresponds to a secure server, automatically initiating an encrypted channel between the client and the secure server.
4) US7921211 was filed in 2007. Claims 36, 37, 47, 51 held to be asserted. This patent has 71 backward citations and 4 forward citations, and an AmberScore value of 1.1. Claim 36 reads
36: A non-transitory machine-readable medium comprising instructions executable in a domain name service system, the instructions comprising code for:
- connecting the domain name service system to a communication network;
- storing a plurality of domain names and corresponding network addresses;
- receiving a query for a network address;
- and indicating in response to the query whether the domain name service system supports establishing a secure communication link.
These patents were acquired by VirnetX by Science Applications International Corporation (SAIC) in an arrangement that allows for the additional payment of revenue back to SAIC.
About the affirmed Apple judgement
The judgement describes why the court thought that Apple infringed these four patents, and interested readers can read these reasons in the judgement. However, as network patent analysts, we were more interested in the reasons why the judge found the patent to be valid.
In their arguments against validity, Apple referred to a 1996 Publication by Takahiro Kiuchi, which they claimed to anticipate every claim of the asserted patents. The judge came to the view that this reference was not enabling, i.e. not allowing 'one of ordinary skill in the art to make the invention without undue experimentation'.
This Kiruchi reference appears to be C-HTTP-the development of a secure, closed HTTP-based network on the Internet, which refers to a system for communicating between closed groups of institutions of the internet. Of note, this reference refers to closed network rather the internet network discussed by the VirnetX patents.
What potential prior art can AmberScope identify?
This analysis has shown the arguments against the validity of this patent to date have been based on:
- Boden, (US6330562) in view of Risley (US6332158). Boden discloses a Virtual Private Network, but not linking this to a DNS address for an IP address. Risley discloses a domain name lookup system, but does not refer to this to set up a VPN.
- Kiruchi's article on ;">C-HTTP-the development of a secure, closed HTTP-based network on the Internet, which refers to a system for communicating between closed groups of institutions of the internet.
One can presume that the lawyers for Apple et al would have done a thorough job of looking for prior art going into litigation, and the absence of knock-out prior art during litigation suggested that none may exist, or if it does exist, is very hard to find. Regardless, we were curious to see what additional light AmberScope could add to this analysis.
The easiest means of looking for prior art when using AmberScope is to start with the patent(s) being litigated. In this case, unlike many other case studies we have published, searching for prior art from the litigated patent was not successful - but remember that this patent has defeated the best of Apple's and Microsoft's lawyers.
So we tried some other options. We started AmberScope searches based on the patents discussed by the examiner for the '135 patent, namely Boden (US6330562) and Risley (US6332158). We also found an Apple patent that referred to video telephony, and performed a search from there. Again, no strong prior art was found.
The next option was one recommended in a previous blog, namely to use AmberScope to explore the connections to patents identified in a more traditional keyword search using the PatentLens patent search engine, using the following search query:
(("domain name server" or DNS) in fulltext) AND (("virtual private network" or VPN) in fulltext)
The results were then ordered by their date of publication. #6 on the list was WO19980230808 Communication systems architecture to MCI Communications (now owned by Verizon) and which has a priority date of 1996. This patent also has the family members US5867494, US5867495 and and US6690654 (and the earliest publication date for the family being June 1998, for the Australian family member AU199856867)
And in fact, this patent discloses many elements of the VirnetX patents:
- Establishment of virtual private networks (column 101 of US5867495)
- Identification of IP addresses from a domain name service (column 195)
- Encrypted communications (column 82).
So this patent by itself is helpful. But the patent becomes even more helpful if used as the basis for an AmberScope search, as one of the 'ghost patents' (highly ranked but not directly connected patents) found is US5999525 (1996) for a "Method for video telephony over a hybrid network".

US5999525 ('525) also has disclosures of possible relevance to the VirnetX patents, including
The user......connects the computer to an Internet Protocol (IP) network..starts an IP telephony software protocol system....The message contains IP address identifying the connection...computer or virtual private network (column 105) and "The domain name server will distribute calls amongst several locations via a lookup table (column 258)
So between these two MCI patents, we have may have discovered some prior art, providing of course that the filing and publication dates meet the applicable US laws on what constitutes a prior art document. The MCI patents could also potentially lead to other prior art filed or published by the same company or inventors.
Citation connections to Microsoft, Citrix and Cisco patents
Despite the apparent similarity between the VirnetX and MCI patents, and the alleged similarity to Apple's Facetime product, there are few citation connections between these patents.
For example:
- The leading VirnetX patent, US6502135, has no citation connections to either MCI or Apple patents (or even Siemens patents).
- The possibly most relevant MCI patent, US5999525, has no citation linkages to either a Virnetx or a SAIC patent. There was one citation connection however to an Apple patent, being US5561670 for a Method and apparatus for operating a multicast system on an unreliable network - which is more focused on compensating for the effects of signal quality than creating a virtual private network.
Connections to Microsoft, Citrix and Cisco patents.
While there were no citation connections to Apple patents from the VirnetX '135 patent, there were however connections to patent filed by Microsoft, IBM, Citrix and Cisco

In this diagram:
- Red patents are filed or owned by VirnetX
- Green patents are filed by Microsoft - and appear to form into a cluster, unlike the majority of patents filed by the following three companies.
- Blue patents by IBM
- Purple patents by Cisco
- Orange patents by Citrix
Of note, the leading patent in the Microsoft cluster is US7054774 (filed 2003, AmberScore value 6.8), for Midstream determination of varying bandwidth availability, which as suggested by the title is concerned with bandwidth management.
The other applicants were not nearly as clustered. Of note, their leading patents were
- IBM - US5805801 (1997, Amberscore 9.7) is for System and method for detecting and preventing security, and specifically is concerned with blocking known suspect addresses from campus networks
- Cisco - US6243749 (1998, AmberScore 7.0) Dynamic network address updating, and is concerned with updating domain name services
- Citrix - US7706266 (2007, AmberScore 1.3) Systems and methods of providing proxy-based quality of service,and which is also concerned with bandwidth management.
None of these patents appear to be directly related to virtual private networks.
Conclusions of citation analysis
Citation connections are sometimes used to identify or predict patent infringement, and with some success. In this particular case, there were no identified citation connections between VirnetX patents and relevant patents belonging to any of the companies they have successfully sued. Instead there appeared to be two completely separate networks of patents, being the two separate AmberScope networks shown above.
This could be for one of four most likely reasons:
- The allegedly infringing companies were infringing on the VirnetX patent, but had not filed any patents covering the technology they were infringing with
- None of the patent examiners for later patents filed to cover this technology by Apple in this area had noticed any similarities between the later patents and the VirnetX patents. This is possible, but unlikely if such Apple filings exist.
- Despite being a generally accepted tool, citation analysis simply failed in this case. Patent lawyers are often quick to point out that at the end of the day it is the patent claims that ultimately matters, and of course they are right. The role of citation analysis instead is to identify patents that appear to be dominant in their space - and therefore may contain claims that read onto valuable technologies in their space,
- The alleged infringers may have been correct in their post trial assertions that the VirnetX patents were either invalid or not infringed. It should be noted that the infringements were litigated in the Eastern District of Texas, which has a reputation for being friendly towards patent owners.
At this point in time, it is not clear which of these explanation are the most likely.
Relative dominance of the patents in the centre of the two networks
Another way of characterising the two networks discussed above to look at the relative dominance of the patents of the two patents we are comparing, namely the '135 VirnetX patent and the '525 MCI patent. Each sits in the centre of the network - it is worthwhile considering how these two patents compare to those patents directly. In particular we can ask for each patent
- What is its AmberScore value?
- How does this AmberScore value compared to the patents it is directly connected to, both forward and backward connections?
The results of this analysis are shown in the two tables below. The first table lists the patents directly connected to the '135 Virnetx patent, and with higher AmberScore values. The VirnetX patent has an AmberScore value of 12.3, which was enough to put it into 9th position in this list (and which is about 8 times greater than the median AmberScore of 1.6 for all patents directly connected to this patent).

The same table for the MCI patent is shown below. The MCI patent has an AmberScore value of 21.8, which was enough to put it into 3rd position in this list (and which is about 14 times greater than the median AmberScore of 1.5 for all patents directly connected to this patent).

Another means of comparing these patents is to consider the forward citation age profiles, as shown below.

These two tables and this figure help to put the leading VirnetX patent into perspective. It has some relative dominance, but are far from the most dominant patent in its local network.
Conclusions
This review has considered a half billion dollar (and counting) quartet of patent owned by VirnetX, and successfully asserted against Siemens, Apple and Microsoft for their video telephony applications. It shows:
- The asserted claims for the four patents all claim a similar invention
- The listed prior art for this patent does not appear to take into account a series of patents filed by MCI Communications for video telephony, where these patents disclose similar features to that disclosed by the VirnetX patents
- There are no citation linkages between the VirnetX patents and any patents filed by Apple, or MCI
- There is however a series of citation linkages between the VirnetX patents and patents filed by Microsoft, IBM, Cisco and Citrix.
- The leading VirnetX patent, US6502135, sits in 9th position in its network and has an AmberScore value 8 times the median value for all of its connected patents. This contrasts with the closest prior art patent found, US59999525, which sits in 3 place in a list of connected patents, and has an AmberScore of about 14 times the median for this network.