`
`
`
`UNITED STATES PATENT AND TRADEMARK OFFICE
`
`
`BEFORE THE PATENT TRIAL AND APPEAL BOARD
`
`
`MICROSOFT CORPORATION
`Petitioner,
`
`v.
`
`IRON OAK TECHNOLOGIES, LLC,
`Patent Owner.
`
`Patent No. 5,699,275
`Issued: December 16, 1997
`Filed: April 12, 1995
`Inventors: Dale E. Beasley et al.
`
`Title: SYSTEM AND METHOD FOR REMOTE PATCHING OF OPERATING
`CODE LOCATED IN A MOBILE UNIT
`____________________
`Inter Partes Review No. IPR2019-00106
`________________________
`
`PETITIONER’S REPLY
`
`
`
`
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`I.
`
`INTRODUCTION
`Claim 1 of the 275 Patent is directed to “[a] system for remote patching of
`
`operating code located in a mobile unit.” EX1001, 13:32-33. The system includes
`
`“a manager host operable to initiate transmission … of at least one discrete patch
`
`message defining at least one patch.” Id., 13:34-37. The claimed system also
`
`requires two mobile units, a first and a second, each of which is “operable to
`
`create patched operating code by merging the at least one patch with current
`
`operating code located in the [first/second] mobile.” Id., 13:38-49 (emphasis
`
`added). Finally, the claimed system requires that the “manager host” be “operable
`
`to address the at least one discrete patch message such that the at least one discrete
`
`patch message is transmitted to the first mobile unit but not to the second mobile
`
`unit.” Id., 13:50-53 (emphasis added in each).
`
`Claim 1 therefore recites a system having certain components capable of
`
`performing certain functionality. It is not a method claim. It requires no activity.
`
`Nor does it require the claimed “operability” to be employed in all circumstances,
`
`or in any particular circumstance. It merely requires a system whose parts can
`
`perform the specified functionality in the claim.
`
`The Petition (“Pet.”) demonstrated that Sugita discloses such a system. In
`
`particular, Sugita discloses a system that includes multiple mobile units, each of
`
`which is capable of receiving a patch message and in response creating patched
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`operating code. Pet., 35-42. The Petition further demonstrated that the system of
`
`Sugita includes a base station capable of performing the functionality of the
`
`claimed “manager host,” including addressing the patch message such that it “is
`
`transmitted to the first mobile unit but not to the second mobile unit.” Pet., 30-35.
`
`The Petition demonstrated that Sugita’s base station satisfies this last claim
`
`requirement in two, alternative ways. See Pet., 44 (“Both ways of addressing
`
`update information (i.e., group ID or individual ID) meet this claim element under
`
`either construction.”); see also id., 43-46. First, Sugita discloses transmission of a
`
`patch message addressed to one of several groups of mobile units (i.e., a “specific
`
`group,” see EX1005, [0013]), rather than to all mobile units, using a Group ID as
`
`an address. Pet., 44-45. Thus, in this mapping of the claim, the “first mobile unit”
`
`is a unit within the “specific group” to which the patch message is transmitted and
`
`the “second mobile unit” is a unit within some other group, i.e., a group to which
`
`the patch message is not transmitted. See id.
`
`Second, Sugita discloses that, after such a group transmission, the system
`
`will re-transmit the patch message to units that did not acknowledge reception of
`
`the group transmission, and these re-transmissions will address the patch message
`
`using the respective “individual IDs” of those units. See, e.g., Pet., 45-47. In this
`
`mapping of the claim, the “first mobile unit” is a unit to which the patch message is
`
`(re-)transmitted using its “individual ID” and the “second mobile unit” is a mobile
`
`2
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`unit to which that re-transmission is not sent because, for example, that unit
`
`acknowledged successfully receiving the patch via the group transmission, was not
`
`a target of the group transmission, or is an unsuccessful target of the group
`
`transmission but is not the target of this particular individual transmission. See id.
`
`In response, Patent Owner advances a convoluted argument1 based on an
`
`overly narrow interpretation of the claim that is unsupported by and inconsistent
`
`with the claim language. The basis of its argument is that the claim supposedly
`
`requires the “second mobile unit” to have the capability “to create patched
`
`operating code” from the patch message at the time the patch message is
`
`transmitted and that it will necessarily employ that functionality in response to a
`
`patch message.
`
`That position is both confused and erroneous for several reasons. First, in
`
`relevant part the claim only requires the “second mobile unit” to be “operable to
`
`create patched operating code” by merging the patch with current operating code.
`
`
`
`1 Patent Owner appears to use another translation of Sugita from the related IPR
`
`proceeding IPR2018-00152. That translation is not of record in this proceeding.
`
`For the Board’s convenience, Petitioner addresses Patent Owner’s arguments in
`
`view of the same cited paragraphs of Sugita’s translation that is of record in this
`
`proceeding (EX1005).
`
`3
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`It includes no requirement that the mobile unit use that functionality in any
`
`particular circumstance or at any particular time. A mobile unit that is capable of
`
`creating patched operating code in some circumstances still satisfies the claim,
`
`“even if it does not meet the claim limitations in all modes of operation.”
`
`ParkerVision, Inc. v. Qualcomm Inc., 903 F.3d 1354, 1361 (Fed. Cir. 2018).
`
`Second, a mobile unit that has the ability “to create patched operating code”
`
`in some circumstances, is still “operable to create patched operating code” even
`
`during time periods or under circumstances it may not implement that
`
`functionality. Thus, a mobile unit operable to create patched operating code only
`
`on Mondays, is still a mobile unit “operable to create patched operating code”
`
`during the rest of the week.
`
`Finally, as demonstrated below, the disclosure of Sugita and the analysis
`
`included in the Petition satisfy the claim even under Patent Owner’s erroneous
`
`claim interpretation.
`
`Accordingly, as demonstrated below and in the Petition, Sugita satisfies all
`
`elements of claim 1. Petitioner therefore respectfully requests that the Board find
`
`that claim to be unpatentable.
`
`4
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`II. CLAIM 1 OF THE 275 PATENT IS UNPATENTABLE
`Patent Owner Improperly Attempts To Limit The Claim
`A.
`Patent Owner begins its analysis by reading a temporal limitation into its
`
`claim language, without even attempting to justify doing so based on the intrinsic
`
`record or the law of claim construction. Patent Owner argues, for example, that
`
`the Board failed to recognize that claim 1 requires that at the
`time of transmission of the patch message by the manager host
`both mobile units must be operable to create patched operating
`code from current operating code, and that the host transmit the
`patch to one mobile unit and not the other even though both units
`are capable of updating current operating code.
`
`PO Resp., 7 (emphasis added).
`
`But nothing in claim 1 requires that the mobile unit must be able to create
`
`patched operating code “at the time of transmission of the patch message.”
`
`Claim 1 requires only that the first and second mobile units be “operable” to
`
`“create patched operating code.” Thus, a mobile unit capable of carrying out that
`
`functionality on Monday, but not on Tuesday, is still “operable to create patched
`
`operating code” as claimed. Indeed, just because a mobile unit does not “create
`
`patched operating code” in a particular situation, does not mean the ability to do so
`
`does not exist in the mobile unit. “[A] prior art reference may anticipate or render
`
`obvious an apparatus claim—depending on the claim language—if the reference
`
`discloses an apparatus that is reasonably capable of operating so as to meet the
`
`5
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`claim limitations, even if it does not meet the claim limitations in all modes of
`
`operation.” ParkerVision, 903 F.3d at 1361 (emphasis added).
`
`Any contrary conclusion, moreover, would be inconsistent with other
`
`language of the claim. For example, claim 1 requires a “second mobile unit” that
`
`is “operable to receive” the patch message and a “manager host” operable to not
`
`transmit the patch message to the second mobile unit. EX1001, 13:44-45.
`
`Obviously, a mobile unit that is not transmitted the patch message will never
`
`receive that message, but it can still be “operable” to do so. The failure of
`
`transmission has simply prevented reception from occurring in that situation.
`
`Similarly, a mobile unit that has the ability to create patched operating code from
`
`the patch message but is prevented from doing so in a particular situation—e.g.,
`
`by other functionality determining there is no need to implement the patch—is still
`
`operable to create patched operating code.
`
`Moreover, nothing in claim 1 requires that the “second mobile unit” be
`
`capable of creating patched operating code in response to the “patch message”
`
`recited in the claim, or in response to any particular patch message at all. The
`
`relevant portion of the claim instead recites only a second mobile unit “operable to
`
`create patched operating code by merging the at least one patch with current
`
`operating code.” EX1001, 13:46-47. How the creation of patched operating code
`
`is triggered is simply unclaimed functionality.
`
`6
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`B.
`
`Patent Owner’s Response Rests On Its Erroneous
`Interpretation of the Claim
`Patent Owner’s erroneous interpretation of the claim underlies its entire
`
`response. For example, Patent Owner argues that Sugita does not satisfy the
`
`portion of the claim requiring that the patch message be “transmitted to the first
`
`mobile unit but not the second mobile unit” because Sugita supposedly always
`
`sends its patch message to all mobile units capable of performing an update. See
`
`PO Resp., 7-9; see also id., 16. But in this analysis Patent Owner explicitly defines
`
`mobile units capable of performing the update as those that are “not already
`
`updated.” See, e.g., id., 8-9 (“Sugita never discloses an instance when a mobile
`
`terminal that is capable of being updated (e.g, not already updated) is not sent
`
`an update.”) (emphasis added). That confirms the error of its analysis in several
`
`ways.
`
`Nothing in claim 1 requires the mobile units to be “not already updated.”
`
`The claim only requires the capability to create patched operating code. Patent
`
`Owner’s argument, moreover, is just another attempt to read a temporal limitation
`
`into the claims such that mobile units qualify as a claimed “second mobile unit”
`
`before they are updated, but not after. But that stands the claim word “operable”
`
`on its head. Mobile units that have already created patched operating code via the
`
`system of Sugita are demonstrably “operable” to do so precisely because they have
`
`already created patched operating code.
`
`7
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`Patent Owner’s argument in this regard also fails for a second reason. As
`
`demonstrated in the Petition, Sugita discloses the transmission of a patch message
`
`to just one group of mobile units (i.e., a “specific group,” EX1005, [0013]) among
`
`several such groups. Pet., 43-45; EX1003, ¶151. Sugita also discloses that each
`
`mobile unit in the system has the same ability to create patched operating code
`
`from the patch and its own current operating code. See, for example, the
`
`description of Figure 6, which discloses the update activity flow for “each mobile
`
`communications terminal,” EX1005, [0043] (emphasis added), and which includes
`
`the creation of patched operating code as claimed, id., [0046]. See also Pet., 38-42.
`
`Thus, in the situation where a patch message is sent to a “specific group,” the
`
`mobile units in the groups to which the patch message are not transmitted are
`
`operable to create patched operating code, but are also “not already updated.”
`
`Sugita’s group transmission disclosure therefore satisfies the claim even under
`
`Patent Owner’s erroneous claim interpretation.
`
`Patent Owner also argues that “Sugita’s group units account for all mobile
`
`terminals that could be updated with the transmitted patch,” PO Resp., 10, and that
`
`“to understand his invention Sugita intentionally set the stage as transmitting an
`
`update to each mobile terminal that could be updated with the transmitted
`
`information, whether by individual ID or as part of a group unit,” id., 11-12
`
`(emphasis in original). Patent Owner also provides its interpretation of various
`
`8
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`passages from Sugita, id., 11-13, and concludes that “[i]t is more likely” that
`
`Sugita’s group units “were an accounting or tracking expedient” and that “rather
`
`than starting by transmitting an update to 1,000 individual terminal IDs, Sugita’s
`
`process could start with, for example, 20 group units representing the 1,000
`
`terminals,” id., 13. Apparently, Patent Owner’s point is that Sugita sends updates
`
`to all mobile units in the system, and therefore Sugita does not satisfy the claim
`
`language requiring that the “patch message is transmitted to the first mobile unit
`
`but not to the second mobile unit.” EX1001, 13:52-53.
`
`But Patent Owner’s unsupported spin on Sugita is incorrect because Sugita
`
`explicitly says otherwise. In particular, Sugita discloses that, in a first “round of
`
`transmission,” his update is transmitted to all units, “or the unit addresses
`
`belonging to a specific group”:
`
`Additionally, the base station side (sending side) transmits the update
`information (all or part of the software) to each mobile
`communications terminal, with transmission at first performed based
`on the group ID of the group unit (all units, or the unit addresses
`belonging to a specific group), then the number of terminals in the
`group unit that complete the update in one round of transmission is
`investigated, and if the remaining number of units has decreased, the
`individual ID is used to perform updates of each unit one at a time.
`
`EX1005, [0013] (emphasis added). Thus, Sugita expressly discloses that in the
`
`first round his group update transmission can be either sent to “all units” or sent to
`
`9
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`“the unit addresses belonging to a specific group.” Patent Owner even agrees with
`
`this reading of Sugita, later in its brief. See PO Resp., 14 (asserting that this
`
`passage of Sugita “simply means that Sugita forwards the update information to all
`
`mobile terminals by first forwarding to ‘all [mobile communication terminals] or
`
`the [mobile communication terminals] addresses belonging to a specific group.’”)
`
`(bolded emphasis added). Because Sugita expressly discloses that there can be
`
`multiple groups in his system, see EX1003, ¶151; Ex.1005, [0015], [0026], [0049],
`
`his disclosure that the transmission can be first sent to “the unit addresses
`
`belonging to a specific group” means that other units, outside that “specific group,”
`
`are not sent that first round transmission. Sugita therefore satisfies the claim
`
`requirement that the “patch message is transmitted to the first mobile unit but not
`
`to the second mobile unit.”
`
`This is confirmed by the testimony of Dr. White, who explains that this is
`
`how a Skilled Artisan would understand Sugita, citing the exact passage of Sugita
`
`quoted above:
`
`In that case, update information sent to the one or more mobile
`terminals using the group ID for the first group unit would not be
`meant for the one or more mobile terminals in the second group unit.
`See id., ¶13 (“Additionally, the base station side … transmits the
`update information … to each mobile communications terminal, with
`transmission at first performed based on the group ID of the group
`unit (all units, or the unit addresses belonging to a specific
`
`10
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`group) ….”) (emphasis added). … If so, the base station will send
`update information addressed to the first group that includes a “first
`mobile unit,” but does not include the “second mobile unit.”
`Accordingly, a Skilled Artisan would recognize that update
`information transmitted to the first group ID is “transmitted to the first
`mobile unit but not the second mobile unit.”
`
`EX1003, ¶151 (emphasis in original).
`
`Patent Owner’s assertion that “Petitioner’s unsupported speculation of what
`
`a person of skill would have understood on this point is not evidence of the
`
`‘content’ of Sugita required under the validity analysis,” PO Resp., 13, is thus
`
`incorrect. The analysis of the Petition is concrete, not speculative, as it focuses on
`
`this key passage of Sugita, see Pet., 44-45, and is supported by the express
`
`disclosure of the prior art and the analysis of a recognized expert in the field.
`
`Patent Owner’s assertions, on the other hand, are merely unsupported
`
`attorney argument, as Patent Owner has not provided an expert declaration to back
`
`up its interpretation of the prior art or explain how a Skilled Artisan would
`
`understand the disclosure of Sugita. “It is well settled that attorney argument,
`
`unsupported by factual evidence, is entitled to little probative value.” Inguran,
`
`LLC v. Premium Genetics (UK) LTD, PGR2015-00017, Paper No. 22 at 8 (Dec.
`
`20, 2016) (citations omitted). Indeed, “‘[a]ttorney argument is not evidence’ and
`
`cannot rebut other admitted evidence” such as other expert testimony. Elbit Sys. of
`
`11
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`Am., LLC v. Thales Visionix, Inc., 881 F.3d 1354, 1359 (Fed. Cir. 2018) (quoting
`
`Icon Health & Fitness, Inc. v. Strava, Inc., 849 F.3d 1034, 1043 (Fed. Cir. 2017)).
`
`C.
`
`Patent Owner Mischaracterizes The Petition’s Alternative
`Argument Based on Individual ID Addressing
`Finally, Patent Owner mischaracterizes the Petition’s alternative argument
`
`based on the individual IDs of Sugita. In particular, Patent Owner contends that
`
`“Petitioner argues that Sugita’s disclosure of ‘Create list of update target terminals’
`
`in [Figure 1] necessarily discloses that some terminals are excluded from that list”
`
`citing pages 45-47 of the Petition and pages 153-157 of Dr. Whites Declaration.
`
`See PO Resp., 9. Patent Owner then spends two pages arguing that “nothing in
`
`[Figure 1] or the associated text that explains how or which mobile communication
`
`terminals are ‘targeted for updates.’” Id., 15-16. But the Petition never argued that
`
`“Sugita’s disclosure of ‘Create list of update target terminals’ in [Figure 1]
`
`necessarily discloses that some terminals are excluded from that list.” Id. 9
`
`(citations omitted). Rather, the Petition pointed out that Sugita satisfies the final
`
`element of the claim in two alternative ways—via (i) the disclosure relating to
`
`group ID addressing and, alternatively, (ii) the disclosure relating to individual ID
`
`addressing. Pet., 43-47.
`
`In its analysis of the individual ID address mapping, the Petition pointed to
`
`Sugita’s disclosure of re-transmitting the patch, using individual IDs, to those units
`
`12
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`that did not acknowledge the group ID transmission, and therefore remained on the
`
`update target list:
`
`As explained above, Sugita’s base station initially addresses
`update information to multiple mobile terminals using a group ID.
`Ex.1005, ¶35; Ex.1003, ¶153. However, in those situations in which
`some mobile terminals remain on the update target list after using the
`group ID (e.g., because no acknowledgement was received from those
`terminals), the base station retransmits the update information to
`the non-updated mobile terminal by addressing its individual ID.
`Ex.1005, ¶¶28, 36, 39; Ex.1003, ¶154.
`
`Pet., 45-46 (emphasis added).
`
`Thus, under this alternative mapping, Sugita again satisfies the claim
`
`language, as it discloses the base station of Sugita (“manager host”) operable to
`
`transmit the patch message to a mobile unit using an individual ID for that mobile
`
`unit (“transmitted to the first mobile unit”) and not send that transmission to any
`
`other mobile units (“but not the second mobile unit”).
`
`The only argument in Patent Owner’s response directed to this analysis is
`
`that previously updated mobile units can no longer be considered a “second mobile
`
`unit” as claimed because they are supposedly not capable of updating (i.e., because
`
`they have already been updated). See PO Resp., 16. As demonstrated above,
`
`however, the claim requires only “operability.” It does not speak to whether the
`
`claimed functionality of creating patched operating code must be carried out in
`
`13
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`response to the patch message, or to a particular transmission, so whether a mobile
`
`unit will create patched operating code at a particular point in time (e.g., after it has
`
`already been updated) is not relevant. Sugita discloses that “each” of his mobile
`
`units include the ability to create patched operating code for use at least at some
`
`points in time, Pet., 38-42, EX1005, [0043], [0046], Fig. 6, so Sugita satisfies the
`
`claim.
`
`Moreover, even under Patent Owner’s erroneous claim interpretation,
`
`Sugita’s individual ID addressing technique satisfies the claim. For example, the
`
`individual patch transmissions of Sugita are sent to individual mobile units. See,
`
`e.g., Pet., 45-46, EX1003, ¶154; EX1005, [0028], [0036], [0039]. Thus, where
`
`multiple mobile units fail to acknowledge the group transmission, the subsequent
`
`individual transmissions from the Sugita base station will each be sent to one, but
`
`not all, mobile units who have not yet performed an update. See Pet., 46-47,
`
`EX1003, ¶¶156-157. Thus, each such individual transmission is sent to one mobile
`
`unit that has not yet been updated (“transmitted to the first mobile unit”), but also
`
`is not sent to at least one other mobile unit that has not yet been updated (“but not
`
`14
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`the second mobile unit”). Sugita therefore additionally satisfies the claim in this
`
`manner, even under Patent Owner’s legally erroneous interpretation.2
`
`III. CONCLUSION
`Petitioner therefore respectfully requests that claim 1 be canceled as
`
`unpatentable.
`
`
`
`Dated: August 9, 2019
`
`
`
`
`
`
`
`Respectfully Submitted,
`
`/Joseph Micallef/
`Joseph A. Micallef
`Reg. No. 39,772
`Sidley Austin LLP
`
`
`
`2 Patent Owner also attempts to incorporate by reference the arguments advanced
`
`in its Preliminary Response. See PO Resp. 1. Incorporation by reference, of
`
`course, is not permitted, see 37 C.F.R. § 42.6(a)(3), and any argument not
`
`expressly presented in Patent Owner’s Response should be deemed waived, Sony
`
`Mobile Communications v. SSH Communications Security Oyj, IPR2015-01869,
`
`Paper No. 39 at 3 (Sept. 8, 2017) (“However, our rules do not allow Patent Owner
`
`to incorporate arguments by reference from its Preliminary Response … and our
`
`Scheduling Order provides that any arguments and evidence not contained in the
`
`Patent Owner Response will be ‘deemed waived.’”); see also Paper No. 18, at 5, or
`
`rejected for the same reasons they were rejected in the institution decision.
`
`15
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`1501 K Street, NW
`Washington, DC 20005
`
`16
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`
`
`CERTIFICATE OF SERVICE
`
`Pursuant to 37 C.F.R. § 42.6(e), I hereby certify that on this 9th day of
`
`August, 2019, I caused to be served a true and correct copy of the foregoing
`
`PETITIONER’S REPLY by electronic mail on the following counsel:
`
`Albert B. Deaver, Jr.: adeaver@md-iplaw.com
`
`Robert J. McAughan, Jr.: bmcaughan@md-iplaw.com
`
`Christopher M. Lonvick: clonvick@md-iplaw.com
`
`Dated: August 9, 2019
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`
`Respectfully Submitted,
`
`/Joseph Micallef/
`Joseph A. Micallef
`Reg. No. 39,772
`Sidley Austin LLP
`1501 K Street, NW
`Washington, DC 20005
`
`17
`
`
`
`Petitioner’s Reply for Inter Partes Review of U.S. Patent No. 5,699,275
`
`CERTIFICATE OF COMPLIANCE
`
`I hereby certify that this Petitioners’ Reply To Patent Owner’s Response
`
`complies with the type-volume limitations of 37 C.F.R. § 42.24(c)(1) because it
`
`contains 3,475 words (as determined by the Microsoft Word word-processing
`
`system used to prepare this reply), excluding the parts of the reply exempted by 37
`
`C.F.R. § 42.24(c).
`
`
`
`
`Dated: August 9, 2019
`
`
`
`
`
`
`
`
`
`Respectfully Submitted,
`
`/Joseph Micallef/
`Joseph A. Micallef
`Reg. No. 39,772
`Sidley Austin LLP
`1501 K Street, NW
`Washington, DC 20005
`
`18
`
`