Virnetx, Inc. v. Cisco Systems, Inc.

767 F.3d 1308, 113 U.S.P.Q. 2d (BNA) 1112, 2014 U.S. App. LEXIS 17748, 2014 WL 4548722
CourtCourt of Appeals for the Federal Circuit
DecidedSeptember 16, 2014
Docket2013-1489
StatusPublished
Cited by190 cases

This text of 767 F.3d 1308 (Virnetx, Inc. v. Cisco Systems, Inc.) is published on Counsel Stack Legal Research, covering Court of Appeals for the Federal Circuit primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Virnetx, Inc. v. Cisco Systems, Inc., 767 F.3d 1308, 113 U.S.P.Q. 2d (BNA) 1112, 2014 U.S. App. LEXIS 17748, 2014 WL 4548722 (Fed. Cir. 2014).

Opinion

PROST, Chief Judge.

Apple Inc. appeals from a final judgment of the U.S. District Court for the Eastern District of Texas, in which a jury found that Apple infringed U.S. Patent Nos. 6,502,135 (“'135 patent”), 7,418,504 (“'504 patent”), 7,490,151 (“'151 patent”), and 7,921,211 (“'211 patent”). The jury further found that none of the infringed claims were invalid and awarded damages to plaintiffs-appellees VirnetX, Inc. and Science Applications International Corporation (“SAIC”) in the amount of $368,160,000.

For the reasons that follow, we affirm the jury’s findings that none of the asserted claims are invalid and that many of the asserted claims of the '135 and '151 patents are infringed by Apple’s VPN On *1314 Demand product. We also affirm the district court’s exclusion of evidence relating to the reexamination of the patents-in-suit. However, we reverse the jury’s finding that the VPN On Demand product infringes claim 1 of the '151 patent under the doctrine of equivalents. We also reverse the district court’s construction of the claim term “secure communication link” in the '504 and '211 patents and remand for further proceedings to determine whether the FaceTime feature infringes those patents under the correct claim construction. Finally, we vacate the jury’s damages award and remand for further proceedings consistent with this opinion.

Background

The patents at issue claim technology for providing security over networks such as the Internet. The patents assert priority to applications filed in the 1990s, originally assigned to SAIC. VirnetX, a Nevada-based software development and licensing enterprise, acquired the patents from SAIC in 2006.

I. The '504 and '211 Patents and Face-Time

The '504 and '211 patents share a common specification disclosing a domain name service (“DNS”) system that resolves domain names and facilitates establishing “secure communication links.” '504 patent col. 55 11. 49-50. In one embodiment, an application on the client computer sends a query including the domain name to a “secure domain name service,” which contains a database of secure domain names and corresponding secure network addresses. Id. at col. 50 11. 54-57, col. 51 11. 11-19, col. 51 11. 29-32. This allows a user to establish a secure communication link between a client computer and a secure target network address. Id. at col. 5111. 34^0.

Representative claim 1 of the '504 patent recites:

1. A system for providing a domain name service for establishing a secure communication link, the system comprising:
a domain name service system configured to be connected to a communication network, to store a plurality of domain names and corresponding network addresses, to receive a query for a network address, and to comprise an indication that the domain name service system supports establishing a secure communication link.

Id. at col. 55 11. 49-56.

Before the district court, VirnetX accused Apple of infringement based on its “FaceTime” feature. Specifically, VirnetX accused Apple’s servers that run Face-Time on Apple’s iPhone, iPod, iPad (collectively, “iOS devices”), and Mac computers of infringing claims 1, 2, 5,16, 21, and 27 of the '504 patent as well as claims 36, 37, 47, and 51 of the '211 patent. In operation, FaceTime allows secure video calling between select Apple devices. J.A. 1443. To use FaceTime, a caller enters an intended recipient’s e-mail address or telephone number into the caller’s device (e.g., iPhone). J.A. 1451-52. An invitation is then sent to Apple’s FaceTime server, which forwards the invitation to a network address translator (“NAT”) which, in turn, readdresses the invitation and sends it on to the receiving device. J.A. 1821, 1824-25. The recipient may then accept or decline the call. J.A. 1453. If accepted, FaceTime servers establish a secure Face-Time call. J.A. 1453. Once connected, the devices transmit audio/video data as packets across the secure communication path without passing through the FaceTime server. J.A. 1820,1825.

*1315 II. The '135 and '151 Patents and VPN On Demand

A conventional DNS resolves domain names (e.g., “Yahoo.com”) into Internet Protocol (“IP”) addresses. See '135 patent col. 37 11. 22-27. A user’s web browser then utilizes the IP address to request a website. Id. at col. 37 11. 24-29.

The '135 and '151 patents share a common specification disclosing a system in which, instead of a conventional DNS receiving the request, a DNS proxy intercepts it and determines whether the request is for a secure site. Id. at col. 38 11. 23-25. If the proxy determines that a request is for a secure site, the system automatically initiates a virtual private network (“VPN”) between the proxy and the secure site. Id. at col. 38 11. 30-33. If the browser determines that the request was for a non-secure website, then the DNS proxy forwards the request to a conventional DNS for resolution. Id. at col. 3811. 43-47.

Representative claim 1 of the '135 patent recites:

1. A method of transparently creating a virtual private network (VPN) between a client computer and a target computer, comprising the steps of:
(1) generating from the client computer a Domain Name Service (DNS) request that requests an IP address corresponding to a domain name associated with the target computer;
(2) determining whether the DNS request transmitted in step (1) is requesting access to a secure web site; and
(3) in response to determining that the DNS request in step (2) is requesting access to a secure target web site, automatically initiating the VPN between the client computer and the target computer.

Id. at col. 47 II. 20-32.

Claims 1 and 13 of the '151 patent are similar to claim 1 of the '135 patent except that they recite initiating an “encrypted channel” and creating a “secure channel,” respectively, instead of creating a “VPN.” '151 patent col. 46 11. 55-67, col. 48 11. 18-29.

Before the district court, VirnetX accused Apple’s iPhone, iPad, and iPod Touch of infringing claims 1, 3, 7, and 8 of the '135 patent and claims 1 and 13 of the '151 patent because they include a feature called ‘VPN On Demand.” When a user enters a domain name into the browser of an iOS device, a DNS request is generated. J.A. 1393-94. VPN On Demand receives the request and checks a list of domain names for which a VPN connection should be established, known as a “configuration file.” J.A. 1377. If the entered domain name matches a domain name in the configuration file, VPN On Demand contacts a VPN server to authenticate the user and, if successful, automatically establishes a VPN between the user’s browser and the target computer with which the requested domain name is associated. J.A. 1377-78,1396-98.

III. Five-Day Jury Trial and Posh-Trial Motions

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Cite This Page — Counsel Stack

Bluebook (online)
767 F.3d 1308, 113 U.S.P.Q. 2d (BNA) 1112, 2014 U.S. App. LEXIS 17748, 2014 WL 4548722, Counsel Stack Legal Research, https://law.counselstack.com/opinion/virnetx-inc-v-cisco-systems-inc-cafc-2014.