Re: Leverage Patent Search API to reduce BCP79 related issues [was: Re: Last Call: draft-farrresnickel-ipr-sanctions-05.txt]

Russ Housley <housley@vigilsec.com> Thu, 10 May 2012 15:56 UTC

Return-Path: <housley@vigilsec.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E46421F86D1 for <ietf@ietfa.amsl.com>; Thu, 10 May 2012 08:56:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -92.499
X-Spam-Level:
X-Spam-Status: No, score=-92.499 tagged_above=-999 required=5 tests=[AWL=-9.900, BAYES_00=-2.599, URIBL_BLACK=20, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 71TryfDf2mgQ for <ietf@ietfa.amsl.com>; Thu, 10 May 2012 08:56:49 -0700 (PDT)
Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id AECA621F8672 for <ietf@ietf.org>; Thu, 10 May 2012 08:56:49 -0700 (PDT)
Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 47AF89A471B; Thu, 10 May 2012 11:57:09 -0400 (EDT)
X-Virus-Scanned: amavisd-new at smetech.net
Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id elyCsTZp9Q35; Thu, 10 May 2012 11:56:27 -0400 (EDT)
Received: from [10.0.1.181] (82.ffbccf.client.atlantech.net [207.188.255.130]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 4D6259A470F; Thu, 10 May 2012 11:57:04 -0400 (EDT)
Subject: Re: Leverage Patent Search API to reduce BCP79 related issues [was: Re: Last Call: draft-farrresnickel-ipr-sanctions-05.txt]
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset="us-ascii"
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <4FAB9EB4.8020704@isdg.net>
Date: Thu, 10 May 2012 11:56:42 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <34D509ED-2D64-4383-A49E-F249D4263EF9@vigilsec.com>
References: <20120507215610.10679.15815.idtracker@ietfa.amsl.com> <4FAA140B.4010703@gmail.com> <4FAAD14F.40009@qualcomm.com> <6.2.5.6.2.20120509150640.090d7098@resistor.net> <AEFA3A3E-F672-4522-BCF9-5D75DC82D112@cisco.com> <4FAB2563.3090309@qualcomm.com> <4FAB643C.108@gmail.com> <4FAB92BF.8090408@isdg.net> <4FAB9EB4.8020704@isdg.net>
To: Hector Santos <hsantos@isdg.net>
X-Mailer: Apple Mail (2.1084)
Cc: IETF <ietf@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 10 May 2012 15:56:54 -0000

BCP 79 says:

      "Reasonably and personally known": means something an individual
      knows personally or, because of the job the individual holds,
      would reasonably be expected to know.  This wording is used to
      indicate that an organization cannot purposely keep an individual
      in the dark about patents or patent applications just to avoid the
      disclosure requirement.  But this requirement should not be
      interpreted as requiring the IETF Contributor or participant (or
      his or her represented organization, if any) to perform a patent
      search to find applicable IPR.

Your suggestion seems to be in direct conflict with BCP 79.

Russ


On May 10, 2012, at 6:55 AM, Hector Santos wrote:

> Always looking for automated solutions, perhaps the IETF I-D submissions process should include a patent database query check using document authors, document titles, abstract, keywords etc to find possible exact or near filings made, and if any are found, it can report immediately at the web site and/or send as part of the I-D submission confirmation message, something like so:
> 
>   NOTE: IPR INFORMATION FOUND, PLEASE VERIFY IF ANY OF THE FOLLOWING APPLIES:
> 
>   o US PATENT 12345 [title/abstract]
>   o US PATENT 22202 [title/abstract]
>   o including non-US patents found
> 
> The IETF I-D submission code can use a backend HTTP REST query using the Google Patent Search API.
> 
> Oh gosh, testing how this made work with my current I-D work:
> 
>    http://tools.ietf.org/html/draft-santos-smtpgrey-02
> 
> If the IETF I-D submission process did include a HTTP REST query with I-D extracted keywords such as: SMTP Extension Greylisting:
> 
> http://www.google.com/search?tbo=p&tbm=pts&hl=en&q=SMTP+Extension+Greylisting&num=10
> 
> then I-D submission confirmation message would of said:
> 
>   NOTE: IPR INFORMATION FOUND, PLEASE VERIFY IF ANY OF THE FOLLOWING APPLIES:
> 
>   o US PATENT 7849142
>     Managing connections, messages, and directory harvest attacks at a server
> 
> And now I need to see if this needs applies or needs to be referenced in my I-D.
> 
> Either way, I think the IETF should consider using backend patent API searches with the services available.  I can see how can probably reduce a big part of the BCP79 related concerns.  Sometimes these IP things are not always obvious for I-D contributors.
> 
> -- 
> Hector Santos
> http://www.santronics.com
> http://hector.wildcatblog.com
> jabber: hector@jabber.isdg.net
> 
> Hector Santos wrote:
>> Brian E Carpenter wrote:
>>> 
>>> Fair enough. I can't agree with SM though - as for appeals under RFC 2026,
>>> the person bringing up an issue really has to provide a factual summary,
>>> exactly to avoid witch hunts. It can be very short:
>>> 
>>>   Hi, I noticed that US Patent 12345 was filed in March 2010, and
>>>   draft-blo-foobar was posted that June, and Jo Blo was an author
>>>   of both. It looks as if they describe the same method, so why
>>>   wasn't there an IPR disclosure in 2010? Would the WG Chairs consider
>>>   sanctions against Jo Blo appropriate?
>>> 
>>> Possible text:
>>> 
>>>   Any IETF participant can draw attention to an apparent violation
>>>   of the IETF's IPR policy.  This can be done by sending email to
>>>   the appropriate IETF mailing list, including a short summary of
>>>   the known facts and, optionally, a call for sanctions to be
>>>   applied.
>> +1.
>> I think the major part of the issue is the growing potential and ease to violate BCP79 section 6.2.1 in regards to belated patent filings after contributions are made as your above "Jo Blo" scenario reflects.
>> With the relaxation of patentability guidelines, software/business methods and availability of low cost Provisional Patents, it is far easier to fall trap to violation BCP79 6.2.1
>> Provisional Patents is the cheapest way to begin the patent process allowing up to one year to complete the full patent. This is an ideal way to first test the market which also legally allows the usage of "Patent Pending" in marketing material.  If the I-D gets no interest, then there is little cost (less than $200) lost to forget about the work.  In one year, the provisional patent expires.  There is strategic value not to disclose IP related information in the I-D perhaps to maximize interest and perhaps this is a IETF new dilemma the draft should also focus on and address.
>> For example, in the draft 2.1, the 3rd paragraph talks about "Timeliness" and specifically states:
>>   The timeliness of disclosure is very important within [BCP79].  No
>>   precise definition of "timeliness" is given in [BCP79] and it is not
>>   the purpose of this document to do so.
>> However, where provisional patent filings are in play, there is at least 1 year allowance and incentive to not disclose and that could be a problem depending on the speed and interest of the I-D development. The draft intro can highlight belated IPR disclosures and section 2.1 first paragraph, for example, can add:
>>   According to [BCP79], individual IETF participants have a
>>   personal responsibility to disclose or ensure the timely disclosure
>>   of IPR of which they are aware or plan to create .....
>> So overall, more text emphasizing specifically BC979 section 6.2.1 to help highlight the awareness for document authors with a goal to lower the concerns of implementators who are watchful of protocols having current IPR disclosures and now belated IPR disclosure issues which much easier to occur today.
> 
> 
>