Re: Proposed New Note Well

Stephan Wenger <stewe@stewe.org> Mon, 04 January 2016 22:37 UTC

Return-Path: <stewe@stewe.org>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDD441AC44E; Mon, 4 Jan 2016 14:37:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ouAdNEt5cmVB; Mon, 4 Jan 2016 14:37:03 -0800 (PST)
Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0119.outbound.protection.outlook.com [207.46.100.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C0CA1AC44A; Mon, 4 Jan 2016 14:37:03 -0800 (PST)
Received: from BLUPR17MB0275.namprd17.prod.outlook.com (10.162.235.146) by BLUPR17MB0273.namprd17.prod.outlook.com (10.162.235.144) with Microsoft SMTP Server (TLS) id 15.1.361.13; Mon, 4 Jan 2016 22:37:00 +0000
Received: from BLUPR17MB0275.namprd17.prod.outlook.com ([10.162.235.146]) by BLUPR17MB0275.namprd17.prod.outlook.com ([10.162.235.146]) with mapi id 15.01.0361.006; Mon, 4 Jan 2016 22:37:00 +0000
From: Stephan Wenger <stewe@stewe.org>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>, "Scott O. Bradner" <sob@sobco.com>, "John C. Klensin" <john-ietf@jck.com>
Subject: Re: Proposed New Note Well
Thread-Topic: Proposed New Note Well
Thread-Index: AQHRRwZX3mjqiDgdH06pSnYhMm/fqp7rvkgAgAADeICAAAHXAIAACT6AgAAENoCAAA9yAP//jDSA
Date: Mon, 04 Jan 2016 22:36:59 +0000
Message-ID: <97C32E1E-A828-4FA1-981A-CDADD66FB730@stewe.org>
References: <20160104154102.1127.50621.idtracker@ietfa.amsl.com> <568AC7FE.101@gmail.com> <6451D0B3-9B0C-475E-B178-98E9EB6FD7D9@sobco.com> <11ED7904-3309-4B87-B8A4-7C4663C1AC30@sobco.com> <6EC907910707D24C66FF601E@JcK-HP8200.jck.com> <B8C14BAA-699A-4890-9A1C-B227D07CC5B3@sobco.com> <568AE4B0.7060700@gmail.com>
In-Reply-To: <568AE4B0.7060700@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=stewe@stewe.org;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [50.174.30.183]
x-microsoft-exchange-diagnostics: 1; BLUPR17MB0273; 5:HKXi2zhVAJrUp+eTOAfHJJp6xALmfyN3J7jo1CXV8d0gBUAd7dv5AkX9ju2LnV2XWW9xOqYuISjjQTZ3O8DmmtH7+tGloysVSimLb4TIgabLHsEigZp24bfx6KWOzFbl2eby1/cHhpYtOcZdCo6b3A==; 24:VenkVlQTLx3+cqhhlaQBSvB4MrrfjTCUs6lcIT9He1NC2HtQPQ2Bx5zcaM3tTwfZNXJotgJIj0DRvVKFprKoT9Mx6Hw1FU4a4msJiZmWVjI=
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR17MB0273;
x-microsoft-antispam-prvs: <BLUPR17MB027337B514FCAF776EAEFD96AEF20@BLUPR17MB0273.namprd17.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001)(10201501046); SRVR:BLUPR17MB0273; BCL:0; PCL:0; RULEID:; SRVR:BLUPR17MB0273;
x-forefront-prvs: 08118EFC2B
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(52314003)(479174004)(199003)(377454003)(24454002)(189002)(40100003)(2950100001)(15975445007)(106116001)(5001770100001)(2900100001)(5008740100001)(77096005)(36756003)(50986999)(97736004)(5002640100001)(5004730100002)(54356999)(10400500002)(106356001)(83716003)(189998001)(5001960100002)(92566002)(3846002)(33656002)(86362001)(105586002)(11100500001)(19580395003)(101416001)(122556002)(82746002)(76176999)(6116002)(586003)(19580405001)(81156007)(1220700001)(4326007)(66066001)(1096002)(99286002)(93886004)(102836003)(87936001)(42262002)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:BLUPR17MB0273; H:BLUPR17MB0275.namprd17.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:0; MX:1; LANG:en;
received-spf: None (protection.outlook.com: stewe.org does not designate permitted sender hosts)
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="utf-8"
Content-ID: <50EABE026F022341838437323846C6DE@namprd17.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: stewe.org
X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Jan 2016 22:36:59.6572 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 865fc51c-5fae-4322-98ef-0121a85df0b6
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR17MB0273
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/MClIt4dzNu2Vo8df4FYo4VNxj0U>
Cc: IETF <ietf@ietf.org>, "iesg@ietf.org" <iesg@ietf.org>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 04 Jan 2016 22:37:07 -0000

Hi,




On 1/4/16, 13:31, "ietf on behalf of Brian E Carpenter" <ietf-bounces@ietf.org on behalf of brian.e.carpenter@gmail.com> wrote:

>On 05/01/2016 09:36, Scott O. Bradner wrote:
>> 
>>> On Jan 4, 2016, at 3:21 PM, John C Klensin <john-ietf@jck.com> wrote:
>>>
>>> Scott,
>>>
>>> I think this actually muddies the issue.  We've actually got two
>>> separate disclosure rules. Summarizing them in different
>>> language (and after reviewing what is in the RFCs), they are:
>>>
>>> (1) If you are personally involved with a patent and/or you or
>>> your organization claim ownership or some other beneficial
>>> interest in it that you know about (or might reasonably be
>>> expected to know about), then you are _required_ to disclose.
>> 
>> unless you do not “participate” in the standards process relating to that IPR
>> (see RFC 3979 section 6.1.2 - only binding on a person participating in a discussion)
>> 
>> this is the issue that stalled the previous attempt by the IESG to redo the Note Well
>> the previous version stated the requirement as you did - an absolute requirement 
>> to disclose if you have knowledge of “your” iPR - a number of people pointed
>> out that this was not a accurate description of the rules
>> 
>> also the “benefit” language was trying to help with the “owns” case - it is not just that you 
>> or your organization owns the patent - it also covers the case where you or your organization
>> has the right to license the patent to others and the case where you or your or your organization
>> will receive money (or other consideration) from some party who has the right to license the patent to others
>
>To be clear, adding a legally precise definition of the "benefits from" case to
>BCP 79 would, IMHO, be a good idea. But since it is not currently defined there,
>the proposed Note Well language, IMHO, misrepresents what the BCP says.
>
>IANAL, so a view on this from an experienced IPR litigator would be useful.

I don’t claim to be an experienced IP litigator, but I have spent many dozens of hours in court rooms dealing with essential patent cases, which may give me a bit of a “feeling” what could happen.  

IMO, the “benefits from” language extends the scope of what is currently codified in BCP79 with respect of disclosure requirements--people who, under the strictest interpretation of BCP79 (as of Jan 2016) may have had no disclosure obligation, may have one now.  IMO, it extends it in a sensible direction because it addresses to some extent some flavors of the mushrooming privateering problem.  For example, it is well known that certain companies in our industry (with employees participating in the IETF) have sold IETF essential patents to a troll, often below market value.  The troll goes and sues the competition.  The companies receive a certain (sometimes quite large) percentage of the royalties.  Under the strictest interpretation of BCP79 as written, the employees may not have a disclosure obligation, as their employer neither owns nor controls the patent anymore.  This is a loophole in BCP79 that has become quite a problem in our industry over the last few years.

If, after community review, the IETF at large decides that an extension of BCP79’s scope is what it wants, then why not put it in the Note Well?  One participates in the IETF under BCP79 as well as under the Note Well, and no one who ever signed up to mailing lists or attends meetings could successfully argue differently, right?  I doubt that courts would put great significance in the fact that one doc happens to be an RFC/BCP, the other a “mere" Note Well.  Both are policy documents, both are well known, one is newer than the other so it’s logical that the newer one supersedes the older one in case of inconsistencies.  Nowhere in the current incarnation of BCP79 it is said that BCP79 deals with all aspects of patent IP, and all other docs are null and void.  All that could be argued just fine.  Really.

That said, if we get consensus that broadening the disclosure obligations is a Good Thing, and also to do that in the Note Well rather than working another decade on spinning a new BCP79, we better do not make misleading statements about one being a summary of the other, when they are not.

So my suggestion is to keep the “benefits from” language, but remove “The brief summary:” and all other references to “summary”.  Instead, make the Note Well a doc standing on its own.  

Stephan 


>
>   Brian
>
>> 
>> 
>>>
>>> (2) If (1) does not apply but you happen to know about the
>>> patent claims anyway, you are encouraged to disclose but are
>>> under no formal requirement to do so.
>>>
>>> The second is particularly important to those of us who might
>>> get a call from someone saying "TrollCo claims it has patent
>>> rights that cover such-and-such.  Do you have an opinion about
>>> that with regard to either applicability or validity?"   Because
>>> even the asking of questions like that may be covered by NDAs,
>>> the exact IETF requirements are fairly important.
>> 
>> yup - I’m well in that boat myself
>> 
>>>
>>> As usual, what this suggests to me is that the Note Well should
>>> avoid saying things that are misleading.  
>> 
>> or leave things out in a way that is misleading
>> 
>> Scott
>> 
>>> That, in turn, means
>>> either sticking to general advice and pointing to the relevant
>>> documents (in that sense, this attempted revision seems to be a
>>> step in the right direction) or being very specific and precise.
>>> The proposed language in this area seems to be neither.
>>>
>>> Similarly, 
>>>
>>>
>>>
>>> --On Tuesday, January 05, 2016 08:37 +1300 Brian E Carpenter
>>> <brian.e.carpenter@gmail.com> wrote:
>>>
>>>> On 05/01/2016 05:05, John C Klensin wrote:
>>>> ...
>>>>> In particular, don't say "By participating with the
>>>>> IETF, you agree to follow IETF processes and policies" and
>>>>> then identify only a few of them as if they were the complete
>>>>> list.
>>>>
>>>> I thought about trying to express that in my rewrite, but
>>>> couldn't see an easy way to cover it. As I repeat from time to
>>>> time, the hard way to cover it is
>>>> http://www.ietf.org/about/process-docs.html . Good luck in
>>>> trying to summarise that for the Note Well.
>>>
>>> But that suggests that either the Note Well should be about IPR
>>> and should say to, possibly adding a sentence there are lots of
>>> important non-IPR policies of which people need to be aware or,
>>> difficult or not, it should be comprehensive.  Picking one
>>> handful of policies and ignoring others seems like a recipe for
>>> trouble unless the boundary or stopping rule is clearly
>>> identified.  As you suggest above, good luck with that
>>> delineation as well as with the comprehensive summary. 
>>>
>>>    john
>>>
>>>
>>>
>>>
>>> --On Monday, January 04, 2016 14:48 -0500 "Scott O. Bradner"
>>> <sob@sobco.com> wrote:
>>>
>>>> ps - stated better in RFC 3979 sec 6.6
>>>>
>>>> 6.6.  When is a Disclosure Required?
>>>>
>>>>   IPR disclosures under Sections 6.1.1. and 6.1.2 are
>>>> required with    respect to IPR that is owned directly or
>>>> indirectly, by the    individual or his/her employer or
>>>> sponsor (if any) or that such    persons otherwise have the
>>>> right to license or assert.
>>>>
>>>>
>>>>> On Jan 4, 2016, at 2:41 PM, Scott O. Bradner <sob@sobco.com>
>>>>> wrote:
>>>>>
>>>>>
>>>>>>> • If you are aware that any contribution to the IETF is
>>>>>>> covered by patents or patent applications that are owned
>>>>>>> by, controlled by, or would benefit you or your sponsor,
>>>>>>> you must disclose that fact, or not participate in the
>>>>>>> discussion.
>>>>>>
>>>>>> Where does "or would benefit" come from in BCP 79? While I
>>>>>> agree with the sentiment, I don't think it follows from our
>>>>>> rules, so I think it must be deleted.
>>>>>
>>>>> the concept comes from (for example) RFC 3979 section 6.1.3
>>>>> 6.1.3.  IPR of Others
>>>>>
>>>>>  If a person has information about IPR that may Cover IETF
>>>>>  Contributions, but the participant is not required to
>>>>>  disclose because they do not meet the criteria in Section
>>>>>  6.6 (e.g., the IPR is owned by some other company), such
>>>>>  person is encouraged to notify the IETF by sending an email
>>>>>  message to ietf-ipr@ietf.org.  Such a notice should be sent
>>>>>  as soon as reasonably possible after the person realizes
>>>>>  the connection.
>>>>>
>>>>> i.e. the text is trying to deal with the case where you know
>>>>> of IPR but it is not "yours"
>>>>>
>>>>> this seemed to be a clean way to express the condition - just
>>>>> eliminating the phrase would, imo, make it harder to
>>>>> understand when disclosure is required -  other ways to get
>>>>> the point across would be helpful
>>>>>
>>>>> Scott
>>>>>
>>>>>
>>>>>
>>>>
>>>
>>>
>>>
>>>
>> 
>> .
>> 
>