Prosecution Insights
Last updated: October 02, 2026
Application No. 18/807,624

TRUSTED IDENTIFICATION VERIFICATION SYSTEM

Non-Final OA §101§103
Filed
Aug 16, 2024
Examiner
PATEL, DHAIRYA A
Art Unit
2453
Tech Center
2400 — Computer Networks
Assignee
CrowdStrike Inc.
OA Round
3 (Non-Final)
72%
Grant Probability
Favorable
3-4
OA Rounds
1y 9m
Est. Remaining
99%
With Interview

Examiner Intelligence

Grants 72% — above average
72%
Career Allowance Rate
537 granted / 747 resolved
+13.9% vs TC avg
Strong +27% interview lift
Without
With
+27.0%
Interview Lift
resolved cases with interview
Typical timeline
3y 11m
Avg Prosecution
20 currently pending
Career history
776
Total Applications
across all art units

Statute-Specific Performance

§101
17.1%
-22.9% vs TC avg
§103
63.3%
+23.3% vs TC avg
§102
7.1%
-32.9% vs TC avg
§112
6.7%
-33.3% vs TC avg
Black line = Tech Center average estimate • Based on career data from 747 resolved cases

Office Action

§101 §103
DETAILED ACTION Notice of Pre-AIA or AIA Status The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA . This action is responsive to communication filed on 8/7/2026. Claims 1-20 are subject to examination. This amendment and applicant’s arguments have been fully considered and entered by the Examiner. Claim Rejections - 35 USC § 101 35 U.S.C. 101 reads as follows: Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and requirements of this title. Claim 1-20 are rejected under 35 U.S.C. 101 because the claimed invention is directed to an abstract idea without significantly more. The claim(s) 1, 16, 19 recite(s) transmitting a challenge to an identity of a user of the second device to at least one of the server or the second device which falls under mental process wherein one/first user can write a question on a piece of paper can send it to the second user; receiving a response indicating verification status of the identity of the second user which also falls under mental process wherein this can be done by receiving on the same piece of paper an answer/response indicating verification status of the identity of the second user wherein after verifying one can write on the piece of paper the second user’s identity is verified; presenting an indication of the response which falls under mental process wherein the answer can be displayed/presented which has been written on the piece of paper. This judicial exception is not integrated into a practical application because the claim recites additional element -using processing device to perform receiving step. The processing device is recited at a high-level of generality as a generic device performing a generic computer function of receiving a response such that it amounts to no more than mere instructions to apply the exception using generic computer component/processing device. This additional element does not integrate the abstract idea into a practical application because it does not impose any meaningful limits on practicing the abstract idea. The claim(s) does/do not include additional elements that are sufficient to amount to significantly more than the judicial exception because the additional element of processing device to perform receiving a response such that it amounts to no more than mere instructions to apply the exception using generic computer component/processing device. Mere instruction to apply an exception using a generic computer component/processing device cannot provide an inventive concept. The claim is not patent eligible. With respect to claims 2-15, 17-18, 20, falls under mental process wherein the concepts can be performed in a piece of paper. This judicial exception is not integrated into a practical application because the claim recites additional element -using processing device to perform receiving step. The processing device is recited at a high-level of generality as a generic device performing a generic computer function of receiving a response such that it amounts to no more than mere instructions to apply the exception using generic computer component/processing device. This additional element does not integrate the abstract idea into a practical application because it does not impose any meaningful limits on practicing the abstract idea. The claim(s) does/do not include additional elements that are sufficient to amount to significantly more than the judicial exception because the additional element of processing device to perform receiving a response such that it amounts to no more than mere instructions to apply the exception using generic computer component/processing device. Mere instruction to apply an exception using a generic computer component/processing device cannot provide an inventive concept. The claim is not patent eligible. Claim Rejections - 35 USC § 103 The following is a quotation of 35 U.S.C. 103 which forms the basis for all obviousness rejections set forth in this Office action: A patent for a claimed invention may not be obtained, notwithstanding that the claimed invention is not identically disclosed as set forth in section 102, if the differences between the claimed invention and the prior art are such that the claimed invention as a whole would have been obvious before the effective filing date of the claimed invention to a person having ordinary skill in the art to which the claimed invention pertains. Patentability shall not be negated by the manner in which the invention was made. Claim(s) 1-17, 19-20 is/are rejected under 35 U.S.C. 103 as being unpatentable over Shuman et al. U.S. Patent # 9,094,519 (hereinafter Shuman) in view of Klassen et al U.S. Patent Publication # 2006/0101266 (hereinafter Klassen) in view of Law et al U.S. Patent Publication # 2022/0138298 (hereinafter Law) With respect to claim 1, Shuman teaches a method, comprising: -transmitting, by a device during a communication session between the first device and a second device, a challenge to an identity of a user of the second device to at least one of a server or the second device (i.e. transmitting an authentication challenge message or signal which may be responded by the called party using third computing device by entering secret pin between calling party and called party) (column 12 lines 17-42) wherein the first device and the second device are connected during the communication session (i.e. a call request to establish a video chat with the user of the second computing device may be sent to the server computing by the user of the first computing device via the connection during the communication session) (column 12 lines 17-21) -receiving, by a processing device at the first device and based on the challenge during the communication session between the first device and the second device, a response from the server indicating a verification status of the identity of the user of the second device (i.e. answering authentication challenge answer and if answer correct, establishing connection) (column 12 lines 17-42), wherein the response is based on associations of trusted identifications (IDs) (i.e. PIN answer) and biometric IDs (i.e. finger print scan or iris scan) maintained by the server (i.e. biometric finger print scan, PIN maybe evaluated against data stored in the server)(column 23 lines 29-42), and wherein the response is further based on biometric data of the user from the second device (column 12 lines 17-42)(column 23 lines 36-41); and -presenting, at the first device during the communication session, an indication of the response(Fig. 3D, entering PIN)(column 15 lines 5-13) Although Shuman shows transmitting, by a device (i.e. server device) during a communication session between the first device and a second device, a challenge to an identity of a user of the second device to at least one of a server or the second device (i.e. transmitting an authentication challenge message or signal which may be responded by the called party using third computing device by entering secret pin between calling party and called party) (column 12 lines 17-42) but does not explicitly transmitting by a first device a challenge to second device. Klassen teaches transmitting, by a first device during a communication session between the first device and a second device, a challenge to an identity of a user of the second device to at least one of a server or the second device (i.e. first mobile device to a second mobile device including a question wherein the user of the second mobile device includes display of the question and provides the user with an opportunity to select or submit and answer)(Paragraph 63), wherein the first device and the second device are connected during the communication (i.e. the first mobile device provide the user of the mobile device with the correct answer via an alternative communication application such as through voice call) (Paragraph 63). Examiner would like to point out that voice call/session has already been established in Klassen reference and this is establishing messaging relationship. Hence, first and the second device already connected during the communication session. It would have been obvious to one of ordinary skill in the art before the effective filing date of the claimed invention to implement Klassen’s teaching in Shuman’s to come up with having first and second device are connected during the communication session and the transmitting by a first device a challenge to an identity of a user of the second device. The motivation for doing so would be so the passcode based authentication procedure provides enhanced security for ensuring that a message relationship is established between the correct parties. Although Shuman implicitly teaches biometric IDs maintained by the server, Law explicitly teaches wherein the response is based on associations of trusted identifications (IDs) (Paragraph 38-39) and biometric IDs (i.e. public key and private key related to biometrics) maintained by the server (Paragraph 36-37). It would have been obvious to one of ordinary skill in the art before the effective filing date of the claimed invention to implement Law’s teaching in Shuman and Klassen’s to come up with having biometric IDs maintained by the server. The motivation for doing so would be so the IS server attests to the authentication of a user by sending challenge to the user device and authenticating the response using the FIDO protocol and also verifying biometric data. With respect to claim 2, Shuman teaches the method of claim 1, further comprising: receiving, at the first device during the communication session, a selection of a user interface (UI) element corresponding to the challenge (Fig. 3D, entering PIN), wherein the transmitting the challenge comprises transmitting the challenge based on the selection of the UI element (Fig. 3D, entering PIN)(column 15 lines 5-13). With respect to claim 3, Shuman teaches the method of claim 1, wherein the communication session comprises at least one of an audio call, a video call (Fig. 2a-d), or an extended reality (XR) session. With respect to claim 4, Shuman teaches the method of claim 1, wherein the biometric data comprises at least one of facial data of the user, iris data of the user, fingerprint data of the user (i.e. finger print scan or iris scan), or voice data of the user (column 23 lines 29-42). With respect to claim 5, Shuman teaches the method of claim 1, wherein the trusted IDs include a trusted ID of the user (i.e. PIN answer) and the biometric IDs (i.e. finger print scan or iris scan) include a biometric ID of the user of the second device (i.e. finger print scan or iris scan), the verification status indicates that the identity of the user of the second device is verified based on the trusted ID, the biometric ID, and the biometric data, and the presenting the indication of the response comprises presenting graphical data on a display at the first device indicating that the identity of the user of the second device is verified (column 24 lines 43-57). With respect to claim 6, Shuman teaches the method of claim 1, wherein the trusted IDs fail to include a trusted ID of the user and the biometric IDs fail to include a biometric ID of the user of the second device, the verification status indicates that the identity of the user of the second device cannot be verified (column 12 lines 17-42)(column 23 lines 36-41), and the presenting the indication of the response comprises presenting graphical data on a display at the first device indicating that the identity of the user of the second device cannot be verified (column 24 lines 37-42). With respect to claim 7, Shuman teaches the method of claim 1, wherein the trusted IDs fail to include a trusted ID of the user and the biometric IDs fail to include a biometric ID of the user of the second device (column 24 lines 37-42), and the receiving the response from the server indicating whether the identity of the user of the second device is verified comprises receiving an indication that a second server has verified the identity of the user (column 24 lines 43-57). With respect to claim 8, Shuman, Klassen and Law teaches the method of claim 1, but Shuman further teaches wherein the challenge requests the second device to transmit the biometric data of the user to the server (column 23 lines 36-41, 63-67)(column 24 lines 1-9) With respect to claim 9, Shuman teaches the method of claim 1, further comprising: establishing the communication session between the first device and the second device (i.e. answering authentication challenge answer and if answer correct, establishing connection) (column 12 lines 17-42) obtaining, at the first device, an identifier of the user of the second device from the communication session (column 23 lines 36-42); and displaying, at the first device, an identifier of the user of the second device, wherein the identifier of the user of the second device is displayed at the first device concurrently with the indication of the response (column 23 lines 36-42) (Fig. 3D, entering PIN)(column 15 lines 5-13) With respect to claim 10, Shuman teaches the method of claim 1, wherein the challenge comprises an identifier of the user of the second device received by the first device during the communication session, and the verification status of the identity of the user is further based on a comparison between the identifier of the user of the second device and an identifier from a trusted ID (column 24 lines 43-57). With respect to claim 11, Shuman teaches the method of claim 1,wherein the response includes an identifier from a trusted ID in the trusted IDs, the method further comprising: performing, at the first device, a comparison between the identifier from the trusted ID to an identifier of the user of the second device obtained via the communication session (column 24 lines 43-57), wherein the presenting the indication of the response is based on the comparison (column 24 lines 43-57). With respect to claim 12, Shuman teaches the method of claim 1, wherein the comparison indicates that the identifier from the trusted ID is not equivalent to the identifier of the user of the second device obtained via the communication session (column 24 lines 37-42), and wherein the indication of the response indicates that the identifier from the trusted ID is not equivalent to the identifier of the user of the second device obtained via the communication session (column 24 lines 37-42) With respect to claim 13, Shuman teaches the method of claim 1, wherein the transmitting the challenge, the receiving the response, and the presenting the indication of the response comprise transmitting the challenge, receiving the response, and presenting the indication of the response by way of a plug-in application (Fig. 3d) for a communication application executed by the first device (Fig. 3D, entering PIN)(column 15 lines 5-13) With respect to claim 14, Shuman and Law teaches the method of claim 1, but Law further teaches wherein the trusted IDs comprise government issued IDs (Paragraph 38) With respect to claim 15, Shuman teaches the method of claim 1, further comprising: ending the communication session based on the response indicating that the user of the second device cannot be verified or that the user of the second device is not verified (column 24 lines 37-42) With respect to claims 16-17 respectively, teaches same limitations as claims 1-2 respectively, therefore rejected under same basis. With respect to claims 19-20 respectively, teaches same limitations as claims 1-2 respectively, therefore rejected under same basis. Claim(s) 18 is/are rejected under 35 U.S.C. 103 as being unpatentable over Shuman et al. U.S. Patent # 9,094,519 (hereinafter Shuman) further in view of Klassen in view of Law et al U.S. Patent Publication # 2022/0138298 (hereinafter Law) further in view of Khuong et al. U.S. Patent Publication # 2023/0206219 (Hereinafter Khuong) With respect to claim 18, Shuman, Klassen and Law teaches the system of claim 16, wherein the trusted IDs are driver license, but does not explicitly teach trusted IDs comprises Real IDs. Khuong teaches driver license or government issued IDs as Real ID. It would have been obvious to one of ordinary skill in the art before the effective filing date of the claimed invention to implement Khuong’s teaching in Shuman, Klassen and Law’s teaching to come up with having driver license and trusted IDs as Real IDs. The motivation for doing so would be because Real ID have security features designed to prevent tampering, counterfeiting or duplication of the driver’s licenses and identification cards for fraudulent purposes. Response to Arguments Applicant's arguments filed 8/7/2026 have been fully considered but they are not persuasive. A). Applicant states Shuman and Law does not teach “transmitting, by a first device during a communication session between the first device and a second device, a challenge to an identity of a user of the second device to at least one of a server or the second device”. Examiner respectfully disagree with the applicant because in column 12 lines 17-42, Shuman teaches transmitting, by device during a communication session between the first device and a second device, a challenge to an identity of a user of the second device to at least one of a server or the second device (i.e. transmitting an authentication challenge message or signal which may be responded by the called party using third computing device by entering secret pin between calling party and called party) (column 12 lines 17-42). First, the claim limitation states that “a challenge to an identity of a user of the second device to at least one of a server or the second device”. Hence, the challenge is to at least one of a server. In this case, Shuman teaches sending the challenge question and when the identity of the called party is confirmed with a correct authentication challenge answer received at the server computing device via the connection, the server computing device may establish and administer the call between the calling party using the application on the first computing device and the called party using the application. Furthermore, Shuman teaches wherein the first device and the second device are connected during the communication session (i.e. a call request to establish a video chat with the user of the second computing device may be sent to the server computing by the user of the first computing device via the connection during the communication session) (column 12 lines 17-21). Examiner would like to point out that claim language does not define communication session. One of ordinary skill in the art can interpret first device and second device being connected as a communication session. Furthermore, claim language also does not explicitly state that communication session is already established in form of voice call before transmitting a challenge to identity. Furthermore, in column 12 lines 17-42, column 23 lines 36-41, Shuman teaches receiving, by a processing device at the first device and based on the challenge during the communication session between the first device and the second device, a response from the server indicating a verification status of the identity of the user of the second device (i.e. answering authentication challenge answer and if answer correct, establishing connection) (column 12 lines 17-42), wherein the response is based on associations of trusted identifications (IDs) (i.e. PIN answer) and biometric IDs (i.e. finger print scan or iris scan) maintained by the server (i.e. biometric finger print scan, PIN maybe evaluated against data stored in the server)(column 23 lines 29-42), and wherein the response is further based on biometric data of the user from the second device (i.e. supplying identification information that may be use to adequately authenticate the identity of the called party such as a PIN, a voice sample, a finger print scan, a retina scan) (column 12 lines 17-42)(column 23 lines 20-41). Shuman teaches answering authentication challenge answer is received correctly, the server computing device ai the connection may establish and administer the call, wherein the response is based on association of trust IDs which is PIN answer and biometric IDs which is finger print scan or IRIS scan maintained by the user. -presenting, at the first device during the communication session, an indication of the response(Fig. 3D, entering PIN)(column 15 lines 5-13) Although Shuman shows transmitting, by a device (i.e. server device) during a communication session between the first device and a second device, a challenge to an identity of a user of the second device to at least one of a server or the second device (i.e. transmitting an authentication challenge message or signal which may be responded by the called party using third computing device by entering secret pin between calling party and called party) (column 12 lines 17-42) but does not explicitly transmitting by a first device a challenge to second device. Klassen teaches transmitting, by a first device during a communication session between the first device and a second device, a challenge to an identity of a user of the second device to at least one of a server or the second device (i.e. first mobile device to a second mobile device including a question wherein the user of the second mobile device includes display of the question and provides the user with an opportunity to select or submit and answer)(Paragraph 63), wherein the first device and the second device are connected during the communication (i.e. the first mobile device provide the user of the mobile device with the correct answer via an alternative communication application such as through voice call) (Paragraph 63). Examiner would like to point out that voice call/session has already been established in Klassen reference and this is establishing messaging relationship. Hence, first and the second device already connected during the communication session. It would have been obvious to one of ordinary skill in the art before the effective filing date of the claimed invention to implement Klassen’s teaching in Shuman’s to come up with having first and second device are connected during the communication session and the transmitting by a first device a challenge to an identity of a user of the second device. The motivation for doing so would be so the passcode based authentication procedure provides enhanced security for ensuring that a message relationship is established between the correct parties. Although Shuman implicitly teaches biometric IDs maintained by the server, Law explicitly teaches wherein the response is based on associations of trusted identifications (IDs) (Paragraph 38-39) and biometric IDs (i.e. public key and private key related to biometrics) maintained by the server (Paragraph 36-37). It would have been obvious to one of ordinary skill in the art before the effective filing date of the claimed invention to implement Law’s teaching in Shuman and Klassen’s to come up with having biometric IDs maintained by the server. The motivation for doing so would be so the IS server attests to the authentication of a user by sending challenge to the user device and authenticating the response using the FIDO protocol and also verifying biometric data. With respect to claim 16 and 19, applicant state, claim 16 and 19 recite similar features to those of claim 1, therefore same rationale applies. Hence, Examiner response of claim 1, same rationale applies for claim 16 and 19. Conclusion The prior art made of record and not relied upon is considered pertinent to applicant's disclosure. A). Berookim et al. U.S. Patent Publication # 2022/0344016 which teaches about having government issued identification card as Real ID. B). Frankel et al. U.S. Patent # 7,343,008 which teaches about identity based conferencing system wherein the system focuses on individual users instead of group of participants wherein invoking user identity and services are personalized for each user. C). Larson et al. U.S. Patent # 11,882,118 Any inquiry concerning this communication or earlier communications from the examiner should be directed to DHAIRYA A PATEL whose telephone number is (571)272-5809. The examiner can normally be reached M-F 7:30am-4:00pm. Examiner interviews are available via telephone, in-person, and video conferencing using a USPTO supplied web-based collaboration tool. To schedule an interview, applicant is encouraged to use the USPTO Automated Interview Request (AIR) at http://www.uspto.gov/interviewpractice. If attempts to reach the examiner by telephone are unsuccessful, the examiner’s supervisor, Kamal B Divecha can be reached at 571-272-5863. The fax phone number for the organization where this application or proceeding is assigned is 571-273-8300. Information regarding the status of published or unpublished applications may be obtained from Patent Center. Unpublished application information in Patent Center is available to registered users. To file and manage patent submissions in Patent Center, visit: https://patentcenter.uspto.gov. Visit https://www.uspto.gov/patents/apply/patent-center for more information about Patent Center and https://www.uspto.gov/patents/docx for information about filing in DOCX format. For additional questions, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. DHAIRYA A. PATEL Primary Examiner Art Unit 2453 /DHAIRYA A PATEL/ Primary Examiner, Art Unit 2453
Read full office action

Prosecution Timeline

Show 1 earlier event
Oct 01, 2025
Non-Final Rejection mailed — §101, §103
Nov 17, 2025
Applicant Interview (Telephonic)
Nov 17, 2025
Examiner Interview Summary
Dec 31, 2025
Response Filed
Apr 07, 2026
Final Rejection mailed — §101, §103
Aug 07, 2026
Request for Continued Examination
Aug 13, 2026
Response after Non-Final Action
Aug 25, 2026
Non-Final Rejection mailed — §101, §103 (current)

Precedent Cases

Applications granted by this same examiner with similar technology

Patent 12743903
DATA VERIFICATION TERMINAL AND DATA VERIFICATION SERVER
2y 0m to grant Granted Sep 22, 2026
Patent 12732417
DETECTING NETWORK OPERATION VALIDATION ANOMALIES IN CONGLOMERATE-APPLICATION-BASED ECOSYSTEMS SYSTEMS AND METHODS
2y 7m to grant Granted Sep 08, 2026
Patent 12726433
Service Processing Method, Apparatus, Device, and System
3y 4m to grant Granted Sep 01, 2026
Patent 12719703
REVOKING ACCESS TO A NETWORK
3y 11m to grant Granted Aug 25, 2026
Patent 12712945
COUNTERFACTUAL ANALYSIS OF USER MODELS FOR PRESCRIPTIVE OUTPUT
2y 11m to grant Granted Aug 18, 2026
Study what changed to get past this examiner. Based on 5 most recent grants.

Strategy Recommendation AI-generated — please review before filing

Get a prosecution strategy drawn from examiner precedents, rejection analysis, and claim mapping.
Typically takes 5-10 seconds — AI-generated, attorney review required before filing

Prosecution Projections

3-4
Expected OA Rounds
72%
Grant Probability
99%
With Interview (+27.0%)
3y 11m (~1y 9m remaining)
Median Time to Grant
High
PTA Risk
Based on 747 resolved cases by this examiner. Grant probability derived from career allowance rate.

Sign in with your work email

Enter your email to receive a magic link. No password needed.

Personal email addresses (Gmail, Yahoo, etc.) are not accepted.

Free tier: 3 strategy analyses per month