Prosecution Insights
Last updated: October 22, 2026
Application No. 18/937,974

PROCESS FOR IDENTIFYING A COMPROMISED DEVICE

Final Rejection §102
Filed
Nov 05, 2024
Priority
Jan 30, 2015 — continuation of 12/177,235
Examiner
DADA, BEEMNET W
Art Unit
2435
Tech Center
2400 — Computer Networks
Assignee
Comcast Cable Communications LLC
OA Round
2 (Final)
85%
Grant Probability
Favorable
3-4
OA Rounds
1y 0m
Est. Remaining
99%
With Interview

Examiner Intelligence

Grants 85% — above average
85%
Career Allowance Rate
795 granted / 940 resolved
+26.6% vs TC avg
Strong +18% interview lift
Without
With
+18.4%
Interview Lift
resolved cases with interview
Typical timeline
2y 12m
Avg Prosecution
16 currently pending
Career history
961
Total Applications
across all art units

Statute-Specific Performance

§101
15.6%
-24.4% vs TC avg
§103
30.0%
-10.0% vs TC avg
§102
32.0%
-8.0% vs TC avg
§112
5.2%
-34.8% vs TC avg
Black line = Tech Center average estimate • Based on career data from 940 resolved cases

Office Action

§102
DETAILED ACTION Notice of Pre-AIA or AIA Status The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA . This office action is in reply to amendment filed on July 10, 2026. Claims 1-21 are pending. Response to Arguments Applicant's arguments, with respect to 35 U.S.C. 012 rejections have been fully considered but they are not persuasive. Applicant argues that the prior art on record does not teach comparing information stored in a local storage of the plurality of computing devices with a stored list of domains at both compromised and non-compromised devices. Examiner would point out that, Hentunen US 2014/0310811 A1 teaches based on determining that the compromised computing device is compromised, causing the compromised computing device (i.e., client device 102a) and a non-compromised computing device (i.e., client device 102c) of the plurality of computing devices to compare information stored in a local storage (i.e., local cache) of the plurality of computing devices with a stored list of domains (i.e., stored mappings are communicated and stored locally at both clean and infected devices via marker detection. At time after a device is infected, comparison is made at both infected devices and non-infected device where the comparison is between IP address used by client device and IP address of previously stored mapping, paragraph 0136, 0139 and paragraphs 0147-0159). Examiner would further point out that the prior art on record teaches the claimed limitations and therefore the rejection is respectfully maintained. Claim Rejections - 35 USC § 102 The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis for the rejections under this section made in this Office action: A person shall be entitled to a patent unless – (a)(1) the claimed invention was patented, described in a printed publication, or in public use, on sale, or otherwise available to the public before the effective filing date of the claimed invention. Claims 1-21 are rejected under 35 U.S.C. 102(a)(1) as being anticipated by Hentunen US 2014/0310811 A1 [hereinafter Hentunen]. As per claims 1, 8 and 15, Hentunen teaches method comprising: receiving, by a computing device, a message from a compromised computing device of a plurality of computing devices [paragraphs 0147-0159]; determining, based on the message, that the compromised computing device is compromised [paragraphs 0147-0148]; and based on determining that the compromised computing device is compromised, causing the compromised computing device (i.e., client device 102a) and a non-compromised computing device (i.e., client device 102c) of the plurality of computing devices to compare information stored in a local storage (i.e., local cache) of the plurality of computing devices with a stored list of domains [paragraphs 0147-0159]. As per claims 2, 9 and 16, Hentunen further teaches the method further comprising causing each of the plurality of computing devices to receive an alert signal, the alert signal indicating that at least one of the plurality of computing devices is compromised [paragraphs 0147-0159]. As per claims 3, 10 and 17, Hentunen further teaches the method wherein determining that the compromised computing device is compromised is further based on a match between the information stored in the local storage and an item in the stored list of domains [paragraphs 0147-0159], and the method further comprising causing, based on a determination that the compromised computing device is compromised, an action [paragraphs 0147-0159]. As per claims 4, 11 and 18, Hentunen further teaches the method wherein determining that the compromised computing device is compromised further comprises determining that the compromised computing device is infected with one or more of malware, spyware, a virus, or a Trojan [paragraphs 0147-0159]. As per claims 5, 12 and 19, Hentunen further teaches the method wherein determining that the compromised computing device is compromised further comprises determining a pattern [paragraphs 0147-0159]. As per claims 6, 13 and 20, Hentunen further teaches the method wherein the pattern comprises a quantity of requests, by the compromised computing device, for an electronic file within a time window [paragraphs 0147-0159]. As per claims 7, 14 and 21, Hentunen further teaches the method wherein the message comprises an e-mail message [paragraphs 0147-0159]. Conclusion THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). A shortened statutory period for reply to this final action is set to expire THREE MONTHS from the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date of this final action and the advisory action is not mailed until after the end of the THREE-MONTH shortened statutory period, then the shortened statutory period will expire on the date the advisory action is mailed, and any nonprovisional extension fee (37 CFR 1.17(a)) pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, however, will the statutory period for reply expire later than SIX MONTHS from the mailing date of this final action. Any inquiry concerning this communication or earlier communications from the examiner should be directed to BEEMNET W DADA whose telephone number is (571)272-3847. The examiner can normally be reached Monday-Friday, 9am-5pm. Examiner interviews are available via telephone, in-person, and video conferencing using a USPTO supplied web-based collaboration tool. To schedule an interview, applicant is encouraged to use the USPTO Automated Interview Request (AIR) at http://www.uspto.gov/interviewpractice. If attempts to reach the examiner by telephone are unsuccessful, the examiner’s supervisor, Amir Mehrmanesh can be reached at 571-270-3351. The fax phone number for the organization where this application or proceeding is assigned is 571-273-8300. Information regarding the status of published or unpublished applications may be obtained from Patent Center. Unpublished application information in Patent Center is available to registered users. To file and manage patent submissions in Patent Center, visit: https://patentcenter.uspto.gov. Visit https://www.uspto.gov/patents/apply/patent-center for more information about Patent Center and https://www.uspto.gov/patents/docx for information about filing in DOCX format. For additional questions, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. BEEMNET W. DADA Primary Examiner Art Unit 2435 /BEEMNET W DADA/Primary Examiner, Art Unit 2435
Read full office action

Prosecution Timeline

Nov 05, 2024
Application Filed
May 20, 2026
Non-Final Rejection mailed — §102
May 27, 2026
Non-Final Rejection mailed — §102
Jun 23, 2026
Interview Requested
Jul 02, 2026
Applicant Interview (Telephonic)
Jul 10, 2026
Response Filed
Sep 29, 2026
Final Rejection mailed — §102 (current)

Precedent Cases

Applications granted by this same examiner with similar technology

Patent 12739103
CRYPTOGRAPHIC AGILITY
2y 5m to grant Granted Sep 15, 2026
Patent 12719853
SYSTEMS AND METHODS FOR INDEPENDENTLY SOURCED AUTHENTICATION DURING REMOTE NETWORK SESSIONS
2y 6m to grant Granted Aug 25, 2026
Patent 12705358
TIME-WINDOW BASED MULTI-STAGE SAMPLING
2y 4m to grant Granted Aug 11, 2026
Patent 12699775
ACHIEVING MINIMUM TRUSTWORTHINESS IN DISTRIBUTED WORKLOADS
2y 4m to grant Granted Aug 04, 2026
Patent 12701137
USING IMAGES GENERATED FROM NETWORK PACKETS TO IDENTIFY APPLICATIONS
1y 11m to grant Granted Aug 04, 2026
Study what changed to get past this examiner. Based on 5 most recent grants.

Strategy Recommendation AI-generated — please review before filing

Get a prosecution strategy drawn from examiner precedents, rejection analysis, and claim mapping.
Typically takes 5-10 seconds — AI-generated, attorney review required before filing

Prosecution Projections

3-4
Expected OA Rounds
85%
Grant Probability
99%
With Interview (+18.4%)
2y 12m (~1y 0m remaining)
Median Time to Grant
Moderate
PTA Risk
Based on 940 resolved cases by this examiner. Grant probability derived from career allowance rate.

Sign in with your work email

Enter your email to receive a magic link. No password needed.

Personal email addresses (Gmail, Yahoo, etc.) are not accepted.

Free tier: 3 strategy analyses per month