Prosecution Insights
Last updated: May 29, 2026
Application No. 18/943,331

AUTHENTICATION OF PUBLIC ENCRYPTION KEYS USING AN ADMINISTRATIVE SIGNATURE

Non-Final OA §DOUBLEPATENT§DP
Filed
Nov 11, 2024
Priority
Sep 12, 2022 — continuation of 12/143,474
Examiner
GRIJALVA LOBOS, BORIS D
Art Unit
2446
Tech Center
2400 — Computer Networks
Assignee
Tailscale Inc.
OA Round
1 (Non-Final)
83%
Grant Probability
Favorable
1-2
OA Rounds
10m
Est. Remaining
99%
With Interview

Examiner Intelligence

Grants 83% — above average
83%
Career Allowance Rate
323 granted / 391 resolved
+24.6% vs TC avg
Strong +21% interview lift
Without
With
+20.7%
Interview Lift
resolved cases with interview
Typical timeline
2y 4m
Avg Prosecution
15 currently pending
Career history
406
Total Applications
across all art units

Statute-Specific Performance

§101
4.5%
-35.5% vs TC avg
§103
67.1%
+27.1% vs TC avg
§102
3.9%
-36.1% vs TC avg
§112
6.1%
-33.9% vs TC avg
Black line = Tech Center average estimate • Based on career data from 391 resolved cases

Office Action

§DOUBLEPATENT §DP
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA . This Office action is in response to communications filed on 11/11/2024. Claims 1-20 are pending. DETAILED ACTION Double Patenting The nonstatutory double patenting rejection is based on a judicially created doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the unjustified or improper timewise extension of the “right to exclude” granted by a patent and to prevent possible harassment by multiple assignees. A nonstatutory double patenting rejection is appropriate where the conflicting claims are not identical, but at least one examined application claim is not patentably distinct from the reference claim(s) because the examined application claim is either anticipated by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 USPQ 619 (CCPA 1970); In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 1969). A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) may be used to overcome an actual or provisional rejection based on nonstatutory double patenting provided the reference application or patent either is shown to be commonly owned with the examined application, or claims an invention made as a result of activities undertaken within the scope of a joint research agreement. See MPEP § 717.02 for applications subject to examination under the first inventor to file provisions of the AIA as explained in MPEP § 2159. See MPEP § 2146 et seq. for applications not subject to examination under the first inventor to file provisions of the AIA . A terminal disclaimer must be signed in compliance with 37 CFR 1.321(b). The filing of a terminal disclaimer by itself is not a complete reply to a nonstatutory double patenting (NSDP) rejection. A complete reply requires that the terminal disclaimer be accompanied by a reply requesting reconsideration of the prior Office action. Even where the NSDP rejection is provisional the reply must be complete. See MPEP § 804, subsection I.B.1. For a reply to a non-final Office action, see 37 CFR 1.111(a). For a reply to final Office action, see 37 CFR 1.113(c). A request for reconsideration while not provided for in 37 CFR 1.113(c) may be filed after final for consideration. See MPEP §§ 706.07(e) and 714.13. The USPTO Internet website contains terminal disclaimer forms which may be used. Please visit www.uspto.gov/patent/patents-forms. The actual filing date of the application in which the form is filed determines what form (e.g., PTO/SB/25, PTO/SB/26, PTO/AIA /25, or PTO/AIA /26) should be used. A web-based eTerminal Disclaimer may be filled out completely online using web-screens. An eTerminal Disclaimer that meets all requirements is auto-processed and approved immediately upon submission. For more information about eTerminal Disclaimers, refer to www.uspto.gov/patents/apply/applying-online/eterminal-disclaimer. Claims 7-10 and 17-18 are rejected on the ground of nonstatutory double patenting as being unpatentable over claims 1-4 of U.S. Patent No. 12,143,474 B2. Although the claims at issue are not identical, they are not patentably distinct from each other because: Regarding claim 7, PNG media_image1.png 200 400 media_image1.png Greyscale As shown, claim 1 of US Patent No. 12,143,474 B2 discloses every limitation recited in claim 7 of the present application with the exception of "receive a join request from the computing element requesting to join the private network". However, claim 2 of US Patent No. 12,143,474 B2 recites "The method of claim 1 further comprising: in the computing element, generating a request to join the private network, wherein the request comprises at least the public key for communication with the computing element; in the computing element, communicating the request to the coordination service for the private network." Therefore, claim 2 of US Patent No. 12,143,474 B2 claims in full the subject matter recited by claim 1 of the present application. Claims 8-10 of the present application are similarly disclosed by claims 2-4 of US Patent No. 12,143,474 B2. Claims 17-18 are similarly rejected in view of claims 1 and 2 of US Patent No. 12,143,474 B2. Allowable Subject Matter Claims 1-6 are allowed. Claims 11-16 and 19-20 are objected to as being dependent upon a rejected base claim, but would be allowable if rewritten in independent form including all of the limitations of the base claim and any intervening claims. REASONS FOR ALLOWANCE The prior art of record fails to show singly, or in combination, the claimed limitations of “in response to determining the public key is signed with an administrative signature, adding the communication information to a communication configuration for the private network at the computing element; and exchanging communications between the computing element and the new computing element over the private network using the communication information from the communication configuration” as recited in claim 1. These limitations, in conjunction with other limitations in claim 1, are not specifically disclosed or remotely suggested in the prior art of record. A review of claim(s) 1-6 indicates claim(s) 1-6 are allowable over the prior art of record The closest prior art of record includes: US 20200301782 A1, which discloses "using a cluster-level trusted third party or a cluster-level certificate authority to digitally sign and distribute the public key of each component to every other component" (¶[0040]). US 20240193250 A1, which discloses "The user device certificate includes a user device public key and can be signed by an authorizing entity private key. In some embodiments, the read record response message can further include an authorizing entity certificate. The authorizing entity certificate includes an authorizing entity public key and can be signed by a certificate authority (CA)" (¶[0102]) and "the access device 404 receives, from the user device, an authorizing entity certificate comprising an issuer public key and signed by a certificate authority private key and a user device certificate comprising a user device public key and signed by an issuer private key" (¶[0104]). US 20230316263 A1, which discloses "the authenticator 113 can indicate to the NFT smart contract 109 that access to the asset can be granted. This could be done in response to two conditions. First, it could be done in response to validating the signature of the signed challenge received at block 419 using the public key 129 retrieve at block 423. Second, it could be done in response to determining that the signed public key 129 received at block 419 matches the public key 129 retrieved at block 423. If both conditions are true, then the authenticator 113 can determine that the NFT 116 can be used for authenticating its owner, as defined by the owner wallet address 123, and that authentication has been approved or authorized by the owner at block 416" (¶[0039]). US 20230022797 A1, which discloses "after storing the biometric information, the authenticator 312 can sign a public key with a private key. In some embodiments, the public key and the private key can be an authenticator public key and an authenticator private key. In other embodiments, the public key and the private key can be a user device public key and a user device private key. The private key can be stored in a secure memory or in software (e.g., host card emulator (HCE)) on the user device 302. The private key may be associated with a digital certificate issued by a certificate authority. As such, the selected server computer can validate a certificate chain for the private key back to the certificate authority. The authenticator 312 can sign the public key with the private key to form a digital signature on the signed public key" (¶[0105]). US 20220255905 A1, which discloses "a coordination service may obtain a request from a computing element to join a private network. In response to the request, the coordination service may identify communication rules associated with the computing element based on credential and device information in the request and may identify communication information to permit the computing element to communicate with one or more other computing elements in the private network" (abstract). US 20220029973 A1, which discloses "a computing element may obtain credential information associated with a user and generate a public-private key pair for the computing element. The computing element may further communicate the public key from the pair with metadata to a coordination service to register the computing element at the coordination service. Once registered, the computing element may receive communication information associated with one or more other computing elements that permit the computing element to communicate with the other computing elements" (abstract). US 20150381372 A1, which discloses "Each participant in the communication network has a public key which is provided to communication partners, i.e., other participants in the communication network, and a private key, which is kept secret by the participant. The public key is signed by a central certification authority in order to confirm the authorization of the participant for the communication network. The signed, public key is referred to herein as a certificate. A certificate can in addition include, besides the public key, attributes (for example, the name or characteristics of the owner), which are also signed. Since the security of the communication system is based on the secrecy of the private key, the private key is usually stored on a Hardware Security Module (HSM)" (¶[0002]). US 20150188887 A1, which discloses "To join the VPN, the node may provide the public key from the key pair to routing apparatus 110, and routing apparatus 110 may assign a VPN Internet Protocol (IP) address to the node. Routing apparatus 110 may also maintain a list and/or routing table 204 containing the public key, VPN IP address, external IP address, and port number of each node and send the list to all nodes connected to routing apparatus 110. Each node may then compute a shared secret with every other node using the node's private key and the other node's public key" (¶[0042]). Conclusion Any inquiry concerning this communication or earlier communications from the examiner should be directed to BORIS D GRIJALVA LOBOS whose telephone number is (571)272-0767. The examiner can normally be reached M-F 10:30AM to 6:30PM EST. Examiner interviews are available via telephone, in-person, and video conferencing using a USPTO supplied web-based collaboration tool. To schedule an interview, applicant is encouraged to use the USPTO Automated Interview Request (AIR) at http://www.uspto.gov/interviewpractice. If attempts to reach the examiner by telephone are unsuccessful, the examiner’s supervisor, Brian Gillis can be reached at 571-272-7952. The fax phone number for the organization where this application or proceeding is assigned is 571-273-8300. Information regarding the status of published or unpublished applications may be obtained from Patent Center. Unpublished application information in Patent Center is available to registered users. To file and manage patent submissions in Patent Center, visit: https://patentcenter.uspto.gov. Visit https://www.uspto.gov/patents/apply/patent-center for more information about Patent Center and https://www.uspto.gov/patents/docx for information about filing in DOCX format. For additional questions, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. /BORIS D GRIJALVA LOBOS/ Primary Patent Examiner, Art Unit 2446
Read full office action

Prosecution Timeline

Nov 11, 2024
Application Filed
Apr 29, 2026
Non-Final Rejection mailed — §DOUBLEPATENT, §DP (current)

Precedent Cases

Applications granted by this same examiner with similar technology

Patent 12641150
SYSTEM AND METHOD FOR ONE-SIDED READ RMA USING LINKED QUEUES
3y 4m to grant Granted May 26, 2026
Patent 12621202
Edge-Based Unified Endpoint Management for Management Continuity
2y 1m to grant Granted May 05, 2026
Patent 12613967
STATIC ANALYSIS OF CONTAINER SERVICES
2y 4m to grant Granted Apr 28, 2026
Patent 12598171
SYSTEMS AND METHODS FOR FAST AND SIMULTANEOUS MULTI-FACTOR AUTHENTICATION USING VECTOR COMPUTING
2y 4m to grant Granted Apr 07, 2026
Patent 12591459
MANAGING USE OF HARDWARE BUNDLES USING CONTROL MECHANISMS
2y 7m to grant Granted Mar 31, 2026
Study what changed to get past this examiner. Based on 5 most recent grants.

Strategy Recommendation AI-generated — please review before filing

Get a prosecution strategy drawn from examiner precedents, rejection analysis, and claim mapping.
Typically takes 5-10 seconds — AI-generated, attorney review required before filing

Prosecution Projections

1-2
Expected OA Rounds
83%
Grant Probability
99%
With Interview (+20.7%)
2y 4m (~10m remaining)
Median Time to Grant
Low
PTA Risk
Based on 391 resolved cases by this examiner. Grant probability derived from career allowance rate.

Sign in with your work email

Enter your email to receive a magic link. No password needed.

Personal email addresses (Gmail, Yahoo, etc.) are not accepted.

Free tier: 3 strategy analyses per month