Prosecution Insights
Last updated: August 16, 2026
Application No. 18/955,136

PRIVACY KEY AND MESSAGE AUTHENTICATION CODE

Non-Final OA §112§DP
Filed
Nov 21, 2024
Priority
Jul 25, 2017 — provisional 62/536,632 +3 more
Examiner
KHAN, SHER A
Art Unit
2497
Tech Center
2400 — Computer Networks
Assignee
Telefonaktiebolaget LM Ericsson
OA Round
1 (Non-Final)
86%
Grant Probability
Favorable
1-2
OA Rounds
7m
Est. Remaining
99%
With Interview

Examiner Intelligence

Grants 86% — above average
86%
Career Allowance Rate
289 granted / 338 resolved
+27.5% vs TC avg
Strong +23% interview lift
Without
With
+23.0%
Interview Lift
resolved cases with interview
Typical timeline
2y 4m
Avg Prosecution
7 currently pending
Career history
348
Total Applications
across all art units

Statute-Specific Performance

§101
16.9%
-23.1% vs TC avg
§103
47.1%
+7.1% vs TC avg
§102
2.5%
-37.5% vs TC avg
§112
22.6%
-17.4% vs TC avg
Black line = Tech Center average estimate • Based on career data from 338 resolved cases

Office Action

§112 §DP
Notice of Pre-AIA or AIA Status The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA . Claim Objection Claim 6 is objected as it recites “generating a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which a Mobile Subscription Identification Number of a subscription permanent identifier (SUPI) is encrypted and ii) a clear-text part comprising: a) a Mobile Country Code of the SUPI, b) a Mobile Network Code of the SUPI, c) a public key identifier for a public key of a home network of the user equipment, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; and transmitting, via an Authentication and Mobility management Function (AMF), the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number”. The last limitation recites the phrase “de-concealing server capable of decrypting the Mobile Subscription Identification Number”, as recited limitation is not recited in a positive manner and this limitation may not be executed by the system. Claim 6 is further objected as it recites “transmitting, via an Authentication and Mobility management Function (AMF), the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number”; as recited the objective of the invention is not clear and the claim appears incomplete. Claim 6 is further objected as it recites ““transmitting, via an Authentication and Mobility management Function (AMF), the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number”; as recited it is not clear what does de-concealing server do with the decrypted Mobile Subscription Identification Number. Claim 17 is also objected for similar reasons as shown above for claim 6. Claim Rejections - 35 USC § 112 The following is a quotation of 35 U.S.C. 112(b): (b) CONCLUSION.—The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the subject matter which the inventor or a joint inventor regards as the invention. The following is a quotation of 35 U.S.C. 112 (pre-AIA ), second paragraph: The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the subject matter which the applicant regards as his invention Claim 6 is rejected under 35 USC § 112 (b) as it recites “ generating a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which a Mobile Subscription Identification Number of a subscription permanent identifier (SUPI) is encrypted and ii) a clear-text part comprising: a) a Mobile Country Code of the SUPI, b) a Mobile Network Code of the SUPI, c) a public key identifier for a public key of a home network of the user equipment, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; and transmitting, via an Authentication and Mobility management Function (AMF), the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number”. The last limitation recites the phrase “de-concealing server capable of decrypting the Mobile Subscription Identification Number”, as recited limitation is not recited in a positive manner and this limitation may not be executed by the system. Claim 6 is further rejected under 112b as it recites “transmitting, via an Authentication and Mobility management Function (AMF), the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number”; as recited the objective of the invention is not clear and the claim appears incomplete. Claim 6 is further rejected under 112b as it recites ““transmitting, via an Authentication and Mobility management Function (AMF), the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number”; as recited it is not clear what does de-concealing server do with the decrypted Mobile Subscription Identification Number. Claims 7-12 are also rejected under 112b due to their direct or indirect dependencies on 6. Claim 17 is also rejected under 112b for similar reasons as shown above for claim 6. Claims 18-19 are also rejected under 112b due to their dependencies on claim 17. Double Patenting The nonstatutory double patenting rejection is based on a judicially created doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the unjustified or improper time-wise extension of the “right to exclude” granted by a patent and to prevent possible harassment by multiple assignees. A nonstatutory double patenting rejection is appropriate where the claims at issue are not identical, but at least one examined application claim is not patentably distinct from the reference claim(s) because the examined application claim is either anticipated by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 1969). A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) may be used to overcome an actual rejection based on a nonstatutory double patenting ground provided the reference application or patent either is shown to be commonly owned with this application, or claims an invention made as a result of activities undertaken within the scope of a joint research agreement. A terminal disclaimer must be signed in compliance with 37 CFR 1.321(b). The USPTO internet Web site contains terminal disclaimer forms which may be used. Please visit http://www.uspto.gov/forms/. The filing date of the application will determine what form should be used. A web-based eTerminal Disclaimer may be filled out completely online using web-screens. An eTerminal Disclaimer that meets all requirements is auto-processed and approved immediately upon submission. For more information about eTerminal Disclaimers, refer to http://www.uspto.gov/patents/process/file/efs/guidance/eTD-info-I.jsp. Claims 1-19 of instant Application US18955136 are rejected on the ground of nonstatutory anticipatory type of double patenting as being unpatentable over claims 1-15 of co-pending US Application US12177662. Although the conflicting claims are not identical, they are not patentably distinct from each other because the claims both in the present application and the US patent discloses a method and systems for providing securely distributing user subscription identity. The table below shows the comparison of claims of the instant application with that of the US application US12177662. Examiner has underlined the limitations not disclosed by the claims of conflicting US patent US12177662. Claim No. Limitations of Instant Application US1. Limitations of the US patent US12177662. Claim No. 1 1. (Currently Amended) A method performed by an authentication server in a home network of a user equipment (UE) for obtaining a subscription permanent identifier (SUPI), which comprises a Mobile Subscription Identification Number, a Mobile Country Code and a Mobile Network Code, the method comprising: receiving, from the UE via an Authentication and Mobility Management Function (AMF), a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which the Mobile Subscription Identification Number is encrypted, and ii) a clear-text part comprising: a) the Mobile Country Code, b) the Mobile Network Code, c) a public key identifier for a public key of the home network, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; determining a de-concealing server to use to decrypt the Mobile Subscription Identification Number; sending the SUCI to the de-concealing server; and receiving the SUPI in response. 1. A method performed by an authentication server in a home network of a user equipment (UE) for obtaining a subscription permanent identifier (SUPI), which comprises a Mobile Subscription Identification Number, a Mobile Country Code and a Mobile Network Code, the method comprising: receiving a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which the Mobile Subscription Identification Number is encrypted, and ii) a clear-text part comprising: a) the Mobile Country Code, b) the Mobile Network Code, c) a public key identifier for a public key of the home network, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; determining a de-concealing server to use to decrypt the Mobile Subscription Identification Number; sending the SUCI to the de-concealing server; and receiving the SUPI in response, wherein receiving the SUCI comprises receiving a message transmitted by the UE as part of a registration procedure for registering the UE with a wireless communication network, wherein the message comprises the SUCI. 1 6 6. (Currently Amended) A method performed by a user equipment, UE, the method comprising: generating a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which a Mobile Subscription Identification Number of a subscription permanent identifier (SUPI) is encrypted and ii) a clear-text part comprising: a) a Mobile Country Code of the SUPI, b) a Mobile Network Code of the SUPI, c) a public key identifier for a public key of a home network of the user equipment, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; and transmitting, via an Authentication and Mobility management Function (AMF), the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number. 5. A method performed by a user equipment (UE), the method comprising: generating a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which a Mobile Subscription Identification Number of a subscription permanent identifier (SUPI) is encrypted and ii) a clear-text part comprising: a) a Mobile Country Code of the SUPI, b) a Mobile Network Code of the SUPI, c) a public key identifier for a public key of a home network of the UE, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; and transmitting the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number, wherein transmitting the SUCI to the authentication server comprises transmitting the SUCI to the authentication server in response to an identifier request message received from an Authentication and Mobility management Function (AMF) as part of a procedure for registering the UE with a wireless communication network. 5 13 13. (Currently Amended) An authentication server for a home network of a user equipment (UE) for obtaining a subscription permanent identifier (SUPI) comprising a Mobile Subscription Identification Number, a Mobile Country Code, and a Mobile Network Code, the authentication server comprising: a receiver for receiving, from the UE via an Authentication and Mobility Management Function (AMF), a message comprising a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which the Mobile Subscription Identification Number is encrypted, and ii) a clear-text part comprising: a) the Mobile Country Code, b) the Mobile Network Code, c) a public key identifier for a public key of the home network, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; processing circuitry configured to determine a de-concealing server to use to decrypt the encrypted Mobile Subscription Identification Number; and a transmitter for sending the SUCI to the de-concealing server. 11. An authentication server for a home network of a user equipment (UE) for obtaining a subscription permanent identifier (SUPI) comprising a Mobile Subscription Identification Number, a Mobile Country Code, and a Mobile Network Code, the authentication server comprising: a receiver for receiving a message comprising a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which the Mobile Subscription Identification Number is encrypted, and ii) a clear-text part comprising: a) the Mobile Country Code, b) the Mobile Network Code, c) a public key identifier for a public key of the home network, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; processing circuitry configured to determine a de-concealing server to use to decrypt the encrypted Mobile Subscription Identification Number; and a transmitter for sending the SUCI to the de-concealing server, wherein the message is a message transmitted by the UE as part of a registration procedure for registering the UE with a wireless communication network. 11 17 17. (Currently Amended) A user equipment (UE) comprising: a transmitter; and processing circuitry configured to: generate a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which a Mobile Subscription Identification Number of a subscription permanent identifier (SUPI) is encrypted and ii) a clear-text part comprising: a) a Mobile Country Code of the SUPI, b) a Mobile Network Code of the SUPI, c) a public key identifier for a public key of a home network of the UE, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; and employ the transmitter to transmit the SUCI to an authentication server in the home network via an Authentication and Mobility Management Function (AMF). 14. A user equipment (UE) comprising: a transmitter; and processing circuitry configured to: generate a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which a Mobile Subscription Identification Number of a subscription permanent identifier (SUPI) is encrypted and ii) a clear-text part comprising: a) a Mobile Country Code of the SUPI, b) a Mobile Network Code of the SUPI, c) a public key identifier for a public key of a home network of the UE, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; and employ the transmitter to transmit the SUCI to an authentication server in the home network, wherein the processing circuitry is configured to employ the transmitter to transmit the SUCI in response to an identifier request message received from an Authentication and Mobility management Function (AMF) as part of a procedure for registering the UE with a wireless communication network. 14 Allowable Subject Matter Claims 1-5 & 13-16 will become allowable if the Applicant file an eTD for overcoming potential double patenting rejection as illustrated above and this eTD is accepted and approved. Following are closes prior arts cited in pto-892: The closest prior art made of records are: Nakadai (JP 2004112683A-English translated copy along with original is attached) discloses a secondary usage of data communication on a subscriber line and a system thereof where a part of communication is released to the other user for profit for secondary usage, in an IP network which uses the subscriber line. The system performs via a subscriber line L data communication with ISP servers 9 and 11 through home communication equipment α and subscriber communication equipment β' comprising a subscriber managing device 8, a storage device 13, and a settlement server 14. The subscriber managing device 8 encrypts identification IDs of users X and Y and a password, and then inquiries from authentication servers 10 and 12 of the ISP servers 9 and 11. It acknowledges connection based on the result. The storage device 13 stores the identification IDs of the uses X and Y and the identification ID of the subscriber line L. The settlement server 14 settles the loan charge of the subscriber line L from the user Y who uses the subscriber line L to the user X who is a subscriber for the subscriber line L based on the deposit information, and connection histories for each of the users X and Y that are stored in the storage device 13. Norrman (US20190007376-as mentioned in IDS dated 02/03/2025) teaches a method for a first network node may protect confidentiality of a first identifier associated by the first network node with a subscription used by a mobile entity. The communications network comprises a home network of the mobile entity and a serving network serving the mobile entity. The first network node, which is part of the home network may: receive, from a second network node which is part of the serving network, a first request for authentication information for the mobile entity, the first request comprising the first identifier; generate a first pseudonym associated with the first identifier; create a link between the first pseudonym and the first identifier; and send, to the second network node, the first pseudonym in response to the first request for authentication information for use as an identifier for the mobile entity in the serving network. A method for a second network node is also provided. Salmela (US 9654966 B2) teaches methods and nodes for mapping a subscription in a network (10) to a service user identity, wherein a communication device (12) accesses the network (10) using the subscription, and wherein the service user identity is used for accessing a service provided by the first network node (16). The method (30) comprises receiving (31), from the communication device (12) a request for a service, the request comprising an authenticated service user identity, providing (32), in response to the request, the communication device (12) access to the service, receiving (33), from the communication device (12), a message comprising a token identifying a mapping of the service user identity to the subscription, and verifying (34) that a service user identity obtained from the token corresponds to the service user identity used when providing access to the communication device (12). Forsberg (US 20130003971-as mentioned in IDS dated 02/03/2025) discloses an identifier containing at least one encrypted part is received at a first network entity. A second network entity may then be determined based on the identifier. A request for assistance in decryption of the identifier from the second network entity may be sent from the first entity to the second network entity. The second network entity may then assist the first networks entity in an appropriate manner. Smeets (US20090239503 as mentioned in IDS dated 02/03/2025) teaches that communication devices are conveniently provisioned with network subscription credentials after purchasing, without device manufacturer or network operators having to preload temporary subscription credentials or to otherwise make provisions for supporting direct over-the-air provisioning of the devices. Such devices may be, for example, cellular telephones or other mobile devices. Broadly, a user communicatively couples a communication device to be provisioned to an intermediate data device that has existing communication capabilities, e.g., a PC or already-provisioned mobile telephone. A subscription server or other entity then uses a communication link with the intermediate data device to provide subscription credentials to the communication device, subject to trusted-device and owner identity verifications. Palanigounder (US 20130305330 as mentioned in IDS dated 02/03/2025) teaches wireless communication systems and more specifically to systems, methods, and devices for remote credentials management within wireless communication systems. In one aspect, a method of obtaining provisioning information via a service provider network, such as a cellular network, for a device is provided. The method includes transmitting an attach request via the service provider network for provisioning service, the attach request including device vendor information which includes a unique identifier for the device. The method further includes receiving provisioning information from the service provider upon authentication of the device vendor information. In other aspects, systems and methods for providing provisioning information are described. You (CN107820244A- translated copy and original attached-as mentioned in IDS dated 03/28/2023 of the parent case 17737675 and also mentioned only the number in IDS dated 02/03/2025 of instant case) describes a processing method and device for network access authentication, the method comprising: receiving the authentication request message sent by the first service network, wherein the authentication request message carrying user device cryptonyms identifier generated by the user device; judging whether the local user device cryptonyms identifier generated by the user equipment with the user device cryptonyms identifies whether asynchronous; under the status that the judgment result is positive, obtaining the encrypted international mobile user identification code IMSI of the user device for network access authentication processing. The invention can solve the related art access process not described in user equipment in user equipment cryptonyms identifying how to process when the user device cryptonyms identification of problem in asynchronous home network. The following is an examiner's statement of reasons for allowance based on prior arts: The teachings of Nakadai, Norrman, Salmela, Forsberg, Smeets, Palanigrounder & You, whether alone or in combination with the other prior arts of record fail to teach or render obvious " receiving, from the UE via an Authentication and Mobility Management Function (AMF), a subscription concealed identifier (SUCI) comprising: i) an encrypted part in which the Mobile Subscription Identification Number is encrypted, and ii) a clear-text part comprising: a) the Mobile Country Code, b) the Mobile Network Code, c) a public key identifier for a public key of the home network, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI; determining a de-concealing server to use to decrypt the Mobile Subscription Identification Number; sending the SUCI to the de-concealing server; and receiving the SUPI in response; in view of other limitations of claim 1. Therefore, independent claim 1 is allowable over the prior arts of record. The independent claim 13 recites similar subject matter to claim 1. Consequently, independent claim 13 is also allowable over the prior arts of record. Claims 2-5 & 14-16 are directly or indirectly dependent upon claims 1 &13, respectively and therefore, they are also allowable over the prior arts of record. Any comments considered necessary by applicant must be submitted no later than the payment of the issue fee and, to avoid processing delays, should preferably accompany the issue fee. Such submissions should be clearly labeled “Comments on Statement of Reasons for Allowance”. Regarding Claims 6 and 17, these claims would also become allowable if the Applicant rewrite them, without broadening the scope of the claims, in a manner to overcome claim objections & 112b rejections issued above in this instant office action as well as file an eTD as mentioned above. Reasons of allowability for these claims will be provided when these claims are officially modified and reach the condition of allowability. Conclusion Any inquiry concerning this communication or earlier communications from the examiner should be directed to SHER KHAN whose telephone number is (571)272-8574. The examiner can normally be reached on Monday-Friday-8:00am - 5:00pm (EST).If attempts to reach the examiner by telephone are unsuccessful, the examiner’s supervisor, Hadi Armouche can be reached on 571-270-3618. The fax phone number for the organization where this application or proceeding is assigned is 571-273-8300. Information regarding the status of an application may be obtained from the Patent Application Information Retrieval (PAIR) system. Status information for published applications may be obtained from either Private PAIR or Public PAIR. Status information for unpublished applications is available through Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative or access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. /SHER A KHAN/ Primary Examiner, Art Unit 2497
Read full office action

Prosecution Timeline

Nov 21, 2024
Application Filed
Jul 01, 2026
Interview Requested
Jul 14, 2026
Non-Final Rejection mailed — §112, §DP (current)

Precedent Cases

Applications granted by this same examiner with similar technology

Patent 12706899
UNMANNED VEHICLE MANAGEMENT SYSTEMS AND METHODS
2y 0m to grant Granted Aug 11, 2026
Patent 12701016
Issuing digitally signed QR codes for vehicles
2y 8m to grant Granted Aug 04, 2026
Patent 12694143
FEDERATED IDENTITY MANAGEMENT FOR DATA REPOSITORIES
2y 1m to grant Granted Jul 28, 2026
Patent 12683802
ELECTRONIC SIGNATURE MANAGEMENT METHOD, ELECTRONIC SIGNATURE MANAGEMENT SYSTEM, AND COMPUTER-READABLE STORAGE MEDIUM
2y 11m to grant Granted Jul 14, 2026
Patent 12683771
NON-REPUDIATION-FREE PUBLIC KEY AUTHENTICATION PROTOCOLS
2y 10m to grant Granted Jul 14, 2026
Study what changed to get past this examiner. Based on 5 most recent grants.

Strategy Recommendation AI-generated — please review before filing

Get a prosecution strategy drawn from examiner precedents, rejection analysis, and claim mapping.
Typically takes 5-10 seconds — AI-generated, attorney review required before filing

Prosecution Projections

1-2
Expected OA Rounds
86%
Grant Probability
99%
With Interview (+23.0%)
2y 4m (~7m remaining)
Median Time to Grant
Low
PTA Risk
Based on 338 resolved cases by this examiner. Grant probability derived from career allowance rate.

Sign in with your work email

Enter your email to receive a magic link. No password needed.

Personal email addresses (Gmail, Yahoo, etc.) are not accepted.

Free tier: 3 strategy analyses per month