Notice of Pre-AIA or AIA Status
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
Response to Arguments
Applicant’s arguments filed on 08/25/2026 have been fully considered but is not persuasive.
Applicant has amended claims 1,7-8,14-15 and 20. No new claims were added or cancelled. Currently claims 1-20 are pending in this application.
Applicants’ arguments with respect to Independent claims 1,8 and 15 have been considered but are moot in light of new grounds of rejection necessitated by applicant’s amendment listed below.
Claim Rejections - 35 USC § 103
The following is a quotation of 35 U.S.C. 103 which forms the basis for all obviousness rejections set forth in this Office action:
A patent for a claimed invention may not be obtained, notwithstanding that the claimed invention is not identically disclosed as set forth in section 102, if the differences between the claimed invention and the prior art are such that the claimed invention as a whole would have been obvious before the effective filing date of the claimed invention to a person having ordinary skill in the art to which the claimed invention pertains. Patentability shall not be negated by the manner in which the invention was made.
Claim(s) 1-6,8-13 and 15-19 are rejected under 35 U.S.C. 103 as being unpatentable over Xie (US20140282816) in view of Narayanaswamy (US20160330246) herein after ‘Krishna’ and in further view of Wang (US20160330165).
Regarding Claim 1, A method, comprising: receiving, by a smart terminal and from a browser, (Paragraph [0057] Examiner Note (E.N.) The client device can be a standalone device, and thus, forms a part of a home network. A number of applications including web browsers, instant messaging platforms, email or File Transfer applications run on client device.)
a browsing request to access a Uniform Resource Locator (URL) or an address for externally hosted content, wherein the smart terminal is prevented from directly accessing the URL or the address; (Paragraph [0067] E.N. When the user launches an application on the client device to access certain content over the network or the internet, the content request is intercepted by the firewall. The firewall analyzes the content request and allows or drops the content request based on certain policies.)
routing, by the smart terminal, the browsing request to a secure server; (Figure 6A Paragraph [0087-0088] The user on the client device launches a web browser and initiates a request to access certain content over the network or the Internet. The proxy module receives the request sent by the client device)
checking, by the secure server, the URL or the address against an allowed list or a prohibited list; (Figure 6A and Paragraph [0094] E.N. The proxy module maintains a database that stores all the policies.)
directing, by the secure server, the browser to the URL or the address in response to the URL or the address being on the allowed list, or the URL or the address not being on the prohibited list; [[and]] (Paragraph [0095] E.N. The proxy module implements policies stored in the database based on URLs. The blacklist is prepared based on the domain or URL and when the requested domain or URL is found in the defined blacklist, the access is denied. But if the client IP addresses or server IP address or domain or URL are whitelisted, then access is granted and the web page is retrieved and displayed to the user.)
Xie does not, but in related art, Krishna discloses providing, by the secure server, a secure connection between the browser and the URL or the address; and (Figure 6 and Paragraph [0059] E.N. A secure tunnel is used by mobile and computer to communicate with hosted services over a network.)
Therefore, it would be obvious to one of ordinary skill in the art, prior to the effective filing date of the claimed invention to have modified Xie to incorporate the teachings of Krishna because Xie does not explicitly disclose a secure connection between the browser and the URL or the address which is disclosed by Krishna. Incorporating the teachings of Krishna to Xie allows for the user and the application or browser to communicate in a secure manner and keep sensitive information from getting to attackers.
Xie and Krishna do not, but in related art, Wang discloses signing, by the secure server, content communicated between the URL or the address and the browser;
US20220124393 (Paragraph [0026] E.N. The operating system (or another trusted application on the client device or a web browser) sends the digitally signed token to the content provider (or another appropriate content verification system). The content provider first validates whether the digitally signed token is authentic by verifying the digital signature. If not, the content provider concludes that its third party content item may not be displayed on the client device and that there may be an error in the content page, the content platform, or the application. See [0029])
verifying, by the smart terminal, the signature on the content before the content is executed, displayed, downloaded, or installed. US20220124393 (Paragraph [0026] E.N. If the content provider determines that the digitally signed token is authentic, it next determines whether the data for the attributes included in the payload match the data for the attributes of the third party content item provided by the content provider. If the content provider determines that the data for the attributes match, the content provider concludes that the particular content item provided for display and visible to the user in the particular portion of the device's display is indeed provided by the content provider. If not, the content provider concludes that its third party content item is not actually displayed on the client device and that there may be an error in the content page, the content platform, the application, or the content provider.)
Therefore, it would be obvious to one of ordinary skill in the art, prior to the effective filing date of the claimed invention to have modified Xie in view of Krishna to incorporate the teachings of Wang because Xie and Krishna do not explicitly disclose signing content and verifying the signature which is disclosed by Wang. Incorporating the teachings of Wang to Xie and Krishna allows for the user to sign and verify information before it is presented to the user.
Regarding Claims 2,9 and 16, Xie in view of Krishna and in further view of Wang discloses the method of claim 1. Xie further discloses wherein a security tool prevents the smart terminal from directly accessing the URL or the address. (Paragraph [0093] E.N. The interception module monitors the attempts made by applications to access content on the network. The interception module captures all the attempts and determines what user is making the attempt, what application or service is making the attempt, and executes a firewall policy check to determine whether the user or application are allowed to connect to the network to access the requested content.)
Regarding Claims 3, 10 and 17, Xie in view of Krishna and in further view of Wang discloses the method of claim 1. Xie further discloses wherein the allowed list or the prohibited list is based on a security policy. (Paragraph [0095] E.N. The proxy module implements policies stored in the database based on URLs. The blacklist is prepared based on the domain or URL and when the requested domain or URL is found in the defined blacklist, the access is denied. But if the client IP addresses or server IP address or domain or URL are whitelisted, then access is granted and the web page is retrieved and displayed to the user.)
Regarding Claims 4,11 and 18, Xie in view of Krishna and in further view of Wang discloses the method of claim 1. Xie further discloses wherein the allowed list or the prohibited list is provided by an application development service. (Paragraph [0094] E.N. The Database stores all the policies, users profiles, list of authorized users, a list of unauthorized users, information about blocked content, dropped traffic, or pre-defined messages. The pre-defined message can be stored in any format. The Database also stores information of traffic allowed or blocked previously. The information stored in database is retrieved when desired.)
Regarding Claims 5,12 and 19, Xie in view of Krishna and in further view of Wang discloses the method of claim 1. Xie further discloses wherein traffic to and from the browser flows through the secure server. (Paragraph [0061] E.N. Firewall policies are configured to control the flow of network traffic through the firewall. A typical firewall policy defines a set of rules applied to traffic passing through the firewall. The firewall policies may be defined to filter packets based on the network address of the source entity, the network address of the destination entity as well as the networking protocol used in the transmission. Additional policies may utilize a list of authorized or unauthorized users to filter traffic, blocking transmission of specific file types or blocking spams. The firewall policies can be implemented for individual users, all users, user groups, content sources, IP addresses, domains, URLs, etc. Each policy may be associated with a unique identifier, which may or may not be displayed to an administrator.)
Regarding Claims 6 and 13, Xie in view of Krishna and in further view of Wang discloses the method of claim 5. Xie further discloses wherein the secure server monitors the traffic between the browser and the secure server. (Paragraph [0093] E.N. The interception module monitors the attempts made by applications to access content on the network. The interception module captures all the attempts and determines what user is making the attempt, what application or service is making the attempt, and executes a firewall policy check to determine whether the user or application are allowed to connect to network to access the requested content.)
Regarding Claim 8, Xie discloses A system, comprising: a smart terminal executing a browser computer program; (Paragraph [0057] E.N. A number of applications including web browsers, instant messaging platforms, email or File Transfer applications run on the client device.)
a secure server executing a secure server computer program; (Paragraph [0037])
and a database comprising an allowed list or a prohibited list of uniform resource locators (URLs) or addresses hosting external content; (Figure 6A and Paragraph [0094] E.N. The proxy module maintains a database that stores all the policies.)
wherein: the smart terminal receives, from a browser, (Paragraph [0057] Examiner Note (E.N.) The client device can be a standalone device, and thus, forms a part of a home network. A number of applications including web browsers, instant messaging platforms, email or File Transfer applications run on client device.)
a browsing request to access a URL or an address for externally hosted content, wherein the smart terminal is prevented from directly accessing the URL or the address; (Paragraph [0067] E.N. When the user launches an application on the client device to access certain content over the network or the internet, the content request is intercepted by the firewall. The firewall analyzes the content request and allows or drops the content request based on certain policies.)
the smart terminal routes the browsing request to the secure server; (Figure 6A Paragraph [0087-0088] The user on the client device launches a web browser and initiates a request to access certain content over the network or the Internet. The proxy module receives the request sent by the client device)
the secure server computer program checks the URL or the address against the allowed list or the prohibited list; (Figure 6A and Paragraph [0094] E.N. The proxy module maintains a database that stores all the policies.)
the secure server computer program directs the browser to the URL or the address in response to the URL or the address being on the allowed list, or the URL or the address not being on the prohibited list; [[and]](Paragraph [0095] E.N. The proxy module implements policies stored in the database based on URLs. The blacklist is prepared based on the domain or URL and when the requested domain or URL is found in the defined blacklist, the access is denied. But if the client IP addresses or server IP address or domain or URL are whitelisted, then access is granted and the web page is retrieved and displayed to the user.)
Xie does not, but in related art, Krishna discloses and the secure server provides a secure connection between the browser and the URL or the address. (Figure 6 and Paragraph [0059] E.N. A secure tunnel is used by mobile and computer to communicate with hosted services over a network.)
Therefore, it would be obvious to one of ordinary skill in the art, prior to the effective filing date of the claimed invention to have modified Xie to incorporate the teachings of Krishna because Xie does not explicitly disclose a secure connection between the browser and the URL or the address which is disclosed by Krishna. Incorporating the teachings of Krishna to Xie allows for the user and the application or browser to communicate in a secure manner and keep sensitive information from getting to attackers.
Xie and Krishna do not, but in related art, Wang discloses the secure server computer program signs content communicated between the URL or the address and the browser; (Paragraph [0026] E.N. The operating system (or another trusted application on the client device or a web browser) sends the digitally signed token to the content provider (or another appropriate content verification system). The content provider first validates whether the digitally signed token is authentic by verifying the digital signature. If not, the content provider concludes that its third party content item may not be displayed on the client device and that there may be an error in the content page, the content platform, or the application. See [0029])
and the smart terminal verifies the signature on the content before the content is executed, displayed, downloaded, or installed. (Paragraph [0026] E.N. If the content provider determines that the digitally signed token is authentic, it next determines whether the data for the attributes included in the payload match the data for the attributes of the third party content item provided by the content provider. If the content provider determines that the data for the attributes match, the content provider concludes that the particular content item provided for display and visible to the user in the particular portion of the device's display is indeed provided by the content provider. If not, the content provider concludes that its third party content item is not actually displayed on the client device and that there may be an error in the content page, the content platform, the application, or the content provider.)
Therefore, it would be obvious to one of ordinary skill in the art, prior to the effective filing date of the claimed invention to have modified Xie in view of Krishna to incorporate the teachings of Wang because Xie and Krishna do not explicitly disclose signing content and verifying the signature which is disclosed by Wang. Incorporating the teachings of Wang to Xie and Krishna allows for the user to sign and verify information before it is presented to the user.
Regarding Claim 15, Xie discloses A non-transitory computer readable storage medium, including instructions stored thereon, which when read and executed by one or more computer processors on a smart terminal, cause the one or more computer processors to perform steps comprising: (Paragraph [0018])
receiving, from a browser, a browsing request to access a Uniform Resource Locator (URL) or an address for externally hosted content, wherein the smart terminal is prevented from directly accessing the URL or the address; (Paragraph [0067] E.N. When the user launches an application on the client device to access certain content over the network or the internet, the content request is intercepted by the firewall. The firewall analyzes the content request and allows or drops the content request based on certain policies.)
routing the browsing request to a secure server; (Figure 6A Paragraph [0087-0088] The user on the client device launches a web browser and initiates a request to access certain content over the network or the Internet. The proxy module receives the request sent by the client device)
receiving, from the secure server, a result of checking the URL or the address against an allowed list or a prohibited list; (Figure 6A and Paragraph [0094] E.N. The proxy module maintains a database that stores all the policies.)
directing the browser to the URL or the address in response to the result indicating the URL or the address being on the allowed list, or the URL or the address not being on the prohibited list; and (Paragraph [0095] E.N. The proxy module implements policies stored in the database based on URLs. The blacklist is prepared based on the domain or URL and when the requested domain or URL is found in the defined blacklist, the access is denied. But if the client IP addresses or server IP address or domain or URL are whitelisted, then access is granted and the web page is retrieved and displayed to the user.)
Xie does not, but in related art, Krishna discloses providing receiving, via a secure connection between the browser and the URL or the address provided by the secure server, (Figure 6 and Paragraph [0059] E.N. A secure tunnel is used by mobile and computer to communicate with hosted services over a network.)
Therefore, it would be obvious to one of ordinary skill in the art, prior to the effective filing date of the claimed invention to have modified Xie to incorporate the teachings of Krishna because Xie does not explicitly disclose a secure connection between the browser and the URL or the address which is disclosed by Krishna. Incorporating the teachings of Krishna to Xie allows for the user and the application or browser to communicate in a secure manner and keep sensitive information from getting to attackers.
Xie and Krishna do not, but in related art, Wang discloses content communicated between the URL or the address and the browser, the content being signed by the secure server, (Paragraph [0026] E.N. The operating system (or another trusted application on the client device or a web browser) sends the digitally signed token to the content provider (or another appropriate content verification system). The content provider first validates whether the digitally signed token is authentic by verifying the digital signature. If not, the content provider concludes that its third party content item may not be displayed on the client device and that there may be an error in the content page, the content platform, or the application. See [0029])
and verifying, by the smart terminal, the signature on the content before the content is executed, displayed, downloaded, or installed. (Paragraph [0026] E.N. If the content provider determines that the digitally signed token is authentic, it next determines whether the data for the attributes included in the payload match the data for the attributes of the third party content item provided by the content provider. If the content provider determines that the data for the attributes match, the content provider concludes that the particular content item provided for display and visible to the user in the particular portion of the device's display is indeed provided by the content provider. If not, the content provider concludes that its third party content item is not actually displayed on the client device and that there may be an error in the content page, the content platform, the application, or the content provider.)
Therefore, it would be obvious to one of ordinary skill in the art, prior to the effective filing date of the claimed invention to have modified Xie in view of Krishna to incorporate the teachings of Wang because Xie and Krishna do not explicitly disclose signing content and verifying the signature which is disclosed by Wang. Incorporating the teachings of Wang to Xie and Krishna allows for the user to sign and verify information before it is presented to the user.
Claim(s) 7,14 and 20 are rejected under 35 U.S.C. 103 as being unpatentable over Xie (US20140282816) in view of Narayanaswamy (US20160330246) herein after ‘Krishna’ and in further view of Wang (US20160330165) and Jeanne (US20160330165).
Regarding Claims 7,14 and 20, Xie in view of Krishna and in further view of Wang discloses the method of claim 1. Xie does not, but in related art, Krishna discloses further comprising: signing, by the secure server, content communicated between the URL or the address and the browser. (Paragraph [0025] E.N. A closely related point is that some clients interface with the network security system differently. The browser add-on clients, for example, redirect the browsers to an explicit proxy. Only the traffic needed to apply the policy to is rerouted and it is done so within the application. The traffic arriving at the network security system can have the user identity embedded in the data or within the secure tunnel headers, e.g. additional headers or SSL client side certificates in some embodiments.)
Therefore, it would be obvious to one of ordinary skill in the art, prior to the effective filing date of the claimed invention to have modified Xie to incorporate the teachings of Krishna because Xie does not explicitly disclose communications between the URL or the address and the browser which is disclosed by Krishna. Incorporating the teachings of Krishna to Xie allows for the user to use their browser to communicate with the URL or the address in a secure manner.
Xie, Krishna and Wang do not, but in related art, Jeanne discloses wherein the content from servers hosting the URLs is restricted based on Media Access Control (MAC) addresses. (Paragraph [0053] E.N. MAC address filtering is a security access control method implemented by DHCP servers whereby MAC addresses are used to determine access to a network. Using MAC filtering, network access is permitted and denied through the use of a MAC address whitelist of authorized MAC addresses. The whitelist is a list of allowable MAC addresses.)
Therefore, it would be obvious to one of ordinary skill in the art, prior to the effective filing date of the claimed invention to have modified Xie in view of Krishna and in further view of Wang to incorporate the teachings of Jeanne because Xie, Krishna and Wang do not explicitly disclose communications between the URL or the address and the browser which is disclosed by Jeanne. Incorporating the teachings of Jeanne to Xie, Krishna and Wang allows for the user to be allowed or denied access to certain web pages by a MAC restriction.
Conclusion
THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a).
A shortened statutory period for reply to this final action is set to expire THREE MONTHS from the mailing date of this action. In the event a first reply is filed within TWO MONTHS of the mailing date of this final action and the advisory action is not mailed until after the end of the THREE-MONTH shortened statutory period, then the shortened statutory period will expire on the date the advisory action is mailed, and any nonprovisional extension fee (37 CFR 1.17(a)) pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, however, will the statutory period for reply expire later than SIX MONTHS from the mailing date of this final action.
Any inquiry concerning this communication or earlier communications from the examiner should be directed to AAYUSH ARYAL whose telephone number is (571)272-2838. The examiner can normally be reached 8:00 a.m. - 5:30 p.m..
Examiner interviews are available via telephone, in-person, and video conferencing using a USPTO supplied web-based collaboration tool. To schedule an interview, applicant is encouraged to use the USPTO Automated Interview Request (AIR) at http://www.uspto.gov/interviewpractice.
If attempts to reach the examiner by telephone are unsuccessful, the examiner’s supervisor, Amir Mehrmanesh can be reached at (571) 270-3351. The fax phone number for the organization where this application or proceeding is assigned is 571-273-8300.
Information regarding the status of published or unpublished applications may be obtained from Patent Center. Unpublished application information in Patent Center is available to registered users. To file and manage patent submissions in Patent Center, visit: https://patentcenter.uspto.gov. Visit https://www.uspto.gov/patents/apply/patent-center for more information about Patent Center and https://www.uspto.gov/patents/docx for information about filing in DOCX format. For additional questions, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000.
/AAYUSH ARYAL/Examiner, Art Unit 2435
/AMIR MEHRMANESH/Supervisory Patent Examiner, Art Unit 2435
Prosecution Insights