Prosecution Insights
Last updated: August 17, 2026
Application No. 19/230,532

DETECTING MALICIOUS EMAIL ATTACHMENTS USING CONTEXT-SPECIFIC FEATURE SETS

Non-Final OA §DP
Filed
Jun 06, 2025
Priority
Nov 13, 2023 — continuation of 12/355,716
Examiner
AGUIAR, JOHNNY B
Art Unit
Tech Center
Assignee
Cisco Technology Inc.
OA Round
1 (Non-Final)
80%
Grant Probability
Favorable
1-2
OA Rounds
1y 2m
Est. Remaining
99%
With Interview

Examiner Intelligence

Grants 80% — above average
80%
Career Allowance Rate
318 granted / 396 resolved
+20.3% vs TC avg
Strong +20% interview lift
Without
With
+19.5%
Interview Lift
resolved cases with interview
Typical timeline
2y 5m
Avg Prosecution
13 currently pending
Career history
402
Total Applications
across all art units

Statute-Specific Performance

§101
10.0%
-30.0% vs TC avg
§103
46.0%
+6.0% vs TC avg
§102
15.1%
-24.9% vs TC avg
§112
20.4%
-19.6% vs TC avg
Black line = Tech Center average estimate • Based on career data from 396 resolved cases

Office Action

§DP
DETAILED ACTION The current office action is in response to the communication filed on 6/6/25. Claims 1-20 are pending. The Examiner recommends filing a written authorization for Internet communication in response to the present action. Doing so permits the USPTO to communicate with Applicant using Internet email to schedule interviews or discuss other aspects of the application. Without a written authorization in place, the USPTO cannot respond to Internet correspondence received from Applicant. The preferred method of providing authorization is by filing form PTO/SB/439, available at: https://www.uspto.gov/patent/forms/forms. See MPEP § 502.03 for other methods of providing written authorization. Notice of Pre-AIA or AIA Status The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA . Paper Submitted It is hereby acknowledged that the following papers have been received and placed of record in the file: Information Disclosure Statement(s) as received on 6/6/25 are considered by the Examiner. Double Patenting The nonstatutory double patenting rejection is based on a judicially created doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the unjustified or improper timewise extension of the “right to exclude” granted by a patent and to prevent possible harassment by multiple assignees. A nonstatutory double patenting rejection is appropriate where the claims at issue are not identical, but at least one examined application claim is not patentably distinct from the reference claim(s) because the examined application claim is either anticipated by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 USPQ 644 (CCPA 1969). A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) may be used to overcome an actual or provisional rejection based on a nonstatutory double patenting ground provided the reference application or patent either is shown to be commonly owned with this application, or claims an invention made as a result of activities undertaken within the scope of a joint research agreement. A terminal disclaimer must be signed in compliance with 37 CFR 1.321(b). The USPTO internet Web site contains terminal disclaimer forms which may be used. Please visit http://www.uspto.gov/forms/. The filing date of the application will determine what form should be used. A web-based eTerminal Disclaimer may be filled out completely online using web-screens. An eTerminal Disclaimer that meets all requirements is auto-processed and approved immediately upon submission. For more information about eTerminal Disclaimers, refer to http://www.uspto.gov/patents/process/file/efs/guidance/eTD-info-I.jsp. Claims 1-20 are rejected on the ground of nonstatutory double patenting as being unpatentable over claims 1-20 of U.S. Patent No. 12,355,716. Although the claims at issue are not identical, they are not patentably distinct from each other because both the patent and the instant application disclose receiving first text data associated with a first email and second text data associated with a second email, providing the first text data and the second text data to a first model, receiving a first classification associated with the first email and a second classification associated with the first email from the first model, determining that the first email includes a first attachment file associated with a first format, determining that the second email includes a second attachment file associated with the first format, determining a first feature set associated with the first classification in relation to the first format and a second feature set associated with the second classification in relation to the first format, wherein the first feature set comprises a first feature and the second feature set excludes the first feature, determining, based on the first feature set, that the first email is malicious, determining, based on the second feature set, that the second email is not malicious, preventing transmission of the second email to a first destination device and enabling transmission of the second email to a second destination device. Claims of the instant application therefore are not patently distinct from the earlier patent claims and as such are unpatentable over obvious-type double patenting. A later patent/application claim is not patentably distinct from an earlier claim if the later claim is anticipated by the earlier claim. By this rationale, the claims of the instant application are rejected. Conclusion The prior art made of record and not relied upon is considered pertinent to applicant’s disclosure: Lesperance et al. US 2021/0126944. Discloses automatically analyzing emails that have been flagged as being potentially malicious. Stolfo et al. US 2019/0020672. Discloses detecting an occurrence of a violation of an email security policy. Slobodyanuk et al. US 2023/0171287. Discloses identifying an email message as a suspicious email message. Greevy et al. US 2023/0046412. Discloses verifying authenticity of inbound emails within an organization. Prakash et al. US 8,566,938. Discloses analyzing electronic messages for phishing detection. Any inquiry concerning this communication or earlier communications from the examiner should be directed to Johnny B Aguiar whose telephone number is (571)272-3563. The examiner can normally be reached on Monday to Friday 7:30 am - 5:30 pm EST. Examiner interviews are available via telephone, in-person, and video conferencing using a USPTO supplied web-based collaboration tool. To schedule an interview, applicant is encouraged to use the USPTO Automated Interview Request (AIR) at http://www.uspto.gov/interviewpractice. If attempts to reach the examiner by telephone are unsuccessful, the examiner’s supervisor, Joon Hwang can be reached on (571) 272-4036. The fax phone number for the organization where this application or proceeding is assigned is 571-273-8300. Information regarding the status of an application may be obtained from the Patent Application Information Retrieval (PAIR) system. Status information for published applications may be obtained from either Private PAIR or Public PAIR. Status information for unpublished applications is available through Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative or access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. /JOHNNY B AGUIAR/ Primary Examiner, Art Unit 2447 July 16, 2026
Read full office action

Prosecution Timeline

Jun 06, 2025
Application Filed
Jul 20, 2026
Non-Final Rejection mailed — §DP (current)

Precedent Cases

Applications granted by this same examiner with similar technology

Patent 12706987
MULTI-CHANNEL MESSAGE EXCHANGE SYSTEM DEMAND API
1y 8m to grant Granted Aug 11, 2026
Patent 12701095
COMPUTERIZED SYSTEM FOR DYNAMIC IMAGE INCLUSION IN AN ELECTRONIC MESSAGE
2y 7m to grant Granted Aug 04, 2026
Patent 12683917
METHOD AND ELECTRONIC DEVICE FOR MESSAGE NOTIFICATION
2y 6m to grant Granted Jul 14, 2026
Patent 12684025
BACKWARD-COMPATIBLE 3D MESSAGING
1y 11m to grant Granted Jul 14, 2026
Patent 12684188
SYSTEMS AND METHODS FOR DELIVERY OF CONTENT VIA MULTICAST AND UNICAST
1y 8m to grant Granted Jul 14, 2026
Study what changed to get past this examiner. Based on 5 most recent grants.

Strategy Recommendation AI-generated — please review before filing

Get a prosecution strategy drawn from examiner precedents, rejection analysis, and claim mapping.
Typically takes 5-10 seconds — AI-generated, attorney review required before filing

Prosecution Projections

1-2
Expected OA Rounds
80%
Grant Probability
99%
With Interview (+19.5%)
2y 5m (~1y 2m remaining)
Median Time to Grant
Low
PTA Risk
Based on 396 resolved cases by this examiner. Grant probability derived from career allowance rate.

Sign in with your work email

Enter your email to receive a magic link. No password needed.

Personal email addresses (Gmail, Yahoo, etc.) are not accepted.

Free tier: 3 strategy analyses per month