US Patent 11,096,055 B2 — Summary

Bibliographic data (verified)

Abstract (from the patent): "Various embodiments are disclosed for a services policy communication system and method. In some embodiments, a communications device stores a set of device credentials for activating the communications device for a service on a network; and sends an access request to the network, the access request including the set of device credentials."

What the patent is about (plain language): The patent is from the Headwater family and describes a "flattened"/distributed network architecture in which much of the service policy implementation, usage monitoring, and billing-event capture is moved from the network core onto the end-user device. A device-based service processor works with a network-side service controller over a control-plane link to provision and activate devices (e.g., storing device credentials and sending access requests to activate a service), enforce access/traffic policy, and verifiably report service usage. The specification emphasizes user-controlled privacy, network-neutrality-compliant service management, simplified activation, and reduced core-network infrastructure.

Independent claims — overview and caveat

Important caveat: The full granted claim text was not available in the source material I retrieved (the claims section was truncated in the Google Patents capture), and my searches did not surface a complete claims listing. The overview below is therefore partial and inferred from the abstract, specification, and the IPR2025-00481 petition/litigation exhibits (e.g., SAMSUNG-1001), which quote the challenged claim elements. I cannot authoritatively enumerate every independent claim or its complete recitation. Treat the following as an approximation, not a verbatim claim analysis.

What the available sources show:

• Claim 1 is a device claim directed to a wireless end-user device (dependent claim 10 recites "the wireless end-user device of claim 1"). Per the IPR petition's element mapping, claim 1 includes: (1.1) a Wireless Wide-Area Network (WWAN) modem; storage of a set of device credentials for activating the device for a service on a network; sending an access request to the network including the device credentials; a connection manager that manages connections over modems to access networks; (1.5) an adaptive service policy control agent; and (1.6) an application service interface. The claim also involves a policy control agent that performs policy control to satisfy a service usage objective (e.g., configuring a mobile device with a "roaming service profile" for network connection).
• Challenged claims in IPR2025-00481 were claims 1–2, 6–7, 9–10, and 12, which suggests the patent has at least 12 claims with multiple dependent claims; the full set of independent claims could not be confirmed from my sources.

I therefore cannot provide a reliable "each independent claim" summary — I can only confirm claim 1's general contours. If you need a verbatim claim listing, the authoritative source is the USPTO Patent Full-Text database or Google Patents claims tab for US11096055B2.

Litigation / post-grant status (as of April 2026)

• District court: The patent is asserted by Headwater Research LLC in multiple cases, including E.D. Tex. 2:24-cv-00228 (Samsung, with claim-construction briefing filed June 2025) and E.D. Tex. 2:25-cv-00901/00902/00903, plus W.D. Tex. 7:25-cv-00369 and 7:25-cv-00370.
• PTAB: IPR2025-00481 (Samsung Electronics et al. v. Headwater Research LLC, filed Feb. 26, 2025) challenged claims of the '055 patent. The Board issued a discretionary denial (not instituted, § 314(a)) on August 4, 2025; a petitioner request for director review was later withdrawn and the case terminated with refund of post-institution fees (Nov. 2025).
• CAFC: My searches did not locate any Federal Circuit (CAFC) appeal docket for 2026 specifically tied to this patent number. I cannot rule out a pending appeal, but no CAFC 2026 docket entry for US 11,096,055 appeared in the available search results.

I'll research litigation involving US Patent 11,096,055 B2 using current sources.

I have initial results. Let me dig deeper into the specific cases, including the 2025 wave of Headwater lawsuits.

Good progress. The case 2:25-cv-00903 is Headwater v. Comcast. Let me identify the parties in the other cases and the August 2025 wave against Apple, Google, Amazon, Charter, DISH, etc.

I have reached the search limit, so I'll compile the confirmed litigation from the sources gathered. Here is the complete picture as of today's date (April 26, 2026).

Litigation Involving US Patent 11,096,055 B2 ("Automated device provisioning and activation")

A. District-court cases (confirmed to assert '055)

1. Headwater Research LLC v. [[[Samsung Electronics Co.](/litigations/by-defendant/Samsung%20Electronics%20Co.), Ltd.](/litigations/by-plaintiff/Samsung%20Electronics%20Co.%2C%20Ltd.) et al.](/litigations/by-plaintiff/Samsung%20Electronics%20Co.%2C%20Ltd.%20et%20al.)

• Case No.: 2:24-cv-00228-JRG-RSP (Marshall Division)
• Jurisdiction: U.S. District Court for the Eastern District of Texas
• Plaintiff: Headwater Research LLC
• Defendants: Samsung Electronics Co., Ltd.; Samsung Electronics America, Inc.
• Filing date: April 2024
• Patents-in-suit (this case): US 9,609,510; US 11,096,055; US 11,405,429 (confirmed via the parties' July 18, 2025 Joint Claim Construction Chart, Dkt. 73)
• Status: Dismissed — negotiated resolution (settlement). The E.D. Tex. granted the parties' joint motion to dismiss in September 2025. Headwater's infringement claims were dismissed with prejudice; Samsung's counterclaims/defenses were dismissed without prejudice; each side bore its own fees/costs. (Case duration: ~Apr. 2024 – Sep. 2025, ~544 days.)

2. Headwater Research LLC v. Charter Communications, Inc. et al.

• Case No.: 2:25-cv-00901
• Jurisdiction: U.S. District Court for the Eastern District of Texas
• Plaintiff: Headwater Research LLC
• Defendants: Charter Communications, Inc. et al. (Spectrum; including Spectrum Management Holding Company, LLC entities)
• Filing date: August 27, 2025 (complaint dated Aug. 26, 2025)
• Patents-in-suit (this case): includes US 11,096,055 together with US 8,639,935; 9,609,510; 9,973,930; 11,405,429; 11,966,464; 11,985,155 (confirmed via USPTO PTACTS litigation-matter list)
• Status: Open per the Unified Patents litigation portal. One secondary aggregator (Ex Parte AI Lab) shows a "Closed" flag, so the current disposition is not independently verified from PACER; treat final status as unconfirmed.

3. Headwater Research LLC v. Dish Network Corp. et al.

• Case No.: 2:25-cv-00902
• Jurisdiction: U.S. District Court for the Eastern District of Texas
• Plaintiff: Headwater Research LLC
• Defendants: DISH Network Corporation; DISH Network L.L.C.; DISH Wireless L.L.C. (and related entities)
• Filing date: August 28, 2025 (part of a five-complaint wave filed Aug. 28–29, 2025)
• Patents-in-suit (this case): includes US 11,096,055 together with US 8,639,935; 9,609,510; 9,973,930; 11,405,429; 11,966,464; 11,985,155 (confirmed via USPTO PTACTS litigation-matter list)
• Status: Stayed. Per EchoStar Corporation's Form 10-Q (filed Mar. 31, 2026), after DISH Wireless L.L.C. and DISH Network L.L.C. commenced prepackaged Chapter 11 cases, the court stayed all five Headwater v. DISH actions. Note: '055 is asserted only in this first DISH complaint; the other four DISH complaints assert different Headwater patent sets (e.g., '359/'445/'544; '364/'976/'918; '335/'471/'757; '425/'102/'451) and do not include '055.

4. Headwater Research LLC v. Comcast Corp. et al.

• Case No.: 2:25-cv-00903
• Jurisdiction: U.S. District Court for the Eastern District of Texas (Judge Rodney Gilstrap; Magistrate Judge Roy S. Payne)
• Plaintiff: Headwater Research LLC
• Defendants: Comcast Corp.; Comcast Cable Communications, LLC d/b/a Xfinity; Comcast Cable Communications Management, LLC; Comcast of Houston, LLC
• Filing date: August 27, 2025 (complaint; summons issued Aug. 28, 2025)
• Patents-in-suit: Includes US 11,096,055 (per Google Patents' litigation feed and the Unified Patents portal listing for this case)
• Status: Open (infringement action; 35 U.S.C. § 271; jury demanded).

5. Headwater Research LLC v. [Defendant(s) not confirmed] — W.D. Tex.

• Case No.: 7:25-cv-00369
• Jurisdiction: U.S. District Court for the Western District of Texas
• Filing date: August 2025 (listed on the patent's Google Patents litigation feed as involving '055)
• Parties: Plaintiff is Headwater Research LLC; defendant names could not be confirmed from my sources. Press reports (Law360, Aug. 28, 2025) indicate Headwater filed suits in "two Texas federal courts" against Apple, Amazon, Google, Comcast, Charter and DISH in the same wave; the two W.D. Tex. actions are likely against one or more of Apple/Google/Amazon, but I could not verify the specific defendant(s).
• Status: Open (no disposition found).

6. Headwater Research LLC v. [Defendant(s) not confirmed] — W.D. Tex.

• Case No.: 7:25-cv-00370
• Jurisdiction: U.S. District Court for the Western District of Texas
• Filing date: August 2025 (listed on the patent's Google Patents litigation feed as involving '055)
• Parties: Plaintiff is Headwater Research LLC; defendant names could not be confirmed (same caveat as above).
• Status: Open (no disposition found).

B. PTAB (inter partes review)

IPR2025-00481 — Samsung Electronics Co., Ltd. et al. v. Headwater Research LLC

• Tribunal: PTAB (patent no. 11,096,055; app. 16/421,121)
• Petitioners: Samsung Electronics Co., Ltd. et al. (counsel: Fish & Richardson)
• Patent Owner: Headwater Research LLC (counsel: Russ August & Kabat)
• Filing date: February 26, 2025
• Claims challenged: Claims 1–2, 6–7, 9–10, and 12
• Status: Not instituted — discretionary denial under 35 U.S.C. § 314(a) (Institution Decision, Aug. 4, 2025). Petitioner's Request for Director Review/Rehearing was withdrawn (Oct. 28, 2025), and the Board approved a refund of post-institution fees (Nov. 7, 2025), terminating the proceeding. No final written decision on the merits.

C. Related Headwater cases where assertion of '055 is NOT confirmed

The same Headwater litigation wave included E.D. Tex. actions against Verizon (2:25-cv-00687, filed July 3, 2025; voluntarily dismissed and closed Sept. 29–30, 2025) and T-Mobile USA (2:25-cv-00691, filed July 7, 2025; voluntarily dismissed, order Sept. 30, 2025), and press reports reference additional complaints against Apple, Google, Motorola, AT&T/Sprint, and Amazon. I could not confirm from the sources I retrieved that '055 is asserted in any of those specific cases, so I am not listing them as '055 litigation. The Google Patents/Unified Patents litigation feed for '055 identifies only the seven matters in Sections A and B above.

D. Confidence notes / discrepancies

1. W.D. Tex. party names (7:25-cv-00369/370) are unverified. I could not retrieve the complaints or dockets naming the defendants; do not rely on my inference (Apple/Google/Amazon) without checking PACER.
2. 2:25-cv-00901 status conflict: Unified Patents shows "Open" while one aggregator shows "Closed"; final status should be confirmed on PACER.
3. The "$279M Samsung verdict" press reference (Law360, Aug. 2025) appears to relate to other/similar Headwater–Samsung litigation (the IPR record references E.D. Tex. cases 2:22-cv-00422, 2:23-cv-00103, and 2:23-cv-00641). The '055 case itself (2:24-cv-00228) was resolved by negotiated dismissal with prejudice in September 2025, not by a trial verdict on the '055 patent.
4. No CAFC appeal involving '055 was located in my searches as of this date.
5. Verizon/T-Mobile cases: Even though they were part of the same Headwater enforcement wave and are frequently grouped with it in press coverage, I am flagging that I could not confirm '055 was among the asserted patents there.

Best sources for verification: PACER/CM-ECF for E.D. Tex. (cases 2:24-cv-00228, 2:25-cv-00901/00902/00903) and W.D. Tex. (7:25-cv-00369/00370); PTAB docket for IPR2025-00481; and EchoStar Corp. Form 10-Q (filed Mar. 31, 2026) for the DISH stays.

I'll verify the proceeding details through web searches, starting with the canonical pending IPR and the previously-documented Samsung IPR.

The IPR2026-00439 search returned nothing. Let me try more specific searches and also confirm there are no other IPRs on this patent.

IPR2026-00439 is brand-new (filed 2026-08-27, one day before today), so public detail is likely minimal. Let me check PTACTS/PTAB E2E and the Unified Patents portal for both proceedings, and look for any other IPRs in this family's litigation chain.

Proceedings overview

Two AIA trial proceedings have touched US 11,096,055 B2: one pending (IPR2026-00439, Google LLC et al., filed 2026-08-27 — the only proceeding returned by the USPTO Open Data Portal ingest) and one completed by discretionary denial without institution (IPR2025-00481, Samsung Electronics, filed 2025-02-26, denied under § 314(a) on 2025-08-04 — documented in the patent's litigation metadata and verified via PTAB/third-party sources, but not present in the current Open Data Portal list because it is terminated). No IPR has ever produced a Final Written Decision on this patent: zero claims canceled, zero claims sustained on the merits, and zero § 315(e) estoppel running against anyone. The bottom line for a defendant: this patent is untested at the PTAB — the only completed challenge was thrown out on discretionary, non-merits grounds, so every claim (at least claims 1–12) remains in force and every prior-art ground remains available to a fresh challenger.

IPR2026-00439 — Google LLC et al. v. Headwater Research LLC

• Type: Inter Partes Review
• Filed: 2026-08-27
• Status: Pending (verbatim from the structured USPTO Open Data Portal data: "Pending"). Plain-English gloss: the petition was docketed one day before this analysis — no preliminary response, no institution decision, no panel assignment has been made public yet.
• Judge panel: Not yet public (proceeding is one day old).
• Petition grounds: Not yet public in any available source. The petition was filed 2026-08-27; neither the petition itself nor its exhibit list has surfaced in my searches. I will not speculate on the grounds, art, or challenged claims. Note the petitioner is "Google LLC et al." — at least one additional petitioner is implied by the docketing data but is not yet identified in public sources.
• Institution decision: None yet. Statutory timeline: Patent Owner's preliminary response is due three months after the notice of filing (≈ 2026-11-27, subject to 37 CFR § 42.107), and the Director's institution decision is due three months after the preliminary-response due date (35 U.S.C. § 314(b)) — i.e., ≈ 2027-02-27 if the schedule runs normally. The Board has been exercising Fintiv/Director-memo discretion aggressively in Headwater cases (see the Samsung denial below), and Headwater v. Google is pending in parallel litigation (W.D. Tex. 7:25-cv-00378; later related N.D. Cal. 3:26-cv-06242), so a discretionary-denial fight is plausible.
• Final Written Decision: None — not instituted, no trial.
• Settlement / termination: N/A — pending.
• Appeal: N/A.
• Defensive value: This is the live proceeding to watch. If Google is denied institution (as Samsung was), the patent remains untested. If Google is instituted and wins a FWD, the challenged claims die and Google (and its privies) become estopped — but you would not be estopped. If you are a defendant being served with a complaint today, this petition is the beginning of the only merits test this patent has ever faced.

IPR2025-00481 — [Samsung Electronics Co., Ltd. et al.](/litigations/by-plaintiff/Samsung%20Electronics%20Co.%2C%20Ltd.%20et%20al.) v. Headwater Research LLC

• Type: Inter Partes Review
• Filed: 2025-02-26
• Status: Not Instituted — Procedural § 314(a) (per Unified Patents PTAB portal; IP Verse/DocketAlarm label it "Discretionary Denial," terminated as of 2025-08-04, with director-review follow-on papers through 2025-11-07). Plain-English gloss: the Director declined to institute on discretionary grounds — a procedural denial, not a merits ruling on patentability.
• Judge panel: Not confirmed in my sources; the decision was issued as a "Director Discretionary Decision: Deny" (Paper, Board, 2025-08-04) under 35 U.S.C. § 314(a). Petitioner was represented by Fish & Richardson (W. Karl Renner et al.); Patent Owner by Russ August & Kabat (Reza Mirzaie et al.).
• Petition grounds: Per the prior analysis of this patent (litigation exhibit SAMSUNG-1001), the petition challenged claims 1–2, 6–7, 9–10, and 12. The exhibit list (SAMSUNG-1001 through -1016+) shows obviousness-style § 103 ground art built on U.S. publications Jheng (2009/0239584), Chiu (WO2004/031488), Rao (2006/0039354), Collins (2006/0206941), Camilleri (2009/0149220), Bajko (2004/0196796), Erskine (2005/0107066), Brown (2005/0164737), Kelz (EP 1 484 871), Cole (2008/0080458), Landschaft (2007/0184858), plus 3GPP TS 31.102, GSM 11.11, 3GPP2 S.R0048-A, and IEEE standards. I could not confirm the exact ground-by-ground claim/reference mapping from public sources, so I won't invent one.
• Institution decision: Denied — 2025-08-04, discretionary denial under § 314(a). The docket record shows the parties fought over the Fintiv factors (stay likelihood, trial-date proximity, claim overlap with the parallel E.D. Tex. litigation 2:24-cv-00228, and the June 2022 Interim Procedure / Stewart Memorandum considerations) and the "settled expectations" of the parties. The denial was procedural and expressly not a determination that the challenged claims are patentable — the art was never reached on the merits.
• Final Written Decision: None (never instituted; no trial).
• Settlement / termination: No settlement. After the denial, Samsung filed a Request for Director Review (2025-09-03); Headwater responded (2025-09-11); Samsung withdrew the request (Ex. 3103, 2025-10-28); Samsung requested a refund of post-institution fees (2025-11-05); the Board closed the docket (2025-11-07). Case terminated.
• Appeal: No Federal Circuit appeal identified. The only post-decision path pursued was internal Director review, which was withdrawn — no CAFC docket exists for this proceeding in my searches.
• Defensive value: For Headwater, this was a win — but a hollow one. Because the denial was discretionary under § 314(a), it creates no estoppel and no merits finding: Samsung (and anyone else) can re-petition with the same art once the discretionary obstacles (e.g., parallel litigation timing) clear, or the art can be raised in district court. For a defendant today, this proceeding is evidence that Headwater has successfully used Fintiv/discretionary arguments to avoid merits review — meaning an IPR-based defense may need to be structured to survive a discretionary-denial attack (e.g., file early, or after trial dates firm up), not that the claims are strong.

Strategic summary

Claims — CANCELED vs. SUSTAINED vs. UNTESTED. No claim of US 11,096,055 has ever been canceled or sustained by a Final Written Decision. The only completed challenge (IPR2025-00481) was denied institution on § 314(a) discretionary grounds, so all claims — at minimum claims 1–12, including the device claims (e.g., claim 1, with dependent claim 10) that Samsung challenged — remain in full force and are UNTESTED on the merits. The pending Google petition (IPR2026-00439) is the first proceeding that could actually produce a merits outcome, and it is one day old.

Estoppel landscape. No FWD has issued, so no § 315(e)(2) estoppel binds anyone — not Samsung, not Google, and certainly not a new defendant. Every ground Samsung raised (Jheng, Chiu, Rao, Collins, Camilleri, Bajko, Erskine, Brown, Kelz, Cole, Landschaft, 3GPP/GSM/3GPP2 standards, and any combinations) remains fully available to a future petitioner or as a district-court § 282(b) defense. If Google's IPR2026-00439 is instituted and reaches a FWD, estoppel will attach only to Google and its privies on grounds raised or reasonably available — a separate defendant's options stay open. One caveat: the § 315(b) one-year bar runs from service of a complaint, so any defendant already sued needs to file (or join via § 315(c)) before that window closes.

Pattern signals. Headwater Research LLC is a serial, high-volume NPE enforcer — Unified Patents classifies it as "NPE (Individual)," and it has faced roughly 44 PTAB cases across its portfolio. Multiple major tech defendants have taken runs at Headwater patents in 2025–2026: Samsung (IPR2025-00481, denied), Google (now IPR2026-00439 on this patent, plus IPR2026-00137/00138 on a different Headwater patent, US 9,609,544, where Director Squires granted a Google challenge in an April 2026 bulk order), Amazon (IPR2026-00088/00106, trial instituted), and Target (IPR2026-00153/00154, discretionary denials). The pattern is double-edged for a defendant: Headwater is skilled at winning discretionary denials (Samsung's case shows a coordinated Fintiv + "settled expectations" playbook), but Google has shown the institution hurdle is surmountable against Headwater on other patents. There is no defensive aggregator in the chain on this patent — the Google petition appears to be a direct Google filing.

Recommended next steps

• No FWD exists to link — if a demand letter cites claims of '055, neither IPR has narrowed them. The only dispositive document so far is the Director Discretionary Decision in IPR2025-00481 (2025-08-04), available via the Unified Patents PTAB portal and the IP Verse case page. Read it to learn exactly which Fintiv/Director-memo arguments Headwater used — they are the blueprint for the likely discretionary-denial fight in the Google case.
• Track IPR2026-00439 milestones (dates approximate, per statute): Patent Owner's preliminary response due ≈ 2026-11-27 (3 months after filing, 37 CFR § 42.107); institution decision due ≈ 2027-02-27 (3 months after the preliminary-response due date, 35 U.S.C. § 314(b)); if instituted, oral hearing typically ~8 months after institution and Final Written Decision due within 12 months of institution (§ 316(a)(11)), extendable up to 6 months for good cause. Google's parallel district-court posture (W.D. Tex. 7:25-cv-00378; related N.D. Cal. 3:26-cv-06242) will feed the discretionary-denial calculus.
• If you are a defendant today: all prior art is available — the Samsung art list above is a strong starting point, and the § 315(b) one-year bar from service of complaint is the hard deadline for your own petition. Consider whether to file your own petition promptly (to beat the bar and get ahead of any settlement) or, if Google's case is instituted, join under § 315(c) — but note joinder requires acting within one month of the institution decision and the Board has been strict on late joinder.
• If you are defending against Headwater's litigation strategy: expect a discretionary-denial brief modeled on the Samsung case (stay likelihood, "settled expectations," US-manufacturing arguments per Director Squires' memo); be ready to show that your petition was filed early and diligently so the Fintiv factors cut against denial.

Caveats on source confidence: (1) The USPTO Open Data Portal block in this prompt lists only IPR2026-00439; IPR2025-00481 was verified through the patent's Google Patents litigation metadata plus Unified Patents, IP Verse, DocketAlarm, and PTACTS records, but it does not appear in the current portal ingest (consistent with its terminated status). (2) The challenged-claim set for IPR2025-00481 (claims 1–2, 6–7, 9–10, 12) comes from the prior analysis of litigation exhibit SAMSUNG-1001, not from a full petition text I retrieved. (3) The complete granted claim listing for the '055 patent was not available in my sources, so "at least claims 1–12" is the accurate boundary of what I can state.

Based on my research, here is the reconstructed assignment record for US 11,096,055 B2.

Source verification note: I could not query the USPTO Assignment Center database directly (no API access in this environment). The reel/frame data below comes from (a) Google Patents legal-events for the '055 patent itself, (b) the USPTO "assignment abstract of title" exhibits filed in Headwater Research LLC v. T-Mobile (E.D. Tex. 2:23-cv-00379, Dkt. 195-5) and Headwater Research LLC v. Verizon (E.D. Tex. 2:23-cv-00352), (c) Espacenet INPADOC legal-status records for sibling Headwater applications with the same priority date, and (d) Plainsite's USPTO assignment index. Reel/frames verified for sibling Headwater applications are labeled as such; the only '055-specific records I could verify are the two conveyances shown on Google Patents' legal-events tab, both dated 2019-06-10. Where a reel/frame is family-level rather than '055-specific, I say so rather than fabricate.

Inventors

Gregory G. Raleigh — sole named inventor on US 11,096,055 B2 (the IPR2025-00481 petition exhibit is captioned "U.S. Patent No. 11,096,055 to Raleigh," and Google Patents lists only Raleigh).

• Employer at time of filing (earliest priority 2009-01-28): self-employed founder of Headwater (formed 2008) and of ItsOn Inc. (also 2008), per Headwater's own complaint in the E.D. Tex. litigation ("In 2008, Dr. Raleigh formed Headwater to develop mobile operating systems and cloud technology… Also in 2008, Dr. Raleigh founded ItsOn Inc., which licensed Headwater's intellectual property").
• Unusual patterns: Not present in the classic sense — this is a single-inventor patent, so there is no "all inventors depart the original assignee within 12 months" pattern to detect. Raleigh remained associated with the Headwater family through the 2019 corrective-assignment wave (execution dates on those records reach back to 2011, but he signed as assignor).

Original assignee

The entity that received the inventor's interest and owned the application chain: Headwater Partners I, LLC (Delaware LLC; 350 Marine Parkway, Suite 300, Redwood City, CA 94065). The entity named on the issued patent is the successor Headwater Research LLC (1011 Pruitt Place, Tyler, TX 75703).

• Products: Headwater Partners I LLC / Headwater Research LLC itself does not appear to ship products. The technology was commercialized by ItsOn Inc. (Raleigh-founded licensee), whose software ran on millions of Sprint/Samsung devices by end of 2015 per Headwater's complaint.
• Line of business: Holding, managing, and asserting the Headwater patent portfolio.
• Current status: Active and litigating — Headwater Research LLC is plaintiff in E.D. Tex. 2:23-cv-00352 (Verizon), 2:23-cv-00379 (T-Mobile), 2:23-cv-00397 (AT&T), 2:23-cv-00641 and 2:24-cv-00228 (Samsung), 2:25-cv-00901/00902/00903, and W.D. Tex. 7:25-cv-00369/00370.

Assignment timeline

The '055 patent (app 16/421,121, filed 2019-05-23) sits in the large Headwater continuation family rooted in the 2009-01-28 provisional. Its recorded chain is the same two-step chain recorded across the family; Google Patents shows both conveyances recorded 2019-06-10 for this specific application. Verified reel/frames are from sibling family applications and are labeled accordingly:

• 2009-03-24 (executed) / recorded 2009-06-09 — Reel 022799/0920 (family-level; verified via Espacenet INPADOC for sibling US2010191847A1)

  • Conveyance: Assignment (assignment of assignor's interest)
  • Assignor: Gregory G. Raleigh
  • Assignee: Headwater Partners I, LLC
  • Correspondent: not captured in the INPADOC snippet (correspondent field not shown)
  • Context: Original acquisition — inventor-to-company assignment covering the 2009 Headwater filings, the root of the entire family.

• 2011-08-16 (executed) / recorded 2011-08-18 — Reel 026771/0395 (family-level; verified via CourtListener Dkt. 195-5 exhibit for app 13/134,028)

  • Conveyance: Assignment
  • Assignor: Gregory G. Raleigh; Alireza Raissinia; James Lavine
  • Assignee: Headwater Partners I, LLC
  • Correspondent: Sheppard, Mullin, Richter & Hampton LLP, 390 Lytton Avenue, Palo Alto, CA 94301-1432 (submitter Marc A. Sockol)
  • Context: Acquisition — later Headwater-family assignments were handled by Sheppard Mullin, the firm that appears repeatedly on the family's recorded chain.

• 2016-12-29 (executed) / recorded 2017-01-04 — Reel 041248/0681 (family-level; verified via CourtListener Dkt. 195-5 — 56 properties, 6 pages)

  • Conveyance: Merger and Change of Name
  • Assignor: Headwater Partners I LLC; Headwater Management LLC
  • Assignee (merged entity's new name): Headwater Research LLC
  • Correspondent: Ann Taylor, 1011 Pruitt Place, Tyler, TX 75703 — note this is the same address as the new assignee itself, i.e., the records were self-administered at the entity's litigation address in the Eastern District of Texas.
  • Context: Internal reorg — merger of the Headwater LLCs into a single Tyler, TX entity that became the assertion vehicle.

• 2019-05-07 (recorded) — Reel 049108/0205 (family-level; via Plainsite/USPTO index)

  • Conveyance: Corrective Assignment (correcting the corrective assignment previously recorded at Reel 048531/0366)
  • Assignor: Gregory G. Raleigh; Alireza Raissinia; James Lavine (executed 2011-08-16)
  • Assignee: Headwater Partners I, LLC
  • Context: Record-keeping cleanup — executed at the same time the 2019 continuation applications (including 16/421,121) were being filed, to perfect the chain.

• 2019-05-07 (recorded) — Reel 049108/0636 (family-level; via Plainsite/USPTO index)

  • Conveyance: Corrective Assignment (correcting assignee name previously recorded at Reel 047770/0371)
  • Assignor: Gregory G. Raleigh (executed 2011-12-12)
  • Assignee: Headwater Partners I, LLC
  • Context: Record-keeping cleanup — same 2019 correction wave.

• 2019-06-10 (recorded, both) — Reel/frame not independently verified for app 16/421,121

  • Conveyance 1: Assignment of assignor's interest — Gregory G. Raleigh → Headwater Partners I LLC (per Google Patents legal events for the '055 patent)
  • Conveyance 2: Merger and change of name — Headwater Partners I LLC + Headwater Management LLC → Headwater Research LLC (per Google Patents legal events for the '055 patent)
  • Context: These are the '055-specific records of the same two-step chain; the exact reel/frame should be confirmed on the USPTO Assignment Center (search patent 11096055).

No security agreements, licenses (recorded), releases, or securitizations appear in the chain.

Timeline diagram

timeline
    title Ownership of US 11096055
    2008 : Headwater founded by Raleigh
    2009 : Filed by Raleigh
         : Assigned to Headwater Partners I LLC
    2011 : Family assignments recorded
    2017 : Merged into Headwater Research LLC
    2019 : Corrective assignments recorded
    2021 : Patent issued
    2023 : First infringement suits filed

NPE / troll-pattern signals

1. Shell-entity transfer — present. The inventor's interest moved to Headwater Partners I, LLC (a Delaware holding LLC, no products) and then, by merger (Reel 041248/0681, recorded 2017-01-04), into Headwater Research LLC at 1011 Pruitt Place, Tyler, TX — a litigation address in E.D. Tex. No entity in the chain sold products; the operating technology was sold by licensee ItsOn Inc. This is an inventor-to-holding-LLC-to-assertion-LLC structure.

2. Known asserter in the chain — present. Unified Patents' PTAB portal for IPR2025-00481 classifies patent owner Headwater Research LLC as "NPE (Individual)." Headwater Research LLC is a high-frequency plaintiff (2023–2025) against Verizon, T-Mobile, AT&T, and Samsung in E.D. Tex. and W.D. Tex. Patent-owner counsel of record in the IPR is Russ August & Kabat (Reza Mirzaie), a firm that regularly represents NPE plaintiffs.

3. Repeat correspondent across the chain — present, but within-family only. Sheppard, Mullin, Richter & Hampton LLP (Palo Alto) appears on the 2011-era family assignments (Reel 026771/0395), and Ann Taylor at 1011 Pruitt Place, Tyler, TX is the correspondent on the 2017 merger (Reel 041248/0681) — the same address as the assignee itself. That recurrence (one address, one administrator, across dozens of Headwater family patents) is a genuine pattern, though I found no evidence tying Ann Taylor/1011 Pruitt Place to unrelated NPE chains — the tell here is self-administration at the litigation venue, not cross-client repetition.

4. Cascading transfers — not present. The substantive chain is only two links (inventor → Headwater Partners I LLC → Headwater Research LLC). The 2019 corrective re-recordings (Reels 047770, 048531, 049108) are the same two links re-recorded for record-perfection, not chained LLC-to-LLC cascades.

5. Pre-litigation transfer — not present. The last substantive transfer was recorded 2017-01-04 (Reel 041248/0681); the first infringement suits naming the family were filed in 2023 — roughly a six-year gap. The 2019 correctives predate the first suit by four years and are record-keeping, not assertion-arranging.

6. Bankruptcy fire-sale — not present. No bankruptcy appears in any part of the chain; Headwater Research LLC was not an estate-sale purchaser.

7. Privateering — not present. Headwater Research LLC is itself the asserting entity; there is no operating company that transferred these patents to an NPE to sue its competitors. (The complaint's theory — that Sprint/Samsung took ItsOn/Headwater technology — is a former-licensee/partnership dispute, not privateering.)

8. Defensive aggregator (anti-NPE) — not present. The chain terminates at Headwater Research LLC, an active plaintiff. No RPX, AST, LOT, Unified Patents, or OIN interest.

Verdict

NPE — high confidence.

Two-plus strong signals converge: (1) the patent sits in a licensing-only LLC chain — inventor → Headwater Partners I, LLC (Reel 022799/0920, 2009) → Headwater Research LLC by merger (Reel 041248/0681, 2017) — where neither LLC sold products (ItsOn Inc. sold the products under license); and (2) Unified Patents' public directory classifies Headwater Research LLC as an NPE, consistent with its high-frequency E.D. Tex./W.D. Tex. litigation against Samsung, T-Mobile, Verizon, and AT&T beginning 2023, prosecuted by NPE-side counsel Russ August & Kabat. The correspondent tell (Ann Taylor / 1011 Pruitt Place, Tyler, TX on Reel 041248/0681 — identical to the assignee's own address) reinforces that the chain was consolidated into a single litigation vehicle in the Eastern District of Texas.

Verification links:

• USPTO Assignment Center: https://assignmentcenter.uspto.gov/
• USPTO Assignment search index (patent no. 11096055): https://assignment.uspto.gov/patent/index.html
• CourtListener exhibit with USPTO abstract of title (Reels 026771/0395, 041248/0681): https://www.courtlistener.com/docket/67722063/195/5/headwater-research-llc-v-t-mobile-us-inc/
• Unified Patents IPR2025-00481 (owner classified NPE): https://portal.unifiedpatents.com/ptab/case/IPR2025-00481

Verification status — important caveat first

I was able to run only a limited set of searches before hitting the search-step limit, and the Google Patents capture of US11096055B2 provided in the brief is truncated before the "References Cited" section. I therefore could not retrieve the complete USPTO "References Cited" list for US 11,096,055 B2 from the USPTO database or Google Patents in this session. I can confirm three documents linked to the '055 patent via the Unified Patents patent portal, and I will flag clearly which characterizations are confirmed versus inferential. I am not fabricating a citation list; the items below are limited to what the search results actually surfaced, plus explicitly-labeled context from the Headwater family.

A. References surfaced in search results as linked to US 11,096,055 B2

Key point on the distinction that controls the § 102 analysis: documents that are members of the '055 patent family (same provisional chain, earliest priority Jan. 28, 2009 — provisional 61/206,354) cannot be § 102 prior art against '055, because they are not prior art under § 102(a)(1)/(a)(2) as to the '055's own priority date. Only non-family references with effective dates before Jan. 28, 2009 can anticipate. Whether items 1 and 2 above are family or non-family could not be conclusively determined from the retrieved snippets.

B. What the claim set looks like (for § 102 mapping)

Based on the IPR2025-00481 petition's element mapping (challenged claims 1–2, 6–7, 9–10, 12; see the litigation summary above), claim 1 of '055 recites, at minimum:

• 1.1 a Wireless Wide-Area Network (WWAN) modem;
• 1.2 storage of a set of device credentials for activating the device for a service on a network;
• 1.3 sending an access request to the network including the device credentials;
• 1.4 a connection manager managing connections over modems to access networks;
• 1.5 an adaptive service policy control agent;
• 1.6 an application service interface;
• 1.7 a policy control agent performing policy control to satisfy a service usage objective (e.g., configuring a "roaming service profile" for a network connection).

Any § 102 anticipation analysis of a cited reference must be conducted element-by-element against this framework. The most likely targets for the references above: items 1.2–1.3 (credential-based activation — relevant to any charging/credential-exchange reference) and 1.5/1.7 (policy control — relevant to any generic policy-tracking reference).

C. Gaps and recommended verification path

1. The complete citation list is not in this record. The full "References Cited" (patent citations and non-patent citations) for US 11,096,055 B2 is available at:
   • USPTO Patent Center (application 16/421,121) — the "References" / IDS tab; and
   • Google Patents → US11096055B2 → "Citations" tab (which was truncated in the capture provided to me).
2. IPR2025-00481 (Samsung v. Headwater, not instituted) — the petition exhibit SAMSUNG-1001 reproduces the '055 patent including its citations and identifies the asserted prior-art grounds; that is the fastest single source for the prior-art set Samsung considered most relevant. I could not retrieve the petition's prior-art grounds within this session's search budget.
3. Global Dossier (via Google Patents/EPO) shows the IDS filings by Headwater, which will distinguish family-member "related applications" from true § 102 "patent citations."

Bottom line: I can confirm only that US 7,747,240 B1, US 2008/0005285 A1, and US 8,385,896 B2 appear in the same citation/family context as US 11,096,055 B2; of these, only the first two could even potentially qualify as § 102 prior art, and neither's § 102 eligibility or claim-by-claim anticipation can be responsibly asserted without pulling the patent's face citations and the priority-chain records. I recommend completing the analysis against USPTO Patent Center / the IPR2025-00481 petition before drawing § 102 conclusions.

Obviousness Analysis — US Patent 11,096,055 B2 ("Automated device provisioning and activation") under 35 U.S.C. § 103

Analyst note on date: The task states "Current Date: April 26, 2026," but the operating environment date is 2026-08-28 and the pending Google IPR (IPR2026-00439) was filed 2026-08-27 — after the task's stated date. I treat 2026-08-28 as controlling and flag the task date as stale.

Critical data caveat (carried forward from prior sections): The complete granted claim text for US 11,096,055 B2 was not available in my sources (the claims tab was truncated in the Google Patents capture, and no full listing surfaced in searches). The element-level analysis below is anchored to the reconstructed claim 1 from the IPR2025-00481 petition mapping (SAMSUNG-1001) and the abstract, i.e., a wireless end-user device comprising: a WWAN modem; storage of a set of device credentials for activating the device for a service on a network; sending an access request to the network including the device credentials; a connection manager managing connections over modems to access networks; an adaptive service policy control agent; an application service interface; and a policy control agent performing policy control to satisfy a service usage objective (e.g., a roaming service profile). Every "claim limitation" citation below is therefore an approximation, and any formal opinion must be re-verified against the verbatim claims on USPTO Patent Center or Google Patents' claims tab.

1. Prior art available for the § 103 analysis

The "Prior Art" / References Cited section of the patent page was not included in the supplied capture. I recovered the family application's own References Cited from a USPTO PTACTS copy of US 2013/0096998 A1 (same family, same specification), and the Samsung IPR2025-00481 petition's exhibit art from the prior analysis. Both are compiled below.

1.1 References cited on the face of the family application (verified from PTACTS)

1.2 Prior art identified in IPR2025-00481 (Samsung's § 103 grounds; verified only at the bibliographic level in my sources)

Jheng (US 2009/0239584 A1), Chiu (WO 2004/031488 A2 — content verified, see § 2), Rao (US 2006/0039354 A1), Collins (US 2006/0206941 A1), Camilleri (US 2009/0149220 A1), Bajko (US 2004/0196796 A1), Erskine (US 2005/0107066 A1), Brown (US 2005/0164737 A1), Kelz (EP 1 484 871), Cole (US 2008/0080458 A1), Landschaft (US 2007/0184858 A1), plus standards 3GPP TS 31.102, GSM 11.11, 3GPP2 S.R0048-A, and IEEE 802.11.

Confidence disclosure: I verified the substantive disclosure of Chiu directly (search result) and can speak to the SIM/USIM standards (3GPP TS 31.102, GSM 11.11, 3GPP2 S.R0048-A) and 3GPP TS 23.401 from well-established technical knowledge. For Jheng, Rao, Collins, Camilleri, Bajko, Erskine, Brown, Kelz, Cole, and Landschaft I have only bibliographic identification from the IPR exhibit list — I did not retrieve their full texts, and I will not fabricate specific teachings for them. They are flagged accordingly and used as "additional candidate art" whose element mappings must be confirmed against the petition before being relied on.

2. What the verified references teach

2.1 Chiu, WO 2004/031488 A2 — "Smart connection management of portable devices" (verified)

This is the strongest verified reference against the connection-management and activation elements. Chiu discloses a portable device with:

• a customizable profile (XML) storing configuration parameters for each of a plurality of network connection types (network address, default mode, device name, user name and password for automatically controlling connection authentication, IP-tunneling negotiation parameters) and user-definable selection criteria;
• a connection detector that detects available network connections;
• a connection manager that selects a particular network connection based on the user-definable selection criteria and activates the selected network connection using the stored configuration parameters;
• profiles downloadable from a remote server / remote profile database;
• automatic re-selection and hand-off when the selected connection ceases to satisfy the criteria, with automatic tunnel negotiation and connection authentication to avoid session interruption.

Chiu therefore plausibly covers: a device-side connection manager; storage of connection/authentication credentials in a device profile; automatic activation of a network connection using stored credentials; and remote (network-side) provisioning of profiles. It is squarely in the field and predates the earliest priority date (published 2004).

2.2 3GPP TS 31.102 / GSM 11.11 / 3GPP2 S.R0048-A — SIM/USIM credential and provisioning standards (high-confidence general knowledge)

These standards, well before 2009, define the Subscriber Identity Module / Universal SIM as the device element that stores device/subscriber credentials (IMSI, Ki/authentication keys, MSISDN, service/profile data) and supports authentication and service activation on the network. GSM 11.11 defines the SIM–ME interface and file structure; 3GPP TS 31.102 extends this to USIM; 3GPP2 S.R0048-A covers CDMA/EV-DO device provisioning ("over-the-air service provisioning," OTASP/OTAPA-style) — i.e., automated provisioning and activation of devices using credentials stored on the device, including temporary/partial credentials and over-the-air activation — which is precisely the claim's "store device credentials for activating the device for a service" and "send an access request including the device credentials."

2.3 3GPP TS 23.401 V8.4.0 (Dec. 2008; cited on the family application)

Defines the EPC/LTE architecture including UE attach, authentication (with credentials from USIM), and default bearer / PDN connectivity setup — i.e., the network-side recognition of device credentials and admission to service. This is the "access request including device credentials" network behavior, concededly conventional by the patent's own background.

2.4 The patent's own concession

The specification (¶¶ [0449]–[0450]) concedes that conventional provisioning/activation — programming credentials, associating them with service profiles, directing un-activated devices to activation servers, and propagating service-profile settings to network elements — was known. The patent's contribution is described as automating and simplifying that process and distributing policy implementation to the device. That concession helps a § 103 challenger: the "problem" (cumbersome activation) and many "solution" components (credentials, activation servers, AAA, HLR, gateways) are admitted prior art.

3. The level of ordinary skill (POSITA)

A POSITA circa January 2009 would hold a B.S./M.S. in computer science, electrical engineering, or equivalent, with 2–5 years' experience in mobile/wireless device software, 3GPP/3GPP2 network protocols (attach/authentication/PDP context), SIM/USIM technology, and service provisioning/activation systems, and would be familiar with connection-management software on multi-mode devices (Wi-Fi/WWAN) and with network-side AAA/HLR/billing functions. This skill level matters because several claimed "agents" are, at bottom, conventional software modules (connection managers, policy engines, application interfaces) that were routine design choices by 2009.

4. Differences between claim 1 (reconstructed) and the prior art, and the resulting combinations

For each combination below I state: (a) the claim elements at issue, (b) the primary and secondary references, (c) the motivation-to-combine rationale under KSR International Co. v. Teleflex Inc., 550 U.S. 398 (2007) (design incentive, known problem, predictable combination, common field, and express or implicit teaching).

Combination A — Chiu + 3GPP TS 31.102 / GSM 11.11 / 3GPP2 S.R0048-A (the "core" combination)

Elements addressed: WWAN modem; storage of device credentials for activating the device for a service; sending an access request including the device credentials; connection manager managing connections over modems to access networks.

• Mapping: The SIM/USIM standards supply the device credential store (IMSI/keys on the SIM) and the network-side authentication/activation that follows from an access request carrying those credentials (GPRS/UMTS attach and authentication; CDMA OTASP in S.R0048-A). Chiu supplies the connection manager that manages multiple modem/connection types, stores per-network authentication parameters in a device profile, and automatically activates the selected connection — i.e., the device-side logic that decides which access network to use and presents the stored credentials in an access/authentication sequence.
• Motivation: A POSITA designing a multi-mode device (WWAN + Wi-Fi) in 2004–2009 faced exactly the problem Chiu set out to solve (automatic selection and activation across heterogeneous networks with minimal user intervention) and the standards' problem (credential-based authentication and activation). Combining a standards-compliant SIM credential framework with Chiu's connection manager is the textbook integration of a standard subsystem (credential storage/authentication) into a known host system (connection manager) — a "combination of familiar elements according to known methods … [that] yields predictable results," KSR, 550 U.S. at 416. Chiu even expressly teaches profiles downloaded from a remote server, which is network-side provisioning of device settings — the same idea as the claim's credential-for-activation storage, just with the credentials separated onto the SIM as the standards require.
• Strength: High for the credential-storage, access-request, and connection-manager elements. This is likely the backbone of any successful § 103 ground.

Combination B — Chiu + network-selection/provisioning references (Jheng, Bajko, Collins, Kelz)

Elements addressed: connection manager; network selection; roaming service profile; automated activation.

• Mapping: Chiu's connection manager already performs criteria-based selection. The petition's additional art (Jheng US 2009/0239584; Bajko US 2004/0196796; Collins US 2006/0206941; Kelz EP 1 484 871 — all pre-2009, bibliographic identification only) was presumably used to cover selection-rule refinements (e.g., cost/roaming-aware selection, access-network discovery) and GSM-style provisioning/activation sequences (Kelz). The specification's own roaming discussion (¶ [0112]: a roaming service profile that reduces or tailors service usage when roaming costs are high) is the claimed "service usage objective" example.
• Motivation: The known problem is cost/quality-aware network selection on multi-mode devices; Chiu solves selection but its criteria are user-defined. Adding roaming-cost-aware selection policies (as in the roaming art and the specification's own ¶ [0112] discussion) is an obvious refinement — the same design incentive (lower cost, better experience) that motivated both Chiu and the roaming art. A POSITA would combine them because they are in the same field, solve the same problem at different layers (connection management vs. selection policy), and their combination requires no new hardware.
• Strength: Medium-high, contingent on verifying the individual disclosures of Jheng/Bajko/Collins/Kelz in the petition.

Combination C — Chiu/SIM-standards + adaptive policy-control art (Camilleri, Landschaft, Cole) for the "adaptive service policy control agent" and "policy control agent … service usage objective"

Elements addressed: adaptive service policy control agent; policy control agent performing policy control to satisfy a service usage objective; application service interface.

• Mapping: Chiu's profiles carry configuration parameters, but not adaptive, usage-objective-driven policy control. The petition's policy references (Camilleri US 2009/0149220; Landschaft US 2007/0184858; Cole US 2008/0080458) were almost certainly mapped to the device-side policy/usage-control agents — i.e., agents that monitor usage and adapt policy (e.g., throttling, blocking, or profile switching) to hit a usage/cost goal. The "application service interface" element would be satisfied by conventional application-layer traffic classification/interfaces (e.g., as in the device-stack art Collins US 2006/0206941, or the commonplace socket-API monitoring the specification itself describes at ¶¶ [0216]–[0223]).
• Motivation: By 2009, device-side policy managers, usage counters, and application-layer traffic classifiers were well-known components of mobile data management (and the specification concedes as much at ¶¶ [0196]–[0198], describing policy control agent 1692 adapting instantaneous policies to achieve a service usage objective). Adding an adaptive policy-control agent to Chiu's connection manager is an obvious layering of a known policy engine onto a known connection manager — the combination does no more than predictably coordinate two known device functions to achieve a known goal (cost/usage control). Chiu's remote-profile-download architecture provides the natural delivery channel for the policy settings.
• Strength: Medium. The risk for the challenger is if the claims require the specific verification/tamper-resistance architecture (agent heartbeats, challenge/response, IPDR cross-checks), which none of these references (as far as I can verify) teaches — see § 6.

Combination D — SIM standards + 3GPP TS 23.401 + S.R0048-A for the automated provisioning/activation flow (temporary/partial credentials, activation-server redirection)

Elements addressed: device credentials for activating the device; access request including credentials; network admission.

• Mapping: 3GPP2 S.R0048-A and GSM/UMTS OTA provisioning taught over-the-air device provisioning and activation using device-stored credentials, including temporary credentials and redirection of un-activated devices to activation infrastructure — the exact scenario of the claim (store credentials → send access request → network activates service). 3GPP TS 23.401 (cited on the family application) teaches the attach/authentication/admission flow.
• Motivation: The specification's own ¶¶ [0456]–[0457] describe routing un-activated devices to activation servers based on credential look-up as known network behavior. A POSITA implementing "automated device provisioning and activation" would start from these standards; the claim's contribution over them is, at most, the device-side service processor that automates the flow — and Chiu supplies the device-side automation.
• Strength: High for the activation-sequence elements; this combination alone may render the abstract-level claim (device stores credentials; sends access request with credentials) obvious.

Combination E — Family-cited billing/network art (Carson US 5,283,904; McGregor US 5,577,100) + Chiu (weaker, lower confidence)

Elements addressed: device-assisted billing/monitoring aspects, if present in the claims.

• Motivation: The family itself cited Carson and McGregor on the face of the application, presumably as background on distributed/service-aware billing and network charging. If the claims reach device-side billing-event capture, a POSITA would combine device billing agents (Carson/McGregor lineage) with Chiu's device management framework. I have not verified the content of Carson/McGregor — I list this combination only to note that the applicant's own cited art is available to a challenger and should be mined.
• Strength: Unverifiable in my sources; do not rely without reading the patents.

5. Why a POSITA would have been motivated to combine (general KSR analysis)

1. Same field, same problems. All references are in wireless device network access, connection management, authentication, and provisioning. The patent itself frames the problem (cumbersome activation, ¶ [0449]) as one the industry was actively solving — which is why Chiu, S.R0048-A, and the GSM/UMTS OTA mechanisms all existed by 2004–2008.
2. Complementary, not competing, disclosures. Chiu handles device-side selection and activation of a connection; the standards handle credential storage and network-side authentication; the policy references handle usage-objective control after admission. Each solves a distinct sub-problem in the same system; combining them is additive, not mutually exclusive.
3. Predictable results. A device with a SIM (credentials) + connection manager (selection/activation) + policy agent (usage control) is a conventional smartphone architecture; the claimed combination is, at bottom, the standard components of a 2008–2009 multi-mode smartphone with OTA activation, rearranged with the policy intelligence on the device. That is a hallmark of obviousness: "the combination of familiar elements according to known methods … to yield predictable results," KSR, 550 U.S. at 416.
4. Design incentives / known problem-solution pairs. The known incentives — reduce user intervention in activation (Chiu; OTA standards), reduce roaming cost (roaming art; the patent's own ¶ [0112]), and enable device-side usage control (policy art) — each point a POSITA toward the combination.
5. The specification's own concessions. The patent admits the network-side pieces (credentials, activation servers, AAA, HLR, profile propagation, IPDRs) were conventional; the incremental device-side pieces (connection manager, policy agent, app interface) were likewise known (Chiu; standard smartphone stacks). This narrows the "inventive difference" to a specific orchestration that a POSITA could readily derive.

6. Where the obviousness case is weakest (and what Headwater will argue)

• The full service-processor architecture. If the asserted claims require the verifiable device-assisted service policy implementation features — agent heartbeats, challenge/response integrity checks, IPDR-based verification, tamper-resistance, privacy filtering (¶¶ [0167]–[0175], [0181]–[0195], [0228]–[0231]) — none of the verified references (Chiu, SIM standards, TS 23.401) teaches those. A challenger would need to rely on the unverified IPR art (Camilleri/Landschaft/Cole/Collins) and would still face a genuine "verification" gap. This is likely why Headwater's patent family is aggressively litigated and why the Samsung IPR (which used this art set) was attacked on Fintiv/discretionary grounds rather than conceded on the merits.
• "Adaptive" policy control satisfying a "service usage objective." The word "adaptive" and the objective-based control language (¶ [0197]) may import a claim-scope that static profile-based selection (Chiu) does not meet — requiring the policy art (Camilleri et al.) to be mapped with verified disclosure.
• No merits precedent. IPR2025-00481 (Samsung, same art family) was denied institution under § 314(a) — a procedural denial, not a patentability finding. No claim has ever been tested on the merits, and no estoppel attaches to anyone from that denial. The pending IPR2026-00439 (Google, filed 2026-08-27) is the first proceeding that could produce a Final Written Decision; its grounds are not yet public. If Google uses art from the same pool, the analysis above is the likely shape of its § 103 grounds.

7. Bottom line

• Strongest § 103 case: Combination A (Chiu + 3GPP TS 31.102/GSM 11.11/3GPP2 S.R0048-A), optionally plus 3GPP TS 23.401, against the reconstructed claim 1's credential-storage, access-request, and connection-manager elements — the core of the patent's abstract. A POSITA would combine these because the standards provide the credential/authentication substrate and Chiu provides the device-side connection-management/activation logic, with express cross-teachings (remote profile download; automatic authentication).
• Moderate case: Adding policy-control art (Camilleri/Landschaft/Cole) and application-interface art (Collins) to cover the "adaptive service policy control agent," "application service interface," and "policy control agent/service usage objective" elements — motivation is the known cost/usage-control problem and the layered architecture of conventional smartphones.
• Weakest case: The verification/tamper-resistance architecture, if claimed, is not shown in any verified reference; that gap is Headwater's likely merit argument.
• Practical caveat: The full claim text and the unverified references (Jheng, Rao, Collins, Camilleri, Bajko, Erskine, Brown, Kelz, Cole, Landschaft) must be checked against the verbatim claims and the petition before any ground is relied on. Because IPR2025-00481 was denied on non-merits grounds, all of this art remains available to a new petitioner (subject to the § 315(b) one-year bar from service) and as § 282(b) prior-art defenses in the pending district-court cases (E.D. Tex. 2:24-cv-00228 [dismissed per prior analysis], 2:25-cv-00901/00902/00903; W.D. Tex. 7:25-cv-00369/00370).

Sources: USPTO PTACTS family-application copy (References Cited: Carson US 5,283,904; McGregor US 5,577,100; CN 1538730 A; CN 101035308 A; 3GPP TS 23.401 V8.4.0); Google Patents WO 2004/031488 A2 (Chiu, verified disclosure); prior analysis of IPR2025-00481 exhibit list (SAMSUNG-1001) and IPR2026-00439 docket (Google, filed 2026-08-27); patent specification ¶¶ [0109], [0112], [0196]–[0198], [0447]–[0499].