Obviousness

Obviousness Analysis of U.S. Patent No. 11,907,553

This analysis evaluates the patentability of the claims of U.S. Patent No. 11,907,553 ("the '553 patent") in light of prior art, focusing on the standard of obviousness under 35 U.S.C. § 103. The analysis concludes that the independent claims of the '553 patent would have been obvious to a Person Having Ordinary Skill in the Art (PHOSITA) at the time the invention was made.

A claim is considered obvious if the differences between the claimed invention and the prior art are such that the subject matter as a whole would have been obvious to a PHOSITA. This analysis primarily combines the teachings of U.S. Patent No. 7,631,142 B2 ("Ji et al.") and U.S. Patent Application Publication No. 2015/0317208 A1 ("Lee et al.").

Independent Claim 1 Analysis

Independent Claim 1 of the '553 patent describes a data storage device comprising:

• A device controller with memory.
• An application with instructions for the controller to:
  1. Receive a storage device policy.
  2. Store content according to the policy.
  3. Record storage information (metadata) for the content.
  4. Retrieve the content using the storage information.
  5. Refuse a delete request based on the storage information (i.e., policy).
  6. Store the storage information at a remote location.

Primary Combination of Prior Art: Ji et al. in view of Lee et al.

The combination of Ji et al. and Lee et al. teaches every element of Claim 1 and provides a clear motivation for a PHOSITA to combine their respective teachings to arrive at the invention of the '553 patent.

1. Teachings of Ji et al. (US 7,631,142 B2)

Ji et al. serves as the primary reference, as it discloses a storage device that internally enforces data management policies.

• Elements (a) through (e): Ji et al. explicitly describes a storage device with a controller and an embedded "policy enforcement module." This module receives and enforces policies, such as data retention rules.
  • It receives a policy defining data handling rules (Claim 1, element c1).
  • It stores data in accordance with these rules (element c2).
  • It must inherently record storage information (metadata, such as retention periods) to enforce these policies (element c3).
  • It retrieves data for the host (element d).
  • Crucially, a primary function of the policy engine in Ji et al. is to enforce immutability, which involves refusing to delete or overwrite data that is under a retention policy (element e).

Ji et al. teaches an autonomous, policy-driven storage device. The only significant element of Claim 1 it does not explicitly teach is storing the metadata at a remote location. The system in Ji et al. is designed to be self-contained, storing its policy and metadata locally to ensure autonomous operation.

2. Teachings of Lee et al. (US 2015/0317208 A1)

Lee et al. teaches an "intelligent storage device," such as a network-attached SSD, that contains a programmable processor capable of executing user-defined applications and communicating over a network. This provides the missing element and the motivation to modify the system of Ji et al.

• Element (f) and Motivation to Combine: Lee et al. discloses a storage device that is not a simple, passive block device but an active, network-aware computing node. A PHOSITA, starting with the policy-enforcing drive from Ji et al., would be motivated to incorporate the networking capabilities of Lee et al. for several reasons:

  • Centralized Management and Scalability: In a large-scale data center environment, as depicted in FIG. 3 and FIG. 5 of the '553 patent, managing policies and metadata on thousands of individual, self-contained drives (the Ji et al. model) is inefficient. A PHOSITA would naturally seek to centralize this information for easier administration, backup, and consistency. The network-capable drive of Lee et al. provides the perfect mechanism to achieve this. It would be an obvious step to modify the policy engine of Ji et al. to store its metadata on a central, remote server, which is precisely the a "key device" (505) or other "remote location" described in the '553 patent.

  • Enhanced Security: The '553 patent describes the security advantage of separating the content (on the drive) from its "storage information" (at a remote location). A PHOSITA, concerned with the data integrity and retention taught by Ji et al., would recognize that storing the metadata map on a separate, secure server would render the physical drive's data useless if stolen, as the "key" to locating and interpreting the data would be missing. The networked drive of Lee et al. provides the necessary communication channel to implement this well-known security principle of separation.

  • Architectural Flexibility: Lee et al. teaches the general concept of an "intelligent" drive capable of running custom applications. A PHOSITA would understand that a "storage device policy" is simply a type of application. It would be an obvious design choice to implement the policy enforcement logic of Ji et al. as an application on the intelligent drive of Lee et al., and to have that application store its critical state and metadata on a more robust, centralized server via the network interface.

Conclusion of Obviousness

A person of ordinary skill in the art would begin with the self-contained, policy-enforcing storage device described by Ji et al. which teaches nearly all elements of Claim 1. Faced with the need to deploy such devices at scale in a modern, networked data center, and being aware of intelligent, network-capable storage devices as taught by Lee et al., the motivation to combine these teachings would be strong. Modifying the device of Ji et al. to offload its policy metadata to a remote server for improved manageability, scalability, and security would be an obvious design improvement, not an inventive leap. This combination of references renders the subject matter of Claim 1 of US Patent 11,907,553 obvious.