Invalidity dossier

US 5588056

Method and system for generating pronounceable security passwords

Current assignee: Verizon Patent and Licensing Inc

Added 9/26/2026, 4:00:50 PM

At a glanceNo PTAB challengesNo litigation on fileSoftware Technology & Computing Systems (T)

Active provider: DeepSeek · deepseek-flash

Patent summary

Title, assignee, inventors, filing/issue dates, abstract, and a plain-language overview of the claims.

✓ Generated

I'll search for authoritative information on this specific patent number, including any litigation or docket activity.

Let me verify the claim structure and check for any litigation specific to this patent number.

Let me verify the total claim set of US5588056 and confirm there is no litigation docket activity.

US Patent 5,588,056 — Summary

Source note: I worked from the authoritative full text and Google Patents bibliographic record for US5588056A (https://patents.google.com/patent/US5588056/en), plus corroborating full-text mirrors (FreePatentsOnline/5588056.html, patents.justia.com/patent/5588056, everypatent.com/comp/pat5588056.html). I did not find any litigation, PTAB, or CAFC 2026 docket activity for this patent (see "Litigation check" below).

Bibliographic data (verified)

Field Value
Patent number US 5,588,056 A
Title Method and system for generating pronounceable security passwords
Inventor Ravi Ganesan
Original assignee Bell Atlantic Network Services, Inc.
Current assignee (per Google Patents) Verizon Patent and Licensing Inc. (via Verizon Services Corp., change of name from Bell Atlantic)
Application number 08/328,226
Filing date October 25, 1994
Issue date December 24, 1996
Priority date October 25, 1994
Status Expired – Lifetime (anticipated expiration October 25, 2014)
Classifications G06F 21/31 (user authentication); G07F 7/10 (coded identity card/PIN)

Related family member (do not conflate): US 5,850,448, "Programmed computer for generating pronounceable security passwords," also Ravi Ganesan, filed October 15, 1996 (app. 08/731,427), which claims priority to the '056 application. The '448 patent carries the apparatus/programmed-computer claims; several search results blended the two documents. I have kept them separate here.

Abstract (as issued)

A pronounceable security password is generated using a plurality of first word segment portions and second word segment portions, each of which has at least one character. A transition number, for each of the plurality of first word segment portions, is identified, preferably using a Markov model. Each transition number corresponds to the number of different second word segment portions which can be combined with the first word segment portion to form a pronounceable word segment, such as a word syllable. A first word segment portion is randomly selected. The selection of any one of the plurality of first word segment portions is of substantially equal probability. A second word segment portion, to which the transition number associated with the selected first word segment portion corresponds, is then randomly selected. The selection of any one of the corresponding second word segment portions is likewise of substantially equal probability. The selected first and second word segment portions are combined to form at least a part of the pronounceable security password.

Independent claims — plain language

Claim 1 — Method (random equiprobable segment selection with an acceptability check). A computer-implemented method for building a pronounceable password from two families of word pieces: "first word segment portions" (e.g., bigrams/trigrams) and "second word segment portions" (e.g., unigrams). Each first portion has (i) a set of second portions that combine with it to form a pronounceable word segment and (ii) a "transition number" equal to how many such second portions are in that set. The method:

  1. randomly selects a first word segment portion, where every first portion is equally likely to be chosen (no frequency weighting by English-language probability);
  2. randomly selects a second word segment portion from the set associated with the chosen first portion, again with equal probability across that set;
  3. combines them into a first pronounceable word segment;
  4. tests whether the resulting segment is acceptable — specifically, whether consecutive characters of the segment correspond to a first word segment portion whose transition number falls below a threshold; and
  5. only if acceptable, generates the password to include that pronounceable word segment (with dependent claims adding further segments, thresholds, and applications such as encryption/decryption).

The core inventive concept: uniform-probability selection of both segment levels, so the generated distribution is not skewed toward high-frequency English letter sequences.

Claim 22 — Method (category-based selection). A companion independent method in which each first word segment portion is pre-categorized into one of at least two categories based on its transition number. The method identifies one or more "selection categories" whose members have transition numbers at or above a first threshold transition number; randomly selects a first word segment portion from within those selection categories (equal probability among them); randomly selects an associated second word segment portion (equal probability within that set); combines them; and generates the password including that word segment only if consecutive characters of it do not correspond to a first word segment portion categorized in a non-selection category. This is the "bucket"-based variant that avoids the "smallest bucket" attack the specification criticizes in the Sandia, Gasser/NIST, and DEC generators.

Dependent claims (representative): each first portion is a bigram or trigram (cl. 14), each second portion is a unigram (cl. 15), characters are alphabet letters (cl. 16), transition numbers are derived using a Markov model (cl. 17), the password is eight or more characters (cl. 18) with at least six characters drawn from the second word segment portions (cl. 19), the password forms part of a private key of a cryptosystem such as RSA (cls. 20–21), and the password is applied to encrypt or decrypt a message (cl. 13). Additional dependent claims of the claim-22 family (cls. 23–30, seen in full-text mirrors) add substitute-segment selection when the acceptability test fails.

Claim count uncertainty: The claim set runs at least through claim 30 (claim 30 depends from claim 29). I could not authoritatively confirm from the sources retrieved whether US5588056 contains any additional independent claims beyond claims 1 and 22 (e.g., a "system" claim), or the exact terminal claim number. The patent's title and specification describe both method and system embodiments, but the programmed-computer/apparatus claims appear in the continuation US5850448. This is a genuine gap in the record I retrieved, not a finding that no such claim exists.

Context the specification supplies

  • The patent frames the problem with "Criterion 5": a password scheme is weak if the password space can be split into buckets where the probability of a user drawing from a bucket exceeds that bucket's share of the total space — "the system is only as secure as its smallest bucket."
  • It critiques three prior generators: the Sandia/Kerberos system (25 equally indexed templates producing a highly non-uniform bucket distribution and adding an 8th noisy character), the Gasser/NIST FIPS-92 system (34 units with English-occurrence probabilities), and the DEC Markov-model generator (which, the patent asserts, inherits small-bucket vulnerability because transitions follow English-language probabilities).
  • The invention's remedy: retain Markov-derived legality (which transitions are pronounceable) but decouple selection probability from English-language frequency, using uniform random selection plus transition-number-based acceptability thresholds.

Litigation check (USPTO / CAFC 2026)

No case, IPR, or Federal Circuit appeal involving US 5,588,056 was found. Searches expressly keyed to the number 5588056 returned zero docket or infringement results. Verizon-related 2026 matters that surfaced are different patents and must not be attributed to this patent:

Because the '056 patent expired (anticipated expiration October 25, 2014, per the Google Patents legal-status record), it is not a candidate for a live 2026 infringement suit.

Confidence and caveats

  • High confidence in title, inventor, assignees, application number, filing date, and issue date — these match the authoritative record and the full text provided.
  • High confidence in the substance of independent claims 1 and 22 — the language was recovered verbatim from multiple full-text mirrors.
  • Uncertain about the exact total claim count and whether any independent system/apparatus claim exists in the '056 patent. I would verify against the USPTO PatentCenter/Patent Public Search full claim listing and the official PDF (patentimages.googleusercontent.com, US5588056.pdf) before relying on it. Note that Apple's US5850448 document (a same-inventor, same-family continuation) was repeatedly returned by search engines in place of the '056 patent; any "programmed computer" or "article of manufacture" claim language you encounter belongs to the '448 patent, not the '056 patent claimed here.
  • No fabrication: I did not locate an authoritative record of any CAFC 2026 docket naming 5588056, and I am reporting that absence rather than inferring one.

Generated 9/27/2026, 7:52:27 PM

Cases on file (0)

Specific litigation cases in our database that name US patent 5588056. The free-form analysis below may also discuss cases beyond this list.

No cases on file mention this patent. Upload a CSV or add a case manually in Admin → Manage litigation cases.

Litigation summary

Past and pending lawsuits — plaintiffs, defendants, jurisdictions, outcomes, and notable rulings.

✓ Generated

I'll search litigation databases for US patent 5588056.

Let me try more targeted litigation sources.

Let me try dedicated litigation databases directly.

Litigation Search — U.S. Patent No. 5,588,056

Result: No litigation identified

Based on the searches I was able to run against publicly indexed litigation sources, I found no known litigation involving U.S. Patent No. 5,588,056 — no district court infringement action, no declaratory judgment action, no ITC Section 337 investigation, and no PTAB proceeding (IPR/PGR/CBM) surfaced.

Because you asked for a case-by-case list, I have to report that the list is empty rather than populated. I will not manufacture cases to fill the table.

What I searched and what came back

I ran multiple queries against general and litigation-oriented indexes (including PACER-derived aggregators and RPX Insight document pages). Every hit resolved to an unrelated use of the digit string, which I am deliberately listing so you can see the false-positive pattern:

Hit Why it is not our patent
US Registration No. 5588056 — "MICAMA" (E&E Upholstery, Inc.), Serial 87735970 This is a trademark registration number, not a patent
JP 5588056 A (1983-01-18) A Japanese publication number
DOI 10.1155/2017/5588056; Shock & Vibration 2021, art. 5588056 Academic article identifiers
Phoenix Contact part no. 5588056 Commercial catalog number
Brazilian state registry entry "5588056 A FERNANDES DE SOUSA - ME" Company registration number
Various 4G/LTE complaints (e.g., CCE v. Verizon / Alcatel-Lucent / Ericsson / Apple / HTC) Different patents entirely — LTE standard-essential patents

None of these are the subject patent.

Why the null result is plausible (and not just a search artifact)

Three independent reasons make "no litigation" a credible answer here, rather than merely a gap in my searching:

  1. Terminal disclaimer of the market. The patent issued 1996-12-24 with a 1994-10-25 priority date, and Google Patents records its legal status as "Expired – Lifetime," with anticipated expiration on 2014-10-25. A patent that has been expired for over a decade cannot support a live infringement action (damages exposure ends at expiration), which sharply reduces the incentive to assert it and would explain the absence of any docket.

  2. Prosecution-history assignment chain, not a litigated chain. The recorded assignments are corporate housekeeping only — Bell Atlantic Network Services, Inc. → Verizon Services Corp. (change of name) → Verizon Patent and Licensing Inc. That is consistent with an internally held portfolio patent that was never spun out to an assertion entity, which is the typical precursor to NPE litigation.

  3. Claim scope is narrow and pre-dates the modern assertion wave. The claims are directed to a specific method of generating pronounceable passwords using transition counts from a Markov model, checked against thresholds. As a generator-side method claim, it is a poor fit for the standard "accused product in the stream of commerce" NPE model.

Caveats you should weigh before relying on this

  • I hit a tool-usage limit mid-search. My final round of targeted queries (RPX Insight, CourtListener/Docket Alarm, and a combined "5,588,056" docket query) did not complete. The negative result is therefore based on the queries that did run, not on an exhaustive sweep.
  • Clean-number searching on this patent is unusually polluted. Because "5588056" collides with a trademark registration, a Japanese publication number, academic DOIs, and product SKUs, an automated keyword sweep for the bare string produces heavy noise. This raises the false-negative risk: a real docket entry that cites the patent only as "5,588,056" or "'056 patent" will not be caught by a bare-digit search.
  • Per your instruction, I treated the identifier literally and did not auto-correct it. I deliberately did not report results for neighboring numbers (e.g., US 5,588,055, US 5,588,057) or for the frequently confused Verizon VoIP patents ('574, '711, '880) or the Immersion '213/'333 haptics patents.

Recommended verification steps

If you need a defensible "no litigation" opinion rather than a search summary, I would run the following, which I could not complete:

  1. Lex Machina / Docket Navigator — search the patent number as an "asserted patent" field; these tools normalize patent numbers and avoid the digit-string collision problem.
  2. Unified Patents litigation portal (portal.unifiedpatents.com) — check both the litigation caselist and the PTAB/IPR tab for the '056 patent.
  3. USPTO Patent Center / Global Dossier — pull the complete transaction history and the full assignment abstract; a § 315(b)-relevant complaint served on the patent owner would appear in the paper file even if unreported in commercial databases.
  4. ITC EDIS — search Section 337 investigations for the patent number.
  5. FRAP/CAFC docket search — confirm no appeal docket lists it.
  6. Lead worth chasing (flagging, not asserting): the Google Patents record shows a second application, US 08/731,427, filed 1996-10-15, which published as US 5,850,448 — evidently a related continuation in the same family. If a family-wide check is in scope, that patent should be searched independently. I did not search it, and I make no representation about its litigation history.

Bottom line: No litigation involving U.S. Patent No. 5,588,056 is known to me from the sources searched. The absence is corroborated (though not proven) by the patent's expired-lifetime status since 2014-10-25 and its internal-corporate assignment history. I cannot rule out an unreported, previously dismissed, or bare-number-indexed filing, and I'd recommend confirming via Lex Machina/Docket Navigator and the USPTO transaction history before treating this as conclusive.

Generated 9/27/2026, 7:52:26 PM

Proceedings on file (0)

All PTAB activity →

AIA trial proceedings (IPR / PGR / CBM) filed at the USPTO Patent Trial and Appeal Board against this patent. Sourced from the USPTO Open Data Portal and refreshed every six hours; each proceeding number deep-links to the PTAB E2E docket.

No PTAB proceedings on file. This patent has not been challenged via IPR, PGR, or CBM. The absence is itself a signal — well-asserted patents eventually attract IPRs. The LLM analysis below may surface filings the ODP feed hasn’t indexed yet.

PTAB challenges

AIA trial proceedings at the USPTO Patent Trial and Appeal Board — IPR, PGR, and CBM. Petitioners, judge panels, claim-level invalidation outcomes from Final Written Decisions, and Federal Circuit appeals. The single most important defensive datapoint after litigation history.

✓ Generated

PTAB / AIA Trial Analysis — U.S. Patent No. 5,588,056

Patent: US 5,588,056 A — "Method and system for generating pronounceable security passwords"
Inventor: Ravi Ganesan · Original assignee: Bell Atlantic Network Services, Inc. · Current assignee: Verizon Patent and Licensing Inc.
Filed: 1994-10-25 · Granted: 1996-12-24 · Legal status: Expired – Lifetime; anticipated expiration 2014-10-25
Source of record for the above: https://patents.google.com/patent/US5588056/en


Proceedings overview

Total AIA trial proceedings on file: 0 (0 active, 0 with claims invalidated, 0 with claims sustained, 0 settled, 0 institution-denied). The asserted record is empty — the USPTO Open Data Portal returns no IPR/PGR/CBM for US 5,588,056, no web search surfaced any petition, institution decision, Final Written Decision, or Federal Circuit appeal involving this patent number, and the bottom-line defensive posture is therefore not "the patent has survived IPRs and is hardened" and not "the claims have been cancelled" — it is "the patent was never tested at the PTAB and, more importantly, expired on 2014-10-25, so there is nothing left to invalidate that would change your damages exposure."

What I actually verified (and what I could not)

Check Result
USPTO ODP structured "PTAB proceedings on file" block Empty — no AIA trial proceedings
Web search for IPR/PGR/CBM on "5,588,056" / "US5588056" No AIA petition, institution decision, or FWD found
Web search for a Federal Circuit appeal of an FWD on this patent None found
Assertion history in district court / ITC No infringement suit on this patent surfaced in searches

No proceeding-level entries follow, because there are none to describe. I will not manufacture a proceeding number, a panel, or a claim-level outcome. The remainder of this memo explains what the emptiness means and why the "558" hits you will find in searches are almost all the wrong patent.

Do-not-cite list — false positives for "the '558 patent"

This is a real risk in this instance, because the literature is saturated with other '558 patents. If a defendant's invalidity memo cites "the PTAB's treatment of the '558 patent," verify the number first:

None of those is this patent. None of them supplies a PTAB record for US 5,588,056.


Strategic summary

1. Claims status: everything is UNTESTED, and everything is EXPIRED.
No claim of US 5,588,056 has been cancelled, confirmed, or even construed by the PTAB. The published claim set presents independent method claim 1 with dependent claims 13–21 (including claim 13's encryption/decryption step, claim 17's Markov-model derivation, claim 20's private-key application and claim 21's RSA limitation), and a second independent method claim, 22, directed to the categorized-transition-number variant. I did not verify the complete claim count against the printed patent in this pass, so treat any "claims X–Y" statement as unconfirmed until you pull the face page. The dispositive fact is not the claim set but the calendar: per the Google Patents legal-status record, the patent expired 2014-10-25 for failure to pay maintenance fees / end of term. An expired patent cannot be infringed going forward; only pre-expiration conduct is actionable, and under 35 U.S.C. § 286 the damages lookback from today (2026-09-27) reaches only to 2020-09-27 — a window entirely after the patent's death. On those facts, a demand letter citing US 5,588,056 offers a defendant essentially no recoverable-damages theory.

2. Estoppel landscape: inapplicable, and that cuts both ways.
Section 315(e)(2) estoppel attaches only to a petitioner (and its privies/real parties in interest) that obtained an institution decision. There is no IPR/PGR/CBM here, so no party carries § 315(e)(2) estoppel, and no ground has been "used up." Practically, this means a defendant is not blocked by prior PTAB work from running any § 102/§ 103 theory — but it also means there is no knock-out ground already blessed by the Board to borrow. If you nonetheless want an invalidity position for a settlement/leverage posture, the art is unconstrained: the patent's own specification admits the Sandia/Kerberos V generator, the Gasser/NIST generator (GASS77, FIPS92), and the DEC Markov-model generator as prior approaches, and the patent itself frames the invention as an improvement on those. Separately, the inventors' companion paper, Ganesan & Davies, "A New Attack on Random Pronounceable Password Generators," appears in the 17th National Computer Security Conference proceedings dated 1994-10-11 (https://csrc.nist.gov/files/pubs/conference/1994/10/11/proceedings-17th-national-computer-security-confer/final/docs/1994-17th-ncsc-proceedings-vol-1.pdf). Read that date carefully: it is 14 days before the 1994-10-25 filing date, so it is not a pre-AIA § 102(b) statutory bar (the one-year grace period is not met) and it is the inventor's own work — do not build a § 102(b) theory on it. It is useful only as technical/background evidence about the state of the art.

3. Pattern signals: none.
No petitioner filed one IPR, let alone a series; there is no follow-on-petition or General Plastic fact pattern; the patent owner (Bell Atlantic → Verizon Services Corp. → Verizon Patent and Licensing Inc.) never had occasion to defend or appeal at the PTAB, so there is no aggressive PTAB-appeal pattern to model and no defensive aggregator (Unified Patents, RPX, etc.) anywhere in the chain. That is itself the signal: a 1994 password-generation patent that lapsed in 2014 without ever drawing a single AIA challenge was either never commercially asserted, or was asserted only in an era/venue where the IPR route was unattractive. Either way, this is a dead-letter patent, not a hardened one. (For completeness: I did not independently verify the continuation, US 5,850,448 — "Programmed computer for generating pronounceable security passwords," app. 08/731,427, priority 1996-10-15 — for AIA activity in this pass; if a demand letter names the family, that number should be run separately.)


Recommended next steps

  1. If you are a defendant and the demand letter cites US 5,588,056: the lead response is not an IPR petition — it is the date. Pull the Patent Center maintenance-fee and expiration record (https://patentcenter.uspto.gov) and the Google Patents legal-status entry showing "Expired – Lifetime," anticipated expiration 2014-10-25, then compute the § 286 window (2020-09-27 → present). There is no damages period in which the patent was in force, so there is no recoverable royalty. Quote the expiration record, not an FWD — there is no FWD to quote.
  2. If you need an invalidity backup anyway (e.g., for a DJ counterclaim, a fee motion, or license-negotiation leverage), note that no estoppel constrains you. You may use any § 102/§ 103 art. But remember the pre-AIA regime: the on-sale/printed-publication grace period runs from the 1994-10-25 filing date, and the inventors' own Oct. 1994 NIST paper is inside that grace period. Target prior art that predates 1993-10-25 for a § 102(b) theory.
  3. Do not cite any PTAB decision as precedent on this patent. There isn't one. If someone hands you "the '558 PTAB record," it is almost certainly the Matsushita spread-spectrum '558, the Qualcomm '558, or the Penn '558 — all different patents (see the do-not-cite list above). Verify by patent number and title before filing anything.
  4. If a proceeding does surface later: the default sources to re-check are the PTAB E2E / PTAB Decisions portal (https://www.uspto.gov/patents/ptab/decisions), the PTAB API at developer.uspto.gov, and CourtListener (https://www.courtlistener.com) for any CAFC appeal. As of 2026-09-27, none of them shows an AIA trial on US 5,588,056, and I found no basis to represent otherwise.

Caveat on confidence: I am highly confident there are no AIA trials on this patent, based on the empty ODP record plus searches that returned only unrelated '558 patents. I am less certain about full district-court assertion history and about the exact total claim count of the printed patent, neither of which I could fully confirm in this pass; both should be verified before being relied on in a filing.

Generated 9/27/2026, 7:52:44 PM

Ownership chain (3)

Asserters network →

Structured records extracted from the assignment-history narrative below. Each entity links to its full ownership-network profile.

  1. 1994-10-25 · Assignment

    Ravi GanesanBell Atlantic Network Services, Inc.

    acquisition

  2. 2014-04-25 · Change of Name

    Bell Atlantic Network Services, Inc.Verizon Services Corp.

    change of name only

  3. 2014-05-08 · Assignment

    Verizon Services Corp.Verizon Patent and Licensing Inc.

    internal reorg

Assignment history

Inventors, original assignee, and the chain of ownership recorded with the USPTO — including the correspondent attorney who recorded each assignment, since shell-LLC chains often share one repeat-player attorney even when the entity names look unrelated. Surfaces NPE / patent-troll patterns: shell-entity transfers, known asserters in the chain, repeat correspondent fingerprints, pre-litigation assignments, and bankruptcy fire-sales.

✓ Generated

I'll research the assignment record for US 5588056, starting with the USPTO Assignment Center and cross-referencing sources.

Let me search for the specific assignment records and reel/frame numbers.

Let me try to pin down the specific reel/frame numbers and correspondents for the Verizon-related recordings.

I was unable to complete all targeted lookups before hitting the tool-step limit, and — importantly — the authoritative full text provided for this patent records the conveyance types, assignors, assignees, and dates but not the reel/frame numbers or the correspondents of record. I will present what is verified and explicitly mark the gaps rather than fabricate reel/frame data or attorney names.


Inventors

Inventor Employer at time of filing Evidence
Ravi Ganesan (sole inventor) Bell Atlantic Network Services, Inc. The Google Patents legal-events record shows an "ASSIGNMENT OF ASSIGNORS INTEREST" with assignor "GANESAN, RAVI" and assignee Bell Atlantic Network Services, Inc., keyed to the 1994-10-25 filing date — i.e., the inventor assigned to his employer at filing. Confirmed by the patent face (Inventor: Ravi Ganesan; Original Assignee: Bell Atlantic Network Services, Inc.).

Departure pattern — not present. Ganesan did not leave within 12 months. He continued to file Bell Atlantic–lineage applications after the '056 (e.g., US 5,838,792, split-private-key CIP lineage, filed 1994-07-18; US 5,850,448 continuation-in-part, filed 1996-10-15, same assignee). He subsequently surfaced as an inventor on CheckFree-era filings (PR Newswire, "CheckFree Names Ravi Ganesan Vice Chairman," June 20, 2000) and later on SafeMashups / Norcross, GA and Half Moon Bay, CA and San Diego, CA filings — indicating he left the Bell Atlantic/Verizon orbit roughly five to six years post-filing, not within the 12-month window that signals a fire-sale precursor. So the "all inventors departed within 12 months" red flag is absent.


Original assignee

Bell Atlantic Network Services, Inc. — the entity named on the issued patent.

  • Primary line of business: Telecommunications. Bell Atlantic was one of the Regional Bell Operating Companies (a "Baby Bell") formed in the 1984 AT&T divestiture; Bell Atlantic Network Services was its network-services/IP subsidiary.
  • Product embodying the claims: Unclear / likely internal. The patented subject matter is the pronounceable-password generator the inventor's own companion paper calls "BApronounce" ("one of our own design"). There is no evidence in the sources retrieved that BApronounce was ever shipped as a standalone commercial product; it reads as an internal Bell Atlantic security tool. I am not asserting it was uncommercialized — only that I found no commercialization record.
  • Current status: Operating, via successor. Bell Atlantic merged with GTE in 2000 to form Verizon Communications Inc. The assignment chain in the record (Bell Atlantic Network Services → Verizon Services Corp. by change of name → Verizon Patent and Licensing Inc.) is the paper footprint of that corporate succession plus internal IP-holding consolidation. Verizon Communications is an operating, publicly traded company (SEC registrant); its patent-holding arm, Verizon Patent and Licensing Inc., is an internal IP-holding subsidiary, not an assertion vehicle.

Assignment timeline

Gap disclosure: The authoritative record available to me lists the conveyance type, assignor, assignee, and dates for three recordings, but does not include reel/frame numbers or the correspondent of record. I did not obtain reel/frame or correspondent data from Assignment Center in this session, and I will not invent them. The reel/frame and correspondent fields below are marked [not retrieved].

  • 1994-10-25 (executed) / recorded 1994-10-25 — Reel [not retrieved]

    • Conveyance: Assignment of Assignors' Interest
    • Assignor: Ravi Ganesan (sole inventor)
    • Assignee: Bell Atlantic Network Services, Inc.
    • Correspondent: [not retrieved]
    • Context: Acquisition — standard inventor-to-employer assignment of the application at filing.
  • 2014-04-25 (executed) / recorded 2014-04-25 — Reel [not retrieved]

    • Conveyance: Change of Name
    • Assignor: Bell Atlantic Network Services, Inc.
    • Assignee: Verizon Services Corp.
    • Correspondent: [not retrieved] — if the same attorney/firm recurs on the 2014-05-08 recording, that is a corporate-housekeeping tell (routine), not an NPE tell.
    • Context: Change of name only — the recorded paper trail of the Bell Atlantic → Verizon corporate succession (Bell Atlantic merged with GTE in 2000; the change-of-name recording was perfected in 2014).
  • 2014-05-08 (executed) / recorded 2014-05-08 — Reel [not retrieved]

    • Conveyance: Assignment of Assignors' Interest
    • Assignor: Verizon Services Corp.
    • Assignee: Verizon Patent and Licensing Inc.
    • Correspondent: [not retrieved]
    • Context: Internal reorg — transfer of the asset into Verizon's centralized patent-holding subsidiary (same corporate family; not a sale to a third party).

There are no records beyond these three. In particular, there is no transfer to any third-party LLC, no security agreement, no release, and no license recording surfaced.


Timeline diagram

timeline
    title Ownership of US 5588056
    1994 : Filed by Ravi Ganesan
         : Assigned to Bell Atlantic Network Services
    1996 : Patent issued
    2000 : Bell Atlantic merges with GTE to form Verizon
    2014 : Change of name to Verizon Services Corp
         : Assigned to Verizon Patent and Licensing Inc
         : Patent expires

NPE / troll-pattern signals

Threshold caveat up front: the single most diagnostic field for NPE-hunting — the correspondent of record — could not be retrieved for any of the three recordings. Signal 3 is therefore necessarily "unclear," and signals that depend on comparing correspondent addresses across links are weakened. The reel/frame numbers likewise could not be pulled.

# Signal Call Basis
1 Shell-entity transfer Not present Both post-issuance links are to named Verizon corporate entities — Verizon Services Corp. (change of name) and Verizon Patent and Licensing Inc. (internal assignment), 2014-04-25 and 2014-05-08. No "IP/Holdings/Ventures/Licensing LLC" shell with a registered-agent address appears; "Patent and Licensing" is the internal IP-holding arm of an operating company, not a single-purpose assertor. No evidence of a registered-agent service address.
2 Known asserter in the chain Not present No assignee matches the listed NPE directories (Acacia, Marathon, IV, IPNav, Wi-LAN, Mosaid/Conversant, Vringo, Pendrell, Innovatio, MPHJ, Lumen View, Round Rock, Document Generation Corp, Spangenberg entities). Assignees are Bell Atlantic Network Services → Verizon Services Corp. → Verizon Patent and Licensing Inc., all Verizon-family.
3 Repeat correspondent across the chain Unclear Correspondent of record [not retrieved] for all three recordings. Cannot assess recurrence. This is the key unknown; if the same firm appears on the 2014-04-25 and 2014-05-08 recordings, it is expected corporate-housekeeping (Verizon's IP-recording counsel), not an NPE tell.
4 Cascading transfers Not present Two transfers total, both in 2014, both internal to the Verizon family, 13 days apart (04-25 and 05-08). No chain of unrelated LLCs in <24 months.
5 Pre-litigation transfer Not present No infringement suit naming US 5,588,056 was found (consistent with the earlier litigation and PTAB sections of this analysis). The last transfer (2014-05-08) long pre-dates any hypothetical assertion and post-dates the commercial life of the patent.
6 Bankruptcy fire-sale Not present No Chapter 7/11 involving Bell Atlantic/Verizon in connection with this asset; Bell Atlantic was acquired in a merger (GTE), not liquidated.
7 Privateering Not present No transfer to an NPE asserting on Verizon's behalf. Chain runs only into Verizon's own holding subsidiary.
8 Defensive aggregator (anti-NPE) Not present Chain does not terminate at RPX, AST, LOT, Unified Patents, or OIN. It terminates at Verizon Patent and Licensing Inc., an internal operating-company holding entity.

Verdict

Defensive / non-asserting (with the caveat that the terminal entity is an internal corporate IP-holding subsidiary, not a classic defensive aggregator such as RPX or AST).

Justification: The full recorded chain is three links, all Verizon-family: Ganesan → Bell Atlantic Network Services, Inc. (1994-10-25, assignment of assignors' interest); Bell Atlantic Network Services, Inc. → Verizon Services Corp. (2014-04-25, change of name only — the Bell Atlantic→Verizon corporate succession papered up years later); and Verizon Services Corp. → Verizon Patent and Licensing Inc. (2014-05-08, internal assignment into the parent's central IP-holding arm). None of the eight NPE signals is present on the evidence retrieved; the only unassessed signal (repeat correspondent, #3) is blocked by the missing correspondent-of-record data, and even if it resolves to a recurring Verizon IP firm it would merely confirm corporate housekeeping. Combined with the findings in the earlier sections — no litigation, no PTAB proceeding, and expiration on 2014-10-25 — US 5,588,056 reads as an internally held, never-asserted portfolio asset that died in Verizon's patent-holding subsidiary, not an NPE weapon.

Verify at: USPTO Assignment Center — https://assignmentcenter.uspto.gov/ (or the legacy index https://assignment.uspto.gov/patent/index.html), searching by patent number 5588056 / application 08/328,226. Pull the three recordings to capture the reel/frame and correspondent of record fields that are missing from this memo; those are the only material gaps.

Confidence: High that the chain is a three-link, all-Verizon corporate succession with no third-party transfer (the assignment events and dates are corroborated by the Google Patents legal-events record and the assignment-of-interest entry naming Ganesan as assignor). Low/uncertain on reel/frame numbers and correspondents — not retrieved, not inferred. If the Assignment Center shows a fourth recording (e.g., a security agreement or a transfer I did not capture), this verdict should be revisited.

Generated 9/29/2026, 2:22:31 PM

Prior art

Earlier patents, publications, and products that may anticipate or render the claims unpatentable.

✓ Generated

I'll search for the authoritative citation record for US 5,588,056, being careful to distinguish it from the frequently-conflated US 5,850,448.

The Google Patents full text for US5588056 shows no "Patent Citations" section. Let me verify whether the '056 patent has any U.S. patent citations at all, and confirm the front-page reference list.

Key observation: the '056 full text contains no "(56) References Cited" block at all. Let me verify that directly against the front page and the USPTO record, and distinguish it from the '448's citation list.

Citation / Prior-Art Record for US 5,588,056

Reporting limit up front: I hit my tool-call ceiling while trying to pull the printed front page (patentimages US5588056.pdf) and the uspto.report/patent/grant/5588056 page. Everything below is grounded in the authoritative full text you supplied and in the search results I did obtain. I flag the one field I could not close (the '056's own face-page "(56) References Cited" block) rather than reconstruct it.


1. Headline finding: the '056 cites no U.S. patent documents

The authoritative full text of US5588056A you provided contains no "(56) References Cited" block — no "U.S. Patent Documents," no "Foreign Patent Documents," and no "Other Publications" heading. Every reference the patent actually cites is given inline in the specification body, as bracketed literature citations ([GASS77], [FIPS92], [KARN89], [KOHL90]) and as named works (Morris & Thompson 1979; Bellovin & Merritt 1992; the Sandia 7clcpwd.c/7cldpwd.c files).

This matters for your question as framed. You asked me to "look at each patent citation for 5588056." On the record I retrieved, there are none to look at — the '056 is a non-patent-literature citation patent. I am not manufacturing patent numbers to fill that table, and I am expressly not importing the citation list from the same-inventor continuation US 5,850,448, which several search engines conflate with this patent (see §4).

Caveat: I could not open a primary PDF image of the '056 face page to 100 % confirm the absence of a (56) block before my tool budget expired. If you need that airtight, pull https://patentimages.storage.googleapis.com/.../US5588056.pdf (front page) or the USPTO PatentCenter record for 5,588,056 and read the left-hand column. My confidence that the '056 has no U.S. patent-document citations is high, based on the full text rendering no citation block and on the absence of any patent-document hit in searches keyed to the number.


2. References of record (non-patent literature) — the actual cited prior art

These are the works the '056 identifies as the state of the art. Dates are as published; all pre-date the 1994-10-25 filing, so each is § 102(b)/§ 102(a)-eligible except where noted. Pre-AIA § 102/§ 103 governs (never left the pre-AIA regime).

Ref Full citation Publication / filing date Brief description § 102 anticipation of '056 claims?
A Gasser, M., A Random Word Generator for Pronounceable Passwords, NTIS AD A017676 (Mitre MTR-3005) — cited in spec as [GASS77] Nov. 1975 34 "units" (A–Z minus Q, plus CH, GH, PH, RH, SH, WH, QU, CK) each with an English-occurrence probability; a unit table and a digram table encode which units may be juxtaposed; syllables concatenated into a word. No. Teaches probability-weighted selection — the opposite of claim 1's "substantially equal probability." No "transition number = cardinality of the legal-successor set," no threshold-on-trailing-ngram filter.
B FIPS PUB 181, Automated Password Generator, NIST — cited in spec as [FIPS92] Announced 1993-10-05; effective 1994-03-25 Codifies Gasser A; digram table lists legal successors per unit; mandates pronounceable password generation for federal use. No (closest of the set, but still short). The digram table implies a successor count, but FIPS 181 discloses no count-based metric, no equiprobable selection, and no acceptance/rejection threshold on the trailing bigram.
C Karn, P. R. & Feldmeier, D. C., "UNIX Password Security — Ten Years Later," Advances in Cryptology — CRYPTO '89, Springer Verlag, 1990 — cited as [KARN89] 1989/1990 Attack-cost model quantifying the effective search space an attacker must cover; drives the "enlarge the real space" motivation. No. Background/motivation only; discloses no generator architecture.
D Morris, R. & Thompson, K., "Password Security: A Case History," Communications of the ACM 22(11), Nov. 1979 Nov. 1979 Dictionary attack on user-chosen passwords; salting (the "4096" factor the '056 discusses for implementation constant C). No. Relates to attacking/defending stored passwords, not to generating pronounceable ones.
E Kohl, J., Neuman, C. & Steiner, J., "The Kerberos Network Authentication Service (V5)," MIT Project Athena, Draft 3 — cited as [KOHL90] 1990-10-08 Kerberos authentication protocol; password-derived keys, encrypted messages. No as to claims 1/22 (no generator). Relevant only to dependent encryption/decryption limitations (claim 13 family).
F Bellovin, S. & Merritt, M., "Encrypted Key Exchange: Password-Based Protocols Secure Against Dictionary Attacks," IEEE Computer Society Symposium on Security and Privacy, Oakland, CA May 1992 Password-based key-exchange protocol secure against dictionary attack. No as to claims 1/22. Bears only on the dependent "apply the password to encrypt/decrypt" (claim 13) and private-key (claims 20–21) limitations as motivation.
G Sandia Kerberos V distribution, files 7clcpwd.c / 7cldpwd.c (the "Sandia System") Public source distribution, pre-1994 25 pronunciation "templates/buckets" (cvcvcvc, etc.), indexed with uniform probability; a 7-char password drawn randomly within the chosen template; an 8th digit/letter added to inflate the space. No. Uniform indexing of templates is taught, but not (i) bigram→unigram transition-count selection, (ii) equiprobable selection across all bigrams, or (iii) the threshold test on consecutive characters.

(Family-level, from US5,850,448's (56) list — treat as not independently confirmed for the '056.) The '448 front page (retrieved: US5850448.pdf) lists, as Other Publications only: Spafford, "OPUS: Preventing Weak Password Choices," Jun. 1991; Spafford, "Observing Reusable Password Choices," Jul. 31, 1992; Federal Register, vol. 57, no. 174, Sep. 8, 1992, pp. 40895–40896; Smid & Branstad, "The Data Encryption Standard: Past and Future," Proc. IEEE 76(5), May 1988, pp. 550–559; Nagle, "Tell if a Password is Obvious," Nov. 10, 1988; Bellovin & Merritt, "Encrypted Key Exchange…," IEEE, 1992, pp. 72–84; Bishop, "Proactive Password Checking"; Ganesan, R. et al., "Statistical Techniques for Language Recognition: An Empirical Study Using Real and Simulated English," Sep. 28, 1993, pp. 1–48; Feldmeier & Karn, "UNIX Password Security — Ten Years Later"; and "An Introduction and Guide for Cryptoanalysis," Computer Science Technical Report Series, Feb. 1993. This list is the '448's (filed 1996-10-15), not the '056's — I could not verify the '056's own front page. Note that even this list contains no U.S. patent documents; it is entirely printed publications.


3. Where "patent citations" do appear — and why they are not prior art

Two distinct things are easy to conflate with "patent citations":

  • Forward citations ("Cited By"). Late patents list US 5,588,056 (Dec. 24, 1996, Ganesan) in their "Referenced Cited" tables — e.g. Verisign's US 9,910,836 and US 10,102,203 (Justia: patents.justia.com/patent/10102203, showing "5588056 | December 24, 1996 | Ganesan"). These are later patents citing the '056, i.e. evidence of the '056's influence — not prior art against it, and not § 102 references.
  • The '448's own "Referenced Cited." The Justia pages you may hit are for US 5,850,448 ("Programmed computer…"), whose claims are the article-of-manufacture/programmed-computer claims (e.g. '448 claim 1: "An article of manufacture for forming a pronounceable security password…"; '448 claim 22: "A programmed computer…"). Those belong to the continuation-in-part, not to the '056.

4. Number-identity guardrail (literal, per your rule)

I did not auto-correct any identifier. The searches repeatedly returned, under the bare string, unrelated items that must not be attributed to this patent:

  • US Registration No. 5588056 — trademark ("MICAMA," E&E Upholstery, Serial 87735970), not a patent.
  • JP 5588056 A (1983-01-18) — a Japanese publication number.
  • US 5,590,056 — Isogon software-monitoring patent (note the transposition; different patent).
  • US 5,535,276 (Ganesan) — a different Ganesan patent surfaced only as a cited reference in unrelated art (e.g. US 8,630,942).
  • Academic DOIs and product SKUs containing the digit string.

5. Candidate patent prior art the '056 does not cite (for a § 102/§ 103 file, not a citation audit)

If your real need is the strongest patent-document art against the '056 (since the '056 itself cites none), the closest documents — none of them cited on the '056 face — are:

  • EP 0 488 492 A2/A3 (Callas & Piper, assigned to Digital Equipment Corp.; US priority app. 07/620,106 filed 1990-11-30; published 1992-06-03). Rules database trained from a dictionary; output built character-by-character with each next character chosen based on the previous characters. This matches the "DEC system" the '056 criticizes. Potentially relevant to claims 1, 14, 15, 17 (Markov/ngram transition modelling), 22 — but as § 103 art, not § 102 anticipation, because it does not disclose the count-based transition number or the equiprobable-selection + threshold pair.
  • US 5,535,276 (Ganesan) and the family's own US 5,850,448 — same-inventor/family documents; not prior art against the '056 for the overlapping disclosure.

6. § 102 bottom line

On the record retrieved, no cited reference — and no uncited patent document I could identify — anticipates any claim of US 5,588,056 under pre-AIA § 102. The cited art is either (i) probability-weighted generator art (Gasser A, FIPS 181 B, and the '056's own critique of the DEC system), which teach the opposite of claim 1's "substantially equal probability," or (ii) background security literature (C–F) that discloses no pronounceable-password generator architecture at all. The claimed combination — a transition number defined as the cardinality of the legal-successor set, equiprobable selection at both segment levels, and acceptance based on whether trailing consecutive characters correspond to a below-threshold transition number — is not disclosed, in whole, by any reference of record. The citations therefore supply § 103 motivation at most (see the earlier Obviousness section of this analysis), not § 102 anticipation.

Confidence: high that the '056 executes no U.S. patent-document citations and that the listed NPL references are its references of record; moderate on the exact composition of the '056's printed (56) block, which I could not image before the tool limit; high that none of the above anticipates claims 1 or 22. Verify the face page at uspto.report/patent/grant/5,588,056 or PatentCenter before relying on the "no patent citations" statement in a filing.

Generated 9/29/2026, 2:22:24 PM

Obviousness

Combinations of prior art that suggest the claimed invention would have been obvious under 35 U.S.C. § 103.

✓ Generated

I'll ground this § 103 analysis in the actual cited prior art and analogous art. Let me pull the front-page references and the closest known-generator art.

Let me pin down the patent's own front-page prior-art-of-record and the pre-1994 pronounceable-password generator art.

Let me check for U.S. patent prior art on pronounceable-password generation and confirm the Ganesan/Davies paper's status.

Obviousness Analysis — U.S. Patent No. 5,588,056 under 35 U.S.C. § 103

Posture note (important). This is a hypothetical/defensive § 103 analysis. Per the earlier sections of this page, the '056 patent issued 1996‑12‑24, expired for failure to pay maintenance ("Expired – Lifetime," anticipated expiration 1994‑10‑25 + 20 yrs = 2014‑10‑25), and I found no litigation, IPR, PGR, CBM, ITC § 337, or CAFC docket naming it. There is therefore no live validity contest to which this analysis attaches; it is useful only for portfolio diligence, freedom‑to‑operate history, or academic review. (Small housekeeping flag: the task header says "Current Date: April 26, 2026" while the system date is 2026‑09‑27. Nothing in this analysis turns on which is correct.)


1. Framework and the correct § 103 vintage

The application was filed 1994‑10‑25 and never left the pre‑AIA regime; validity is governed by pre‑AIA 35 U.S.C. § 103(a) with pre‑AIA § 102 for reference qualification. The Graham v. John Deere factors apply, and KSR Int'l v. Teleflex (2007) governs the legal standard for pre‑AIA patents as well — no rigid teaching‑specification‑or‑suggestion requirement, and "a court must ask whether the improvement is more than the predictable use of prior art elements according to their established functions." KSR, 550 U.S. 398, 417 (2007). Secondary considerations are only reached if a prima facie case is made; I found no evidence of record in the sources searched of unexpected results, commercial success, licensing, or industry praise, and the patent's own specification offers no comparative test data beyond the security math in the Background.

Level of ordinary skill in the art (POSITA). A POSITA here would hold a bachelor's degree in CS/EE (or equivalent) plus ~2 years in computer/network security, or a master's plus ~1 year — i.e., someone conversant with UNIX /etc/passwd and crypt(3), Kerberos V, DES, dictionary‑attack literature, and elementary Markov/ngram modeling of text. This is a modest level of skill; the relevant art is authentication/password generation, and the analogous art includes text‑generation and language‑modeling literature (the patent itself treats the DEC language-model generator and the Gasser linguistics-derived generator as the closest art).

Key constructions used below:

  • "Transition number" — claim 1 defines it functionally: the count of distinct second word segment portions in the associated set. It is a cardinality, not a probability. This distinction is the crux of the whole case.
  • "Substantially equal probability" — uniform random selection; the specification defines it as "the selection is of substantially equal probability."
  • "Pronounceable word segment" — a syllable-like string; subjective, as the specification concedes.

2. The prior art set

# Reference Status What it teaches
A Gasser, M., A Random Word Generator for Pronounceable Passwords, NTIS AD A017676 (Nov. 1975) — cited in the '056 spec as [GASS77] (OSTI copy) § 102(b) printed publication Unit table + digram table; pronounceability encoded as legality rules between adjacent units; concatenates syllables into a word.
B FIPS PUB 181, Automated Password Generator (announced 1993‑10‑05; effective 1994‑03‑25) (NIST) § 102(b) printed publication; arguably also § 102(a) as of its effective date Codifies A. Per‑unit legal‑successor lists in the digram table; the "unit table … is identical to that furnished in [A]." Government‑mandated for federal pronounceable password generation.
C Gasser's own variant, described in A/B and conceded by the '056 specification: generate passwords "completely at random," pass them through the generator as a filter, so the probability a user draws from a bucket equals ** bucket /K**
D EP 0 488 492 A2/A3, Callas & Piper (assigned to Digital Equipment Corp., Maynard MA), filed 1991‑06‑12, priority US 07/620,106, 1990‑11‑30, published 1992‑06‑03 (EPO) § 102(a)/(b) — US‑priority foreign publication >1 yr before filing "Random character generator": builds a rules database from a dictionary, then constructs output character‑by‑character, each new character chosen from the rules database based on the previous characters — i.e., a transition model. This is almost certainly the "DEC system" the '056 spec criticizes at col. 3.
E IBM Technical Disclosure Bulletin, vol. 27, no. 8, Jan. 1985, pp. 4786‑4787, "Easily Remembered Passphrases"; and vol. 26, no. 6, Nov. 1983, pp. 2831‑2833, "Compressed Dictionary for Word Verification" (both cited in D's search report) § 102(b) Pronounceable/memorable multi‑word credential construction from a compact dictionary structure.
F Jobusch & Oldehoeft, "A Survey of Password Mechanisms: Weaknesses and Potential Improvements, Part 2," Computers & Security, no. 8, Dec. 1989, pp. 675‑689 § 102(b) Survey framing the field: password‑space size, generator weaknesses, and improvement strategies — supplies motivation/context.
G Morris & Thompson, "Password Security: A Case History," CACM 22(11), Nov. 1979 (cited in the '056 spec) § 102(b) Dictionary attack on generator/user‑chosen passwords; salting (the "4096" factor the patent discusses).
H Feldmeier & Karn, "UNIX Password Security — Ten Years Later," CRYPTO '89 (cited in the '056 spec) § 102(b) Attack cost model; quantifies how large an effective password space must be; expressly motivates enlarging the actual search space the attacker must cover.
I Sandia Kerberos‑V files 7clcpwd.c / 7cldpwd.c (cited in the '056 spec) § 102(a)/(b) public use/printed publication 25 templates ("buckets") indexed with uniform probability; random password drawn within the chosen template.
J Bishop, "Proactive Password Checking" (Aug. 1992); Spafford, "OPUS" (Jun. 1991) and "Observing Reusable Password Choices" (1992) § 102(b) The field's recognized problem: bad/guessable passwords; motivates stronger generators.
K Bellovin & Merritt, "Encrypted Key Exchange," IEEE S&P, May 1992; Kohl/Neuman/Steiner, "The Kerberos Network Authentication Service" (1990‑10‑08) — both cited in the '056 spec § 102(b) Applying a password to encrypt/decrypt messages and to password‑based key exchange (EKE) — directly on the dependent‑claim applications.
L Ganesan & Davies, "A New Attack on Random Pronounceable Password Generators," 17th National Computer Security Conference, Oct. 1994 (NIST/CSRC PDF) Likely NOT prior art — see §6 States Criteria 1–5 (verbatim to the '056 Background) and, in "option 5," proposes: "Instead of picking units according to their probability of occurrence in English, pick units with a uniform distribution (i.e. each of the 34 units has a 1/34 probability of being picked). Since the rules of pronunciation are determined by the digram tables, this will not affect the pronounceability of the resulting passwords."

3. Ground 1 — Claims 1, 13–19 obvious over B (FIPS 181/Gasser) + D (DEC/EP 0 488 492) + H

Claim‑chart for claim 1:

Claim 1 element Where taught / why obvious
"plurality of first word segment portions, each having at least one character" B: the "units" (A–Z minus Q, plus CH, GH, PH, RH, SH, WH, QU, CK) and, in the digram table, pairs of units — bigram‑equivalents. D: character/ngram states in the rules database.
"associated set of second word segment portions … combinable with the associated first … to form a pronounceable word segment" B's digram table "contains one entry for every pair of units, whether that pair is allowed or not" — i.e., for each leading unit/ngram, a set of legal followers that yields a pronounceable sequence.
"transition number corresponding to the number of said second word segment portions within the associated set" Inherent in B. Because the digram table enumerates the legal followers of each unit, its row length is the count. Merely counting the entries is a routine data‑processing step with no new function — the classic KSR "predictable variation." D's rules database likewise stores a per‑state successor list.
"selecting a first one of said plurality … of substantially equal probability" C — Gasser's random‑generate‑and‑filter variant makes unit selection (and therefore bucket draw probability) uniform; I (Sandia) indexes the 25 templates with uniform probability.
"selecting a first one of said plurality of second word segment portions … of substantially equal probability" B's operator chooses uniformly among the legal successors of the current unit; D likewise selects among permitted next characters.
"combining … to form a first pronounceable word segment" B: "forming pronounceable syllables and concatenating them."
"generating … only if consecutive characters … fail to correspond to … first word segment portions having a transition number less than a threshold" The filter step is C's explicit teaching (randomly generated candidates are run through the generator as a filter and rejected unless they satisfy the rules). Quantifying "how permissive" a state is (its transition count) and rejecting low‑count states is the predictable mechanization of C's filter using the count that B/D already imply.

Motivation to combine (KSR rationales):

  1. Same field, same problem, same solution shape. A, B and D are all pronounceable‑password generators; B is the federal standard derived from A; D is a commercial rules‑database generator in the same art. Combination is the design incentive rationale.
  2. Art‑recognized deficiency. H (Feldmeier & Karn, cited on the face of the '056 patent) quantifies that a pronounceable generator's effective search space, not its nominal space, governs security. Gasser himself (per the '056's own characterization) articulated Criterion 2 (most‑probable passwords should be rare) and Criterion 3 (all passwords roughly equally probable) — the very goal claim 1's equiprobable selections pursue.
  3. C already supplies the uniformization. The '056 specification admits Gasser's variant "generates the passwords completely at random" so that "the probability of selecting from a particular bucket … [is] the ratio of the size of the bucket to the total size." A POSITA seeking to satisfy Gasser's Criterion 3 would apply exactly this.
  4. Predictable engineering. Replacing a probability‑weighted selection with a uniform selection is a substitution of one known selection scheme for another with the expected result (removal of frequency skew) — a "predictable variation."

Assessment: Strong as to the equiprobable‑selection limitations; moderate as to the count‑based threshold limitation. Ground 1 is the cleanest available attack on claim 1, but it depends on the inference that a POSITA would derive a cardinality metric from the digram table rather than a binary legal/illegal flag — because B's table is binary. Expect the patent owner to press that gap (see §7).


4. Ground 2 — Claim 22 and claims 23–32 obvious over C (Gasser variant) + D/A and/or I

Claim 22 adds only: categorizing first word segment portions into ≥2 categories by transition number; identifying a selection category at or above a threshold; selecting uniformly within the category; and the same "non‑selection category" filter.

  • Categorization by count is the same counting step as Ground 1, plus a binning step. Binning numeric values into ranges (the patent's own three bins: >15, 5–15, <5) is the definition of routine engineering.
  • The '056 specification itself concedes the bucket framing is old: it describes the Sandia system's "25 templates i.e. buckets," each selected with equal probability, and Gasser's 34 "units," and quotes Gasser's Criterion 3. It then admits the invention's own "Criterion 5" is a statement of a general property, not a structure.
  • I (Sandia) teaches uniform bucket selection; E/F teach the multi‑part memorable credential; D teaches the transition‑table substrate.
  • Claim 23 (selection‑category transition numbers > non‑selection) is a pure result‑effective‑variable limitation: it claims the consequence of choosing the category as the patent's own spec defines it.

Assessment: Moderate.* Claim 22 adds little physical structure over claim 1; its main added limitation is a threshold‑based categorization that a POSITA would implement once the counting metric exists.


5. Ground 3 — Dependent claims

Claim Content § 103 basis
13 Apply password to encrypt/decrypt a message K (EKE; Kerberos) — password‑based encryption is the field's purpose.
14 First portion = bigram or trigram B (digram table), D (n‑gram states).
15 Second portion = unigram B (unit table: single alphabetic characters).
16 Characters are alphabet letters A/B — inherent.
17 Transition numbers derived using a Markov model D (rules database built from a dictionary, character‑by‑character selection conditioned on prior characters = Markov/ngram model); A/B (digram tables are a first‑order Markov legality matrix). Also Ganesan et al., Statistical Techniques for Language Recognition (1993‑09‑28), on the family's own (56) list, shows Markov modeling of English was well within the art.
18 Password ≥ 8 characters B (FIPS 181 targets 8–10 char passwords); I (8‑char Sandia output); H (length for key space).
19 ≥6 characters from the second portions Mere degree/configuration of the same combination.
20–21 Password forms part of a private key of a cryptosystem, RSA type RSA was 16 years old and ubiquitous; K teaches password→key derivation. Straightforward application, no new structure.

Assessment: Strong. Dependent claims 13–21 are near‑certainly obvious over Ground 1 + K.


6. The decisive disqualification — and it cuts against the analysis, not for it

Reference L (Ganesan & Davies, NCSC Oct. 1994) is the closest thing to an anticipatory disclosure in existence: it states the patent's entire Background (Criteria 1–5 nearly verbatim) and proposes the very fix. But it is almost certainly not prior art:

  • It was published October 11–14, 1994, eleven to fourteen days before the October 25, 1994 filing date.
  • It is co‑authored by the inventor, Ravi Ganesan. Under pre‑AIA § 102(a), a reference must be the work "of another"; a publication co‑authored by the applicant is generally not "by others" as to the applicant's own contribution. Under § 102(b), an applicant's own publication within the one‑year grace period is excluded.
  • Its internal cross‑reference [4], Ganesan, "BApronounce: A New Random Pronounceable Password Generator," is expressly "one of our own design" — i.e., the '056 patent is the BApronounce system reduced to claims.

Consequence: the single most potent § 103/§ 102 reference is self‑disclosed. If, however, an adversary can prove that the claimed subject matter (the count‑based metric and threshold selection, as opposed to the general goal) was contributed by Davies rather than Ganesan, the § 102(a) "by others" analysis could flip for those claims — and then L becomes a devastating § 103 (indeed § 102(a)) reference. This is the highest‑value unexplored line, and it requires the inventorship/contribution record and the prosecution history, which I have not obtained.

(Separately, a pre‑AIA § 102(b) public‑use/on‑sale theory exists if BApronounce was deployed at Bell Atlantic more than one year before 1994‑10‑25 — but any such use is the applicant's own and is excluded only if non‑public/experimental. I have no evidence either way and do not assert it.)


7. Where the obviousness case genuinely falls short (candid counter‑analysis)

I would not call claim 1 clearly obvious on A/B/C/D alone, for these reasons:

  1. The metric is a count, not a legality flag. A and B teach a binary digram table (legal/illegal). B "contains one entry for every pair of units, whether that pair is allowed or not." The '056's "transition number" as a cardinality of the legal‑successor set — and the insight that this cardinality is the size of the bucket an attacker must search — is not plainly in A, B, or D. The patent's own Background says of the DEC system that it "suffers from the smallest bucket attacks," i.e., DEC did not appreciate the counting metric.
  2. The motivation may be the inventor's own. The "smallest‑bucket"/Criterion 5 framing appears to originate in the applicant's own 1994 paper. Motivation "in the art" is what counts for § 103; if the only place the counting insight appears is the inventor's own pre‑filing publication, a court could find the art did not supply the motivation. Gasser's Criterion 3 helps, but it is a goal, not a mechanism.
  3. The threshold‑on‑the‑trailing‑ngram filter is specific. Claim 1(e) requires rejection when consecutive characters correspond to a first portion below a threshold. C filters on pronounceability rules, not on a cardinality threshold. Bridging that requires an inference.
  4. No secondary considerations evidence either way. The patent's claims were narrow and its product (BApronounce) may or may not have been adopted — I have no evidence.

Net: the strongest defensible position is that claims 1 and 22 are obvious as a matter of KSR predictable variation, with the equiprobable‑selection element squarely anticipated by admission (C), and the count metric supplied by routine counting of B's digram table. I rate this moderately strong — perhaps 55–65% likely to prevail in an IPR‑style forum with a good expert declaration, and materially weaker without the count‑metric bridge spelled out. I would not represent it as a certainty.


8. Cross‑reference updates and corrections to the earlier sections of this page

  1. Claim set extends further than previously stated. The earlier "Patent summary" reported claims "at least through claim 30." Full‑text mirrors retrieved in this session show claims 31 and 32 ("A method for forming a pronounceable security password according to claim 30, further comprising the steps: … combining said third selected first word segment portion and said third selected second word segment portion to form a substitute second pronounceable word segment …"), plus "32. A method for forming a pronounceable security…". The claim set therefore runs at least through claim 32; whether 32 is terminal is still unconfirmed (no independent system claim is visible in the '056 — consistent with the earlier finding).
  2. The related patent is a CIP, not a bare continuation. US5850448's own text states: "This application is a continuation‑in‑part of application Ser. No. 08/328,226, filed Oct. 25, 1994, now U.S. Pat. No. 5,586,056." The earlier sections described it as a "related continuation." The CIP characterization matters for § 103/§ 112: CIP‑added claims (visible up to at least claim 36 in the '448, e.g., "A programmed computer … according to claim 36") carry the 1996‑10‑15 date, and the '448's new matter is not supported in the '056.
  3. The (56) references list I retrieved is the '448's, not independently confirmed as the '056's. It is reproduced from the US5850448 PDF front page and includes Spafford (OPUS; "Observing Reusable Password Choices"), the Federal Register notice of 1992‑09‑08, Smid & Branstad ("The Data Encryption Standard: Past and Future"), Nagle ("Tell if a Password is Obvious"), Bishop, Ganesan et al. ("Statistical Techniques for Language Recognition," 1993‑09‑28), and Feldmeier & Karn. I could not separately verify the '056's own front‑page list from a primary image. Treat the "Feldmeier & Karn" and "Morris & Thompson" citations as confirmed (they appear in the '056 specification body), and the rest as family‑level.
  4. The "DEC system" is now identified to a reference. The '056 spec never names it. EP 0 488 492 A2/A3 (Callas & Piper, DEC; US priority 07/620,106, 1990‑11‑30; published 1992‑06‑03) matches the spec's description of the DEC system (Markov/rules‑database training from a dictionary; character‑by‑character generation conditioned on prior characters; information‑content stopping criterion). I did not confirm the corresponding US patent number; I deliberately do not guess it, and it should be verified before being named in any filing.
  5. Litigation: nothing new; consistent with the earlier "no litigation identified" conclusion.

9. Bottom line

  • Claim 1: Obvious under § 103 over FIPS 181/Gasser (A+B) in view of DEC/EP 0 488 492 (D) and Feldmeier & Karn (H), with the equiprobable‑selection limitations supplied by Gasser's admitted random‑generate‑and‑filter variant (C) and Sandia's uniform template indexing (I). The count‑based "transition number" limitation is the weak link and must be argued as routine quantification of the digram table.
  • Claim 22 and 23–32: Obvious on the same record once counting is assumed; claim 23 is a result‑effective‑variable limitation.
  • Claims 13–21: Obvious over the same grounds plus Bellovin & Merritt / Kerberos (K) and the conventionality of RSA.
  • Biggest risk to the theory: the only reference that expressly teaches the claimed insight (Ganesan & Davies 1994) is the inventor's own work and therefore almost certainly disqualified as prior art. Everything turns on the contribution question (Ganesan vs. Davies) and therefore on documentation I have not seen: the '056 prosecution history (Office Actions and reasons for allowance) and USPTO PatentCenter/Assignment records.

Confidence: high on reference content and dates (§§1–5), high on the § 102(b)/§ 102(a) self‑disclosure disqualification of reference L, low‑to‑moderate on the ultimate § 103 conclusion as to claim 1's counting/threshold limitations. I have flagged rather than resolved the two open items — the '056's authoritative (56) list and its term of claims — rather than filling them by inference.

Generated 9/27/2026, 7:53:37 PM

Extensions

Patent term adjustments, term extensions, continuations, divisionals, family members, and expiration dates.

Log in to generate
Not generated yet. Log in to request this analysis.

Derivative works

Defensive disclosure: derivative variations of each claim designed to render future incremental improvements obvious or non-novel.

Log in to generate
Not generated yet. Log in to request this analysis.

Keep exploring

Other patents in Software Technology & Computing Systems (T)

See all Software Technology & Computing Systems (T) patents →