Court affirms patent ruling in BT Americas v. Palo Alto Networks

The United States Court of Appeals for the Federal Circuit has upheld a ruling that affects the cybersecurity industry, specifically regarding a patent owned by Palo Alto Networks, Inc. The court's decision, made on October 29, 2026, confirmed that claims 1-25 of U.S. Patent No. 7,895,641 are unpatentable due to obviousness. This ruling comes as a significant development for both companies involved and the broader tech community.

The case, BT Americas, Inc. v. Palo Alto Networks, Inc. (Docket No. 25-1572), centers around a patent that outlines a system for dynamic network intrusion monitoring, detection, and response. The ruling has implications for how cybersecurity technologies are developed and protected under patent law.

BT Americas (BTA) initiated the dispute by filing an inter partes review petition challenging the validity of the patent held by Palo Alto Networks (PAN). The Patent Trial and Appeal Board (PTAB) ruled in favor of PAN, stating that the claims were unpatentable under 35 U.S.C. § 103 due to obviousness. BTA then appealed this decision to the Federal Circuit, seeking to overturn the PTAB's ruling.

The patent in question, the '641 patent, addresses a common issue in cybersecurity: the difficulty system administrators face in monitoring large volumes of audit information for potential attacks. The patent describes a system that utilizes probes to collect and analyze data dynamically, allowing for timely responses to security threats. The key claims under dispute involve the ability of the system to modify its analysis capabilities based on real-time feedback.

During the appeal, BTA argued that the PTAB erred in its decision by asserting that the prior art references, specifically U.S. Patent No. 5,884,033 (Duvall) and a publication by Yang-hua Chu, did not teach the claimed dynamic modification capabilities. However, the Federal Circuit found that the PTAB's conclusions were supported by substantial evidence.

The court ruled, "The Board found that Duvall’s system is 'not only at least capable of, but configured to, perform dynamic modification via online editing.'"

The court noted that the PTAB had reasonably credited expert testimony indicating that the modifications to Duvall's database could indeed dynamically alter the analysis capability of the probe during operation. This finding was pivotal in affirming the PTAB's decision.

Additionally, the court addressed BTA's concerns regarding the analysis performed at a secure operations center (SOC), which was part of the dependent claim 6. The court concluded that the PTAB had adequately identified the necessary components of the analysis at the SOC, dismissing BTA's arguments to the contrary.

Another point of contention for BTA was the jurisdiction of the PTAB over the '641 patent, which had expired before the petition was filed. The court reaffirmed its previous ruling in Apple Inc. v. Gesture Technology Partners, which stated that expired patents can still implicate public rights, thus allowing the PTAB to exercise jurisdiction.

In summary, the Federal Circuit upheld the PTAB's ruling that the claims of the '641 patent were unpatentable due to obviousness. This decision reinforces the standards for patentability in the tech industry, particularly in the field of cybersecurity.

The ruling has significant implications for Palo Alto Networks, as it may affect their competitive edge in the market. For BT Americas, the outcome represents a setback in their efforts to challenge the validity of the patent. The case highlights the ongoing challenges companies face in navigating patent law and the importance of robust patent protections in the tech sector.

Looking ahead, it is unclear whether BTA will seek further appeal options, including a possible review by the Supreme Court. As of now, no related cases are pending that directly connect to this ruling.