Bonum Certa Men Certa

Guest Post: Watch Out for “Patented API” Traps, by Jose X

The Trap in a Nutshell



A patented API is short-hand for saying that an API (a software interface) is defined to parallel a patent so that using the API to build applications creates patented material unavoidably.



This is a trap API. Use it, and infringe.

The story:

Q: Can I "work around" the patent? Q: Can I re-implement the API libraries so as not to have to redesign and recode all apps? Q: Can I map or translate the app automatically into something safe?

A: In general, no, you can't, if the trap is a good one.

This covers the trap in a nutshell.

[The disclaimer: I am not a lawyer, and I have never written a patent application. But.. I do know how software works, and I have developed more than just half a clue about how patents work (in the US).]

Further Basic Discussion



For those that want a little more explanation, we have this link.

..as well as a hypothetical "Tetris" Patent Trap example.

Visual Basic function



"Tetris" Patent Trap



Patent Tetris Patent CoolDraw API Tetris API CoolDraw

We have two patents and two API. One patent and one API are high-level (Tetris). The other patent and API are low-level (CoolDraw). The high-level patent and high-level API are designed together as a trap as mentioned above. Ditto for the low level ones.

Let's look at a few more details on the patents and on the APIs. Then, we'll cover the four main scenarios. Do note the interplay of high-level with low-level. When the levels are the same (and matching), we have stepped onto the trap.

-- Patent Tetris: patents any tetris like game.

-- Patent CoolDraw: patents a cool way to draw on the screen from computer memory.

-- API Tetris: a createTetris function produces a tetris game when you input things like block size, colors, number of rows, time, etc.

-- API CoolDraw: a doCoolDraw function uses a cool algorithm to move values onto the screen.

Case 1: -- Patent Tetris -- API Tetris.

In this scenario, if we use API Tetris within our app so that a tetris game is created, we violate Patent Tetris, guaranteed.

Case 2: -- Patent Tetris -- API CoolDraw.

In this scenario, if we use API CoolDraw within our app so that we draw to the screen, we do not violate Patent Tetris unless we write a lot more code so as to create our own tetris game. It would take many lines of code to violate Patent Tetris.

Case 3: -- Patent CoolDraw -- API Tetris.

In this scenario, if we use API Tetris within our app so that a tetris game is created, we may violate Patent CoolDraw ..or not. It depends on how API Tetris was implemented. Does createTetris write to the screen the way described by Patent CoolDraw?

Case 4: -- Patent CoolDraw -- API CoolDraw.

In this scenario, if we use API CoolDraw within our app so that we draw to the screen, we violate Patent CoolDraw, guaranteed.

Quick Analysis

Case 1 (and Case 4) patent and API are at the same level (and matching). This is a trap. To avoid infringement, you have to redesign and re-code the application using a different API.

Case 2 is the case when people consider "working around" the patent. It's an odd event. You have to write many lines of code in order to possibly be infringing. If you are, you then try to code around it, perhaps by building something a little different than tetris. [In general, avoid infringement by make sure some of the properties of the patent claim are not met.]

Case 3 is the case where if a violation were to exist in the API implementation, you can try to re-implement the libraries and this way avoid re-implementing each and every single app as would be required for Cases 1 and 4.

The reason Case 3 allows you to re-implement the libraries and avoid re-coding up every application is fundamentally because you can re-implement the API but keep fixed the same interfaces and specifications enshrined in the API contract and assumed by the applications. This is not possible in Case 1 and Case 4 because any re-implementation of the same specification, for these cases, will infringe in the same exact way as with the original implementation since it's the specification itself (not any implementation of any part of it) that parallels the patent.

The reason Case 2 does not result in automatic infringement as happens with Case 1 and Case 4 is that the API interface and patent requirements don't match. It's that simple. Case 2 is where the application could possibly end up violating if you code enough with that API or with another. The Case 2 patent is high-level while the API is low-level. Case 3 is different in that the patent is low-level while the API is high-level; thus, Case 3 contrasts with Case 2 because in Case 3 the potential violations would not happen within the application (as with Case 2) but rather within the library.

In short, Case 1 and Case 4 are the only cases (of the four) where any API usage, by definition, specifies that the application will acquire all the properties of the matching patent claim. These are the traps.

Random APIs will not shadow any given patent as occurred in Case 1 and in Case 4. Developers normally would not have to worry. They can expect a Case 2 or a Case 3, if anything. However, Case 1 and Case 4 can be designed on purpose when the patent author and API designer are the same entity. Why would this author create this trap for developers? Well...

-- The patent author is determined to file lawsuits as necessary (maybe via proxies) in order to slow down many and/or key competing applications (eg, FOSS applications).

“You can be given a patent license and even GPL code for the core API, but not for the patented API extensions.”If you are using an API designed by such a vendor (regardless of who implemented the libraries), beware. I see lots of redesigning and re-coding in your future, just to get back to the same point (on a per app basis). Remember that the patent might still be in the pipeline, have been sold to a proxy, or have been developed through a partnership under a different company or alias.

The above nutshell and sample analysis omit many details. There are many corner cases and things are not cut and dried. In a second article to follow (possibly), we will look closer into many details of the trap scenario.

Finally, there is a more insidious trap that exists. You can be given a patent license and even GPL code for the core API, but not for the patented API extensions. You may then find that you can create only simple applications safely (with that core API), even if you decide not to use the patented extension API but build your own. This is more insidious because the patent and copyright licenses given for the core API give the illusion of safety (a green light to proliferate), and is insidious and dangerous all the more so since you might purposely avoid the patented extensions. The trap happens if you use the "safe" core with any extension whatsoever (since the extended patented properties can be very general in nature). The details of this extended insidious trap may form the subject of a third article later on. It's also described further here. ⬆

Comments

Recent Techrights' Posts

Brigading Against Women - Part X - When Actions of American Men Are Not Judged by Other American Men
"There is not the slightest suggestion that either Dr or Mrs Schestowitz did anything to invite or deserve it. They are both clearly and justifiably angered, dismayed, distressed and hurt by it."
European Patent Office (EPO) Series: A Source of Pride for Portugal?
In this part our focus returns to the main theme of this series, namely the current reappointment campaign of the EPO President, as we consider whether Campinos can still expect to enjoy the same level of support from the Portuguese political establishment as he did during the earlier stages of his career
Computers Freeze Because of UEFI Restricted Boot
damage is also done to computers running Windows
Linux Has Conquered Mobile, But Desktops and Laptops Matter More
When people say the desktop "doesn't matter" they seem to be missing the point that workplaces use desktops (or laptops) and a lot of the work gets done not on skinnerboxes but "workstations" or terminals
Brigading Against Women - Part VIII - Misogyny Embedded; Like Firm, Like Clients
It's about back doors
Microsoft Can PIP Workers (Silent Layoffs) Until Almost Nobody is Left
Microsoft is gradually vanishing
Tech Labeled "Smart" Does Not Make People Smart
People who insist on making everything digital are not advancing progress
 
Links 29/09/2026: Acceleration, Morale, and ROOPHLOCH 2026
Links for the day
Links 29/09/2026: "Scam Altman Is Driving Drunk" and Anthropic Lies About Slop Usage
Links for the day
It is Very Expensive to Slow Down Techrights
Garrett's expensive hearing (costing the British taxpayers about 120,000 pounds; he doesn't live here and does not pay tax here) slowed us down for a few days, but we've picked up the pace since
Brigading Against Women - Part IX - "What Are You, a Racist?"
Because behind every strong man is a strong opinion?
Gemini Links 29/09/2026: "Digital Sabbath", Starting a GemCapsule, and Sterrenkijker 1.1.0
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 28, 2026
IRC logs for Monday, September 28, 2026
Chaos Imminent at Red Hat (This Week)
IBM is 'finishing the job' an ex-IBMer (Ron Hovsepian) did at Novell.
The Cyber Show Says Truth Always Requires a Fight, a Struggle
"Truth-tellers always face struggle and run risk"
Maladministration at the EPO as a Crisis for the EU and for Portugal's Image in Europe
Some time soon we'll publish a long article about what EPO leadership means to Portugal
3 Years of UK Hosting
We commend the webhost for standing firm in the face of misogyny
Gemini Links 28/09/2026: Truncated Sleep, Plain Text, and Slop Problem Kept Out of Geminispace
Links for the day
Links 28/09/2026: "A Growing North Korea Problem" and Independent Journalism as a Lifeline
Links for the day
Links 28/09/2026: Microsoft Chatbot "Giving Extremely Specific Advice to a School Shooter on How to Maximize Casualties", ‘Suicidal Empathy’
Links for the day
Microsoft's Attacks on Courts in the Netherlands Result in GNU/Linux Growing to About 10% There
One core issue that justified this and led to this outcome is Microsoft's interference with the administration of justice
They Create the Conditions for People to Leave, This Way They Don't Call it "Layoffs"
We keep seeing many stories like these
Gemini Links 28/09/2026: Wildfire, DOS, and Backups
Links for the day
Brigading Against Women - Part VII - 'Trolling' Courts and Legal Systems in America and in the UK (Europe) Costs a Lot to Taxpayers
They only attend hearings after being arrested
European Patent Office (EPO) Series: The Portuguese Talent For Bureaucratic Empire Building
Portugal’s success in securing senior executive appointments at the EUIPO and the EPO is a notable example of how countries seek to strengthen their influence within European intergovernmental institutions
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 27, 2026
IRC logs for Sunday, September 27, 2026
Gemini Links 27/09/2026: Writing Well, Productivity, and a Relaunch in Geminispace
Links for the day
Making This Site More Useful to More People
Search engines (as a concept) are under attack
Exposing Crimes of Americans (From the UK)
We must ensure UK prisons are never misused to punish/silence people who expose crimes in America
Spam and Chatbot Spam in Internet Relay Chat (IRC)
Maintaining one's own IRC network requires some housekeeping, but it's simpler than outsourcing to malicious companies
Search Engine of Techrights Improved for Better Signal-to-Noise Ratio
Our growing community needs more search facilities
Microsoft: We Love Layoffs, We Do Silent Layoffs, More Microsoft Projects/Teams/Studios Confirmed to be Shutting Down
XBox is dying. Piece by piece.
Brigading Against Women - Part VI - On Garrett and Lozza, Defamation, Attempts to Crack My Wife's Accounts, Social Engineering to Try to Take Sites Offline, Subscribing Us to Mountains of SPAM
tried swatting us
Links 27/09/2026: "Provost of Dartmouth Busted Using Hey Hi (AI) Slop for His Own Writing in Newspapers and Academic Journals" and "UK Government Enforcement Reform"
Links for the day
People and Sites Wish a Happy 43th Birthday to GNU (Today)
We've collected some examples
Dejan Panovski Outs linuxize.com as a Slopfarm, Another Site That Sold Out and Became LLM Garbage
From what we can gather, both images and text are slop
A Microsoft Lunduke OS (LCOS) is Not Even in Top 100 in DistroWatch, Microsoft Lunduke Just Games the Numbers Like Linspire Did (and Got 'Banned' for It)
Linspire used to send people to 'its' DistroWatch page to make the illusion of popularity
Links 27/09/2026: Microsoft Fired People a Day After Promotion, "Fragility of Online Journalism"
Links for the day
Brigading Against Women - Part V - SWATTING, Extortion Against Webhosts, and Lawfare Under Sworn Oath (Perjury Also)
Matthew Garrett has no qualm about still collaborating with Lozza
20 Years Later
There's a strong anti-democracy movement brewing in many places
Gemini Links 27/09/2026: Telescopes/Gskyer, Writing for Writing's Sake, and Writing Tools
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 26, 2026
IRC logs for Saturday, September 26, 2026