Bonum Certa Men Certa

Guest Post: Watch Out for “Patented API” Traps, by Jose X

The Trap in a Nutshell



A patented API is short-hand for saying that an API (a software interface) is defined to parallel a patent so that using the API to build applications creates patented material unavoidably.



This is a trap API. Use it, and infringe.

The story:

Q: Can I "work around" the patent? Q: Can I re-implement the API libraries so as not to have to redesign and recode all apps? Q: Can I map or translate the app automatically into something safe?

A: In general, no, you can't, if the trap is a good one.

This covers the trap in a nutshell.

[The disclaimer: I am not a lawyer, and I have never written a patent application. But.. I do know how software works, and I have developed more than just half a clue about how patents work (in the US).]

Further Basic Discussion



For those that want a little more explanation, we have this link.

..as well as a hypothetical "Tetris" Patent Trap example.

Visual Basic function



"Tetris" Patent Trap



Patent Tetris Patent CoolDraw API Tetris API CoolDraw

We have two patents and two API. One patent and one API are high-level (Tetris). The other patent and API are low-level (CoolDraw). The high-level patent and high-level API are designed together as a trap as mentioned above. Ditto for the low level ones.

Let's look at a few more details on the patents and on the APIs. Then, we'll cover the four main scenarios. Do note the interplay of high-level with low-level. When the levels are the same (and matching), we have stepped onto the trap.

-- Patent Tetris: patents any tetris like game.

-- Patent CoolDraw: patents a cool way to draw on the screen from computer memory.

-- API Tetris: a createTetris function produces a tetris game when you input things like block size, colors, number of rows, time, etc.

-- API CoolDraw: a doCoolDraw function uses a cool algorithm to move values onto the screen.

Case 1: -- Patent Tetris -- API Tetris.

In this scenario, if we use API Tetris within our app so that a tetris game is created, we violate Patent Tetris, guaranteed.

Case 2: -- Patent Tetris -- API CoolDraw.

In this scenario, if we use API CoolDraw within our app so that we draw to the screen, we do not violate Patent Tetris unless we write a lot more code so as to create our own tetris game. It would take many lines of code to violate Patent Tetris.

Case 3: -- Patent CoolDraw -- API Tetris.

In this scenario, if we use API Tetris within our app so that a tetris game is created, we may violate Patent CoolDraw ..or not. It depends on how API Tetris was implemented. Does createTetris write to the screen the way described by Patent CoolDraw?

Case 4: -- Patent CoolDraw -- API CoolDraw.

In this scenario, if we use API CoolDraw within our app so that we draw to the screen, we violate Patent CoolDraw, guaranteed.

Quick Analysis

Case 1 (and Case 4) patent and API are at the same level (and matching). This is a trap. To avoid infringement, you have to redesign and re-code the application using a different API.

Case 2 is the case when people consider "working around" the patent. It's an odd event. You have to write many lines of code in order to possibly be infringing. If you are, you then try to code around it, perhaps by building something a little different than tetris. [In general, avoid infringement by make sure some of the properties of the patent claim are not met.]

Case 3 is the case where if a violation were to exist in the API implementation, you can try to re-implement the libraries and this way avoid re-implementing each and every single app as would be required for Cases 1 and 4.

The reason Case 3 allows you to re-implement the libraries and avoid re-coding up every application is fundamentally because you can re-implement the API but keep fixed the same interfaces and specifications enshrined in the API contract and assumed by the applications. This is not possible in Case 1 and Case 4 because any re-implementation of the same specification, for these cases, will infringe in the same exact way as with the original implementation since it's the specification itself (not any implementation of any part of it) that parallels the patent.

The reason Case 2 does not result in automatic infringement as happens with Case 1 and Case 4 is that the API interface and patent requirements don't match. It's that simple. Case 2 is where the application could possibly end up violating if you code enough with that API or with another. The Case 2 patent is high-level while the API is low-level. Case 3 is different in that the patent is low-level while the API is high-level; thus, Case 3 contrasts with Case 2 because in Case 3 the potential violations would not happen within the application (as with Case 2) but rather within the library.

In short, Case 1 and Case 4 are the only cases (of the four) where any API usage, by definition, specifies that the application will acquire all the properties of the matching patent claim. These are the traps.

Random APIs will not shadow any given patent as occurred in Case 1 and in Case 4. Developers normally would not have to worry. They can expect a Case 2 or a Case 3, if anything. However, Case 1 and Case 4 can be designed on purpose when the patent author and API designer are the same entity. Why would this author create this trap for developers? Well...

-- The patent author is determined to file lawsuits as necessary (maybe via proxies) in order to slow down many and/or key competing applications (eg, FOSS applications).

“You can be given a patent license and even GPL code for the core API, but not for the patented API extensions.”If you are using an API designed by such a vendor (regardless of who implemented the libraries), beware. I see lots of redesigning and re-coding in your future, just to get back to the same point (on a per app basis). Remember that the patent might still be in the pipeline, have been sold to a proxy, or have been developed through a partnership under a different company or alias.

The above nutshell and sample analysis omit many details. There are many corner cases and things are not cut and dried. In a second article to follow (possibly), we will look closer into many details of the trap scenario.

Finally, there is a more insidious trap that exists. You can be given a patent license and even GPL code for the core API, but not for the patented API extensions. You may then find that you can create only simple applications safely (with that core API), even if you decide not to use the patented extension API but build your own. This is more insidious because the patent and copyright licenses given for the core API give the illusion of safety (a green light to proliferate), and is insidious and dangerous all the more so since you might purposely avoid the patented extensions. The trap happens if you use the "safe" core with any extension whatsoever (since the extended patented properties can be very general in nature). The details of this extended insidious trap may form the subject of a third article later on. It's also described further here. ⬆

Comments

Recent Techrights' Posts

When Computers "Expire" Because Certificates Expire
People who promote Restricted Boot are liars. They lie for a living.
Network Plumbing
We hope it'll help speed things up
"My Hands Are Shaking While Writing" About IBM's Mass Layoffs at Red Hat (Bluewashing)
Shame, shame, shame on the corporate media for not covering Red Hat's layoffs this year
Taking a Look at the Last Articles of Bob Cringely at Forbes, They Were All About IBM and Its Collapse
It's all about IBM
 
Links 13/10/2026: Norway Fines Microsoft and Cops Can Creep on Airbnb
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, October 12, 2026
IRC logs for Monday, October 12, 2026
Gemini Links 13/10/2026: Modern Science, Joplin, Luddites, and Lots More
Links for the day
Mass Layoffs at Microsoft Again (October 2026), So-Called 'AI' Units Impacted Because Slop ('AI') Has No Real Future
So much for the future of Microsoft being "hey hi" (AI)
European Readers, Please Contact Representatives (in One's Nation) Attending the Administrative Council Meeting
Normalising cocaine in in Europe's largest institutions (the people running these) is a slippery slope
For Half a Year the European Patent Office (EPO), Europe's Second-Largest Institution, Has Had Water Problems in the Toilets
And it's not being fixed
Intercontinental Brigading - Part I - The Failed Attempt to 'Swat' Our Series About the Attacks and Crimes Committed Against Us
This coincided with threats to our lives
Links 12/10/2026: Strike on Riyadh and GOP Pays Voters ("Surprise $90 Social Security Payments")
Links for the day
Microsoft's XBox CEO Spoke of a "Return to Growth" Last Week, But XBox Sales Lowest in XBox History (Quarter of a Century)
Microsoft's XBox is dying. It's a countdown to nothingness.
Links 12/10/2026: Shopify (Slop Booster) Has Security Issues, "Russia’s Yandex Says Data Center in Vladimir Shut Down After Drone Attack"
Links for the day
Microsoft Windows Causes Problems (and Delays) to LibreOffice and The Document Foundation
Nothing would please Microsoft more than Windows curtailing the development of LibreOffice and adoption of ODF
So Far This Year Microsoft Windows Lost a Lot of Ground in China, GNU/Linux Gaining at Its Expense
GNU/Linux will soon exceed 10%
Lessons of Margaret Hamilton (Software Engineer)
Stop abetting men who attack women in the sciences
RIP, Bob Cringely
He was too young to leave us, his articles were still brilliant and his mind as lucid as ever
What is "Computer Science"? It is What Broligarchs Reject.
Nowadays some people call themselves informal terms or made-up titles (with terms like "AI" or "big data" or "data" tossed into the mix)
Linus Torvalds Has a Conflict of Interest Regarding Slop
Linus Torvalds is paid by the slop pushers
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, October 11, 2026
IRC logs for Sunday, October 11, 2026
Africa Sees GNU/Linux Exceeding 5% "Market Share"
It wasn't always like this. It used to be measured at 1 or 2 percent.
Brigading Against Women - Part XXVII - Americans and Public Executions
"People who work for Facebook / Xitter / Bytedance's Tiktok / Microsoft / Oracle / IBM / Apple / Uber / Lyft / Wolt / DoorDash / AirBnB / Bolt / and so on are doing some world-class projection when they have the audacity to call others Bad People(tm)"
Gemini Links 12/10/2026: Westminster Quarters, Civilization, Luddites, and More
Links for the day
Slop-ware Is Not Newsworthy
LLMs are exceptionally loquacious and create large code bases
Links 11/10/2026: US Sides With Vladimir Putin, Convicted Felon Dubbed "Agent of a Foreign Power"
Links for the day
IRC Tracker Back in Order, Number of Known IRC Networks Continues to Increase
We don't know if our article helped trigger a resolution
Links 11/10/2026: "Execution TV" (Iran Aped by US) and ‘Digital Oblivion’ Caused by Slop Frenzy Online
Links for the day
Voice for the Impoverished
the country's leaders attack the country's own press
Gemini Links 11/10/2026: Adults Dressing Up as Animals, 44th Birthday, and More
Links for the day
Running a Country's Economy by Borrowing Over $400,000,000,000 Per Month
This is the hallmark of an economy in irreversible decline
Brigading Against Women - Part XXVI - Trying to Deplatform Critics of Microsoft's Restricted Boot
Like James Bottomley, Matthew Garrett served Microsoft's agenda while employed and salaried by other companies
Anderon Is Not a Real Company, It's an IBM Bailout Dressed Up or Wrapped Up In Buzzwords
It certainly does seem like they receive money from taxpayers for nothing, or for IBM to do mass layoffs/closure at Albany under the guise of "making a new spinoff"...
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, October 10, 2026
IRC logs for Saturday, October 10, 2026