Open Source — the Last Patent Defense?

dp619 writes "A developer might fly under the patent troll radar until she makes it big, and then it's usually open season. Apple just shared that it has faced off 92 lawsuits over just 3 years. Even Google's ad business is at risk. FOSS attorney Heather Meeker has blogged at the Outercurve Foundation on what to consider and what to learn if you're ever sued for patent infringement. 'There have been at least two cases where defendants have successfully used open source license enforcement as a defensive tactic in a patent lawsuit. ... In both these cases, the patent plaintiff was using open source software of the defendant, and the patent defendant discovered a violation of the applicable open source license that it used to turn the tables on the plaintiff. In this way, open source license enforcement can be a substitute for a more traditional retaliatory patent claim.' Meeker also examines how provisions of open source licenses can deflate a patent troll's litigation and shift the balance in favor of the defense."

no troll defence here

[gbjbaanb]

In these cases, the patent holder sues an OSS developer and it turns out that the patented produce contained source from the defending code.

Defence then either says "ha, but the licence you accepted when you took our code contains a patent licence grant" (eg Apache licence) and therefore the defence is legitimately licenced to use the patent, or says "ha, you used our code illegally, cease and desist selling your product".

Trolls don't tend to actually have products, so this really doesn't apply here.

"Open Source" is not enough for patents

[Antique Geekmeister]

Few of the open source patents do not address patents. GPLv3, which is a genuinely "free as in speech" license, and the recent Apache icenses, do deal with patents.

The MIT license and most of the BSD licenses *do not* handle patents well. The FreeBSD license, funded now by Apple, now very specifically does *)not* grant patent protection, to protect Apple's patents from encroachment.

Re:"Open Source" is not enough for patents

[Anonymous Coward]

Both Apache2 and GPL have a patent grant, and a patent retaliation clause in them.

2 and 3 clause BSD were created in a time before people thought software patents were a major thing to worry about. One can contribute patented code to a BSD project, wait for it to ship to users and sue everyone, all perfectly legal. Apache2 and GPL address this by requiring patent grants as part of the license.

Re:no troll defence here

[reebmmm]

Not true. Not true at all. The Apache 2.0 license doesn't prevent a user of Apache-licensed software from suing. It's a defensive patent clause: it deprives the contributor of patent enforcement rights as it relates to a contribution, but allows them to sue a user for patent infringement if they're sued first. If a troll sues a "Contributor" for patent infringement, then the Contributor can sue the troll. So, a troll could use Apache all day long and sue Contributors all day long without a license violation.

3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.

Similarly, GPLv3 has a patent license. It affects contributors and distributors, not "users."

11. Patents.
A “contributor” is a copyright holder who authorizes use under this License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's “contributor version”.

A contributor's “essential patent claims” are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a consequence of further modification of the contributor version. For purposes of this definition, “control” includes the right to grant patent sublicenses in a manner consistent with the requirements of this License.

Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version.

In the following three paragraphs, a “patent license” is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to sue for patent infringement). To “grant” such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party.

If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent license to downstream recipients. “Knowingly relying” means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid.

If, pursuant to or in connection with a single transaction or arr

Re:"Open Source" is not enough for patents

[dkf]

Both Apache2 and GPL have a patent grant, and a patent retaliation clause in them.

But neither really protects against the trolls; trolls work on the principle of shaking you down with the threat of very expensive court action, and there's the risk of having the court decide against you anyway. If the court decides that the troll's patent is valid and applies, the license doesn't get you out of trouble except in the case that it's the troll's own code or that a transferrable license has actually been granted to whoever donated the code and the troll was trying to brush that little fact under the carpet.

There aren't any magical short cuts round legal problems. Just areas that are known to be thorny.