{"id":362908,"date":"2025-12-23T02:13:12","date_gmt":"2025-12-23T02:13:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/ca\/362908\/"},"modified":"2025-12-23T02:13:12","modified_gmt":"2025-12-23T02:13:12","slug":"access-denied-federal-court-finds-apple-did-not-infringe-biometric-security-patents","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ca\/362908\/","title":{"rendered":"Access Denied – Federal Court Finds Apple Did Not Infringe Biometric Security Patents"},"content":{"rendered":"

Introduction<\/p>\n

Justice Burley of the Federal Court has delivered judgment in proceedings between CPC Patent Technologies Pty Ltd (CPC) and Apple Pty Limited and Apple Inc (collectively, Apple), concerning alleged patent infringement by Apple\u2019s biometric security systems \u2013 Touch ID (fingerprint recognition) and Face ID (face recognition) \u2013 used for unlocking Apple devices such as iPhones, iPads and Macs (Apple Devices).\u00a0 Apple cross-claimed seeking revocation of CPC\u2019s patents on various grounds of invalidity.<\/p>\n

The Court found that the Apple devices did not infringe any of the asserted claims, rejecting CPC\u2019s construction of key claim integers that sought to impermissibly broaden their scope by reference to their functional characteristics.\u00a0 Apple\u2019s cross-claim, which was advanced defensively, was dependent on findings contrary to Apple\u2019s primary non-infringement case, and so was mostly unsuccessful.<\/p>\n

CPC has since appealed Justice Burley\u2019s decision to the Full Court<\/a>, with Apple filing a cross-appeal in response.\u00a0 A hearing has been set down for 2 March 2026.<\/p>\n

Background<\/p>\n

The case concerns two Australian patents owned by CPC, AU2004301168<\/a> (\u2018168) and AU2009201293<\/a> (\u2018293), both entitled \u201cRemote entry system\u201d (together, the Patents).\u00a0 The Patents relate to secure access systems using wireless transmission of security code information, and claim a priority date of 13 August 2003 based on Provisional Application AU2003904317<\/a>.<\/p>\n

The Patents address a security vulnerability in traditional access systems whereby a user enters a code or provides a fingerprint at a keypad\/sensor, which sends a signal along a wire to a controller that checks the signal against a database and, if valid, sends a command to unlock the door or device.\u00a0 The Patents identify that the wire connecting the keypad to the controller is a weak point, which can be physically tampered with by an attacker who could intercept, decipher and replay the signal to gain unauthorised entry.<\/p>\n

The inventions the subject of the Patents seek to eliminate this weak point through two key features:<\/p>\n

(i) By replacing the wire with encrypted wireless communication; and<\/p>\n

(ii) Performing biometric authentication at the keypad\/sensor itself, before any signal is sent.<\/p>\n

In the patented system, when a user provides their fingerprint to a keypad, the keypad immediately checks it against stored biometric data.\u00a0 If authenticated, the keypad then sends an encrypted wireless signal containing a \u201crolling code\u201d (a code that changes each time to prevent replay attacks) to a receiver, which verifies the code and unlocks the controlled item or device.<\/p>\n

CPC alleged that Apple infringed claims of both Patents through the use of Touch ID and Face ID for unlocking 70 different Apple Devices.\u00a0 Apple advanced various invalidity grounds, including lack of novelty, inventive step, manner of manufacture, fair basis, sufficiency and clarity.<\/p>\n

Key Issues<\/p>\n

The dispute raised several construction issues, including the construction of the following key integers:<\/p>\n

(a)\u00a0 \u00a0\u201ccontrolled item\u201d (all asserted claims);<\/p>\n

(b)\u00a0 \u00a0\u201ctransmitter sub-system\u201d and \u201creceiver sub-system\u201d (all asserted claims, although claims 27, 29 and 37 of the \u2018293 patent do not refer to a receiver sub-system);<\/p>\n

(c)\u00a0 \u00a0\u201caccessibility attribute\u201d (all asserted claims);<\/p>\n

(d)\u00a0 \u00a0\u201csecure access signal\u201d (claims 5 and 6 of the 168 patent and all asserted claims of the \u2018293 patent);<\/p>\n

(e)\u00a0 \u00a0\u201cmeans for receiving a series of entries of the biometric signal, said series being characterised according to at least one of the number of said entries and a duration of each said entry, means for mapping said series into an instruction and means for enrolling relevant signatures into the database according to the instruction\u201d (all asserted claims of the \u2018293 patent) (the Series Feature); and<\/p>\n

(f)\u00a0 \u00a0\u201cadministrator signature\u201d (claims 3 and 6 of the \u2018168 patent).<\/p>\n

The Court\u2019s resolution of integers (a) and (b) above proved determinative of the infringement case.<\/p>\n

By way of example, Claim 1 of the \u2018168 Patent claims the following (with relevant integers described above underlined):<\/p>\n

A system for providing secure access to a controlled item, the system comprising: a transmitter subsystem for enrolling biometric signatures into a database and for providing an accessibility attribute if a legitimate biometric signal is received; and a receiver sub-system for providing access to the controlled item dependent upon said accessibility attribute.<\/p>\n

Consideration<\/p>\n

\u2018Transmitter Sub-System\u2019 and \u2018Receiver Sub-System\u2019<\/p>\n

The primary dispute concerned whether Apple\u2019s Touch ID and Face ID systems contained separate \u201ctransmitter sub-system\u201d and \u201creceiver sub-system\u201d components as required by all asserted claims.<\/p>\n

CPC advanced a functional construction, such that the sub-systems:<\/p>\n

(i)\u00a0 \u00a0 are defined purely by the functionality they perform;<\/p>\n

(ii)\u00a0 \u00a0may comprise overlapping hardware and software components; and<\/p>\n

(iii)\u00a0 need only include \u201ckey\u201d or \u201cquintessential\u201d components responsible for the required functionalities, excluding ancillary or incidental components.<\/p>\n

Applied to the Apple Devices, CPC identified the following:<\/p>\n

(i)\u00a0 \u00a0 the transmitter sub-system as comprising certain components within the Secure Enclave Processor (the dedicated security processor component integrated in Apple Devices for the Secure Enclave subsystem to perform security functions such as biometric matching); and<\/p>\n

(ii)\u00a0 \u00a0the receiver sub-system as comprising components within the Application Processor (the main processor unit that runs the OS for the Apple devices) which controls access to the device.<\/p>\n

Apple submitted that the claims require two separate and distinct sub-systems that are functionally and physically separate, with identifiable boundaries between them.<\/p>\n

Justice Burley accepted Apple\u2019s construction, finding that the claim language and specification required separate and distinct sub-systems.\u00a0 His Honour emphasised that to be a \u201ctransmitter\u201d sub-system, components must be capable of transmitting information, such that the word \u201ctransmitter\u201d must be given work to do.\u00a0 Similarly, the receiver sub-system must be capable of receiving information.\u00a0 Claims requiring that the receiver sub-system receive an accessibility attribute \u201cfrom\u201d the transmitter sub-system, or receive \u201cthe transmitted\u201d secure access signal, made clear there must be a functional relationship with a flow of information from one sub-system to the other.\u00a0 Justice Burley stated at [161]:<\/p>\n

These claims make clear that there must be a functional relationship between the transmitter sub-system and the receiver sub-system within the overall system.\u00a0 In my view, they support the proposition that each sub-system is separate and distinct. There would be no need to refer to each as a \u201csub-system\u201d if the functions of the two could be merged.<\/p>\n

His Honour also rejected CPC\u2019s \u201cquintessential components\u201d approach as having no basis in the claims or specification.\u00a0 Expert evidence demonstrated that a \u201csub-system\u201d is a component of a larger system typically performing a specific function, and the Court found this required identifiable boundaries between sub-systems.<\/p>\n

Applied to the Apple Devices, Justice Burley found CPC\u2019s characterisation to be unsupported by evidence.\u00a0 The biometric enrolment and matching processes engaged numerous components in both the Secure Enclave Processor and Application Processor.<\/p>\n

CPC\u2019s attempt to exclude 15 other components as \u201cancillary\u201d gave an arbitrary character to the alleged sub-systems.\u00a0 Notably, CPC included a key security component (SKS) in its construction of the transmitter sub-system but excluded it from the receiver sub-system, despite evidence it had roles in both encryption and decryption processes required for the system to function.<\/p>\n

Justice Burley was particularly critical of the shifting evidence of CPC\u2019s expert regarding what components comprised each sub-system, identifying at least four different variants during testimony, none of which corresponded to CPC\u2019s final construction.\u00a0 His Honour observed that this suggested \u201cthat the construction advanced by CPC is with an eye to the infringing article, an approach that has repeatedly been abhorred by the authorities\u201d.[1]<\/a><\/p>\n

Because the claims required separate and distinct sub-systems with identifiable boundaries, and the Apple Devices integrated all functionality across both processors, Justice Burley concluded that CPC \u201cfailed to identify a coherent basis upon which it may be concluded that there exists any separate transmitter sub-system or receiver sub-system within the Apple Devices\u201d.<\/p>\n

This finding alone proved fatal to CPC\u2019s infringement case as all asserted claims include a transmitter sub-system, and a majority also include a receiver sub-system.<\/p>\n

Accessibility Attribute<\/p>\n

The integer \u201caccessibility attribute\u201d appeared in all asserted claims.\u00a0 The specification defined it as establishing \u201cwhether and under which conditions access to the controlled item should be granted to a user\u201d.\u00a0 The specification explained that the accessibility attribute could comprise various attributes, such as:<\/p>\n

an access attribute (granting unconditional access);
\na duress attribute (granting access but activating an alert);
\nan alert attribute (sounding a chime); and
\na telemetry attribute (communicating system state information such as low battery).<\/p>\n

CPC submitted that where a user identifies the specific condition of access sought (for example, by pressing a button to unlock a car trunk rather than the doors), the biometric match itself constitutes provision of an accessibility attribute because it establishes whether and under which conditions access should be granted.<\/p>\n

Apple submitted that an accessibility attribute must be produced by authentication of biometric matching and must establish conditions in response to matching which cause the receiver sub-system to respond in different ways, not merely to determine whether preconditions to access are met.<\/p>\n

Justice Burley rejected CPC\u2019s construction.\u00a0 The claim language made clear an accessibility attribute is produced only after a legitimate biometric signal is received or matching is authenticated.\u00a0 The claims require the transmitter sub-system to \u201cprovide\u201d or \u201coutput\u201d an accessibility attribute, which tells against a construction whereby confirmation of a biometric match itself constitutes the attribute.\u00a0 His Honour found the \u201cattribute\u201d must be an output, separate from the match, that establishes whether and under which conditions access is granted.<\/p>\n

Applied to the Apple Devices, CPC argued that the accessibility attribute was produced following a positive biometric match, contending that cumulatively across three scenarios (accessing the home screen, accessing restricted applications, and accessing Apple Wallet), these represented different conditions of access to the device as a whole.<\/p>\n

Justice Burley rejected this argument on two grounds.\u00a0 First, it depended on the \u201ccontrolled item\u201d being the entire Apple Device, whereas his Honour found the \u201ccontrolled item\u201d when accessing the home screen is the home screen itself \u2013 not the device as a whole.\u00a0 Obtaining access to restricted applications or Apple Wallet requires further and separate authentication to different controlled items, not conditions imposed by the initial biometric match to the home screen.<\/p>\n

Second, examining the Apple Devices\u2019 mechanics, the Court found they undertake a binary assessment determining whether there is a positive biometric match: match and unlock, or no match and remain locked.\u00a0 The claims required an accessibility attribute establishing both whether to grant access and under which conditions (such as granting access with a duress alert, or sound a chime\u2026etc).\u00a0 The Apple Devices made no such conditional determination \u2013 they simply assessed whether the biometric matched and either granted or denied access to the home screen accordingly.<\/p>\n

So, Justice Burley concluded that CPC had not established the Apple Devices contain an \u201caccessibility attribute\u201d within the meaning of the asserted claims.<\/p>\n

Other Construction Issues<\/p>\n

Justice Burley also found against CPC on the construction of the \u201cseries feature\u201d and the \u201cadministrator signature\u201d.<\/p>\n

All asserted claims of the \u2018293 patent required what became known as the \u201cseries feature\u201d \u2013 a specific mechanism for enrolling biometric signatures into the database.\u00a0 This feature required the system to:<\/p>\n

(1)\u00a0 \u00a0receive a series of biometric entries characterised by their number and\/or durations;<\/p>\n

(2)\u00a0 \u00a0map that series onto a pre-existing instruction; and<\/p>\n

(3)\u00a0 \u00a0enrol signatures according to that instruction.<\/p>\n

The specification provided an example whereby an administrator could enrol a new user by pressing their finger on the sensor in a particular pattern (by duration or quantity of presses), which the system would recognise as the instruction to enrol a new user.\u00a0 This provided a way to communicate commands to a system that had no other user interface (such as a keypad without a screen for unlocking a door).<\/p>\n

CPC contended the Series Feature was simply designed to ensure a quality biometric signature by requiring multiple scans of sufficient duration (as most people have experienced when first setting up Touch ID or Face ID on Apple devices, as well as similar systems on non-Apple devices). \u00a0On this construction, any system that captured multiple fingerprint images (or face scans) during enrolment would satisfy the requirement.<\/p>\n

Justice Burley rejected this construction, noting that the claim language specifically required mapping a series of entries onto an instruction, and the specification\u2019s example showed this instruction must pre-exist in the system (like a stored command).\u00a0 The Series Feature was not about ensuring quality imaging or scanning of biometric data, but was about using patterns of biometric entries to communicate instructions (such as enrolment itself).\u00a0 While the Apple Devices captured sequential imaging and scanning during the enrolment phase for quality biometric signature, it did not map the sequential biometric entry to any stored commands.<\/p>\n

Additionally, some claims required an \u201cadministrator signature\u201d \u2013 a biometric signature stored in a database that would be recognised by the system as conferring administrator privileges, enabling functions like enrolling new users or deleting existing signatures.<\/p>\n

CPC argued it was sufficient that a person has the ability to perform administrative functions.\u00a0 For example, the first user to enrol their biometric authentication on an Apple Device had to set a manual passcode, and that person could later use their biometric authentication with the passcode to enrol or delete other users, and was therefore an \u201cadministrator\u201d according to CPC.<\/p>\n

However, Justice Burley found it insufficient that a person has the ability to perform administrative functions by virtue of being in possession of an enrolled signature and a passcode. \u00a0Rather, the signature itself must be recognised by the system as an administrator signature.\u00a0 The Apple Devices did not tag signatures as conferring administrator privileges and always required passcode entry (not biometric authentication) to exercise administrative functions like enrolling or deleting users.\u00a0 Stated simply, a user of an Apple Device cannot exercise administrative privileges simply by presenting a biometric signature.<\/p>\n

Validity \u2013 Deferred Priority Date<\/p>\n

Apple contended that the asserted claims were not entitled to claim priority from the provisional specification filed 13 August 2003, such that the deferred priority date of 13 August 2004 applied.<\/p>\n

Justice Burley found the provisional specification did not meet the test for external fair basis, requiring real and reasonably clear disclosure of claimed subject matter.\u00a0 Notably, there was a dispute as to whether the provisional specification sufficiently disclosed an \u201caccessibility attribute\u201d as claimed, which required that the transmitter sub-system provide or output an accessibility attribute that establishes whether access should be granted and under which conditions.<\/p>\n

The provisional specification contained a \u2018Tom Smith\u2019 example which posited that the biometric sensor can authenticate a user, and after authentication, can check other access privileges against the user, such as whether \u2018Tom Smith\u2019 is able to use the door on weekends, but did not disclose the output of the authentication signal as also establishing whether and under which conditions access to the controlled item should be granted.\u00a0 So, Justice Burley held that the provisional specification did not include a real and reasonably clear disclosure of an accessibility attribute.<\/p>\n

His Honour also found insufficient disclosure of the \u201cadministrator signature\u201d feature and Series Feature in the provisional specification.\u00a0 Accordingly, the asserted claims could only claim the deferred priority date of 13 August 2004, bringing additional prior art into consideration.<\/p>\n

Validity \u2013 Novelty<\/p>\n

Apple\u2019s novelty ground relied on six prior art items.\u00a0 Much of the case was dependent on accepting CPC\u2019s construction of contested integers.\u00a0 Given Justice Burley\u2019s rejection of CPC\u2019s construction, most of Apple\u2019s novelty case fell away.\u00a0 Nevertheless, his Honour considered the novelty analysis on the assumption that CPC\u2019s construction was correct.<\/p>\n

The most notable finding concerned US patent 6,164,403 (Wuidart), which disclosed a portable biometric device for vehicle access.\u00a0 In one embodiment, the unlock signal included a user number (1, 2, 3, 4, or 5) that identified which authorised user\u2019s biometric signature had been recognised.\u00a0 By transmitting this code, selected convenience functions in the vehicle could be activated, such as adjusting seat positions, mirrors, thermostat temperature and radio station according to that user\u2019s predefined preferences.<\/p>\n

Justice Burley found that Wuidart disclosed an \u201caccessibility attribute\u201d on both his Honour\u2019s construction as well as CPC\u2019s construction.\u00a0 The unlock signal in combination with the user number established both whether access was granted and imposed conditions applicable to the access granted (by adjusting various settings).\u00a0 His Honour rejected CPC\u2019s submission that these settings were not relevant to \u2018access\u2019 per se, stating at [643]:<\/p>\n

I see no difference in principle between a condition of access that sounds a chime indicating that a person of a certain type has entered and a condition that would turn on the lights or another feature of the building.<\/p>\n

Accordingly, had the Court accepted CPC\u2019s broader construction, significant validity concerns would have emerged from the prior art.\u00a0 Justice Burley also found that further prior art references anticipated various other claim features on CPC\u2019s construction.<\/p>\n

Outcome and Implications<\/p>\n

The Court dismissed CPC\u2019s infringement case, finding CPC failed to establish that any Apple Devices fell within any of the asserted claims.\u00a0 Apple\u2019s cross-claim succeeded in part, with Justice Burley finding that none of the asserted claims were entitled to claim priority from the provisional specification.\u00a0 However, most other invalidity grounds fell away, given his Honour\u2019s findings on construction in favour of Apple.<\/p>\n

Justice Burley\u2019s decision reinforces that functional claim language does not permit purely functional constructions.\u00a0 Where claims use terms entailing structural relationships (such as distinct \u2018sub-systems\u2019), the Court will construe the claims in light of those structural requirements and reject attempts to satisfy claim integers by selecting only key components while excluding others as merely ancillary.\u00a0 Further, claim constructions advanced to capture allegedly infringing products may simultaneously expose patents to invalidity challenges from prior art.<\/p>\n

[1]<\/a> See CCOM Pty Ltd v Jiejing Pty Ltd [1994] FCA 396; (1994) 51 FCR 260 at 267\u2013268 (Spender, Gummow and Heerey JJ); Hanwha Solutions Corporation v REC Solar Pte Ltd [2023] FCA 1017; (2023) 180 IPR 315 at [92] (Burley J).<\/p>\n

\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"Introduction Justice Burley of the Federal Court has delivered judgment in proceedings between CPC Patent Technologies Pty Ltd…\n","protected":false},"author":2,"featured_media":362909,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[49,48,61],"class_list":["post-362908","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-ca","tag-canada","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/362908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/comments?post=362908"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/posts\/362908\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media\/362909"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/media?parent=362908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/categories?post=362908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ca\/wp-json\/wp\/v2\/tags?post=362908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}