Amazon Tech Inc v. Nokia Corp

I. Executive Summary and Procedural Information

• Parties & Counsel:
  • Plaintiff: Amazon Technologies, Inc. (Nevada)
  • Defendant: Nokia Corporation (Finland); Nokia Solutions and Networks Oy (Finland); Nokia of America Corporation (Delaware)
  • Plaintiff's Counsel: Morris, Nichols, Arsht & Tunnell LLP
• Case Identification: 1:24-cv-00891, D. Del., 07/30/2024
• Venue Allegations: Venue is alleged to be proper in the District of Delaware because Defendant Nokia of America Corporation is a Delaware corporation, and the Nokia entities have allegedly transacted business and committed acts of infringement in the district.
• Core Dispute: Plaintiff alleges that Defendant's cloud networking and data center products infringe twelve U.S. patents related to foundational cloud computing technologies, including virtual networking, distributed program execution, and resource management.
• Technical Context: The technology at issue concerns the management of large-scale, virtualized computing environments, a cornerstone of the modern cloud services industry that enables flexible and scalable on-demand computing infrastructure.
• Key Procedural History: The complaint frames the dispute in the context of Amazon's pioneering role in cloud computing with Amazon Web Services (AWS) since 2006, contrasting it with Nokia's more recent entry into the cloud and data center market following its pivot from the mobile device business. No prior litigation, licensing, or post-grant proceedings are mentioned in the complaint.

Case Timeline

II. Technology and Patent(s)-in-Suit Analysis

U.S. Patent No. 9,106,540 - "Providing logical networking functionality for managed computer networks"

The Invention Explained

• Problem Addressed: The patent describes that as data centers and computer networks grew in scale, managing the underlying physical computing resources became increasingly complicated Compl. ¶32 '540 Patent, col. 1:24-27 Traditional networks with fixed physical topologies lacked the flexibility required by large-scale virtualized environments Compl. ¶35
• The Patented Solution: The invention provides a logical overlay network that allows a user to configure a virtual computer network with a specific topology that is independent of the underlying physical network's fixed topology Compl. ¶32 '540 Patent, abstract Communications between nodes in the virtual network are managed to emulate the functionality of specified logical networking devices (like a virtual router) as if they were physically present, without actually implementing the topology physically Compl. ¶33 '540 Patent, col. 2:21-28
• Technical Importance: This approach decouples the logical network configuration from the physical infrastructure, providing the flexibility to create user-configurable network topologies tailored to specific distributed applications in a large-scale network Compl. ¶35

Key Claims at a Glance

• The complaint asserts at least independent claim 4 Compl. ¶271
• The essential elements of independent claim 4 include:
  • Receiving configuration information for a virtual computer network that specifies a virtual router device interconnecting at least first and second groups of computing nodes.
  • Responding to a request from a computing node by emulating the functionality of the specified virtual router device to generate a response, without using any physical router devices to represent the virtual router.
  • Forwarding a communication between the first and second groups of nodes by emulating further functionality of the virtual router device to modify the communication.
• The complaint does not explicitly reserve the right to assert dependent claims for the '540 Patent.

U.S. Patent No. 8,117,289 - "Using virtual networking devices to manage substrate devices"

The Invention Explained

• Problem Addressed: Prior to the invention, managing large-scale computing resources associated with data centers had become increasingly complicated, and there was no well-understood, routine way to manage these networks effectively and securely Compl. ¶40 '289 Patent, col. 1:31-35 '289 Patent, col. 1:51-52
• The Patented Solution: The invention describes a system where a user can specify a network topology for a managed computer network, which is then overlaid on an underlying substrate network Compl. ¶41 '289 Patent, col. 2:19-56 The system provides the specified networking functionality by selecting one or more network-accessible devices on the substrate network and routing communications through those selected devices to provide the indicated functionality Compl. ¶41 '289 Patent, col. 3:48-58
• Technical Importance: This provides a technical improvement by enabling the configuration of a virtual network through the selection of specific, existing network devices on a substrate network and then routing communications to those devices to achieve a desired function Compl. ¶42

Key Claims at a Glance

• The complaint asserts at least independent claim 20 Compl. ¶218
• The essential elements of independent claim 20 include:
  • A computing system with a manager module configured to provide a virtual computer network.
  • Receiving information from a client for configuring the virtual computer network, specifying interconnections between computing nodes and an indicated type of functionality.
  • Automatically providing the configured virtual computer network by overlaying it on a distinct substrate network.
  • Selecting one or more network devices accessible via the substrate network that are configured to provide the indicated type of functionality.
  • Forwarding communications between nodes by routing at least one communication to at least one of the selected devices to enable it to provide the indicated functionality.
• The complaint does not explicitly reserve the right to assert dependent claims for the '289 Patent.

U.S. Patent No. 11,909,586 - "Managing communications in a virtual network of virtual machines using telecommunications infrastructure systems"

• Technology Synopsis: The patent addresses managing communications in a virtual network overlaid on a physical substrate network Compl. ¶¶45-46 The solution involves responding to an Address Resolution Protocol (ARP) request from a computing node with a "spoofed response" that indicates a virtual hardware address for another node, rather than its actual hardware address, thereby enabling a user-configured logical network Compl. ¶¶48-49
• Asserted Claims: At least independent claim 1 is asserted Compl. ¶401
• Accused Features: The Nuage Networks Virtualized Cloud Services are accused of infringement, specifically its Virtual Routing and Switching (VRS) agent, which allegedly handles ARP requests from local virtual machines to program flow tables in a manner that constitutes the claimed spoofed response Compl. ¶¶402 Compl. ¶¶425-426

U.S. Patent No. 11,336,529 - "Providing virtual networking device functionality for managed computer networks"

• Technology Synopsis: The technology concerns providing virtual networking functionality by embedding virtual network address information in the addresses of an underlying physical substrate network Compl. ¶53 A key technique involves modifying the Address Resolution Protocol (ARP) to implement access control policies, where the system intercepts an ARP request and, after responding, receives frames that it can allow or deny based on source, destination, or protocol information Compl. ¶57
• Asserted Claims: At least independent claim 1 is asserted Compl. ¶434
• Accused Features: The Nuage Networks Virtualized Services Platform is accused of infringement. The complaint alleges the platform's Virtual Routing and Switching (VRS) component intercepts ARP requests, provides a MAC address in response, and then evaluates Access Control Lists (ACLs) on received frames to allow or deny communication, thereby implementing the claimed access control policy Compl. ¶¶451-454 Compl. ¶¶461-462

U.S. Patent No. 9,756,018 - "Establishing secure remote access to private computer networks"

• Technology Synopsis: The patent describes a method for providing secure remote access to a private or virtual computer network Compl. ¶¶61-62 The system receives a request for a secure connection from a remote location and responds by providing configuration information that allows devices at the remote location to participate in the secure connection, overcoming issues of providing access from remote locations to devices that have distinct virtual and physical addresses Compl. ¶66
• Asserted Claims: At least independent claim 18 is asserted Compl. ¶373
• Accused Features: The Nokia AirFrame Data Center and CloudBand Infrastructure Software are accused of infringement. The complaint alleges these products use OpenStack Neutron APIs to allow a client to request a secure connection (e.g., VPN-as-a-Service) and respond with configuration information, enabling a secure connection to be established from a remote location Compl. ¶¶381 Compl. ¶¶390-393

U.S. Patent No. 11,516,080 - "Using virtual networking devices and routing information to associate network addresses with computing nodes"

• Technology Synopsis: The patent addresses virtual networking functionality for managed computer networks accessible from remote locations Compl. ¶69 The technology involves providing separate virtual computer networks to different clients, assigning network addresses to nodes in those networks, and using a "virtual peering router" to route traffic between the different virtual networks over the substrate network Compl. ¶73
• Asserted Claims: At least independent claim 1 is asserted Compl. ¶135
• Accused Features: The Nuage Networks Virtualized Services Platform is accused of infringement. It allegedly provides "Virtualized Cloud Services" to different clients, assigns network address ranges, and uses a "Nuage Networks NSG-BR (border router)" to act as a virtual peering router, managing an interconnection and routing traffic between the separate virtual networks Compl. ¶¶140 Compl. ¶¶153 Compl. ¶155

U.S. Patent No. 9,766,912 - "Virtual machine configuration"

• Technology Synopsis: The invention addresses the problem of updating virtual machine (VM) images, which traditionally required repackaging a snapshot (Compl. ¶79). The patented solution is to launch a VM using a base "virtual machine image configuration" and then supply separate "metadata configuration information" after launch to customize the VM, allowing updates to be applied transparently to the user without repackaging the base image (Compl. ¶¶80; Compl. ¶83).
• Asserted Claims: At least independent claim 10 is asserted (Compl. ¶344).
• Accused Features: Nokia CloudBand Infrastructure Software and Application Manager are accused of infringement. The complaint alleges these products use a "descriptor" that contains both VM image configuration and metadata, which is used to launch and then customize a Virtualized Network Function (VNF), thereby practicing the claimed method of post-launch configuration (Compl. ¶¶350; Compl. ¶¶354; Compl. ¶365).

U.S. Patent No. 11,425,194 - "Dynamically modifying a cluster of computing nodes used for distributed execution of a program"

• Technology Synopsis: The patent describes a system for managing distributed program execution by dynamically modifying the number of virtual machines (VMs) in a cluster (Compl. ¶87). A user provides instructions specifying a number of VMs and rules for how to modify that number based on resource utilization metrics; the system then monitors the cluster and automatically adds VMs when utilization exceeds a threshold (Compl. ¶¶91; Compl. ¶93).
• Asserted Claims: At least independent claim 1 is asserted (Compl. ¶163).
• Accused Features: The Nokia CloudBand Application Manager (CBAM) is accused of infringement. CBAM allegedly allows users to configure a Virtual Network Function (VNF) instance with a number of VMs and supports "VNF threshold policies" that define rules for automatically scaling out (adding VMs) when resource utilization KPIs are crossed, which allegedly practices the claimed method (Compl. ¶¶174; Compl. ¶176; Compl. ¶187).

U.S. Patent No. 9,329,909 - "Dynamically modifying a cluster of computing nodes used for distributed execution of a program"

• Technology Synopsis: Similar to the '194 Patent, this patent concerns dynamically modifying a cluster of computing nodes used for distributed program execution (Compl. ¶96). The system monitors the ongoing execution, determines that the actual amount of computing resources being used differs from an expected amount, and in response, initiates a change in the quantity of computing nodes (Compl. ¶¶97; Compl. ¶101; Compl. ¶102).
• Asserted Claims: At least independent claim 21 is asserted (Compl. ¶320).
• Accused Features: Nokia AirFrame Data Center and Nokia CloudBand are accused of infringement. The CloudBand portfolio allegedly supports distributed cloud infrastructures and uses a "policy-based placement algorithm" and monitoring of KPIs to determine when to initiate a change in the quantity of computing nodes, such as through a "scaling operation" (Compl. ¶¶328; Compl. ¶¶330; Compl. ¶¶334; Compl. ¶336).

U.S. Patent No. 9,253,211 - "Managing communications between computing nodes"

• Technology Synopsis: The technology concerns managing program execution across multiple, geographically distributed computing systems (Compl. ¶105). A client provides a request with configuration information indicating one or more geographical locations for program execution, and the system selects and manages execution on multiple computing nodes based on that geographical information (Compl. ¶¶198).
• Asserted Claims: At least independent claim 23 is asserted (Compl. ¶195).
• Accused Features: Nokia AirFrame Data Center and CloudBand Infrastructure Software are accused of infringement. The complaint alleges these products support a "Cloud Operations Manager" for "geographically distributed" cloud infrastructures and use TOSCA templates that allow for "placement" of services by "region," thereby practicing the claimed geographically-based selection and management (Compl. ¶¶203; Compl. ¶¶205; Compl. ¶208).

U.S. Patent No. 9,621,593 - "Managing execution of programs by multiple computing systems"

• Technology Synopsis: This patent is directed to managing program execution by selecting appropriate computing systems based on user-specified configuration information (Compl. ¶115). It describes a program execution service that receives a client request with configuration information and selects one or more computing nodes to execute the program based on that information (Compl. ¶300).
• Asserted Claims: At least independent claim 23 is asserted (Compl. ¶297).
• Accused Features: Nokia AirFrame Data Center and CloudBand Infrastructure Software are accused of infringement. The complaint alleges these products provide a "Cloud Operations Manager" that offers "single pane of glass management of hybrid, geographically distributed" infrastructures, receives configuration information via TOSCA templates, and selects computing nodes (the "CloudBand Node") for execution (Compl. ¶¶303; Compl. ¶¶305-306; Compl. ¶309).

U.S. Patent No. 8,296,419 - "Dynamically modifying a cluster of computing nodes used for distributed execution of a program"

• Technology Synopsis: This patent, related to the '194 and '909 patents, describes dynamically modifying a cluster of computing nodes (Compl. ¶127). The system receives configuration information, initiates execution, determines at a later time whether a minimum subset of nodes have begun executing as expected, and in response, initiates a change in the quantity of nodes (Compl. ¶131; Compl. ¶133).
• Asserted Claims: At least independent claim 4 is asserted (Compl. ¶247).
• Accused Features: Nokia CloudBand is accused of infringement. The complaint alleges CloudBand receives configuration via TOSCA templates, initiates execution using a policy-based placement algorithm, monitors execution against defined KPIs or alarms, and initiates a "scaling operation" or other change in response to the monitoring (Compl. ¶¶255; Compl. ¶¶257; Compl. ¶¶259; Compl. ¶261).

III. The Accused Instrumentality

Product Identification

• The complaint names a suite of Nokia products, collectively referred to as the "Accused Products" (Compl. ¶7). These include: Nokia Airframe Data Center, Nokia CloudBand, Nokia CloudBand Application Manager, Nokia CloudBand Infrastructure Software, Nokia Container Services, Nokia Cloud Operations Manager, Nokia Nuage Networks Virtualized Cloud Services, Nokia Nuage Networks Virtualized Services Platform, and Nokia Nuage Software Defined Network (SDN) (Compl. ¶7).

Functionality and Market Context

• The Accused Products are presented as components of Nokia's cloud computing and data center offerings (Compl. ¶23). The Nokia Nuage Networks Virtualized Services Platform (VSP) is described as a "data center and cloud networking framework" that automates the configuration and management of virtual networks using a software-defined networking (SDN) overlay (Compl. ¶140; Compl. p. 54). It includes a Virtualized Services Directory (VSD) for policy and a Virtualized Services Controller (VSC) for network control (Compl. p. 55). The Nokia CloudBand Application Manager (CBAM) is alleged to be an ETSI NFV-compliant manager that "automates lifecycle management" for Virtualized Network Functions (VNFs) (Compl. ¶169; Compl. p. 69). The Nokia AirFrame Data Center solution is described as a platform for "running demanding virtualized and cloud-native software workloads" (Compl. ¶224; Compl. p. 90).
• The complaint alleges these products represent Nokia's strategy to enter the cloud computing market, a field Plaintiff alleges it pioneered (Compl. ¶¶23-25). The functionality of these products is alleged to leverage Amazon's patented technologies for virtual networking, resource scaling, and distributed application management (Compl. ¶24). The complaint includes a diagram from a Nokia document illustrating the VSP solution components, including the VSD, VSC, and Virtual Routing and Switching (VRS) elements (Compl. p. 55).

IV. Analysis of Infringement Allegations

U.S. Patent No. 9,106,540 Infringement Allegations

• Identified Points of Contention:
  • Scope Questions: A central question may be whether Nokia's software-based Distributed Virtual Router (DVR), which is composed of distributed L2 and L3 agents, constitutes a "specified virtual router device" as contemplated by the patent. The defense might argue that the claim implies a more discrete, singular component rather than a distributed system of agents.
  • Technical Questions: The infringement theory hinges on whether the actions of Nokia's L2 and L3 agents in modifying and forwarding packets (Compl. ¶289) perform the specific function of "emulating further functionality of the specified virtual router device for modifying the communication" as required by the claim. The analysis will likely focus on the precise packet modifications and routing logic performed by the accused DVR. The complaint provides a diagram illustrating a PING request between two virtual machines, which it alleges demonstrates this distributed virtual routing functionality (Compl. p. 120).

U.S. Patent No. 8,117,289 Infringement Allegations

• Identified Points of Contention:
  • Scope Questions: A likely point of contention will be the definition of "network devices." Plaintiff alleges that both a software component like the Nokia Virtualized Service Router (VSR) and a logical function defined in a TOSCA template (e.g., a "Load Balancer" node) meet this limitation (Compl. ¶237; Compl. ¶239). The defense may argue that the term requires a more concrete hardware or software appliance, not merely a logical construct in a configuration file. The complaint includes a diagram showing CloudBand network support that leverages Nuage Networks VSP as the SDN controller, which illustrates the overlay concept central to this patent (Compl. p. 97).
  • Technical Questions: The analysis may focus on whether the accused system's process of using a TOSCA template to define a topology and its functions constitutes "selecting" a network device and "routing" a communication to it. The defense could argue that this is merely configuration, not the active "selecting" and "routing" process required by the claim.

V. Key Claim Terms for Construction

For U.S. Patent No. 9,106,540:

• The Term: "virtual router device" (from claim 4)
• Context and Importance: The infringement analysis for the '540 Patent depends on whether Nokia's accused Distributed Virtual Router (DVR) system, which is implemented as a collection of distributed software agents, qualifies as a "virtual router device." Practitioners may focus on this term because its construction will determine whether a decentralized, agent-based system can be considered a singular "device" under the patent's language.
• Intrinsic Evidence for Interpretation:
  • Evidence for a Broader Interpretation: The specification focuses on "emulat[ing] functionality that would be provided by specified logical networking devices if they were physically present" ('540 Patent, col. 2:23-25). This language may support a construction where the manner of emulation (e.g., distributed agents vs. a single software instance) is less important than achieving the router's functionality.
  • Evidence for a Narrower Interpretation: The claim recites "a specified virtual router device," using the singular "a" and "device." This phrasing might support an argument that the claim requires a discrete, identifiable component, which a collection of distributed agents may not be.

For U.S. Patent No. 8,117,289:

• The Term: "network devices" (from claim 20)
• Context and Importance: Plaintiff's infringement theory relies on construing this term to cover both software appliances like the Nokia VSR and logical functions defined in TOSCA templates, such as a "Load Balancer" (Compl. ¶237; Compl. ¶239). The viability of the infringement claim will depend on whether such software-defined logical constructs fall within the scope of "network devices."
• Intrinsic Evidence for Interpretation:
  • Evidence for a Broader Interpretation: The abstract describes "emulating... functionality that would be provided by virtual networking devices." The specification further explains that this may occur "without physically providing those networking devices" ('289 Patent, col. 2:40-48). This suggests the term is not limited to physical hardware and can encompass emulated or virtual versions.
  • Evidence for a Narrower Interpretation: The claim requires selecting devices that are "accessible via the substrate network." A defendant may argue this implies the "device" must have a network address and be an independently accessible entity on the substrate network, a characteristic a purely logical function within a configuration template might not possess.

VI. Other Allegations

• Indirect Infringement: For each of the twelve asserted patents, the complaint alleges active inducement under 35 U.S.C. § 271(b) (Compl. ¶¶157; Compl. ¶189; Compl. ¶212; Compl. ¶241; Compl. ¶263; Compl. ¶291; Compl. ¶314; Compl. ¶338; Compl. ¶367; Compl. ¶395; Compl. ¶428; Compl. ¶466). The allegations are based on Nokia providing "directions, technical support, guides, marketing materials, instruction manuals, and/or other information" that allegedly encourage and facilitate customers' infringing use of the Accused Products (Compl. ¶¶158; Compl. ¶190; Compl. ¶213; Compl. ¶242; Compl. ¶264; Compl. ¶292; Compl. ¶315; Compl. ¶339; Compl. ¶368; Compl. ¶396; Compl. ¶429; Compl. ¶467). Contributory infringement is also alleged for each patent (Compl. ¶¶161; Compl. ¶193; Compl. ¶216; Compl. ¶245; Compl. ¶267; Compl. ¶295; Compl. ¶318; Compl. ¶342; Compl. ¶371; Compl. ¶399; Compl. ¶432; Compl. ¶470).
• Willful Infringement: The complaint does not allege pre-suit knowledge of infringement for any of the asserted patents. Instead, for each patent, it states that "Nokia is and has been on notice of the infringement... at least as of the time Amazon filed and provided notice of this Complaint" (Compl. ¶¶156; Compl. ¶188; Compl. ¶211; Compl. ¶240; Compl. ¶262; Compl. ¶290; Compl. ¶313; Compl. ¶337; Compl. ¶366; Compl. ¶394; Compl. ¶427; Compl. ¶465). This language establishes a basis for seeking enhanced damages for any post-filing infringement.

VII. Analyst's Conclusion: Key Questions for the Case

This litigation presents a broad challenge to Nokia's cloud and data center portfolio, asserting twelve patents that Amazon claims are foundational to modern cloud computing. The resolution of the case will likely depend on the court's determination of the following central questions:

• A question of definitional scope: Can patent claim terms such as "virtual router device" and "network device," drafted in the context of earlier cloud architectures, be construed to cover the highly distributed, abstracted, and policy-driven software functionalities of a modern Software-Defined Network? The outcome may depend on whether the court focuses on the functional result achieved or the specific form of the implementation.
• A question of technological mapping: Will Amazon be able to demonstrate that the specific operations of Nokia's products-such as using TOSCA templates for configuration, distributed agents for routing, and KPI-based policies for scaling-map directly onto the discrete steps recited in the various patent claims? A key challenge for the plaintiff will be to prove that Nokia's integrated systems perform the specific, ordered steps of "selecting," "emulating," "modifying," and "routing" as required by the patents, rather than merely achieving a similar outcome through a fundamentally different technical approach.
• An issue of patent thicket navigation: With multiple patents asserted across overlapping technological areas (e.g., three patents on dynamic cluster modification), the case will test whether the distinct claim language of each patent is sufficient to establish separate instances of infringement by a single set of product features. Nokia may argue that the allegations represent an attempt to apply a web of similar patents to a single technology, while Amazon will need to prove that each asserted claim is independently and non-redundantly infringed.