Arc Link LLC v. Fortinet Inc

I. Executive Summary and Procedural Information

• Parties & Counsel:
  • Plaintiff: Arc Link LLC (Texas)
  • Defendant: Fortinet Inc. (Delaware)
  • Plaintiff's Counsel: Rubino IP
• Case Identification: 2:26-cv-00451, E.D. Tex., 06/08/2026
• Venue Allegations: Venue is alleged to be proper in the Eastern District of Texas because Defendant Fortinet Inc. has a "regular and established place of business" in the district and has allegedly committed acts of infringement there.
• Core Dispute: Plaintiff alleges that Defendant's broad portfolio of network security and management products infringes five patents related to wireless channel optimization, software-defined network (SDN) monitoring, AI-based threat analysis, and automated firewall deployment.
• Technical Context: The technologies at issue address core challenges in modern enterprise networking, including managing Wi-Fi interference, providing multi-tenant security services, and using artificial intelligence to detect and mitigate network threats.
• Key Procedural History: The complaint does not reference any prior litigation, Inter Partes Review (IPR) proceedings, or licensing history related to the patents-in-suit. The case is initiated by this complaint.

Case Timeline

Date	Event
2006-02-08	'592 Patent Priority Date
2012-06-12	'592 Patent Issue Date
2013-04-11	'328 Patent Priority Date
2016-07-01	'548 Patent Priority Date
2017-01-17	'328 Patent Issue Date
2017-01-24	'548 Patent Issue Date
2018-11-20	'622 Patent Priority Date
2020-04-28	'655 Patent Priority Date
2022-05-17	'622 Patent Issue Date
2023-01-24	'655 Patent Issue Date
2026-06-08	Complaint Filing Date

II. Technology and Patent(s)-in-Suit Analysis

U.S. Patent No. 9,549,328 - Method to Optimize the Communication Parameters Between an Access Point and at Least One Client Device

• Patent Identification: U.S. Patent No. 9,549,328, titled "Method to Optimize the Communication Parameters Between an Access Point and at Least One Client Device," issued on January 17, 2017 Compl. ¶7
• The Invention Explained:
  • Problem Addressed: In dense wireless environments, the proliferation of Wi-Fi Access Points (APs) operating in the same unlicensed spectrum creates significant interference, which degrades network performance '328 Patent, col. 1:15-24 Newer standards using wider channel bandwidths exacerbate this problem by increasing spectrum consumption '328 Patent, col. 1:20-25
  • The Patented Solution: The patent describes a decentralized method for an AP to dynamically select an optimal communication channel. The AP monitors interference on its current channel, informs client devices to test a potential new channel, and compares interference levels between the two. Crucially, the method requires the AP to first verify that all connected client devices are capable of switching to the new channel before instructing them to do so '328 Patent, abstract '328 Patent, col. 7:51-65
  • Technical Importance: The invention provides a mechanism for automated, localized spectrum management that does not require a central network controller, making it suitable for chaotically deployed environments like home and small-business networks '328 Patent, col. 2:1-11
• Key Claims at a Glance:
  • The complaint asserts at least independent claim 1 Compl. ¶22
  • The essential elements of Claim 1 include:
    • establishing a connection on a first channel;
    • exchanging data on the first channel;
    • monitoring a first interference level on the first channel;
    • reviewing compatibility levels of client devices to determine their ability to switch channels;
    • instructing all client devices to switch to a second channel only if all devices are compatible and able to switch;
    • determining a second interference level on the second channel;
    • comparing the first and second interference levels; and
    • deciding whether to switch back to the first channel based on the comparison.
  • The complaint does not explicitly reserve the right to assert other claims.

U.S. Patent No. 11,563,655 - Network Monitoring Apparatus and Method Thereof in Programmable Network Virtualization

• Patent Identification: U.S. Patent No. 11,563,655, titled "Network Monitoring Apparatus and Method Thereof in Programmable Network Virtualization," issued on January 24, 2023 Compl. ¶8
• The Invention Explained:
  • Problem Addressed: In network virtualization environments where multiple tenants share a single physical network, monitoring the performance of each tenant's individual virtual network is difficult. Standard monitoring tools collect statistics at the physical level, making it challenging to provide isolated, per-tenant performance data '655 Patent, col. 1:49-56 '655 Patent, col. 3:55-65
  • The Patented Solution: The patent discloses a "network hypervisor" containing a "statistics virtualization module." This module can receive a statistics request for a single virtual network, determine which physical resources it uses (and whether they are shared), and then provide isolated virtual statistics (e.g., virtual flow entry and virtual port statistics) for that specific virtual network, even when the underlying physical hardware is shared '655 Patent, abstract '655 Patent, col. 2:6-14
  • Technical Importance: This technology enables accurate, per-tenant performance monitoring in multi-tenant SDN environments, which is fundamental for enforcing service-level agreements (SLAs), billing, and network troubleshooting in cloud and managed service provider networks '655 Patent, col. 4:1-18
• Key Claims at a Glance:
  • The complaint alleges infringement of at least independent claim 1 Compl. ¶¶41-42
  • The essential elements of Claim 1 include:
    • a statistics virtualization module configured to receive a request for statistics for a first virtual network among multiple virtual networks;
    • determining if a physical resource is shared between the first virtual network and another virtual network;
    • isolatedly providing individual physical resource consumption statistics to the first virtual network based on this determination; and
    • providing respective virtual flow entry statistics and virtual port statistics for the first virtual network.
  • The complaint does not explicitly reserve the right to assert other claims.

U.S. Patent No. 8,200,592 - System and Method for Modeling Multilabel Classification and Ranking

• Patent Identification: U.S. Patent No. 8,200,592, "System and Method for Modeling Multilabel Classification and Ranking," issued June 12, 2012 Compl. ¶9
• Technology Synopsis: This patent describes a system for monitoring machine conditions by employing a "calibrated label ranking model." The model learns to partition data into a "first subset of labels" (relevant conditions) and a "second subset of labels" (non-relevant conditions), separated by a "zero-point." This allows the system to evaluate new sensor data and output a ranked, classified machine condition or alert '592 Patent, abstract
• Asserted Claims: At least independent claim 20 Compl. ¶53
• Accused Features: The complaint accuses Fortinet's FortiAIOps products, which allegedly use an AI/ML engine to monitor network health, dynamically calculate SLA thresholds (a zero-point), distinguish between actionable and non-actionable events, and output network health insights and anomalies Compl. ¶¶54-56

U.S. Patent No. 9,552,548 - Using Classified Text and Deep Learning Algorithms to Identify Risk and Provide Early Warning

• Patent Identification: U.S. Patent No. 9,552,548, "Using Classified Text and Deep Learning Algorithms to Identify Risk and Provide Early Warning," issued January 24, 2017 Compl. ¶10
• Technology Synopsis: The technology involves using deep learning algorithms trained on classified text datasets (e.g., documents from prior lawsuits) to analyze an enterprise's internal electronic communications. The system is designed to identify potential risks, such as future litigation, and generate a scored output as an "early warning" to allow for proactive mitigation '548 Patent, abstract
• Asserted Claims: At least independent claim 17 Compl. ¶67
• Accused Features: The complaint targets Fortinet's FortiDLP and FortiMail products. These products are alleged to use trained AI, machine learning, and/or LLM-based text classifiers to analyze enterprise content, identify risks like data exfiltration or phishing, and output alerts or reports to case management systems Compl. ¶¶68-72

U.S. Patent No. 11,336,622 - Apparatus and Method for Deploying Firewall on SDN and Network Using the Same

• Patent Identification: U.S. Patent No. 11,336,622, "Apparatus and Method for Deploying Firewall on SDN and Network Using the Same," issued May 17, 2022 Compl. ¶6
• Technology Synopsis: This patent describes an apparatus for deploying a firewall in an SDN environment. The system uses a central controller that receives encrypted firewall rules from individual hosts, decrypts and merges them into a single "merged firewall rule," and then deploys this merged rule to a selected network switch. This offloads the firewall enforcement from the hosts to the network infrastructure '622 Patent, abstract
• Asserted Claims: At least independent claim 1 Compl. ¶83
• Accused Features: The complaint accuses the Fortinet "Security Fabric," including FortiGate, FortiManager, and FortiSwitch products. This ecosystem allegedly functions as an SDN where FortiManager centrally orchestrates security policies (firewall rules) that are deployed to FortiGate and FortiSwitch devices, using public key infrastructure (PKI) for secure communication Compl. ¶¶84-88

III. The Accused Instrumentality

Product Identification

• The complaint names a broad suite of Fortinet's networking and security products, primarily the FortiAP series of wireless access points, the FortiGate series of next-generation firewalls, the FortiOS operating system, and associated management and analytics platforms like FortiManager and FortiAIOps Compl. ¶¶21, 40, 52, 66, 82

Functionality and Market Context

• The accused products collectively form the "Fortinet Security Fabric," an integrated architecture for enterprise network security Compl. ¶34 Compl. ¶85 The complaint alleges these products are central to Fortinet's business Compl. ¶18
• For the '328 Patent, the relevant functionality is found in FortiAP and FortiWiFi devices running FortiOS. These products employ features named "Distributed Radio Resource Provisioning" (DARRP) and "frequency handoff or band-steering" to automatically monitor the radio frequency environment and dynamically change channels to optimize wireless performance Compl. ¶¶25-27 A screenshot from Fortinet's documentation illustrates the system's topology for managing APs Compl. p. 7
• For the '655 Patent, the relevant functionality is the "multi-VDOM" (Virtual Domain) feature in FortiGate appliances. This feature virtualizes a single physical firewall into multiple, logically independent firewalls for different tenants. The system provides per-VDOM monitoring dashboards and statistics, which the complaint alleges provides the claimed isolated statistics for each virtual network Compl. ¶42 A visual from the complaint shows an explanation of "Global and per-VDOM resources," highlighting the separation of statistics Compl. p. 16

IV. Analysis of Infringement Allegations

'9,549,328 Patent Infringement Allegations

Claim Element (from Independent Claim 1)	Alleged Infringing Functionality	Complaint Citation	Patent Citation
establishing by the access point a connection with the client devices on a first channel having a first center frequency and a first bandwidth	The FortiAP access point establishes Wi-Fi connections with client devices on a selected radio channel (e.g., a 2.4 GHz or 5 GHz channel).	¶23	col. 7:42-45
exchanging by the access point data through the first channel with the client devices	The FortiAP uses its wireless radio and network interface to exchange data with connected client devices.	¶24	col. 7:46-48
monitoring by the access point a first interference level on the first channel	The FortiAP's "Distributed Radio Resource Provisioning" (DARRP) feature performs RF monitoring and radio scanning to measure interference on the current channel. The complaint includes a screenshot explaining this feature (Compl. p. 8).	¶25	col. 7:49-50
reviewing compatibility levels to the access point from the client devices...defining whether the client device is able to dynamically switch...	The "frequency handoff or band-steering" feature probes clients to determine their capabilities, such as whether they are dual-band capable and will respond to steering instructions. A visual explaining this functionality is provided (Compl. p. 9).	¶26	col. 7:51-57
instructing the client devices to switch to a second channel...only if all compatibility levels for all client devices indicate that all client devices are able to dynamically switch from the first channel to the second channel	The band-steering logic allegedly instructs clients to switch channels only after determining they are capable, which the complaint equates to satisfying the "all...are able" requirement.	¶27	col. 7:58-65
determining by the access point a second interference level on the second channel	The DARRP and Automatic Channel Selection (ACS) features perform RF scans to measure interference levels on alternative channels before a potential switch.	¶28	col. 8:1-3
comparing by the access point the first interference level with the second interference level	Fortinet's channel-selection logic, part of DARRP/ACS, compares the quality and interference metrics of different channels to find an optimal one.	¶29	col. 8:4-5
deciding by the access point whether to switch back to the first channel based on the comparison	The DARRP feature is alleged to perform periodic re-evaluation and optimization, which includes the possibility of switching back to a previously used channel if conditions change.	¶30	col. 8:6-8

'11,563,655 Patent Infringement Allegations

Claim Element (from Independent Claim 1)	Alleged Infringing Functionality	Complaint Citation	Patent Citation
a statistics virtualization module configured to receive a request for individual physical resource consumption statistics for a first virtual network of multiple separately managed virtual networks	The FortiGate's VDOM monitoring subsystem, accessible via FortiManager or an API, receives requests for statistics specific to one VDOM (a virtual network).	¶42	col. 11:2-5
determine whether the at least one physical resource is shared between the first virtual network and at least one other of the multiple separately managed virtual networks	The FortiOS operating system is aware that physical resources such as CPU, memory, and network interfaces are shared across the multiple VDOMs configured on the appliance.	¶42	col. 11:6-9
isolatedly provide individual physical resource consumption statistics to the first virtual network based on the determination whether the at least one physical resource is shared	The FortiGate provides per-VDOM dashboards and tenant-isolated statistics, ensuring a tenant of one VDOM only sees statistics relevant to their virtual network, not the entire physical appliance. The complaint includes a screenshot explaining this multi-VDOM model (Compl. p. 15).	¶42	col. 11:10-15
wherein the statistics virtualization module provides respective virtual flow entry statistics to the first virtual network, including: provision of virtual flow entry statistics for the first virtual network, provision of virtual port statistics based on the at least one physical resource for the first virtual network	The VDOM system provides per-tenant statistics such as session tables and policy hit counters (allegedly "virtual flow entry statistics") and statistics for virtual interfaces (allegedly "virtual port statistics").	¶42	col. 11:16-24

• Identified Points of Contention:
  • '328 Patent: A primary point of contention may be the claim requirement to instruct a switch "only if all compatibility levels for all client devices indicate that all client devices are able to dynamically switch." The complaint alleges that Fortinet's per-client "band-steering" logic satisfies this Compl. ¶27, but this raises the question of whether a series of individual checks meets the claim's "all devices" language, which could be interpreted as requiring a single, unanimous condition for a group switch.
  • '655 Patent: The infringement analysis will likely focus on whether Fortinet's commercial "VDOM" feature qualifies as a "network hypervisor implementing software defined network (SDN)-based network virtualization" as required by the patent's preamble. While both involve virtualization, the defense may argue they are distinct technical concepts and that "VDOM" is a proprietary multi-tenancy feature, not an open standards-based SDN hypervisor.

V. Key Claim Terms for Construction

For the '328 Patent:

• The Term: "only if all compatibility levels for all client devices indicate that all client devices are able to dynamically switch" (Claim 1)
• Context and Importance: This term is critical as it defines the prerequisite for executing a channel switch. The infringement case depends on whether Fortinet's accused features, which seem to operate on a per-client or dynamic basis, satisfy what appears to be a strict, collective "all-or-nothing" condition. Practitioners may focus on this term because "all" is an absolute that may be difficult to meet in a dynamic wireless environment.
• Intrinsic Evidence for Interpretation:
  • Evidence for a Broader Interpretation: The patent's goal is to provide an "online" and "transparent" algorithm that avoids "disturbances to ongoing traffic" '328 Patent, col. 2:11-14 This purpose could support an interpretation where the AP's responsibility is simply to ensure no client is dropped, which could be achieved through various logic schemes, not just a single, literal poll of all devices.
  • Evidence for a Narrower Interpretation: The plain language of the claim uses the word "all" twice, suggesting a strict, unanimous requirement. The detailed description does not appear to provide an alternative definition or embodiment that would weaken this clear language, which may support a narrow construction limited to a literal, collective check.

For the '655 Patent:

• The Term: "network hypervisor" (Claim 1 Preamble)
• Context and Importance: This term frames the entire invention. The patent is directed to monitoring in SDN virtualization environments. The viability of the infringement claim depends on whether Fortinet's "VDOM" technology can be construed as a "network hypervisor."
• Intrinsic Evidence for Interpretation:
  • Evidence for a Broader Interpretation: The patent's background describes a network hypervisor as a "network control element" that "abstracts physical network resources such as switches, ports, and links as virtual network resources" for tenants '655 Patent, col. 1:37-44 This functional description could be argued to read on the functionality of FortiGate VDOMs, which virtualize a physical appliance.
  • Evidence for a Narrower Interpretation: The patent consistently discusses the invention in the context of "software defined networking (SDN)" '655 Patent, abstract '655 Patent, col. 1:21 The defense may argue that in the relevant art, a "network hypervisor" (e.g., Open vSwitch) is a specific component of an SDN architecture and is technically distinct from a proprietary firewall's multi-tenancy feature like VDOMs.

VI. Other Allegations

• Indirect Infringement: For each asserted patent, the complaint alleges induced infringement, stating that Fortinet provides customers with instructions (e.g., user manuals, product literature) that encourage use of the accused features in an infringing manner Compl. ¶¶34, 46, 60, 76, 92 The complaint also pleads contributory infringement, alleging the accused components are material to the inventions, are not staple articles of commerce, and are known by Fortinet to be specially adapted for infringing use Compl. ¶¶35, 47, 61, 77, 93
• Willful Infringement: Willfulness is alleged based on Fortinet's knowledge of its infringement as of the filing date of the complaint. The complaint also pleads willful blindness, alleging that Fortinet has maintained a policy of not reviewing the patents of others in its industry, thereby remaining willfully blind to infringement since the patents were issued Compl. ¶¶33, 45, 59, 75, 91

VII. Analyst's Conclusion: Key Questions for the Case

1. Semantic Mapping: A central theme across all five patents is a potential mismatch between the specific, often academic, terminology used in the patent claims (e.g., "network hypervisor," "calibrated label ranking model") and the commercial branding and implementation of the accused Fortinet features (e.g., "VDOMs," "FortiAIOps"). The case will likely involve significant disputes over whether the accused products, as they function, fall within the technical scope of these claim terms.
2. Conditional Claim Language: For the '328 patent, the infringement analysis may hinge on the interpretation of the conditional clause "only if all... devices are able to dynamically switch." The court will have to decide whether the accused system's logic for managing channel changes, which appears to be client-specific, satisfies this stringent-sounding, collective requirement.
3. Case Complexity and Focus: The assertion of five patents covering a wide and diverse range of technologies-from RF management to AI-based text analysis-presents significant case management complexity. A key question will be whether the case proceeds on all fronts or becomes focused on a smaller subset of bellwether claims and products that are perceived as the strongest or most commercially significant.