Arc Link LLC v. Check Point Software Tech Ltd

I. Executive Summary and Procedural Information

• Parties & Counsel:
  • Plaintiff: Arc Link LLC (Texas)
  • Defendant: Check Point Software Technologies Ltd. (Israel)
  • Plaintiff's Counsel: Rubino IP
• Case Identification: Arc Link LLC v. Check Point Software Technologies Ltd., 2:26-cv-00476, E.D. Tex., 06/17/2026
• Venue Allegations: Venue is alleged to be proper on the basis that the defendant is not a resident of the United States and may therefore be sued in any judicial district. The complaint also alleges substantial business activities within the state and district.
• Core Dispute: Plaintiff alleges that Defendant's network security appliances and software infringe four patents related to Wi-Fi channel optimization, network virtualization monitoring, machine learning-based condition analysis, and deep learning-based risk identification.
• Technical Context: The technologies at issue relate to the management, performance optimization, and security analysis of complex, modern computer networks, including wireless (Wi-Fi) and virtualized (SDN) environments.
• Key Procedural History: The complaint does not mention any prior litigation, Inter Partes Review (IPR) proceedings, or other significant procedural events related to the patents-in-suit. The complaint does allege that the accused Quantum Firewall appliances were introduced after the issue date of the '655 Patent.

Case Timeline

Date	Event
2006-02-08	'592 Patent Priority Date
2012-06-12	'592 Patent Issue Date
2013-04-11	'328 Patent Priority Date
2016-07-01	'548 Patent Priority Date
2017-01-17	'328 Patent Issue Date
2017-01-24	'548 Patent Issue Date
2020-04-28	'655 Patent Priority Date
2023-01-24	'655 Patent Issue Date
2023-01-24	Accused Quantum Firewall appliances introduced or offered after this date
2026-06-17	Complaint Filing Date

II. Technology and Patent(s)-in-Suit Analysis

---

U.S. Patent No. 9,549,328: Method to Optimize the Communication Parameters Between an Access Point and at Least One Client Device (issued Jan. 17, 2017)

The Invention Explained

• Problem Addressed: In dense wireless environments like urban areas, numerous Wi-Fi networks must share a limited spectrum, leading to interference and reduced performance Compl. ¶14 '328 Patent, col. 1:16-25 Dynamically allocating channel frequencies and bandwidths is difficult, particularly in decentralized "home network" settings that lack a central controller '328 Patent, col. 2:1-10
• The Patented Solution: The patent discloses a decentralized method where each access point (AP) independently and transparently optimizes its channel settings. The AP temporarily tests a new channel (with a different frequency and/or bandwidth) by instructing its clients to switch, monitors the interference on this new channel, compares it to the interference on the original channel, and then decides whether to permanently adopt the new channel or switch back '328 Patent, abstract This process is designed to be minimally disruptive to ongoing traffic by using "micro-sensing" operations '328 Patent, col. 10:26-41
• Technical Importance: This approach provides a practical, online method for dynamic spectrum management in uncoordinated Wi-Fi deployments, allowing networks to adapt to changing radio-frequency conditions without requiring a central administrator. '328 Patent, col. 2:1-10

Key Claims at a Glance

• The complaint asserts at least independent claim 1 Compl. ¶22
• The essential elements of method claim 1 include:
  • Establishing a connection on a first channel with a specific center frequency and bandwidth.
  • Exchanging data with client devices on that channel.
  • Monitoring a first interference level on the first channel.
  • Reviewing compatibility levels from client devices, which define if they can dynamically switch channels.
  • Instructing the client devices to switch to a second channel (with a different frequency/bandwidth) "only if all compatibility levels for all client devices indicate" they are able to switch.
  • Determining a second interference level on the second channel.
  • Comparing the first and second interference levels.
  • Deciding whether to switch back to the first channel based on the comparison.
• The complaint does not explicitly reserve the right to assert dependent claims but makes broad allegations against "one or more claims" Compl. ¶21

---

U.S. Patent No. 11,563,655: Network Monitoring Apparatus and Method Thereof in Programmable Network Virtualization (issued Jan. 24, 2023)

The Invention Explained

• Problem Addressed: In a software-defined network (SDN) environment where multiple "tenants" operate separate virtual networks on shared physical hardware, it is difficult to monitor the performance of a single virtual network. Statistics collected from physical switches are typically aggregated, making it impossible to isolate the resource consumption of one specific tenant. Compl. ¶15 '655 Patent, col. 1:49-56
• The Patented Solution: The patent describes a computing apparatus with a "statistics virtualization module" within a network hypervisor. This module receives a request for statistics for a single virtual network. It then determines which physical resources are shared among multiple virtual networks and uses algorithms to disaggregate the commingled physical statistics, thereby providing "isolatedly" accurate, per-tenant performance data. '655 Patent, abstract '655 Patent, col. 5:10-29
• Technical Importance: This technology enables accurate, per-tenant performance monitoring and resource accounting in multi-tenant cloud and virtualized network environments, which is critical for enforcing service-level agreements (SLAs), billing, and troubleshooting. '655 Patent, col. 1:36-44

Key Claims at a Glance

• The complaint asserts at least independent claim 1 Compl. ¶41
• The essential elements of apparatus claim 1 include a computing apparatus with a statistics virtualization module configured to:
  • Receive a request for individual physical resource consumption statistics for a first virtual network of multiple separately managed virtual networks.
  • Determine whether at least one physical resource is shared between the first virtual network and at least one other virtual network.
  • "Isolatedly provide" individual physical resource consumption statistics to the first virtual network based on the determination of whether the resource is shared.
• The complaint alleges infringement of "one or more claims" Compl. ¶40

---

Multi-Patent Capsules

U.S. Patent No. 8,200,592: System and Method for Modeling Multilabel Classification and Ranking (issued June 12, 2012)

• Technology Synopsis: The patent describes a method for monitoring complex systems where multiple conditions or faults can exist simultaneously (multilabel classification) Compl. ¶16 The invention proposes creating a model that not only identifies and ranks these conditions but also establishes a "zero-point" to serve as a cut-off, allowing the system to distinguish between relevant, actionable conditions and non-relevant, background ones '592 Patent, abstract '592 Patent, col. 2:5-11
• Asserted Claims: The complaint asserts at least independent claim 20 Compl. ¶54
• Accused Features: The complaint accuses Check Point ThreatCloud AI and Skyline products of infringement Compl. ¶54 It alleges these products monitor network conditions, employ a "calibrated label ranking model" using "thresholding, baselining, prioritization, [or] classification" to represent a "zero-point label," and separate relevant conditions from non-relevant ones Compl. ¶56

U.S. Patent No. 9,552,548: Using Classified Text and Deep Learning Algorithms to Identify Risk and Provide Early Warning (issued Jan. 24, 2017)

• Technology Synopsis: The patent discloses a system for proactively identifying potential risks (such as litigation) within an enterprise by analyzing internal electronic communications Compl. ¶17 The method involves training deep learning algorithms on large, classified datasets of text (e.g., documents from prior lawsuits) and then using the trained algorithms to scan internal communications like emails to score them for risk and provide an early warning '548 Patent, abstract '548 Patent, col. 1:41-57
• Asserted Claims: The complaint asserts at least independent claim 17 Compl. ¶68
• Accused Features: The complaint accuses Check Point Email Security (formerly Harmony), ThreatCloud AI, and related products Compl. ¶67 The alleged infringing functionality includes using trained AI/deep learning models to analyze enterprise emails and other communications to identify and report threats such as phishing, malware, and business email compromise Compl. ¶¶69-73

III. The Accused Instrumentality

Product Identification

The complaint identifies four main groups of accused products:

1. Wireless Appliances: Check Point Spark Firewall and Quantum Spark Wi-Fi appliances (e.g., Spark Firewall 2530 Wi-Fi 7) and associated wireless-management software, which are alleged to infringe the '328 Patent Compl. ¶21
2. Virtualization Software: Check Point Quantum R82 and R82.10 security-gateway software featuring VSX and VSNext functionality, running on appliances like the Check Point Force 9100 Security Gateway, alleged to infringe the '655 Patent Compl. ¶40
3. AI-based Monitoring: Check Point ThreatCloud AI and Skyline, which use telemetry and analytics to monitor network conditions, alleged to infringe the '592 Patent Compl. ¶53
4. AI-based Content Analysis: Check Point Email Security (formerly Harmony), ThreatCloud AI, and related AI-analysis products that scan enterprise communications, alleged to infringe the '548 Patent Compl. ¶67

Functionality and Market Context

• The complaint alleges these products form a comprehensive suite of network management and security solutions. The wireless appliances provide Wi-Fi access point functionality with features for automatic channel management Compl. ¶¶21-23 A screenshot from Defendant's documentation shows a setting to "Enable automatic WiFi Channel Change," which specifies whether the device "switches channels automatically during operation" Compl. p. 10
• The virtualization products are alleged to allow a single physical hardware device to run multiple, separate "Virtual Systems" or firewalls Compl. ¶42 A product description for the accused VSX technology states that it "runs several virtual firewalls on the same hardware" Compl. p. 15
• The AI-powered products are alleged to use machine learning and deep learning to analyze vast amounts of data-from network telemetry to the content of emails-to identify threats, classify risks, and provide alerts (Compl. ¶53; Compl. ¶54; Compl. ¶55; Compl. ¶56; Compl. ¶57). A product description explains that "Email Security intercepts and sends the email to Check Point's ThreatCloud for analysis before the email is delivered to the recipient" to handle malicious content Compl. p. 27

IV. Analysis of Infringement Allegations

'328 Patent Infringement Allegations

Claim Element (from Independent Claim 1)	Alleged Infringing Functionality	Complaint Citation	Patent Citation
establishing by the access point a connection with the client devices on a first channel having a first center frequency and a first bandwidth	The Spark Firewall 2530 appliance, acting as an access point, establishes a connection with Wi-Fi client devices on a selected wireless channel with a specific frequency and width.	¶23	col. 17:41-45
exchanging by the access point data through the first channel with the client devices	The appliance exchanges wireless data-frame communications with associated Wi-Fi client devices over the selected channel.	¶24	col. 17:46-48
monitoring by the access point a first interference level on the first channel	The appliance's wireless radio performs monitoring of channel conditions, including congestion and availability assessment.	¶25	col. 17:49-51
reviewing compatibility levels to the access point from the client devices, a compatibility level for a client device defining whether the client device is able to dynamically switch from the first channel to another second channel... and if the client device will change channels in response to an instruction	The appliance reviews client-device wireless capabilities, including whether the device can operate on another band/channel and will respond to an instruction to change channels.	¶26	col. 17:52-65
instructing the client devices to switch to a second channel... only if all compatibility levels for all client devices indicate that all client devices are able to dynamically switch from the first channel to the second channel	The appliance performs an automatic Wi-Fi channel change or client steering that causes compatible client devices to switch channels, allegedly only if all devices are able to do so.	¶27	col. 18:1-9
determining by the access point a second interference level on the second channel	The appliance assesses or monitors wireless-channel conditions on the alternative selected channel.	¶28	col. 18:10-12
comparing by the access point the first interference level with the second interference level	The appliance's automatic channel-selection logic compares wireless-channel conditions to identify a preferred or less-congested channel.	¶29	col. 18:13-15
deciding by the access point whether to switch back to the first channel based on the comparison	The appliance's channel-management logic evaluates whether to remain on the current channel, switch, or return to a prior channel based on monitored conditions.	¶30	col. 18:16-19

Identified Points of Contention

• Scope Question: A primary issue may be whether the accused product's "automatic WiFi Channel Change" feature Compl. p. 10 performs the specific, conditional logic required by the claim, particularly the step of switching "only if all compatibility levels for all client devices indicate" they are able to switch. The litigation may focus on what evidence supports this "all-or-nothing" condition being met.
• Technical Question: The claim concludes with "deciding... whether to switch back to the first channel," which suggests a temporary trial of the second channel. This raises the question of whether the accused product's functionality, described as "automatic channel-selection logic" Compl. ¶29, is a one-way move to a better channel or if it performs the trial-and-revert process described in the patent.

'655 Patent Infringement Allegations

Claim Element (from Independent Claim 1)	Alleged Infringing Functionality	Complaint Citation	Patent Citation
a statistics virtualization module configured to receive a request for individual physical resource consumption statistics for a first virtual network of multiple separately managed virtual networks	The accused products include a "statistics virtualization module" (e.g., VSX status, SmartConsole) that receives a request for statistics for a specific "Virtual System" running on the gateway.	¶42	col. 12:47-52
determine whether the at least one physical resource is shared between the first virtual network and at least one other of the multiple separately managed virtual networks	The accused products run multiple Virtual Systems on shared physical gateway hardware (e.g., shared CPU, memory, interfaces), and the system is allegedly configured to determine this shared status.	¶42	col. 12:53-57
and isolatedly provide individual physical resource consumption statistics to the first virtual network based on the determination whether the at least one physical resource is shared	The accused products allegedly provide per-Virtual-System status, monitoring, logs, and counters that are isolated to that specific virtual network. A screenshot of a command-line output for the 'vsx stat -1' command shows separate statistics for a 'VSX Gateway' and multiple 'Virtual System' instances, including connection counts and limits (Compl. p. 17).	¶42	col. 12:58-63

Identified Points of Contention

• Scope Question: The dispute may center on the meaning of "isolatedly provide." The patent describes specific algorithms for disaggregating statistics from a shared physical source '655 Patent, col. 5:10-col. 6:30 This raises the question of whether simply reporting counters that are already natively separated at the hardware or driver level meets this limitation, or if the claim requires the more active process of calculation and disaggregation from a truly commingled statistical pool.
• Technical Question: A key evidentiary question will be how the accused VSX and VSNext products generate their per-Virtual System statistics. The complaint alleges functionality that mirrors the claim language but does not detail the underlying mechanism. The case may turn on whether discovery reveals a technical process that matches the disaggregation methods taught in the patent specification.

V. Key Claim Terms for Construction

For the '328 Patent

• The Term: "deciding by the access point whether to switch back to the first channel" (Claim 1)
• Context and Importance: This term is critical because it appears to describe a trial-and-revert process. The infringement analysis may depend on whether the accused product's "automatic channel selection" is a one-way optimization or a temporary test of a new channel followed by a decision to revert. Practitioners may focus on this term to distinguish a simple move to a better channel from the specific two-stage process outlined in the patent.
• Intrinsic Evidence for Interpretation:
  • Evidence for a Broader Interpretation: A plaintiff may argue that any channel management logic that periodically re-evaluates all channels, and could therefore potentially return to the original channel in a future assessment, satisfies the "deciding" step.
  • Evidence for a Narrower Interpretation: The claim language "switch back" and the patent's abstract, which mentions "deciding to switch back or keep the second channel," suggest a discrete, two-step process: test a new channel, then decide whether to revert to the immediately preceding one '328 Patent, abstract A defendant may argue this requires a specific, stateful evaluation of the prior channel, not just a general re-scan.

For the '655 Patent

• The Term: "isolatedly provide" (Claim 1)
• Context and Importance: This term is at the heart of the '655 patent's invention. Its construction will determine whether infringement requires an active process of statistical disaggregation, as detailed in the specification, or if simply reporting natively separated per-virtual-machine counters is sufficient.
• Intrinsic Evidence for Interpretation:
  • Evidence for a Broader Interpretation: A plaintiff could argue that the plain meaning of the term is met if the end-user is provided with statistics for only their virtual network, regardless of the underlying mechanism used to achieve that separation.
  • Evidence for a Narrower Interpretation: The specification repeatedly contrasts the invention with prior art that cannot separate commingled statistics and details specific algorithms for "statistics virtualization" and "transmission disaggregation" '655 Patent, abstract '655 Patent, col. 5:10-col. 6:30 A defendant may argue this context requires "isolatedly provide" to mean "calculate and provide through disaggregation from a commingled physical resource," not merely report already-separate data.

VI. Other Allegations

Indirect Infringement

For all four asserted patents, the complaint alleges both induced and contributory infringement.

• Inducement is alleged based on Defendant supplying the accused products with "instructions on how to operate the infringing technology," citing publicly available information on Defendant's website, product literature, and packaging Compl. ¶34 Compl. ¶47 Compl. ¶61 Compl. ¶77
• Contributory infringement is alleged on the basis that the accused components are material to the inventions, are not staple articles of commerce, have no substantial non-infringing uses, and are specially made or adapted for use in an infringing manner Compl. ¶35 Compl. ¶48 Compl. ¶62 Compl. ¶78

Willful Infringement

The complaint alleges willful infringement for all four patents. The allegations are based on two alternative theories: (1) knowledge of infringement "at least as of the date of this Complaint" (implicating post-suit conduct), and (2) pre-suit willful blindness based on an alleged "policy of not reviewing the patents of others" Compl. ¶33 Compl. ¶46 Compl. ¶60 Compl. ¶76

VII. Analyst's Conclusion: Key Questions for the Case

This case presents a broad challenge to a suite of networking and security products, spanning technologies from Wi-Fi optimization to AI-driven threat detection. The resolution of the dispute may turn on the following central questions:

1. A core issue will be one of definitional scope: can claim terms rooted in specific processes described in the patents be construed to cover the more general-purpose, "automatic" features of the accused products? For example, does the '328 Patent's "switch back" limitation read on a one-way automatic channel change, and does the '655 Patent's "isolatedly provide" limitation read on the reporting of any per-virtual-machine statistic, or does it require a specific disaggregation algorithm?

2. A key evidentiary question will be one of technical implementation: particularly for the AI-related patents ('592 and '548), what evidence can the Plaintiff provide to demonstrate that the Defendant's complex, often "black-box," algorithms perform the specific steps of the asserted method claims? The dispute may hinge on whether the functionality implied by marketing materials can be proven to exist in the actual operation of the accused software.

3. A final question will be one of functional distinction: for patents like the '655 Patent, does the accused product achieve a similar result (per-virtual-system statistics) through a fundamentally different technical means (e.g., reporting natively separated counters vs. disaggregating commingled ones)? The court will need to determine if there is a functional and structural mismatch that places the accused products outside the scope of the claims.