Subscribe / Unsubscribe Enewsletters | Login | Register

Pencil Banner

Apple pushes iMessage after SMS spoof revealed, but tech under patent cloud

Gregg Keizer | Aug. 21, 2012
iMessage, the Apple messaging technology that the company has urged customers use to avoid an SMS spoofing bug, remains under a patent litigation cloud, with a trial slated for November.

iMessage, the Apple messaging technology that the company has urged customers use to avoid an SMS spoofing bug, remains under a patent litigation cloud, with a trial slated for November.

Last week, a researcher known for uncovering iPhone "jailbreak" exploits claimed that a flaw in iOS could be leveraged to send SMS (short message service) messages that appear to come from a trusted number.

In a statement quoted by several websites, including Engadget, Apple said that SMS -- or text messaging -- inherently "allows messages to be sent with spoofed addresses to any phone."

Instead, Apple suggested that users rely on iMessage, the company's proprietary technology that encrypts all traffic, and is embedded in the Message apps for iOS 5 and OS X Mountain Lion. "When using iMessage instead of SMS, addresses are verified which protects against these kinds of spoofing attacks," Apple said.

But iMessage and other Apple technologies are under fire in a patent infringement lawsuit filed two years ago by VirnetX, a holding company that claims a portfolio of nearly four dozen patents, many of them awarded to a team of engineers who once worked at SAIC, or Science Application International Corp., a firm that regularly contracts with the Department of Defense.

VirnetX is probably best known for suing, then striking a $200 million settlement with Microsoft in May 2010 over allegations that Windows infringed on VirnetX's virtual private networking (VPN) patents.

Although VirnetX never mentioned iMessage by name in its lawsuit against Apple -- it did refer to FaceTime, Apple's video chat application -- some believe that the text messaging substitute is also affected by the five-patent case.

J.P. Moreno, a private investor who goes by the nickname "floydrocks" on discussion forums, and is the author of a 90-page paper ( download PDF) on the patent infringement case, is convinced that the lawsuit also targets iMessage.

"When that email address is used with certificates for authentication with secure DNS servers, and also for secure communications between devices ... these concepts/work flows are based on VirnetX inventions," argued Moreno, referring to how iMessage operates. "Secure domain names, secure DNS servers, automatic encryption. This is all VirnetX."

In its response to VirnetX's lawsuit, Apple has denied that FaceTime infringes the former's patents. It has made no mention of iMessage or other technologies, instead saying multiple times in its answers that, "It is not clear what is referenced by" VirnetX's claims.

The same VirnetX lawsuit also alleged that Aastra, Cisco and NEC violated the firm's patents. Aastra settled with VirnetX in May 2012, and NEC followed on Aug. 3. Both settlements involved a one-time payment to VirnetX and ongoing licensing royalties.

 

1  2  Next Page 

Sign up for CIO Asia eNewsletters.