Received March 28, 2002 From: "Carter, William Robert (Bill)" It has come to our attention that misunderstandings may exist concerning Lucent's willingness to license patents that are essential to the Secure Remote Password specification ("SRP") from Stanford University which has been submitted to the IETF and has been approved by the IETF as a standards track RFC, namely RFC 2945. To avoid any further misunderstandings, going forward we would like to state the following: Lucent has not conducted and has no current plans to conduct a search of its patent portfolio with respect to SRP. In addition, Lucent has not studied and has no current plans to study its patents with respect to SRP. However, in the event that any Lucent patents are determined to be essential to the implementation of SRP as an IETF standards track specification, Lucent is prepared to grant - on the basis of reciprocity (grantback) - a license to those patents on reasonable and non-discriminatory terms. We sincerely regret any misunderstandings, and hope that the foregoing statement will alleviate concerns about Lucent's commitment to licensing its patents in connection with SRP. Thank you, Bill Carter Intellectual Property Manager Lucent Technologies 908-582-2156 carterwr@lucent.com =================================================== Received November 30, 2001 From: "Carter, William Robert (Bill)" As you are aware, RFC 2945 was neither submitted or proposed by Lucent. Therefore, Lucent's general patent statement to IETF in 1999 does not cover RFC 2945. Lucent may have patent claims that are essential to RFC 2945. But that would have to be verified by a careful review of our patent portfolio. Such a search has not been conducted. Because of the present strain on our resources, it is unlikely that a search will be conducted. However, if the IETF has particular concerns about one or two patents that could impact RFC 2945, we would welcome your identification of those patents and your comments on those issues so that we could review the particular patents in light of RFC 2945. Sincerely, Bill Carter Intellectual Property Manager Lucent Technologies