NIST has proposed a draft 800-38G for standardizing FPE (Format Preserving Encryption), but it seems like Voltage Inc has patents on it. So, if some other company wants to implement FPE in their products, how does this work? Should we pay to Voltage?
closed as off-topic by Paŭlo Ebermann♦ Nov 23 at 18:26
- This question does not appear to be about cryptography within the scope defined in the help center.
This is more a legal question than a cryptographic one. Therefore I would like to note that I can not provide any legal advice and that you should ask a lawyer about the details of your individual case.
But, to share my point of view which I base on my personal experience:
If a company owns a patent (on an encryption technology, or anything else), they indeed expect you to pay them (directly or indirectly) when you use their patented product and/or solution.
Yet, chances are that they do own the patent, but don't expect compensation "under certain conditions". To learn about those conditions, and to avoid legal issues, it's therefore best to contact the patent owner — in this case "Voltage" — and ask them how they handle this and what they would (legally and financially) expect if you would implement and use their patented solution in your individual case.
A positive side-effect of contacting them is, that "if" a legal problem arises at a later point, you can prove that you have contacted them and acted upon the information they (being the patent owner) provided.
More details can be found here