Now after I got much more time again on my hands, I’m back again on grinding through my CISSP prep. Every now and then a topic looks easy on the surface until you actually sit down and try to explain it. One of those areas was the Intellectual Property part of this study session. Copyright, Trademark, Patent and Trade Secret. Everybody has heard of them but you couldn’t really tell them apart really.
So in true tech-diary fashion, I’m writing it down to make it stick. If I can explain it here cleanly, I actually understand it. If I can’t, I don’t – simple as that.
This one is less hands-on than my usual posts (no terminal humbling me this time), but IP shows up in Domain 1 and 2 (Security Risk Management and Asset Security). As a Security engineer you end up being the one who has to protect this stuff.
/the four types at a glance
Before going deep, the mental model. All four are “intellectual property”, meaning intangible assets, creations of the mind that the law decided you can own like you own a car. But I had problems understanding the differences between those, they protect very different things and behave differently:
- Copyright protects how you express something (a book, a song, source code)
- Trademarks protects how you identify yourself in the market (a name, a logo, a slogan)
- Patent protects how something works (an invention, a process)
- Trade Secrets protects something precisely because nobody else knows it (a formula, a method)
The other big thing is registration of these. Some of these you get for free the moment you create them, one you have to actively file form and one you get by simply keeping your mouth shut.
/copyright
What it protects: original works of authorship that are fixed in a tangible medium. Books, music, films, photographs, architecture – and the one we care most about in IT, software source code. The important nuance: copyright protects the expression of an idea, not the idea itself. You can’t for example copyright “a story about a boy wizard”, but you absolutely can copyright the actual words of the book.
Very good to know is that copyright is automatic. The moment you write the code or save the file, it’s protected – no form, no fee, no lawyer. Registering it (with the US Copyright Office for example) gives you strong footing if you ever have to sue or protect something better. (protection itself exists from creation though, just helps if it is registered)
How long does it last?
- For a work by an individual: the life of the author + 70 years. Yes, your code outlives you by seven decades.
- For works made for hire, anonymous or pseudonymous works (code written by employees and owned by the company) is 95 years from publication, or 120 years from creation, whichever expires first.
- Numbers could shift though depending on the country, the aboves are mentioned in the CISSP Official Study Guide – and I’ll stick with those numbers for the exam.
/trademark
What it protects: anything that identifies the source of good or service and sets it apart from competitors. Things like brand names, logos, slogans, sometimes even specific colors and sounds. The whole point is consumer protection – so you know the can of cola you’re buying actually came from the company you think it did.
You’ve seen the symbols: “™” means someone is claiming a trademark (you can slap this on without registering anything), and the “®” means it’s officially registered with the trademark office. Only registered marks get the circle R symbol.
How long does it last?
- This one lasts potentially forever. A trademark has no fixed expiry as long as you keep using it and keep renewing it. In the US you file a declaration that you’re still using it. Stop using it or stop renewing, and you lose it.
/patent
What it protects: inventions. A new machine, process, chemical compound or a genuine improvement on one. To get a patent the invention has to clear three bars – it must be something new, useful and non-obvious. That last one trips up a lot of applications.
Patents are the philosophical opposite of trade secrets. To get one you have to fully, publicly disclose how your invention works. That’s the deal society offers you, you tell everyone exactly how it’s done and in exchange you get a temporary monopoly to profit from it. Once it expires, the whole world gets to use it.
How long does it last?
Here we have to distinct between different patent styles:
- Utility Patents (the common kind – how something works) lasts for 20 years from the filing date.
- Design Patents (how something looks) lasts for 15 years from the date it’s granted.
- Plant patents (new plant varietis, genuinely a category) lasts 20 years from filing.
And critically to know – no renewals. When a patent’s 20 years are up, they’re up, full stop. This is exactly the “patent cliff” the pharmaceutical industry hates. Creating a new drug that does something, after 20 years, prices of that monopoly drug drops and everyone is allowed to create it. They had 20 years of exclusivity though.
/trade secrets
what it protects: confidential business information that gives you a competitive edge precisely because it’s a secret. Formulas, recipes, manufacturing processes, algorithms, customer lists – anything valuable that you keep under wraps.
There’s no registration, no office, no filing. You protect a trade secret by actually keeping it secret: NDAs, access controls, need-to-know, all the security stuff we already do for a living – kind of. And this is the catch, if you don’t take “reasonable measures” to protect it, the law won’t bother protecting it for you either.
How long does it last?
- Forever – or until it leaks. There is no expiry date at all. As long as it stays secret, it stays protected. But the protection is fragile: if someone reverse-engineers your product legally, or independently invents the same thing on their own, you have no claim. Trade secret law protects you from theft, not from someone else simply being clever.
A very good example is the Coca-Cola formula. They’ve kept it as a trade secret since 1886 – well over a century. They could’ve patented it, but a patent would have forced them to publish the recipe and then expire 20 years, dumping it straight into the public domain. As a trade secret it has no expiry as long as they keep it locked up. That’s a 130+ years head start that the patent could never have given them. KFC’s eleven herbs and spices play the exact same game.
/summary
Here’s the whole thing on one screen, which is roughly how it lives in my head for the exam:
| Type | Protects | Registration | How long it lasts |
| Copyright | Expression of a work (code, books, music) | Automatic on creation | – Life of author +70 yrs – employment is 95 yrs from publication or – 120 yrs from creation (whichever comes first) |
| Trademark | Brand identity (names, logos, slogans) | “tm” is free / “circle-R” must register | – indefinite – renew every 10 yrs while still in use |
| Patent | Inventions (how something works) | Must file and be granted | – Utility 20 years – Design 15 years |
| Trade secret | Confidential competitive info | None – just keep mouth shut | – Forever, until disclosed or reverse-engineered |
The more you have to give up to get the protection, the shorter and more rigid it is. A patent makes you publish everything you know, so it’s the most generous monopoly but also the most finite with 20 years and done. A trade secret asks nothing of the public, so it can last forever, but it gives zero protection the second it gets out. Copyright sits comfortably in the middle, and trademarks is the one weirdo that can outlive all of them as long as you keep feeding it renewals.
Onto the next CISSP domain. If I got any of these durations wrong, that’s future-me’s problem to catch on the second read-through.
Keep you posted – bye bye, Casi.