← Blog

MIT v. Amazon: Inside the University's Chip-Security Patent Lawsuit Against AWS

October 15, 2026

On Friday, October 9, 2026, the Massachusetts Institute of Technology sued Amazon Web Services in federal court in Boston. MIT says the hardware security technology AWS uses to generate cryptographic keys infringes two patents the university owns. Reuters broke the story on Monday, and Investing.com, JD Journal, Hoodline, USA Herald and others picked it up the same day. That made it the most widely covered newly filed IP case in our feed this week. The case is Massachusetts Institute of Technology v. Amazon Web Services, Inc., No. 1:26-cv-14600 in the District of Massachusetts.

It is also MIT's second lawsuit in five months over the same two patents. In May, the university sued Microsoft in the Eastern District of Texas over its cloud security hardware. That case is already well into discovery. Together, the two suits show a research university putting old, foundational inventions to work against the largest cloud providers in the world.

What MIT is claiming

According to the docket, the complaint and press coverage:

Amazon did not respond to Reuters' request for comment by Monday. MIT is represented by Joshua C. Krumholz and Jacob K. Baron of Holland & Knight, the same lawyers working on its Texas case against Microsoft.

The Microsoft case is the preview

The Amazon complaint follows a pattern MIT set in Massachusetts Institute of Technology v. Microsoft Corporation, No. 2:26-cv-00400, filed May 15, 2026, before Judge Rodney Gilstrap in Marshall, Texas, one of the busiest patent courts in the country. Bloomberg Law reported that MIT asserts the same two patents there and alleges that Microsoft's Azure Sphere and Project Cerberus security platforms use PUF technology supplied by Synopsys. Synopsys acquired the PUF specialist Intrinsic ID in 2024.

The Texas docket shows where the Amazon case is likely headed:

Expect AWS to push back with the same kind of defenses: that its systems don't practice the claims as written, that the patents are invalid in light of earlier PUF research, and that the claims are ineligible under Alice. Because the patents date from the PUF field's early years, damages arguments may also turn on timing. Patent damages generally reach back only six years before a suit is filed, and a patent's 20-year term runs from its filing date.

Why sue the customer instead of the supplier?

The most interesting strategic choice is the one MIT didn't make. If the infringing technology comes from Synopsys, why not sue Synopsys?

Patent law lets an owner sue anyone who makes, uses, sells or imports a patented invention, so a company that uses an infringing component in its own systems is directly liable. There are practical reasons, too. Damages are often measured against the value of the end use, and a hyperscale cloud built on millions of chips makes a far larger base than a licensing fee for a piece of design IP. Venue may also matter: suing the user lets MIT pick courts where those users are based or operate, such as Boston for AWS and East Texas for Microsoft.

What happens behind the scenes is often decided by contract. Large technology buyers usually negotiate indemnification clauses that require suppliers to defend them against IP claims arising from the supplier's product. Whether Synopsys ends up funding the defense, or negotiating a license to end both cases, depends on agreements the public can't see.

This is also not AWS's first major patent fight. In 2024, a Chicago jury ordered Amazon to pay $525 million to data-storage company Kove over S3 and related services in Kove IO, Inc. v. Amazon Web Services, Inc., a dispute that went up to the Federal Circuit.

Universities as patent plaintiffs

MIT isn't a patent troll. It is one of the most productive patent holders in academia, and its technology licensing office has long licensed university research to industry. Universities enforce patents for the same reason any rights holder does: licensing revenue funds research, and inventors share in the royalties. Caltech's lawsuits over Wi-Fi error-correction patents against Apple and Broadcom, and the University of Wisconsin's processor patent case against Apple, showed that universities are willing to take big cases to trial and win nine-figure verdicts. They also showed how often those verdicts are reduced or reversed on appeal, which is why most of these fights eventually end in a license.

Two suits filed in quick succession, against two of the three largest cloud providers, suggest a licensing campaign rather than a one-off. Other companies that use the same supplier's PUF technology will be watching closely.

What happens next

The Amazon case is at its very beginning. MIT has filed its complaint, corporate disclosure and the required notice to the USPTO identifying the two patents. AWS has not yet appeared. Its answer or motion to dismiss will be the first real signal of its strategy, and a motion challenging the patents' eligibility would mirror Microsoft's approach in Texas. We're tracking both dockets on the MIT v. Amazon and MIT v. Microsoft case pages.

What this means for filmmakers and other creators

A patent fight over chip security might seem far from independent film. But the core lessons apply to anyone who builds a business on intellectual property they don't fully control.

Follow the filings, the related Microsoft case and press coverage on the MIT v. Amazon Web Services case page.

This post is editorial commentary on public court filings and news coverage, not legal advice. The allegations in MIT's complaint have not been proven. Some details, including the specific AWS systems accused and the inventors behind the patents, come from press reports and may be clarified as the case proceeds.