Translated by Martina Marino

The NSA Technology Transfer Program: An Analysis of Cryptographic Patents

The National Security Agency (NSA) is not only an intelligence and surveillance agency — it is also a major center of technological innovation. Through its Technology Transfer Program (TTP), the NSA shares its patented technologies with the private sector, academia, and other government agencies. But who are the real beneficiaries of this technological transfer in the field of cryptography? And to what extent does the innovation developed by the NSA spread beyond national borders?

The Technology Transfer Program: Goals and Tools

The NSA’s Technology Transfer Program (TTP) was designed to facilitate the transfer of technologies developed within the agency’s research departments. The program pursues two main objectives: to establish partnerships with academia and industry in order to transform research outcomes into commercial products, and to share the agency’s expertise with other government entities, universities, and industries.

The program relies on four main instruments. Cooperative Research and Development Agreements (CRADAs) enable research collaborations with academic institutions, government agencies, and industry partners. The Open Source Software Release allows software developed internally to be made available to the open-source community. Technology Transfer Sharing Agreements provide mechanisms for tracking and managing the transfer of technology. Patent License Agreements grant licenses for the agency’s patents to private-sector and academic partners.

The patent portfolio is divided into five categories: Cybersecurity, Data Science, IoT, Mobility, and Physical. This article focuses on 18 selected cryptographic patents from the portfolio, analyzing their forward citations to identify geographic patterns and the key actors benefiting from these technologies.

Geographic Distribution: Domestic Predominance

The analysis of citations reveals a significant domestic concentration. Out of a total of 200 citations, 161 (80.5%) correspond to patents filed with the United States Patent and Trademark Office (USPTO). This indicates that the Technology Transfer Program primarily functions as a catalyst for domestic innovation, rather than as a mechanism for international diffusion.

Several patents display citations exclusively from the United States, without generating any international spillover. Among these are US Patent 8,886,952, US Patent 7,505,585, US Patent 6,993,136, and US Patent 7,379,955. This suggests that certain technologies derived from the NSA’s research transfer innovation solely within the national domain. The second country in terms of citation volume is China, with 16 citing patents (8% of the total). Although modest compared to the U.S. predominance, this figure is significant when viewed through the lens of technological and security rivalry between the two nations. A particularly noteworthy case is US Patent 9,635,003, where Chinese citations (4 out of 7 total) exceed the U.S. citations.

Europe accounts for six patents in total: three filed with the European Patent Office (EPO), two with the German Patent and Trademark Office (including one by Siemens), and one with the UK Intellectual Property Office (by Boeing). The remaining seven citations are registered with the World Intellectual Property Organization (WIPO). No citations were identified from Latin America, Africa, or Oceania. Consequently, the diffusion of cryptographic innovation through the NSA’s program appears to be geographically confined to the United States, China, and Europe.

Public and Private Actors: Sectoral Imbalance

The analysis of the nature of citing entities reveals a clear predominance of the private sector. Out of a total of 200 citations, 177 (88.5%) are assigned to private entities (companies or individuals), while only 23 (11.5%) are registered by public institutions. On average, each NSA patent generates 11.06 citations from private entities and 2.3 citations from public ones. Among private actors, several recurring corporations stand out: International Business Machines Corporation (IBM), Samsung, and Intel are the companies that most frequently cite the NSA’s cryptographic technologies. Public entities are primarily U.S. government agencies (such as the State of Oregon) or research institutes (such as the Electronics and Telecommunications Research Institute in South Korea).

An exception is represented by US Patent 6,993,136, which shows a more balanced distribution: 4 out of 9 citations originate from public actors (two from the NSA itself and two from the State of Oregon). This is the only case of a relatively balanced distribution across the entire dataset. Notably, eight of the eighteen analyzed patents (44.4% of the total) have no citations attributed to public entities. This indicates that the technological spillover of nearly half of the NSA’s cryptographic patents occurs exclusively within the private sector.

Beyond the Data: Context and Implications

The predominance of domestic citations aligns with the historical context of U.S. export controls on cryptographic technologies. During the Cold War, cryptography was classified as a munition. Although a process of liberalization began after the end of the Cold War, controversies involving the NSA — from the Clipper Chip to the Dual Elliptic Curve Generator, and later the Snowden revelations — contributed to maintaining a cautious approach toward the international dissemination of such technologies. The case of China presents a particularly interesting element. Despite the technological and security rivalry between the United States and China, the China National Intellectual Property Administration (CNIPA) emerges as the second most active authority in terms of derivative patents, accounting for more than twice as many citations as European countries. This suggests that even within contexts of geopolitical competition, technological development and industrial application continue to operate through independent channels of circulation.

The predominance of the private sector in technology transfer indicates that the NSA’s cryptographic innovations are primarily adopted by large corporations. IBM, Samsung, and Intel dominate the use of these technologies, while the spillover effects for academic institutions and public entities remain limited.

Conclusions

These findings are consistent with the historical background of export controls and national security concerns that have long characterized the cryptographic sector. The Technology Transfer Program thus emerges as a predominantly domestic instrument of innovation, with selective international diffusion concentrated in a few geographic areas and primarily directed toward the private sector.

Mondo Internazionale APS - Riproduzione Riservata ® 2025