UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549
FORM 10-K
(Mark One)
| þ | ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934 |
For the fiscal year ended December 31, 2003
OR
| ¨ | TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934 |
For the transition period from to
Commission File Number: 000-23593
VERISIGN, INC.
(Exact name of registrant as specified in its charter)
| Delaware | 94-3221585 | |
| (State or other jurisdiction of incorporation or organization) |
(I.R.S. Employer Identification No.) | |
| 487 E. Middlefield Road, Mountain View, CA | 94043 | |
| (Address of principal executive offices) | (Zip Code) | |
Registrants telephone number, including area code: (650) 961-7500
Securities registered pursuant to Section 12(b) of the Act: None
Securities registered pursuant to Section 12(g) of the Act: Common Stock $0.001 Par Value Per Share, and the Associated Stock Purchase Rights
Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months and (2) has been subject to such filing requirements for the past 90 days. YES þ NO ¨
Indicate by check mark if disclosure of delinquent filers pursuant to Item 405 of Regulation S-K is not contained herein, and will not be contained, to the best of the registrants knowledge, in definitive proxy or information statements incorporated by reference in Part III of this Form 10-K or any amendment to this Form 10-K. þ
Indicate by check mark whether the registrant is an accelerated filer (as defined in Rule 12b-2 of the Act). YES þ NO ¨
The aggregate market value of the voting and non-voting common equity stock held by non-affiliates of the Registrant as of June 30, 2003, was $2,462,722,907 based upon the last sale price reported for such date on the NASDAQ National Market. For purposes of this disclosure, shares of Common Stock held by persons known to the Registrant (based on information provided by such persons and/or the most recent schedule 13Gs filed by such persons) to beneficially own more than 5% of the Registrants Common Stock and shares held by officers and directors of the Registrant have been excluded because such persons may be deemed to be affiliates. This determination is not necessarily a conclusive determination for other purposes.
Number of shares of Common Stock, $0.001 par value, outstanding as of the close of business on February 27, 2004: 243,888,949 shares.
DOCUMENTS INCORPORATED BY REFERENCE
Portions of the definitive Proxy Statement to be delivered to stockholders in connection with the 2004 Annual Meeting of Stockholders are incorporated by reference into Part III.
2
Overview
VeriSign, Inc. is a leading provider of critical infrastructure services that enable Web site owners, enterprises, communications service providers, electronic commerce, or e-commerce, service providers and individuals to engage in secure digital commerce and communications. Our services include the following core offerings: security services, naming and directory services, and telecommunications services. We market our products and services through our direct sales force, telesales operations, member organizations in our global affiliate network, value-added resellers, service providers, and our Web sites.
We are currently organized into two service-based lines of business: the Internet Services Group and the Communications Services Group. The Internet Services Group consists of the Security Services business and the Naming and Directory Services business. The Security Services business provides products and services that enable enterprises and organizations to establish and deliver secure Internet-based services to customers and business partners, and the Naming and Directory Services business acts as the exclusive registry of domain names in the .com and .net generic top-level domains, or gTLDs, and certain country code top-level domains, or ccTLDs. The Communications Services Group provides Signaling System 7, or SS7, network services, intelligent data base and directory services, application services, and billing and payment services to wireline and wireless telecommunications carriers. During 2003, we operated our business in three reportable segments including the two described above, and the Network Solutions business segment which was sold effective November 25, 2003.
VeriSign was incorporated in Delaware on April 12, 1995. Our principal executive offices are located at 487 E. Middlefield Road, Mountain View, California 94043. Our telephone number at that address is (650) 961-7500 and our common stock is traded on the NASDAQ National Market under the ticker symbol VRSN. VeriSigns primary Web site is www.verisign.com. The information on our Web sites is not a part of this annual report. VeriSign, the VeriSign logo, Illuminet, Thawte and certain other product names are trademarks or registered trademarks of VeriSign, Inc., and/or its subsidiaries in the United States and other countries. Other names used in this report may be trademarks of their respective owners.
Our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act, are available, free of charge, through our Web site at www.verisign.com as soon as reasonably practicable after filing such reports with the Securities and Exchange Commission.
Internet Services Group
The Internet Services Group consists of the Security Services business and Naming and Directory Services business. The Security Services business provides products and services to enterprises and organizations that want to establish and deliver secure Internet-based services for their customers and business partners. The following types of services are included in the Security Services business: enterprise security services, including our managed security and authentication services, and e-commerce services, including our Web trust and payment services. The Naming and Directory Services business provides registry services as the exclusive registry of domain names in the .com and .net gTLDs and certain ccTLDs, as well as providing other value added services and digital brand management services.
Security Services
Enterprise Security Services
Our enterprise security services include managed security services and authentication services including public key infrastructure (PKI) services for enterprises.
3
Managed Security Services (MSS). VeriSigns MSS services enable enterprises to effectively monitor and manage their network security infrastructure on a 24x7 basis while reducing the associated time, expense, and personnel commitments by relying on VeriSigns security platform and experienced security staff. Our MSS services include:
| | Managed Firewall Service. The Managed Firewall Service provides enterprises with management and monitoring of firewalls. VeriSign security engineers and program managers stage the firewall devices and test them prior to deployment; once deployed, devices are monitored 24x7. Ongoing device management services include refinement of security policies, software patches and upgrades, and quarterly security consultations. |
| | Managed Intrusion Detection Service. The Managed Intrusion Detection Service provides management and monitoring of intrusion detection sensors, designed to identify and counter malicious security events or potential attacks against an organizations network. |
| | Managed Virtual Private Network (VPN) Service. The Managed VPN Service delivers encrypted site-to-site and remote access IPsec-compliant tunnel solutions for Internet-based network computing environments. |
We also provide network security consulting services to help enterprises assess, design, and deploy cost-effective and scalable network security solutions. Our consulting services are also available to help enterprises integrate our PKI services with existing applications and databases and advise on policies and procedures related to the management and deployment of digital certificates. Our management services also include, among others, managed DNS and DNS hosting, which are delivered through our registry operations infrastructure.
VeriSign PKI Services. VeriSign offers Managed PKI Services and VeriSign Go Secure! Services that can be tailored to meet the specific needs of enterprises that wish to issue digital certificates to employees, customers or trading partners.
| | Managed PKI Services. The Managed PKI Service is a managed service that allows an organization to use our trusted data processing infrastructure to develop and deploy customized digital certificate services for its user communities. The Managed PKI Service can be used by our customers to provide digital certificates for a variety of applications, such as: controlling access to sensitive data and account information, enabling digitally-signed e-mail, encryption of e-mail, or Secure Socket Layer (SSL) sessions. The Managed PKI Service can help customers create an online electronic trading community, manage supply chain interaction, facilitate and protect online credit card transactions or enable access to virtual private networks. |
| | Go Secure! Services. Go Secure! is a set of software modules that enable enterprises to quickly build digital certificate-based security into their off-the-shelf transaction and communication applications. Go Secure! Services complement our Managed PKI Service and are designed to incorporate digital certificates into existing applications such as e-mail, browser, directory and virtual private network devices as well as other devices. |
| | VeriSign Affiliate PKI Software and Services. VeriSign Affiliate PKI Software and Services are sold to a wide variety of entities that provide electronic commerce and communications services over wired and wireless Internet Protocol, or IP, networks. We designate these types of organizations as VeriSign Affiliates and provide them with a combination of technology, support and marketing services to facilitate their initial deployment and ongoing delivery of digital certificate services. In some instances, we have invested in VeriSign Affiliates and hold a minority interest of less than 20%. |
VeriSign Affiliates can license either our Service Center or Processing Center offerings. The Service Center and Processing Center offerings are based on our software platform and enable a VeriSign Affiliate to offer one or more types of digital certificate services.
4
| | The Service Center offerings provide VeriSign Affiliates with all of the capabilities needed to perform subscriber enrollment and authentication, digital certificate application approval, directory hosting, customer support, billing integration and report generation from within their facilities or act as an outsource provider of the Managed PKI Service, while utilizing our secure data centers for back-end processing. |
| | The Processing Center provides a VeriSign Affiliate with all of the capabilities of the Service Center as well as the software modules required to perform all certificate life cycle services of issuance, management, revocation and renewal from within its own secure data center. |
VeriSign Affiliates typically enter into a multi-year technology licensing and revenue sharing agreement with us whereby we receive up-front licensing fees for the Service Center or Processing Center technology, as well as ongoing royalties from each digital certificate or the Managed PKI Service sold by the VeriSign Affiliate.
e-Commerce Services
Our e-commerce services include our Web trust services and payment services.
Web Trust Services. Web trust services include our server digital certificate services and content signing digital certificate services. Server certificate services enable Internet merchants to implement and operate secure Web sites that utilize SSL. These services provide Internet merchants with the means to identify themselves to consumers and to encrypt communications between consumers and their Web site. Our content signing digital certificate services provide software developers the means to identify themselves and the validity of their software to the consumers and relying software applications.
We currently offer the following Web server digital certificate services and content signing digital certificate services: Each is differentiated by the target application of the server that hosts the digital certificate.
| | Secure Site and Secure Site Pro. Secure Site is our standard service offering that enables 40-bit SSL when communicating with export-version Netscape® and Microsoft® Internet Explorer browsers and 128-bit SSL encryption when communicating with domestic-version Microsoft and Netscape browsers. We also offer an upgraded version of this service, called Secure Site Pro, which enables 128-bit SSL encryption with both domestic and export versions of Microsoft and Netscape browsers. Secure Site Pro also includes a third party site availability monitoring evaluation, a network security monitoring trial, a site performance monitoring evaluation, and additional warranty protection. |
| | Commerce Site and Commerce Site Pro. Our Commerce Site and Commerce Site Pro offerings combine the features and functionality of our Secure Site offerings with our payment services offerings, providing existing sites that want to offer e-commerce solutions with a comprehensive suite of services to secure and process online payments. |
| | Content Signing Certificates. We offer several code signing certificates based on the platform for which customers wish to sign the code. Platforms include Microsoft Authenticode, Microsoft Office and VBA, Symbian, Sun Java, Netscape, Microsoft Smartphone, Macromedia Shockwave and Marimba Castanet. Microsoft Authenticode certificates are also used to authenticate developers for various Microsoft logo programs. |
| | Thawte Branded Digital Certificates. We offer SSL and Code Signing security services under the Thawte brand. These services use the same underlying infrastructure, and are targeted at small business and independent software developers. |
Payment Services. Using our payment gateway, Internet merchants are able to securely authorize and settle a variety of payment types, including credit, debit and purchase cards, electronic checks, and automated clearing house transactions over the Internet.
5
Naming and Directory Services
VeriSigns Naming and Directory Services include our domain name registry services and digital brand management services.
Domain Name Registry Services. We are the exclusive registry of domain names within the .com and .net gTLDs under agreements with the Internet Corporation for Assigned Names and Numbers, or ICANN, and the Department of Commerce, or DOC. As a registry, we maintain the master directory of all second-level domain names in these top-level domains. We own and maintain the shared registration system that allows all registrars to enter new second-level domain names into the master directory and to submit modifications, transfers, re-registrations and deletions for existing second-level domain names.
We are also the exclusive registry for domain names within the .tv and .cc ccTLDs. These top-level domains are supported by our global name server constellation and shared registration system. In addition, we have made .bz domain name registration services available through our outsourced hosting environment, which enables domain name registrars and resellers to simultaneously access .bz registries. We also provide internationalized domain name, or IDN, services that enable Internet users to access Web sites in their local language characters. Currently, IDNs are available in more than 350 languages such as Chinese, Greek, Korean and Russian.
Digital Brand Management Services. We offer a range of services that we refer to as Digital Brand Management Services to help legal professionals, information technology professionals and brand marketers monitor, protect and build digital brand equity. These services include our domain name registration services for both gTLDs, such as .com, and ccTLDs, such as .de, and our brand monitoring services.
Communications Services Group
The Communications Services Group provides managed communications services to wireline and wireless telecommunications carriers, cable companies and enterprise customers. Our managed communication service offerings include network services, intelligent database and directory services, application services, and billing and payment services.
Network Services
Through our network services, we provide connections and services that signal and route information within and between telecommunication carrier networks.
SS7 Connectivity and Signaling. Our Signaling System 7, or SS7, network, is an industry-standard system of protocols and procedures that is used to control telephone communications and provide routing information in association with vertical calling features, such as calling card validation, local number portability, toll-free number database access and caller identification. Our SS7 trunk signaling service reduces post-dial delay, allowing call connection almost as soon as dialing is completed which enables telecommunications carriers to deploy a full range of intelligent database services more quickly and cost effectively. By using our trunk-signaling service, carriers simplify SS7 link provisioning, and reach local exchange carriers and wireless carriers networks through our direct access to hundreds of carriers.
Seamless Roaming for Wireless. We offer wireless carriers seamless roaming services using the ANSI-41 and GSM signaling protocol that allow carriers to provide support for roamers visiting their service area, and for their customers when they roam outside their service area. This service also allows number validation inside and outside carriers service areas by accessing our SS7 network.
Communications Assistance for Law Enforcement Act (CALEA). Our NetDiscovery services enable telecommunications carriers to meet the requirements of CALEA through provisioning, access and delivery of call information from carriers to law enforcement agencies.
6
Intelligent Database and Directory Services
We enable carriers to find and interact with network databases and conduct database queries that are essential for many advanced services, including the following:
| | Number Portability. Local Number Portability (LNP) and Wireless Number Portability (WNP) allow telephone subscribers to switch local service providers while keeping the same telephone number. |
| | Calling Name (CNAM) Delivery. Our CNAM Delivery service enables carriers to query regional Bell operating companies and major independent carriers and provide customers with caller identification services. |
| | Line Information Database (LIDB). LIDB provides subscriber information (such as the subscribers service profile and billing specifications) to other carriers enabling them to respond to calls (e.g. whether to block certain calls, allow collect calls, etc.). |
| | Toll-free Database Services. Leveraging VeriSigns SS7 network, our toll-free services allow customers to complete 8xx calls throughout the U.S. and Canada. |
| | TeleBlock Do Not Call (DNC). TeleBlock DNC provides telemarketers with a DNC management tool that automatically screens and blocks outgoing calls to national, state, third-party and in-house DNC lists. |
Application Services
Through our MetcalfTM Global Messaging (GM) services, we enable wireless carriers to offer messaging services between carrier systems and devices, and across disparate networks and technologies so that customers can exchange messages outside the carriers network.
Billing and Payment Services
The Communications Services Group also offers advanced billing and customer care services to wireline and wireless carriers. Our advanced billing and customer care services include:
Wireline Clearinghouse Services. Through our clearinghouse services, we serve as a distribution and collection point for billing information and payment collection for services provided by one carrier to customers billed by another.
Wireless Clearinghouse Services. Our settlement and exchange services enable wireless carriers to settle telephone traffic charges with their roaming partners in North America and portions of Latin and South America. We also provide wireless carriers with fraud management, SS7 monitoring, and other services.
Billing Services. Through our speedSUITETM and SmartPay services, we provide wireless carriers with an end-to-end customer relationship management system that supports prepaid and post-paid wireless services. Carriers have access to a real-time account management platform, administered via a Web interface, designed to make prepaid wireless plans flexible and convenient.
Operations Infrastructure
Our operations infrastructure consists of secure data centers in Mountain View, California; Dulles, Virginia; Lacey, Washington; Providence, Rhode Island; Overland Park, Kansas; Melbourne, Australia; and Kawasaki, Japan. Many of our VeriSign Affiliates also operate secure data centers in their geographic areas. Most of these secure data centers operate on a 24-hour a day, 7 days per week basis, supporting our business units and services. Key features of our operations infrastructure include:
| | Distributed Servers. We deploy a large number of high-speed servers to support capacity and availability demands that in conjunction with our proprietary software offers automatic failover, global and local load balancing and threshold monitoring on critical servers. |
7
| | Advanced Telecommunications. We deploy and maintain redundant telecommunications and routing hardware and maintain high-speed connections to multiple Internet service providers (ISPs) to ensure that our mission critical services are readily accessible to customers at all times. |
| | Network Security. We incorporate architectural concepts such as protected domains, restricted nodes and distributed access control in our system architecture. We have also developed proprietary communications protocols within and between software modules that are designed to prevent most known forms of electronic attacks. In addition, we employ firewalls and intrusion detection software, and contract with security consultants who perform periodic attacks and security risk assessments. |
As part of our operations infrastructure for our domain name registry services, we operate all thirteen domain name servers that answer domain name lookups for the .com and .net zones. We also operate two of the thirteen root zone servers, including the A root, which is the authoritative root zone server of the Internets domain name system (DNS). The domain name servers provide the associated name server and IP address for every .com and .net domain name on the Internet and a large number of other top-level domain queries, resulting in an average of over 9 billion responses per day during 2003. These name servers are located around the world, providing local domain name service throughout North America, in Europe, and in Asia. Each server facility is a controlled and monitored environment, incorporating security and system maintenance features. This network of name servers is one of the cornerstones of the Internets DNS infrastructure.
To provide our communications services, we operate a SS7 network composed of specialized switches, computers and databases strategically located across the United States. These elements interconnect our customers and U.S. telecommunications carriers through leased lines. Our network currently consists of 15 mated pairs of SS7 signal transfer points that are specialized switches that manage SS7 signaling, and into which our customers connect. We own ten pairs and lease capacity on six pairs of SS7 signal transfer points from regional providers. Our SS7 network control, located in Overland Park, Kansas, is staffed 24 hours a day, 7 days per week. As part of our operations infrastructure for network services, we also have several SS7 network signal transfer point sites. These sites are maintained at 14 locations throughout the United States.
Call Center and Help Desk. We provide customer support services through our phone-based call centers, e-mail help desks and Web-based self-help systems. Our California call center is staffed from 5 a.m. to 6 p.m. Pacific Time and employs an automated call directory system to support our Security Services business. Our Virginia call center is staffed 24 hours a day, 7 days per week to support our Naming and Directory Services. All call centers also have Web-based support services which are available on a 24-hour a day, 7 days per week basis, utilizing customized automatic response systems to provide self-help recommendations and a staff of trained customer support agents.
Operations Support and Monitoring. We have an extensive monitoring capability that enables us to track the status and performance of our critical database systems at sixty-second intervals, and our global resolution systems at four-second intervals. Our distributed Network Operations Centers are staffed 24 hours a day, 7 days per week.
Disaster Recovery Plans. We have disaster recovery and business continuity capabilities that are designed to deal with the loss of entire data centers and other facilities. Our Naming and Directory Services business maintains dual mirrored data centers that allow rapid failover with no data loss and no loss of function or capacity. Our PKI and payment services businesses are similarly protected by having service capabilities that exist in both of our East and West Coast data center facilities. Our critical data services (including digital certificates, domain name registration, telecommunications services and global resolution) use advanced storage systems that provide data protection through techniques such as mirroring and replication.
Marketing, Sales and Distribution
We market our services worldwide through multiple distribution channels, including the Internet, direct sales, telesales, direct marketing through all media, mass merchandisers, value-added resellers, systems
8
integrators and our VeriSign Affiliates. We intend to increase our direct sales force in the Internet Services Group and the Communications Services Group both in the United States and abroad, and to expand our other distribution channels in both businesses.
Our direct sales and marketing organization at December 31, 2003 consisted of approximately 600 individuals, including managers, sales representatives, marketing, technical and customer support personnel. We have field sales offices throughout the world. Additionally, our sales are currently being made through multiple channels including wholesale and retail distributors, resellers and direct sales throughout the world.
We believe our customer base is diversified and is not concentrated in any particular industry. In each of the past three fiscal years, no single customer has accounted for 10 percent or more of our revenues.
Research and Development
As of December 31, 2003, we had approximately 300 employees dedicated to research and development. Research and development expenses were $55.8 million in 2003, $48.4 million in 2002, and $78.1 million in 2001. To date, all research and development costs have been expensed as incurred. We believe that timely development of new and enhanced Internet security, e-commerce, naming and directory, and communications services and technologies are necessary to remain competitive in the marketplace. Accordingly, we intend to continue recruiting and hiring experienced research and development personnel and to make additional investments in research and development.
Our future success will depend in large part on the ability to continue to maintain and enhance our current technologies and services. In the past, we have developed our services both independently and through efforts with leading application developers and major customers. We have also, in certain circumstances, acquired or licensed technology from third parties, including public key cryptography technology from RSA Security Inc. (RSA). Although we will continue to work closely with developers and major customers in our development efforts, we expect that most of the future enhancements to existing services and new services will be developed internally or acquired through business acquisitions.
The markets for our services are dynamic, characterized by rapid technological developments, frequent new product introductions and evolving industry standards. The constantly changing nature of these markets and their rapid evolution will require us to continually improve the performance, features and reliability of our services, particularly in response to competitive offerings, and to introduce both new and enhanced services as quickly as possible and prior to our competitors.
Competition
Competition in Security Services. Our security services are targeted at the rapidly evolving market for trusted services, including authentication, validation and payment, which enable secure electronic commerce and communications over wired and wireless IP networks. Although the competitive environment in this market has yet to develop fully, we anticipate that it will be intensely competitive, subject to rapid change and significantly affected by new product and service introductions and other market activities of industry participants.
Principal competitors generally fall within one of the following categories: (1) companies such as RSA Security and Entrust Technologies, which offer software applications and related digital certificate products that customers operate themselves; (2) companies such as Geo Trust and Digital Signature Trust Company (a subsidiary of Zions Bancorporation) that primarily offer digital certificate and certification authority, or CA, related services; and (3) companies focused on providing a bundled offering of products and services such as BeTrusted. We also experience competition from a number of smaller companies, and we believe that our primary long-term competitors may not yet have entered the market. Furthermore, Netscape and Microsoft have introduced software products that enable the issuance and management of digital certificates, and we believe that other companies could introduce similar products.
9
In addition, browser companies that embed our interface technologies or otherwise feature them as a provider of digital certificate products and services in their Web browsers or on their Web sites could also promote our competitors or charge us substantial fees for promotions in the future.
Competition in Managed Security Services. Consulting companies or professional services groups of other companies with Internet expertise are current or potential competitors to our managed security services. These companies include large systems integrators and consulting firms, such as Accenture, formerly Andersen Consulting, IBM Global Services and Lucent NetCare. We also compete with security product companies that offer managed security services in addition to other security services, such as Symantec and ISS, as well as a number of providers such as Ubizen and RedSiren that offer managed security services exclusively. In addition, we compete with some companies that have developed products that automate the management of IP addresses and name maps throughout enterprise-wide intranets, and with companies with internally developed systems integration efforts.
Competition in Communications Services. The market for communications services is extremely competitive and subject to significant pricing pressure. Competition in this area arises from two primary sources. Large incumbent carriers provide competing services in their regions as a result of regulatory requirements to promote competition. In addition, we face direct competition on a nationwide basis from unregulated companies, including Telecommunications Services, Inc., or TSI, and other carriers such as Southern New England Telephone, a unit of SBC Communications. Our wireless billing services also compete with services offered by Boston Communications Group, Amdocs, Convergys Corporation and TSI. Furthermore, customers are increasingly likely to deploy internally developed communications technologies and services which may reduce the demand for technologies and services from third party providers such as VeriSign and further increase competitive pricing pressures.
Competition in Registry Services. In November 2000, ICANN announced selections for several new gTLDs that directly compete with the .com and .net gTLDs, as well as the ccTLDs offered by us. The gTLDs, .biz and .info, were launched in 2001. The gTLDs launched in 2002 and 2003 include .name, .pro, .aero, .museum and .coop. These gTLDs are available for registration through ICANN accredited registrars. In addition, we currently face competition from the over 240 ccTLD registry operators who compete directly for the business of entities and individuals that are seeking to establish a Web presence.
We also face competition from registry service providers that offer outsourced DNS and registration services to organizations that require a reliable and scalable infrastructure. Among the competitors are NeuLevel, Affilias, Register.com and Tucows.com.
Competition in Digital Brand Management Services. We face competition from companies providing services similar to some of our Digital Brand Management Services. In the monitoring services, registration and domain name asset management area of our business, our competition comes primarily from ICANN accredited registrars and various smaller companies providing similar services.
Several of our current and potential competitors have longer operating histories and significantly greater financial, technical, marketing and other resources than we do and therefore may be able to respond more quickly than we can to new or changing opportunities, technologies, standards and customer requirements. Many of these competitors also have broader and more established distribution channels that may be used to deliver competing products or services directly to customers through bundling or other means. If such competitors were to bundle competing products or services for their customers, the demand for our products and services might be substantially reduced and the ability to distribute our products successfully and the utilization of our services would be substantially diminished. New technologies and the expansion of existing technologies may increase the competitive pressure.
New technologies and the expansion of existing technologies may increase competitive pressure. We cannot assure that competing technologies developed by others or the emergence of new industry standards will not
10
adversely affect our competitive position or render our security services or technologies noncompetitive or obsolete. In addition, our markets are characterized by announcements of collaborative relationships involving our competitors. The existence or announcement of any such relationships could adversely affect our ability to attract and retain customers. As a result of the foregoing and other factors, we may not be able to compete effectively with current or future competitors, and competitive pressures that we face could materially harm our business.
Industry Regulation
Naming and Directory Services. Within the U.S. Government, leadership for the continued privatization of Internet administration is currently provided by the Department of Commerce.
On November 10, 1999, we entered into a series of wide-ranging agreements. These agreements included the following:
| | a registry agreement between us and ICANN under which we will continue to act as the exclusive registry for the .com and .net TLDs for at least four years from that date. This agreement was subsequently replaced with three new registry agreements on May 25, 2001; |
| | a revised registrar license and agreement between us as registry and all registrars registering names in the .com, .net and .org domains using our proprietary shared registration system; |
| | an amendment to the cooperative agreement; and |
| | an amendment to the Memorandum of Understanding between the U.S. Government and ICANN. |
Our registry agreement with ICANN was replaced by three new agreements on May 25, 2001, one for .com, one for .net and one for .org. The term of the .com registry agreement extends until November 10, 2007 with a 4-year renewal option. The term of the .net registry agreement extends until June 30, 2005, at which time the .net registry services will be put out for competitive bid by ICANN, a process in which we will be allowed to participate. The .org registry agreement terminated on December 31, 2002, and the .org registry services were transitioned to a new registry operator selected by ICANN during 2003.
The description of these agreements are qualified in their entirety by the text of the complete agreements that are filed as exhibits to the periodic reports indicated in the index to the exhibits contained in Part IV of this Annual Report on Form 10-K.
Security Services. Some of our digital trust services utilize and incorporate encryption technology. Exports of software products utilizing encryption technology are generally restricted by the United States and various non-United States governments. VeriSign has obtained approval to export many of the digital trust services we provide to customers globally under applicable United States export law, including our server digital certificate service. As the list of products and countries for which export approval is expanded or changed, particularly in response to the terrorist acts of September 11, 2001, VeriSign will increase the scrutiny of, and further government restrictions on, exportation of software products utilizing encryption technology. If we do not obtain required approvals, we may not be able to sell some of our digital trust services in international markets.
There are currently no federal laws or regulations that specifically control certification authorities, but a limited number of states have enacted legislation or regulations with respect to certification authorities. If we do not comply with these state laws and regulations, we will lose the statutory benefits and protections that would be otherwise afforded to us. Moreover, if our market for digital certificates grows, the United States federal, state, or foreign governments may choose to enact further regulations governing certification authorities or other providers of digital certificate products and related services. These regulations or the costs of complying with these regulations could impact our business.
11
Communications Services. One service provided by the Communications Services Group is currently subject to Federal Communications Commission (FCC) regulation. This service allows wireless users who are roaming in areas where their home carrier has not made arrangements for automatic roaming service to complete calls to domestic and international destinations. The Communications Services Group has been authorized by the FCC to provide this service. Further, our communications customers are subject to FCC regulation, which indirectly affects our communications services business. We cannot predict when, or upon what terms and conditions, further regulation or deregulation might occur or the effect of regulation or deregulation on our business. Several services that we offer may be indirectly affected by regulations imposed upon potential users of those services, which may increase our costs of operations. In addition, future services we may provide could be subject to direct government regulation.
Intellectual Property
We rely primarily on a combination of copyrights, trademarks, service marks, patents, restrictions on disclosure and other methods to protect our intellectual property. We also enter into confidentiality and/or assignment agreements with our employees, consultants and current and potential affiliates, customers and business partners. We also generally control access to and distribution of documentation and other proprietary information.
We have been issued numerous patents in the United States and abroad, covering a wide range of our technology. Additionally, we have filed numerous patent applications with respect to certain of our technology in the U.S. Patent and Trademark Office and foreign patent offices. The national or international patent offices may not award any patents with respect to these applications and even if such patents are awarded, they may not provide us with sufficient protection of our intellectual property.
We have obtained U.S. and foreign trademark registrations for various VeriSign marks. We have also filed numerous applications to register VeriSign trademarks and claims, and have common law rights in many other proprietary names. We take steps to enforce and police VeriSigns marks.
With regard to our Security Services business, we also rely on certain licensed third-party technology, such as public key cryptography technology licensed from RSA and other technology that is used in our security services to perform key functions. RSA has granted us a perpetual, royalty-free, nonexclusive, worldwide license to use RSAs products relating to certificate issuing, management and processing functionality. We develop services that contain or incorporate the RSA BSAFE products and that relate to digital certificate-issuing software, software for the management of private keys and for digitally signing computer files on behalf of others, software for customers to preview and forward digital certificate requests to them. RSAs BSAFE product is a software tool kit that allows for the integration of encryption and authentication features into software applications.
With regard to our Payment Services business, we rely on proprietary software and technology covering many aspects of e-commerce transactions such as electronic funds transfers and multi-currency transactions. In addition, we have strategic relationships with third parties involved in e-commerce transactions, such as issuing banks and financial processors, and those agreements provide us with intellectual property rights with respect to performing those services.
With regard to our Naming and Directory Services business, our principal intellectual property consists of, and our success is dependent upon, proprietary software used in our registry service business and certain methodologies and technical expertise we use in both the design and implementation of our current and future registry services and Internet-based products and services businesses, including the conversion of internationalized domain names. We own our proprietary shared registration system through which competing registrars submit .com and .net second-level domain name registrations. Some of the software and protocols used in our registry services are in the public domain or are otherwise available to our competitors.
12
With regard to our Communications Services Group, we offer a wide variety of services, including networking, database, and billing services, each of which are protected by trade secret, patents and/or patent applications. We have also entered into agreements with third-party providers and licensors.
Employees
As of December 31, 2003, we had approximately 2,500 full-time employees. Of the total, approximately 1,100 were employed in operations, approximately 600 in sales and marketing, approximately 300 in research and development and approximately 500 in finance and administration, including information services personnel. We have never had a work stoppage, and no U.S.-based employees are represented under collective bargaining agreements. We consider our relations with our employees to be good. Our ability to achieve our financial and operational objectives depends in large part upon our continued ability to attract, integrate, train, retain and motivate highly qualified sales, technical and managerial personnel, and upon the continued service of our senior management and key sales and technical personnel, none of whom is bound by an employment agreement. Competition for qualified personnel in our industry and in some of our geographical locations is intense, particularly for software development personnel.
Segment Information
During 2003, we operated our business in three reportable segments: the Internet Services Group and the Communications Services Group, both of which are described above, and the Network Solutions business segment, through which we provided domain name registration, and value added services such as business e-mail, websites, hosting and other web presence services. Effective November 25, 2003, when we completed the sale of our Network Solutions business to Pivotal Private Equity, we realigned our operations into two service-based business segments consisting of the Internet Services Group and the Communications Services Group. Prior to 2003, we operated our business in two reportable segments: the Enterprise and Service Provider Division and the Mass Markets Division. Segment information based on our current organizational structures is set forth in Note 14 of Notes to Consolidated Financial Statements referred to in Item 8 below.
Factors That May Affect Future Results of Operations
In addition to other information in this Form 10-K, the following risk factors should be carefully considered in evaluating us and our business because these factors currently have a significant impact or may have a significant impact on our business, operating results or financial condition. Actual results could differ materially from those projected in the forward-looking statements contained in this Form 10-K as a result of the risk factors discussed below and elsewhere in this Form 10-K.
Our operating results may fluctuate and our future revenues and profitability are uncertain.
Our operating results have varied and may fluctuate significantly in the future as a result of a variety of factors, many of which are outside our control. These factors include the following:
| | the long sales and implementation cycles for, and potentially large order sizes of, some of our enterprise security and communications services and the timing and execution of individual customer contracts; |
| | volume of domain name registrations and customer renewals in our registry services business; |
| | the mix of all our services sold during a period; |
| | our success in marketing and market acceptance of our services by our existing customers and by new customers; |
| | continued development of our direct and indirect distribution channels for our enterprise security and communications services, both in the U.S. and abroad; |
13
| | a decrease in the level of spending for information technology-related products and services by enterprise customers; |
| | our success in assimilating the operations and personnel of any acquired businesses; |
| | the seasonal fluctuations in consumer use of communications services; |
| | the timing and execution of individual customer contracts, particularly large contracts; |
| | the impact of price changes in our communications services, enterprise security services and payment services or our competitors products and services; and |
| | general economic and market conditions as well as economic and market conditions specific to IP networks, telecommunications and Internet industries. |
Our operating expenses may increase. If an increase in our expenses is not accompanied by a corresponding increase in our revenues, our operating results will suffer, particularly as revenues from some of our services are recognized ratably over the term of the service, rather than immediately when the customer pays for them, unlike our sales and marketing expenditures, which are expensed in full when incurred.
Due to all of the above factors, our revenues and operating results are difficult to forecast. Therefore, we believe that period-to-period comparisons of our operating results will not necessarily be meaningful, and you should not rely upon them as an indication of future performance. Also, operating results may fall below our expectations and the expectations of securities analysts or investors in one or more future periods. If this were to occur, the market price of our common stock would likely decline.
Our operating results may be adversely affected by the uncertain geopolitical environment and unfavorable economic and market conditions.
Adverse economic conditions worldwide have contributed to downturns in the telecommunications and technology industries and may continue to impact our business, resulting in:
| | reduced demand for our services as a result of a decrease in information technology and telecommunications spending by our customers; |
| | increased price competition for our products; and |
| | higher overhead costs as a percentage of revenues. |
Recent political turmoil in many parts of the world, including terrorist and military actions, may continue to put pressure on global economic conditions. If the economic and market conditions in the United States and globally do not improve, or if they deteriorate further, we may continue to experience material adverse impacts on our business, operating results, and financial condition as a consequence of the above factors or otherwise.
Our limited operating history under our current business structure may result in significant fluctuations of our financial results.
We were incorporated in April 1995, and began introducing our services in June 1995. We completed several acquisitions in 2000 and 2001, including our acquisitions of Network Solutions and Illuminet Holdings, and in February 2002 we completed our acquisition of H.O. Systems. In November 2003, we sold our Network Solutions domain name registrar business. Network Solutions, Illuminet Holdings and H.O. Systems operated in different businesses from our then-current business. Therefore, we have only a limited operating history on which to base an evaluation of our consolidated business and prospects. Our success will depend on many factors, many of which are not entirely under our control, including, but not limited to, the following:
| | the successful integration of acquired companies; |
| | the use of the Internet and other Internet Protocol, or IP, networks for electronic commerce and communications; |
14
| | the extent to which digital certificates and domain names are used for electronic commerce or communications; |
| | growth in the number of Web sites; |
| | growth in demand for our services; |
| | the continued evolution of electronic commerce as a viable means of conducting business; |
| | the competition for any of our services; |
| | the perceived security of electronic commerce and communications over the Internet and and other IP networks; |
| | the perceived security of our services, technology, infrastructure and practices; |
| | the significant lead times before a product or service begins generating revenues; |
| | the varying rates at which telecommunications companies, telephony resellers and Internet service providers use our services; |
| | the loss of customers through industry consolidation, or customer decisions to deploy in-house or competitor technology and services; and |
| | our continued ability to maintain our current, and enter into additional, strategic relationships. |
To address these risks we must, among other things:
| | successfully market our services to new and existing customers; |
| | attract, integrate, train, retain and motivate qualified personnel; |
| | respond to competitive developments; |
| | successfully introduce new services; and |
| | successfully introduce enhancements to our services to address new technologies and standards and changing market conditions. |
The business environment is highly competitive and, if we do not compete effectively, we may suffer price reductions, reduced gross margins and loss of market share.
Security services. We anticipate that the market for services that enable trusted and secure electronic commerce and communications over IP networks will remain intensely competitive. We compete with larger and smaller companies that provide products and services that are similar to some aspects of our security services. Our competitors may develop new technologies in the future that are perceived as being more secure, effective or cost efficient than the technology underlying our security services.
Registry services. Seven new generic top-level domain registries, .aero, .biz, .coop, .info, .museum, .name and .pro, recently began accepting domain name registrations. ICANN has indicated that it plans to start a process to consider opening additional generic top-level domains. Since we do not act as a registry for these new top-level domains, we do not receive the annual registry fee for domain name registrations under these top-level domains. The commencement of registrations in these new top-level domains may reduce demand for .com and .net domain name registrations. If the new top-level domains reduce the demand for domain name registrations in .com and .net, our business could be materially harmed.
Communications services. We face competition from large, well-funded regional providers of SS7 network services and related products, such as regional Bell operating companies, TSI and Southern New England Telephone, a unit of SBC Communication. Our wireless billing services compete with services offered
15
by Boston Communications Group, Amdocs, Convergys Corporation and TSI. We are also aware of major Internet service providers, software developers and smaller entrepreneurial companies that are focusing significant resources on developing and marketing products and services that will compete directly with ours.
We expect that competition will increase in the near term, and that our primary long-term competitors may not yet have entered the market. Increased competition could result in pricing pressures, reduced margins or the failure of one or more of our services to achieve or maintain market acceptance, any of which could harm our business. Several of our current and potential competitors have longer operating histories and significantly greater financial, technical, marketing and other resources. As a result, we may not be able to compete effectively.
Our communications services business depends on the acceptance of our SS7 network and the telecommunications markets continuing use of SS7 technology.
Our future growth in our communications services business depends, in part, on the commercial success and reliability of our SS7 network. Our SS7 network is a vital component of our intelligent network services, which had been a significant source of revenues for our Illuminet, Inc. subsidiary. Our communications services business will suffer if our target customers do not use our SS7 network. Our future financial performance will also depend on the successful development, introduction and customer acceptance of new and enhanced SS7-based services. We are not certain that our target customers will choose our particular SS7 network solution or continue to use our SS7 network. In the future, we may not be successful in marketing our SS7 network or any new or enhanced services.
The inability of our customers to successfully implement our signaling and network services with their existing systems could adversely affect our business.
Significant technical challenges exist in our signaling and network services business because many of our customers: