Device and method for resolving domain names

A system for recursively resolving domain names, comprising:

• a client device comprising a stub resolver (SR);
• and
• a plurality of name server (NS) device, wherein an NS device comprising:
• a memory configured to store instructions;
• and
• a processor coupled to the memory, wherein the instructions cause the processor to be configured to:
• receive a query for a domain name system (DNS) record from a client device, wherein a public key or a certificate of the SR matches a private key of the NS device;
• run the query by executing a code in a trusted execution environment (TEE), wherein the TEE provides a secure area of a main processor;
• read the DNS record from a common ledger, wherein the common ledger is shared with a second NS device and comprises a plurality of data entries pointing to the DNS record;
• prepare a response to the SR, wherein the response comprises the DNS record;
• authenticate the response with the private key, wherein the private key and the public key or the private key and a matching certificate are protected and distributed with the second NS device via the common ledger;
• and
• send the response to the SR,
• wherein the NS devices are of the common ledger and share the private key and the public key or the private key and the matching certificate.

A method for resolving domain names implemented by a name server (NS) device, comprising:

• receiving a query for a domain name system (DNS) record from a client device comprising a stub resolver (SR), wherein a public key or a certificate of the SR matches a private key of the NS device;
• running the query by executing a code of a trusted execution environment (TEE), wherein the TEE provides a secure area of a main processor;
• reading the DNS record from a common ledger, wherein the common ledger is shared with a second NS device and comprises a plurality of data entries pointing to the DNS record;
• preparing a response to the SR, wherein the response comprises the DNS record;
• authenticating the response with the private key, wherein the private key and the public key or the private key and a matching certificate are protected and distributed with the second NS device via the common ledger;
• and
• sending the response to the SR.

A computer program product comprising computer-executable instructions stored on a non-transitory computer-readable medium that, when executed by a processor, cause a name server (NS) device to:

• receive a query for a domain name system (DNS) record from a client device comprising a stub resolver (SR), wherein a public key or a certificate of the SR matches a private key of the NS device;
• run the query by executing a code in a trusted execution environment (TEE), wherein the TEE provides a secure area of a main processor;
• read the DNS record from a common ledger, wherein the common ledger is shared with a second NS device and comprises a plurality of data entries pointing to the DNS record;
• prepare a response to the SR, wherein the response comprises the DNS record;
• authenticate the response with the private key, wherein the private key and the public key or the private key and a matching certificate are protected and distributed with the second NS device via the common ledger;
• and
• send the response to the SR.