Method for minimizing the risk and exposure duration of improper or hijacked DNS records
AssigneeVeriSign, Inc.
InventorDenis Phillips
Life of this patent
Estimating the term…
Abstract
Provided is a method for assigning a time-to-live (“TTL”) value for a domain name system (“DNS”) record at a recursive DNS server. The method comprises obtaining, from a client, the TTL value for the DNS record; and storing, in a memory of the recursive DNS server, the TLL value, an identifier of the client, and the DNS record.
Claims20
A method for assigning a time-to-live (“TTL”) value for a domain name system (“DNS”) record, the method comprising:
- receiving a policy associated with a given DNS parameter, wherein the policy specifies a maximum TTL value for one or more DNS records that satisfy the given DNS parameter;
- transmitting a first DNS request associated with a first domain name to an authoritative name server;
- receiving, from the authoritative name server and in response to the first DNS request, (i) a first DNS record associated with the first domain name and (ii) a TTL value corresponding to the first DNS record;
- determining that the policy applies to the first DNS request;
- determining that the TTL value is greater than the maximum TTL value specified by the policy;
- and
- storing, in a memory, an association between the maximum TTL value and the first DNS record based on the policy.
A method for assigning a time-to-live (“TTL”) value for a domain name system (“DNS”) record, the method comprising:
- receiving, via a user interface, a TTL policy associated with a given DNS parameter, wherein the TTL policy specifies a maximum TTL for one or more DNS records that satisfy the given DNS parameter;
- receiving, from the authoritative name server, (i) a first DNS record and (ii) a TTL value corresponding to the first DNS record;
- determining that the first DNS record satisfies the given DNS parameter associated with the TTL policy;
- and
- storing, based on the TTL policy, an association between the first DNS record and the maximum TTL value.
One or more non-transitory computer-readable storage media storing instructions that, when executed by one or more processors, cause the one or more processors to perform the steps of:
- receiving a policy associated with a given domain name system (“DNS”) parameter, wherein the policy specifies a maximum time-to-live (“TTL”) value for one or more DNS records that satisfy the given DNS parameter;
- transmitting a first DNS request associated with a first domain name to an authoritative name server;
- receiving, from the authoritative name server and in response to the first DNS request, (i) a first DNS record associated with the first domain name and (ii) a TTL value corresponding to the first DNS record;
- determining that the policy applies to the first DNS request;
- determining that the TTL value is greater than the maximum TTL value specified by the policy;
- and
- storing, in a memory, an association between the maximum TTL value and the first DNS record based on the policy.
Dependencies are inferred from the claim text.