Systems and methods for preserving privacy of a registrant in a domain name system (“DNS”)
AssigneeVeriSign, Inc.
InventorsAndrew Fregly, Swapneel Sheth
Life of this patent
Estimating the term…
Abstract
A method and a computer system is provided for executing the method for providing a registration data directory service (RDDS). The method includes obtaining, at a RDDS, a RDDS query comprising a location assertion from a RDDS client from a RDDS client; providing, by the RDDS, a request for personally identifying information (PII) for the RDDS query from a privacy provider, wherein the request comprises the location assertion; obtaining, by the RDDS, the PII for the RDDS query; and providing, by the RDDS, a response to the RDDS query to the RDDS client, wherein the response comprises PII.
Claims24
A computer-implemented method of generating a location assertion, the method comprising:
- obtaining, at a user device, a web page comprising a location reporting application from a web assertion service;
- activating the web page by a user action on a web browser stored on the user device;
- authenticating, by the location reporting application, the user;
- requesting, by the location reporting application, a current location using a trusted on-device location service;
- obtaining, by the location reporting application, the current location;
- requesting, by the location reporting application, a current time from a trusted time service;
- obtaining, by the location reporting application, the current time;
- generating, by the location reporting application, the location assertion, wherein the location assertion comprises information related to the current location and the current time;
- digitally signing, using a private key associated with a previously registered public key, by the location reporting application, the location assertion using a cryptographic digital signature protocol;
- and
- providing, by the location reporting application, the location assertion and a cryptographic credential.
The computer-implemented method of claim1, wherein the user is authenticated based on a nonce provided by the web assertion service.
A computer device for generating a location assertion, the computer device comprising at least one processor configured to perform:
- obtaining, at a user device, a web page comprising a location reporting application from a web assertion service;
- activating the web page by a user action on a web browser stored on the user device;
- authenticating, by the location reporting application, the user;
- requesting, by the location reporting application, a current location using a trusted on- device location service;
- obtaining, by the location reporting application, the current location;
- requesting, by the location reporting application, a current time from a trusted time service;
- obtaining, by the location reporting application, the current time;
- generating, by the location reporting application, the location assertion, wherein the location assertion comprises information related to the current location and the current time;
- digitally signing, using a private key associated with a previously registered public key, by the location reporting application, the location assertion using a cryptographic digital signature protocol;
- and
- providing, by the location reporting application, the location assertion and a cryptographic credential.
A non-transitory computer-readable medium comprising computer readable instructions for generating a location assertion by configuring at least one processor to perform operations comprising:
- obtaining, at a user device, a web page comprising a location reporting application from a web assertion service;
- activating the web page by a user action on a web browser stored on the user device;
- authenticating, by the location reporting application, the user;
- requesting, by the location reporting application, a current location using a trusted on-device location service;
- obtaining, by the location reporting application, the current location;
- requesting, by the location reporting application, a current time from a trusted time service;
- obtaining, by the location reporting application, the current time;
- generating, by the location reporting application, the location assertion, wherein the location assertion comprises information related to the current location and the current time;
- digitally signing, using a private key associated with a previously registered public key, by the location reporting application, the location assertion using a cryptographic digital signature protocol;
- and
- providing, by the location reporting application, the location assertion and a cryptographic credential.
Dependencies are inferred from the claim text.