Domain name system queries
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorsNiilo Lehtikuja, Patrik Salmela
Life of this patent
Estimating the term…
Abstract
Embodiments relate to a method for secure domain name system, DNS, queries. The method is performed in a DNS client, and the method includes obtaining an encryption key and internet protocol, IP, address for a final DNS resolver, creating a session key, encrypting a DNS query and the created session key with the obtained encryption key, and sending a DNS message containing the encrypted DNS query and the created session key to an intermediate DNS resolver, different from the final DNS resolver, together with the obtained IP address for the final DNS resolver. Methods, nodes, computer programs, and a computer program product for secure DNS queries are also presented.
Claims19
A method for secure domain name system, DNS, queries, the method being performed in a DNS client, the method comprising:
- obtaining an encryption key and internet protocol, IP, address for a final DNS resolver;
- creating a session key;
- encrypting a DNS query and the created session key with the obtained encryption key;
- sending a DNS message containing the encrypted DNS query and the created session key to an intermediate DNS resolver, different from the final DNS resolver, together with the obtained IP address for the final DNS resolver;
- and
- the DNS message having an OPCODE type indicating an enveloped DNS query.
A method for secure domain name system, DNS, queries, the method being performed in an intermediate DNS resolver, the method comprising:
- receiving a DNS message with an encrypted DNS query from a DNS client, together with an internet protocol, IP, address for an additional DNS resolver;
- storing a query identity, ID, of and an IP address to the DNS client;
- sending a DNS message with the received encrypted DNS query to the additional DNS resolver with the stored IP address to and the query ID of the DNS client replaced with a query ID of the intermediate DNS resolver and an IP address thereto;
- and
- the DNS message having an OPCODE type indicating an enveloped DNS query.
A method for secure domain name system, DNS, queries, the method being performed in a final DNS resolver, the method comprising:
- receiving a DNS message with an encrypted DNS query and session key from an intermediate DNS resolver, the received DNS message being without an internet protocol, IP, address to and an query identity, ID of, a DNS client having encrypted the encrypted DNS query and session key;
- decrypting the received encrypted DNS query and session key;
- obtaining a DNS answer to the decrypted DNS query;
- encrypting the DNS answer with the decrypted session key;
- sending a DNS message with the encrypted DNS query and answer to the intermediate DNS resolver;
- and
- the DNS message having an OPCODE type indicating an enveloped DNS query.
An intermediate domain name system, DNS, resolver node for secure DNS queries, the intermediate DNS resolver node (resolver 1) comprising:
- a processing circuitry;
- and
- a computer storage medium storing instructions that, when executed by the processing circuitry, cause the intermediate DNS resolver node to:
- receive a DNS message with an encrypted DNS query from a DNS client, together with an internet protocol, IP, address for an additional DNS resolver;
- store a query identity, ID, of and an IP address to the DNS client;
- and
- send a DNS message with the received encrypted DNS query to the additional DNS resolver with the stored IP address to and the ID of the DNS client replaced with a query ID of the intermediate DNS resolver and an IP address thereto;
- and
- the DNS message having an OPCODE type indicating an enveloped DNS query.
Dependencies are inferred from the claim text.