Back to results
US 11,909,876 B1Granted
Multi autonomous secure domain name systems
AssigneeUnited Services Automobile Association (USAA)
InventorJason Paul Larrew
Life of this patent
Estimating the term…
Abstract
Embodiments disclosed herein allow multiple providers to answer for DNS while having DNSSEC enabled for the same zone. To do so, the system shares DNSKEY records between autonomous DNS vendors. Sharing DNSKEY records allows customers to use multiple DNS providers with DNSSEC enabled without sharing private keys amongst providers.
Claims20
A system comprising:
- a top level domain (TLD) server;
- and
- a first primary Domain Name System (DNS) server and a second primary DNS server autonomously operating in a first group of DNS servers, wherein each primary DNS server in the first group has an ability to make changes to records independently from other primary DNS servers in the first group and comprises one or more processors and one or more memories storing instructions that, when executed by the one or more processors, cause the system to perform a process comprising:
- effecting, by the first primary DNS server, a change to a first record in the first primary DNS server,
- wherein to propagate the change:
- the first primary DNS server signs the change with a first private key to validate the change,
- the first primary DNS server generates one or more first DNSKEY records that records the change,
- effecting, by the second primary DNS server, the change to a second record in the second primary DNS server,
- wherein to propagate the change:
- the second primary DNS server signs the change with a second private key to validate the change,
- the second primary DNS server generates one or more second DNSKEY records that records the change,
- wherein to ensure a DNSKEY record request routed to any primary DNS servers autonomously operating in the first group is filled:
- the one or more second DNSKEY records and the one or more first DNSKEY records are exchanged between the first primary DNS server and the second primary DNS server.
10 more elements
A method comprising:
- effecting, by a first primary Domain Name System (DNS) server, a change to a record in the first primary DNS server, wherein the first primary DNS server and a second primary DNS server autonomously operate in a first group of DNS servers, wherein each primary DNS server in the first group has an ability to make changes to records independently from other primary DNS servers in the first group;
- wherein to propagate the change:
- the first primary DNS server signs the change with a first private key to validate the change,
- the first primary DNS server generates one or more first DNSKEY records that records the change,
- effecting, by the second primary DNS server, the change to a second record in the second primary DNS server,
- wherein to propagate the change:
- the second primary DNS server signs the change with a second private key to validate the change,
- the second primary DNS server generates one or more second DNSKEY records that records the change,
- wherein to ensure a DNSKEY record request routed to any primary DNS servers autonomously operating in the first group is filled:
- the one or more second DNSKEY records and the one or more first DNSKEY records are exchanged between the first primary DNS server and the second primary DNS server.
7 more elements
A non-transitory computer-readable medium storing instructions that, when executed by a computing system, cause the computing system to perform operations comprising:
- effecting, by a first primary Domain Name System (DNS) server, a change to a record in the first primary DNS server, wherein the first primary DNS server and a second primary DNS server autonomously operate in a first group of DNS servers, wherein each primary DNS server in the first group has an ability to make changes to records independently from other primary DNS servers in the first group;
- wherein to propagate the change:
- the first primary DNS server signs the change with a first private key to validate the change,
- the first primary DNS server generates one or more first DNSKEY records that records the change,
- effecting, by the second primary DNS server, the change to a second record in the second primary DNS server,
- wherein to propagate the change:
- the second primary DNS server signs the change with a second private key to validate the change,
- the second primary DNS server generates one or more second DNSKEY records that records the change,
- wherein to ensure a DNSKEY record request routed to any primary DNS servers autonomously operating in the first group is filled:
- the one or more second DNSKEY records and the one or more first DNSKEY records are exchanged between the first primary DNS server and the second primary DNS server.
7 more elements
Dependencies are inferred from the claim text.