Provisioning encrypted domain name service and secure value-added service with certificates at a customer premise equipment in a broadband satellite system
AssigneeHughes Network Systems, LLC
InventorChi-Jiun Su
Life of this patent
Estimating the term…
Abstract
A satellite communication system which supports encrypted DNS at the customer premise equipment terminal to provide the benefits of local DNS caching. Some implementations use Certificate Authority (CA)-signed Transport Layer Security (TLS) certificates. Implementations may provide encrypted DNS service at the CPE, where the system installs CA-signed TLS certificate at the customer premise equipment (CPE) terminal. The same certificate can be used at multiple terminals using a wild-card certificate distributed by the satellite to provide value added services at a CPE as secure web services to off-the-shelf web clients and applications.
Claims20
A customer premise equipment (CPE) terminal comprising:
- a processor with a memory, where the memory stores instructions that when executed cause the processor to:
- provide internet services to a client device at a customer premise through a satellite connected to a satellite gateway by:
- receiving a signed certificate from a certificate server connected to the satellite gateway,
- assigning a private internet protocol (IP) address to the client device in a local area network,
- and
- providing encrypted domain name server (DNS) services to the client device using the signed certificate and the private IP address.
A customer premise equipment (CPE) terminal comprising:
- a processor with a memory, where the memory stores instructions that when executed cause the processor to:
- provide internet services to a plurality of client devices at a customer premise through a satellite connected to a satellite gateway by:
- receiving a Certificate Authority (CA) signed wildcard Transport Layer Security (TLS) certificate from a certificate server connected to the satellite gateway,
- assigning a private internet protocol (IP) address to the plurality of client devices in a local area network, and
- providing encrypted domain name server (DNS) services to the plurality of client devices using the CA signed wildcard TLS certificate and the private IP address.
A customer premise equipment (CPE) terminal comprising:
- a processor with a memory, where the memory stores instructions that when executed cause the processor to:
- provide internet services to a client device and provisioning workflow at the CPE through a satellite connected to a satellite gateway by:
- receiving a signed certificate from a certificate server connected to the satellite gateway and installing the signed certificate at a secure place in the CPE, wherein the signed certificate is a wild-card certificate that provisions secure and encrypted services with multiple CPEs within a CPE group,
- assigning a private internet protocol (IP) address to the client device in a local area network,
- and
- providing encrypted domain name server (DNS) services to the client device using the signed certificate and the private IP address.
Dependencies are inferred from the claim text.