Back to results
US 12,647,263 B1Granted
Multi autonomous secure domain name systems
AssigneeUnited Services Automobile Association (USAA)
InventorJason Paul Larrew
Life of this patent
Estimating the term…
Abstract
Embodiments disclosed herein allow multiple providers to answer for DNS while having DNSSEC enabled for the same zone. To do so, the system shares DNSKEY records between autonomous DNS vendors. Sharing DNSKEY records allows customers to use multiple DNS providers with DNSSEC enabled without sharing private keys amongst providers.
Claims20
A method comprising:
- determining, by a first primary Domain Name System (DNS) server, a second primary DNS server effected a change to at least one record in the second primary DNS server based on receiving a record change communication from the second primary DNS server,
- wherein the second primary DNS server generates one or more second DNSKEY records that records the change,
- wherein the first primary DNS server and the second primary DNS server autonomously operate in a first group of DNS servers, and
- wherein a plurality of primary DNS servers in the first group have an ability to make changes to records independently from other primary DNS servers in the first group;
- effecting, by the first primary DNS server, the change to a first record in the first primary DNS server, by generating one or more first DNSKEY records that records the change;
- and
- exchanging, by the first primary DNS server with the second primary DNS server, the one or more second DNSKEY records and the one or more first DNSKEY records to ensure a DNSKEY record request routed to any primary DNS servers autonomously operating in the first group is filled.
4 more elements
A system comprising:
- one or more processors;
- and
- one or more memories storing instructions that, when executed by the one or more processors, cause the system to perform a process comprising:
- determining, by a first primary Domain Name System (DNS) server, a second primary DNS server effected a change to at least one record in the second primary DNS server based on receiving a record change communication from the second primary DNS server,
- wherein the second primary DNS server generates one or more second DNSKEY records that records the change,
- wherein the first primary DNS server and the second primary DNS server autonomously operate in a first group of DNS servers, and
- wherein a plurality of primary DNS servers in the first group have an ability to make changes to records independently from other primary DNS servers in the first group;
- effecting, by the first primary DNS server, the change to a first record in the first primary DNS server, by generating one or more first DNSKEY records that records the change;
- and
- exchanging, by the first primary DNS server with the second primary DNS server, the one or more second DNSKEY records and the one or more first DNSKEY records to ensure a DNSKEY record request routed to any primary DNS servers autonomously operating in the first group is filled.
7 more elements
A non-transitory computer-readable medium storing instructions that, when executed by a computing system, cause the computing system to perform operations comprising:
- determining, by a first primary Domain Name System (DNS) server, a second primary DNS server effected a change to at least one record in the second primary DNS server based on receiving a record change communication from the second primary DNS server,
- wherein the second primary DNS server generates one or more second DNSKEY records that records the change,
- wherein the first primary DNS server and the second primary DNS server autonomously operate in a first group of DNS servers, and
- wherein a plurality of primary DNS servers in the first group have an ability to make changes to records independently from other primary DNS servers in the first group;
- effecting, by the first primary DNS server, the change to a first record in the first primary DNS server, by generating one or more first DNSKEY records that records the change;
- and
- exchanging, by the first primary DNS server with the second primary DNS server, the one or more second DNSKEY records and the one or more first DNSKEY records to ensure a DNSKEY record request routed to any primary DNS servers autonomously operating in the first group is filled.
4 more elements
Dependencies are inferred from the claim text.