Method, device, and system for managing domain name resolution
AssigneeCambium Networks Ltd
InventorsVivek Lakshminarayana Atreya, Shashi Hosakere Ankaiah, Trevor Miranda
Life of this patent
Estimating the term…
Abstract
A method, device, and system for managing Domain Name System (DNS) filtering is disclosed. The method may include blocking an end-device from accessing a domain for a predefined time duration using an encrypted communication protocol to access a domain name resolution service. The method may further include determining failure of the end-device to switch to an unencrypted communication protocol to access the domain name resolution service, after expiry of the predefined time duration. The method may include identifying the end-device as a headless device; and permitting the end-device to access the domain name resolution service using the encrypted communication protocol.
Claims20
A method of managing Domain Name System (DNS) filtering, the method comprising:
- blocking, by a network device, an end-device from accessing a domain for a predefined time duration, wherein the end-device is using an encrypted communication protocol to access a domain name resolution service;
- determining, by the network device, failure of the end-device to switch to an unencrypted communication protocol to access the domain name resolution service, after expiry of the predefined time duration;
- identifying, by the network device, the end-device as a headless device;
- and
- permitting, by the network device, the end-device to access the domain name resolution service using the encrypted communication protocol.
A method of managing Domain Name System (DNS) filtering, the method comprising:
- intercepting, by a network device, a request to access a domain from an end-device, wherein the end-device is using an encrypted communication protocol to access a domain name resolution service;
- extracting, by the network device, a set of device attributes associated with the end-device from a device classification database;
- determining, by the network device, whether the end-device is a headless device, based on the set of device attributes;
- determining, by the network device, availability of DNS preferences associated with the end-device in a DNS preferences database, when the end-device is determined as a headless device;
- retrieving, by the network device, the DNS preferences in response to determining availability of the DNS preferences for the end-device;
- and
- controlling, by the network device, use of the encrypted communication protocol and an unencrypted communication protocol by the end-device to access the domain name resolution service, based on the retrieved DNS preferences.
A network device comprising:
- a processor;
- and
- a memory communicatively coupled to the processor and comprising processor instructions that when executed by the processor, cause the processor to:
- block an end-device from accessing a domain for a predefined time duration, wherein the end-device is using an encrypted communication protocol to access a domain name resolution service;
- determine failure of the end-device to switch to an unencrypted communication protocol to access the domain name resolution service after the expiry of the predefined time duration;
- identify the end-device as a headless device;
- and
- permit the end-device to access the domain name resolution service using the encrypted communication protocol.
A system for managing Domain Name System (DNS) filtering, the system comprising:
- a network device comprising:
- a processor;
- and
- a memory communicatively coupled to the processor and comprising processor instructions that when executed by the processor, cause the processor to:
- block an end-device from accessing a domain for a predefined time duration, wherein the end-device is using an encrypted communication protocol to access a domain name resolution service;
- determine failure of the end-device to switch to an unencrypted communication protocol to access the domain name resolution service after the expiry of the predefined time duration;
- identify the end-device as a headless device;
- and
- permit the end-device to access the domain name resolution service using the encrypted communication protocol.
Dependencies are inferred from the claim text.