Providing privacy enhanced resolution system in the domain name system
AssigneeVeriSign, Inc.
InventorsDanny MCPHERSON, Eric OSTERWEIL
Life of this patent
Estimating the term…
Abstract
An apparatus and a non-transitory computer-readable medium may perform a method of minimizing the disclosure of a domain name contained in a DNS query. The method may include: determining a first label and a second label associated with a domain name included in a DNS query; querying a first nameserver for the first label without revealing the second label to the first nameserver; receiving a response from the first nameserver directing a resolver to a second nameserver; and querying the second nameserver for the first label and the second label.
Claims22
A non-transitory computer-readable medium encoded with instructions that, when executed on a processor, perform a method of minimizing the disclosure of a domain name contained in a DNS query, the method comprising:
- determining a first label and a second label associated with a domain name included in a DNS query;
- querying a first nameserver for a first internet protocol address associated with the first label without revealing information related to the second label;
- receiving a response from the first nameserver, the response including the first internet protocol address directing a resolver to a second nameserver;
- and
- querying the second nameserver for a second internet protocol address associated with the first label and the second label.
A non-transitory computer-readable medium encoded with instructions that, when executed on a processor, perform a method of minimizing the disclosure of a domain name contained in a DNS query, the method comprising:
- determining a first label and a second label associated with a domain name included in a DNS query;
- generating a false label;
- querying a first nameserver for first address information associated with the first label and the false label without revealing the second label to the first nameserver;
- receiving a response from the first nameserver including the address information, the address information directing a resolver to a second nameserver;
- and
- querying the second nameserver for second address information associated with the first label and the second label.
An apparatus for minimizing the disclosure of a domain name contained in a DNS query, comprising:
- a memory;
- and
- a processor communicatively coupled to the memory, the processor being configured to:
- determine a first label and a second label associated with a domain name included in a DNS query;
- query a first nameserver for the first label without revealing the second label to the first nameserver;
- receive a response from the first nameserver directing a resolver to a second nameserver;
- and
- query the second nameserver for the first label and the second label.
A non-transitory computer-readable medium encoded with instructions that, when executed on a processor, perform a method of minimizing the disclosure of a domain name contained in a DNS query, the method comprising:
- determining a first label and a second label associated with the domain name included in the DNS query;
- querying a first nameserver associated with the first label for a first nameserver name without revealing information related to the second label;
- receiving a response from the first nameserver, the response including the first nameserver name;
- and
- querying a second nameserver associated with the first nameserver name for a second nameserver name associated with the first label and the second label.
Dependencies are inferred from the claim text.