Back to results
US 2023/0412563 A1Published application
Systems and methods for dns smart access
AssigneeOpen Text Corporation
InventorJonathan Alexander Thorold Barnett
Life of this patent
Estimating the term…
Abstract
Embodiments of systems and methods for DNS smart access are disclosed herein. In particular, certain embodiments include a local cache of trusted addresses resolved by a trusted DNS resolver. A DNS smart access agent monitors outbound communications from applications or processes on a client device. The DNS smart access agent blocks access to addresses that were not resolved through the trusted DNS resolver.
Claims20
A method for filtering communications based on domain name service (DNS) resolution, the method comprising:
- on a client device, disabling access at a client operating system on the client device to a domain name service (DNS) resolver external to the client device;
- enabling access at the client operating system to a trusted DNS resolver;
- maintaining, on the client device, a local cache of trusted addresses resolved by the trusted DNS resolver;
- intercepting, at the client device, a DNS request to resolve an Internet address;
- resolving the Internet address using the trusted DNS resolver;
- caching the Internet address resolved using the trusted DNS resolver in the local cache of trusted addresses resolved by the trusted DNS resolver;
- monitoring outbound Internet communications at the client device;
- intercepting an Internet protocol (IP) packet at the client device, the IP packet comprising a destination IP address;
- making a determination that the destination IP address is in a set of permitted addresses, wherein the set of permitted addresses includes the addresses from the local cache of trusted addresses resolved by the trusted DNS resolver;
- and
- based on the determination that the destination IP address is in the set of permitted addresses, forwarding the IP packet to a network.
8 more elements
A method for filtering communications based on domain name service (DNS) resolution, the method comprising:
- on a client device, disabling access at a client operating system on the client device to a domain name service (DNS) resolver external to the client device;
- enabling access at the client operating system to a trusted DNS resolver;
- maintaining, on the client device, a local cache of trusted addresses resolved by the trusted DNS resolver;
- intercepting, at the client device, a DNS request to resolve an Internet address;
- resolving the Internet address using the trusted DNS resolver;
- caching the Internet address resolved using the trusted DNS resolver in the local cache of trusted addresses resolved by the trusted DNS resolver;
- monitoring outbound Internet communications at the client device;
- intercepting an Internet protocol (IP) packet at the client device, the IP packet comprising a destination IP address;
- making a determination that the destination IP address is not in a set of permitted addresses, wherein the set of permitted addresses includes the addresses from the local cache of trusted addresses resolved by the trusted DNS resolver;
- and
- based on the determination that the destination IP address is not in the set of permitted addresses, blocking the IP packet.
8 more elements
A system for filtering communications based on domain name service (DNS) resolution, comprising:
- a processor;
- a computer storage device in electronic communication with the processor, the computer storage device storing instructions executable by the processor for:
- on a client device, disabling access at a client operating system on the client device to a domain name service (DNS) resolver external to the client device;
- enabling access at the client operating system to a trusted DNS resolver;
- maintaining, on the client device, a local cache of trusted addresses resolved by the trusted DNS resolver;
- intercepting, at the client device, a DNS request to resolve an Internet address;
- resolving the Internet address using the trusted DNS resolver;
- caching the Internet address resolved using the trusted DNS resolver in the local cache of trusted addresses resolved by the trusted DNS resolver;
- monitoring outbound Internet communications at the client device;
- intercepting an Internet protocol (IP) packet at the client device, the IP packet comprising a destination IP address;
- making a determination that the destination IP address is in a set of permitted addresses, wherein the set of permitted addresses includes the addresses in the local cache of trusted addresses resolved by the trusted DNS resolver;
- and
- based on the determination that the destination IP address is not in the set of permitted addresses, forwarding the IP packet to a network.
10 more elements
Dependencies are inferred from the claim text.