Method and apparatus for restricting access to private information in domain name systems by filtering information
AssigneeAT&T Corp.
InventorsSteven Michael Bellovin, William Roberts Cheswick
Life of this patent
Estimating the term…
Abstract
A device and method filter information to restrict access to private information of a domain in a domain name system. The device includes a filtering device. The filtering device filters information received from devices external to the domain by removing the private information before forwarding the information to devices within the domain. The private information includes IP addresses and domain names. The private information also includes any additional information appended to legitimate responses to requests from devices in the domain.
Claims32
A subsystem in a domain name system that filters information and restricts access to private information of a first domain, the first domain being coupled to a second domain and the first and second domains each comprising a plurality of devices, the subsystem comprising:
- a switching device that receives a first communication from a first device of the first domain being directed to a device of the second domain, the communication including a first request for private information of the first domain, the switching device redirecting the first request to a second device in the fist domain;
- and
- a filtering device that receives a second communication from the second domain destined to the first domain, wherein the filtering device generates filtered information by removing be private information of the fist domain from message data contained in the second communication and forwards the filtered information to one of the plurality of devices of the first domain.
A method of operation of a subsystem in a domain name system for filtering and restricting access to private;
- information of a first domain, the first domain being coupled to a second domain and the first and second domains each comprising a plurality of devices, the method comprising:
- receiving a first communication from a first device of the first domain that is directed to a device of the second domain, the first communication including a first request for the private information of the first domain;
- redirecting the first request to a second device of the first domain;
- receiving a second communication from the second domain destined to the first domain;
- generating filtered information by removing private information of the first domain from message data contained in the second communication;
- and
- forwarding the filtered information to one of the plurality of devices of the fist domain.
An apparatus for use in a domain name system, comprising:
- a switching device that receives a first communication from a first device of a first domain, the first communication including a first request for private information of the first domain, said first communication being directed to a second domain, the first and second domains each comprising a plurality of devices, the switching device redirecting, the first request for the private information front a first device of the second domain to a second device in the first domain;
- a filtering device that receives a second from the second domain destined to the first domain, wherein the filtering device generates filtered information a by removing private information of the first domain from message second communication and forwards the filtered information to one of the plurality of devices of the first domain.
A method of operation of an apparatus in a domain name system for filtering and restricting access to private information of a first domain the first domain being coupled to a second domain and the first and second domain comprising a plurality of devices, the method comprising:
- receiving a first communication from a first device of the first domain that is directed to a device of the second domain, the first communication including a first request for the private information of the first domain, and
- redirecting the first request for the private information of the first domain to a second device of the first domain;
- receiving a second communication from a device of the second domain destined to one of the devices of the first domain;
- generating filtered information by removing private information of the first domain from message data contained in the second communication;
- and
- forwarding the filtered information to the one of the devices of the first domain.
Dependencies are inferred from the claim text.