Back to results
US 8,997,205 B1Granted
Method and apparatus for providing secure web transactions using a secure DNS server
AssigneeSymantec Corporation
InventorVijay Anand Seshadri
Life of this patent
Estimating the term…
Abstract
A method and apparatus for providing a secure domain name services by utilizing a hypervisor to provide an isolated execution environment in which a secure browser session can be instantiated. The secure browser session utilizes a secure DNS server to provide domain name services.
Claims15
A method for providing secure domain name services to a host computer comprising:
- launching, on a host computer, a hypervisor, wherein the hypervisor is configured to support a user domain and a secure domain, wherein the user domain is configured to execute various guest applications using functional layers and an unmodified host operating system that interacts with the hypervisor and secure domain, wherein the hypervisor is a type-1 hypervisor, wherein the unmodified host operating system functions as a guest operating system, and wherein the secure domain comprises backend and native drivers that interact with the hypervisor;
- launching, on the host computer, an isolated execution environment using the hypervisor, wherein the backend and native drivers that interact with the hypervisor provide a secure session for launching the isolated execution environment without reliance on a host operating system or host applications to prevent being compromised by any local malicious software residing within the host operating system or host applications;
- launching, in response to the launch of the isolated execution environment, a secure application within the isolated execution environment;
- requesting domain name services from within the isolated execution environment, wherein the domain name services are provided by a secure domain name services server whose address is hard-coded into the isolated execution environment;
- contacting the domain name services server in the event domain name services are required;
- and
- providing the address to the secure application within the isolated execution environment to establish a secure connection.
4 more elements
A method for providing secure domain name services to a host computer comprising:
- launching, on the host computer, a hypervisor, wherein the hypervisor is configured to support a user domain and a secure domain, wherein the user domain is configured to execute various guest applications to support a conventional operating system using functional layers and an unmodified host operating system that interacts with the hypervisor and secure domain, wherein the hypervisor is a type-1 hypervisor, wherein the conventional operating system comprises an unmodified host operating system functioning as a guest operating system, and wherein the secure domain comprises backend and native drivers that interact with the hypervisor;
- launching, on the host computer, an isolated execution environment to provide a secure environment for communicating with a web server, wherein the isolated execution environment is created using the hypervisor, wherein the backend and native drivers that interact with the hypervisor provide the secure environment without reliance on the conventional operating system or the host computer to prevent being compromised by any local malicious software residing within the conventional operating system;
- launching, in response to the launch of the isolated execution environment, a secure web browser application within the isolated execution environment;
- requesting domain name services from within the isolated execution environment, wherein the domain name services are provided by a secure domain name services server whose address is hard-coded into the isolated execution environment;
- contacting the domain name services server in the event domain name services are required;
- and
- providing the address to the browser within the isolated execution environment to establish a secure connection.
4 more elements
Apparatus for providing secure domain name services to a host computer comprising:
- a hardware platform configured to support a hypervisor that creates a user domain, a secure domain, and an isolated execution environment, wherein the user domain is configured to execute various guest applications to support a conventional operating system using functional layers and an unmodified host operating system that interacts with the hypervisor and secure domain and the isolated execution environment provides a secure environment for communicating with a web server and requesting domain name services, wherein the domain name services are provided by a secure domain name services server whose address is hard-coded into the isolated execution environment, wherein the hypervisor is a type-1 hypervisor, wherein the conventional operating system comprises an unmodified host operating system functioning as a guest operating system, wherein the secure domain formed within the isolated execution environment comprises backend and native drivers that interact with the hypervisor to provide a secure environment, wherein the isolated execution environment is configured to launch a secure web browser within the isolated execution environment in response to a launch of the isolated execution environment, and wherein the secure environment, without reliance on the conventional operating system, prevents being compromised by any local malicious software residing within the conventional operating system when the domain name services server is contacted in the event domain name services are required and the address is provided to the browser within the isolated execution environment to establish a secure connection.
Dependencies are inferred from the claim text.