# US 9,521,138 B2 · System for domain control validation

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,521,138 B2
- Document ID: US9521138B2
- Status: Granted
- Kind: B2
- Application number: 13/918,716
- Filed: 2013-06-14
- Published: 2014-12-18
- Granted: 2016-12-13
- Earliest claimed: 2013-06-14
- Assignees: Go Daddy Operating Company, LLC
- Applicants: Go Daddy Operating Company, LLC
- Inventors: Wayne Thayer; Jacob Plains
- Web page: https://patentgrep.com/patent/US9521138B2

## CPC

- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A system and method for domain control validation is presented. At a certificate authority a request is received. The request includes a certificate signing request and a first Internet protocol address. The certificate signing request identifies a domain and a certificate. A second Internet protocol address for the domain is retrieved from a domain name system. When the first Internet protocol address is the same as the second Internet protocol address, the certificate is signed, and the signed certificate is transmitted to a requester of the request. When the first Internet protocol address is not the same as the second Internet protocol address, the certificate signing request is rejected.

## Claims

### Claim 1

A system, comprising:
at least one server computer having a processor and being configured to:
receive a request including a certificate signing request and a first Internet protocol address, the certificate signing request identifying a domain and a certificate;
retrieve a second Internet protocol address for the domain from a domain name system;
when the first Internet protocol address is the same as the second Internet protocol address:
sign the certificate, and
transmit the signed certificate to a requester of the request; and
when the first Internet protocol address is not the same as the second Internet protocol address, reject the certificate signing request.

### Claim 2 (depends on 1)

The system of claim 1, wherein the request is received from a web hosting provider.

### Claim 3 (depends on 2)

The system of claim 2, wherein rejecting the certificate signing request includes transmitting a notification to the web hosting provider.

### Claim 4 (depends on 2)

The system of claim 2, wherein the at least one server computer is hosted by a certificate authority and the certificate authority and the web hosting provider have a pre-established trusted relationship.

### Claim 5 (depends on 4)

The system of claim 4, wherein the certificate authority and the web hosting provider are the same entity.

### Claim 6 (depends on 4)

The system of claim 4, wherein the certificate authority and the web hosting provider are different entities.

### Claim 7 (depends on 1)

The system of claim 1, wherein the at least one server computer is configured to:
determine whether the request includes a first plurality of Internet protocol addresses; and
when the request includes the first plurality of Internet protocol addresses, retrieve a second plurality of Internet protocol addresses for the domain from a domain name system server.

### Claim 8 (depends on 7)

The system of claim 7, wherein the first Internet protocol address is selected from the first plurality of Internet protocol addresses and the second Internet protocol address is selected from the second plurality of Internet protocol addresses.

### Claim 9 (depends on 1)

The system of claim 1, wherein, when the first Internet protocol address is not the same as the second Internet protocol address, the at least one server computer is configured to initiate an alternative method for performing domain control validation for the domain.

### Claim 10

A system, comprising:
at least one server computer having a processor and being configured to:
receive a request from a second server computer, the second server computer operating an administration account for a domain, the request including a certificate signing request and a first Internet protocol address of a third server computer hosting a website for the domain, the certificate signing request identifying the domain and a certificate;
retrieve a second Internet protocol address for the domain from a domain name system;
when the first Internet protocol address is the same as the second Internet protocol address:
sign the certificate, and
transmit the signed certificate to a requester of the request; and
when the first Internet protocol address is not the same as the second Internet protocol address, reject the certificate signing request.