专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US11122004B1 Externally applying internal network domain name system (DNS) policies 有权
公开(公告)号：US11122004B1
公开(公告)日：2021-09-14
申请号：US15331664
申请日：2016-10-21
申请人： VERISIGN, INC.
发明人： Michael Kaczmarek , Eric Osterweil
IPC分类号： H04L29/12
摘要： In one embodiment, a global domain name system (DNS) server processes a DNS query based on an internal network policy. Upon receiving a DNS query that is associated with a source IP address, the global DNS server identifies a client subnet based on the DNS query. The client subnet is associated with an internal device on an internal network. The global DNS server selects an internal network policy from multiple predetermined policies based on the source IP address and the client subnet. The global DNS server then tailors one or more DNS resolution operations that generate a response to the DNS query based on the selected internal network policy. Advantageously, the client subnet provides the global DNS server with visibility into the internal network. Such visibility enables the global DNS server to apply policies selectively at the granularity of individual devices on the internal network.

22. 发明授权

US10992630B1 Techniques for email portability 有权
公开(公告)号：US10992630B1
公开(公告)日：2021-04-27
申请号：US15877114
申请日：2018-01-22
申请人： VERISIGN, INC.
发明人： Michael Kaczmarek , Sameer Thakar , Eric Osterweil
IPC分类号： H04L12/58 , H04L29/12
摘要： Various embodiments disclosed herein provide techniques for transmitting an email message over a network. An email forwarding application executing on an email server receives a first request from a first device within the network to resolve an email address of an email recipient, where the email address is associated with a first domain. The email forwarding application determines that the email recipient is associated with a second domain. The email forwarding application transmits, to the first device, a first response to the first request that identifies the email recipient and the second domain.

23. 发明授权

US10728273B1 Systems, devices, and methods for detecting and mitigating domain name registrations used for malicious behavior 有权
公开(公告)号：US10728273B1
公开(公告)日：2020-07-28
申请号：US15664545
申请日：2017-07-31
申请人： VERISIGN, INC.
发明人： Tomofumi Okubo , Eric Osterweil , Matthew Thomas
IPC分类号： G06F21/00 , G06F21/55 , G06F21/56 , H04L29/06 , G06F7/20 , H04L29/12 , G06F16/951
摘要： A method for detecting a domain name that is associated with malicious behavior includes receiving domain data for a plurality of domain names including a first domain name and a plurality of similar domain names. The domain data includes a first attribute and a second attribute of the first domain name and the similar domain names. The first attribute of the first domain name is compared to the first attributes of the similar domain names to produce a first value. The second attribute of the first domain name is compared to the second attributes of the similar domain names to produce a second value. The first value and the second value are combined to produce a combined value. A likelihood that the first domain name is associated with malicious behavior is determined based on the combined value.

24. 发明授权

US10326794B2 Anycast-based spoofed traffic detection and mitigation 有权
公开(公告)号：US10326794B2
公开(公告)日：2019-06-18
申请号：US15385977
申请日：2016-12-21
申请人： VERISIGN, INC.
发明人： Ashkan Nikravesh , Matthew Thomas , Danny McPherson , Eric Osterweil , Gautam Gudavalli , Tomofumi Okubo
IPC分类号： H04L29/06 , H04L12/733 , G06F17/30 , G06F16/951 , H04L12/841
摘要： Systems and methods for detecting spoofed traffic include determining a first hop count of a first data query from a first transmitting device to a first server, determining a second hop count of a second data query from the first transmitting device to a second server, determining a third hop count of a third data query appearing to be from the first transmitting device to the first server, and determining a fourth hop count of a fourth data query appearing to be from the first transmitting device to the second server. The third and fourth hop counts are compared to the first and second hop counts, respectively. It is determined whether the third hop count differs from the first hop count by more than a predetermined amount.

25. 发明申请

US20170374042A1 REGISTERING, MANAGING, AND COMMUNICATING WITH IOT DEVICES USING DOMAIN NAME SYSTEM PROCESSES 审中-公开
公开(公告)号：US20170374042A1
公开(公告)日：2017-12-28
申请号：US15701408
申请日：2017-09-11
申请人： Verisign, Inc.
发明人： Stephen Daniel James , Daniel Schonfeld , Andrew Fregly , Eric Osterweil
IPC分类号： H04L29/06 , H04L29/12
CPC分类号： H04L63/0442 , H04L9/006 , H04L61/1511 , H04L63/061 , H04L63/0823 , H04W4/70 , H04W12/0023 , H04W12/04
摘要： Provided herein is a method for registering an IoT device with a DNS registry. The method can include obtaining, at a DNS server, an identifier, IP address, and a public key of an asymmetric key pair associated with the IoT device from a network gateway device that is in communication with the IoT device, wherein the asymmetric key pair is provisioned onto the IoT device and an associated private key stored within a memory of the IoT device at a time that IoT device is manufactured or during a predetermined time window after manufacturing; creating at least one DNS record for the IoT device; assigning a domain name associated with the internet protocol (“IP”) address to the IoT device; storing the identifier, IP address, the domain name, and the public key in the at least one DNS record; and providing confirmation of the registration to the IoT device.

26. 发明申请

US20170310484A1 EXTENDING DNSSEC TRUST CHAINS TO OBJECTS OUTSIDE THE DNS 有权
公开(公告)号：US20170310484A1
公开(公告)日：2017-10-26
申请号：US15645445
申请日：2017-07-10
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, JR. , Eric Osterweil , Glen Wiley
IPC分类号： H04L9/32 , H04L29/12 , H04L29/06
CPC分类号： H04L9/3247 , H04L9/006 , H04L9/3265 , H04L61/1511 , H04L61/1552 , H04L61/305 , H04L63/0428 , H04L63/08 , H04L63/0823 , H04L67/42 , H04L2209/38
摘要： The present invention generally relates to systems and methods for extending a chain of trust beyond the DNS. Some embodiments provide a verifier with the ability to validate a chain of trust starting with the trust anchor at the DNS root all the way to a service or object of interest outside the DNS.

27. 发明申请

US20150058999A1 PROVIDING PRIVACY ENHANCED RESOLUTION SYSTEM IN THE DOMAIN NAME SYSTEM 有权
标题翻译：在域名系统中提供隐私增强解决方案
公开(公告)号：US20150058999A1
公开(公告)日：2015-02-26
申请号：US14531424
申请日：2014-11-03
申请人： VERISIGN, INC.
发明人： Danny McPherson , Eric Osterweil
IPC分类号： G06F21/60 , H04L29/12 , G06F17/30
CPC分类号： G06F21/60 , G06F17/30864 , H04L61/1511 , H04L61/305 , H04L63/0407
摘要： An apparatus and a non-transitory computer-readable medium may perform a method of minimizing the disclosure of a domain name contained in a DNS query. The method may include determining a first label and a second label associated with a domain name included in a DNS query. A first nameserver may be queried for a first resource record type associated with the first label without revealing information related to the second label by removing information related to the second label from the DNS query. A response may be received from the first nameserver, and the response may include the first resource record type which directs a resolver to a second nameserver. The second nameserver may be queried for a second resource record type associated with the first label and the second label.
摘要翻译：一种装置和非暂时计算机可读介质可以执行最小化包含在DNS查询中的域名的公开的方法。该方法可以包括确定与包括在DNS查询中的域名相关联的第一标签和第二标签。可以通过从DNS查询中移除与第二标签相关的信息来查询与第一标签相关联的第一资源记录类型，而不透露与第二标签相关的信息。可以从第一名称服务器接收响应，并且响应可以包括将解析器指向第二名称服务器的第一资源记录类型。可以查询与第一标签和第二标签相关联的第二资源记录类型的第二名称服务器。

28. 发明申请

US20140026186A1 WHITE LISTING DNS TOP-TALKERS 审中-公开
标题翻译：白名单DNS顶级广告
公开(公告)号：US20140026186A1
公开(公告)日：2014-01-23
申请号：US14037933
申请日：2013-09-26
申请人： VERISIGN, INC.
发明人： Eric Osterweil , Danny McPherson
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , H04L61/1511 , H04L63/0236 , H04L63/126 , H04L63/1416 , H04L63/1458 , H04L2463/142
摘要： Systems and methods for creating a list of trustworthy resolvers in a domain name system. A computer receives a resolver profile for a resolver sending queries to a domain name server. The resolver profile is based on any, or a combination, of a top-talker status of the resolver, a normalcy of distribution of domain names queried, a continuity of distribution of query type, and a RD bit status, and information related to query traffic based on the topology of the domain name server. Resolver profiles can be compared to a trust policy to determine whether the resolver is trustworthy. Resolvers deemed trustworthy can be added to a list of trustworthy resolvers. Embodiments can detect the occurrence of a network-based attack. Embodiments can mitigate the effect of a network-based attack by responding only to queries from resolvers on the list of trustworthy resolvers.
摘要翻译：在域名系统中创建可靠解析器列表的系统和方法。计算机接收解析器的解析器配置文件，该解析器配置文件向域名服务器发送查询。解析器配置文件基于解析器的最高讲话者状态，查询的域名分发的正常性，查询类型的分布的连续性和RD比特状态的任何或组合，以及与查询相关的信息基于域名服务器拓扑的流量。可以将解析器配置文件与信任策略进行比较，以确定解析器是否可信赖。被认为值得信赖的解决方案可以添加到可靠的解析器列表中。实施例可以检测基于网络的攻击的发生。实施例可以通过仅响应可靠解析器列表上的解析器的查询来减轻基于网络的攻击的影响。

29. 发明授权

US11616788B2 Strengthening integrity assurances for DNS data 有权
公开(公告)号：US11616788B2
公开(公告)日：2023-03-28
申请号：US16938345
申请日：2020-07-24
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, Jr. , Eric Osterweil
IPC分类号： H04L29/06 , H04L9/40 , H04L61/4511 , H04L101/604
摘要： One or more DNS services are provided that are configured to not only tolerate some commonly observed DNSSEC misconfigurations (while still providing DNSSEC's security guarantees), but also provide a more intelligent DNS resolution process informed by DNSSEC.

30. 发明授权

US11005856B2 Strengthening integrity assurances for DNS data 有权
公开(公告)号：US11005856B2
公开(公告)日：2021-05-11
申请号：US16143232
申请日：2018-09-26
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, Jr. , Eric Osterweil
IPC分类号： H04L29/06 , H04L29/12
摘要： One or more DNS services are provided that are configured to not only tolerate some commonly observed DNSSEC misconfigurations (while still providing DNSSEC's security guarantees), but also provide a more intelligent DNS resolution process informed by DNSSEC.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式