专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

31. 发明授权

US10999240B1 Client controlled domain name service (DNS) resolution 有权
公开(公告)号：US10999240B1
公开(公告)日：2021-05-04
申请号：US15253663
申请日：2016-08-31
申请人： Verisign, Inc.
发明人： Eric Osterweil , Ashvatth Lakshmanan
IPC分类号： H04L29/12
摘要： In one embodiment, a domain name system (DNS) server processes a DNS query based on a policy statement that is attached to the DNS query. Upon receiving the DNS query, the DNS server executes one or more commands specified in the policy statement to generate a query state. The query state controls DNS resolution behavior that the DNS server implements as part of processing the DNS query. The DNS server then performs one or more DNS resolution operations based on DNS query and the query state to generate a response. Advantageously, because the semantics of the policy statement are encapsulated within the policy statement, the policy statement enables a client to unambiguously control DNS resolution behavior. By contrast, conventional DNS resolution guidance mechanisms that rely on DNS servers to infer policies based on client data may not reflect the preferences of the clients.

32. 发明授权

US10721117B2 Resilient domain name service (DNS) resolution when an authoritative name server is unavailable 有权
公开(公告)号：US10721117B2
公开(公告)日：2020-07-21
申请号：US15670747
申请日：2017-08-07
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, Jr. , Shumon Huque , Eric Osterweil , Frank Scalzo , Duane Wessels , Glen Wiley
IPC分类号： H04L12/24 , H04L29/12 , H04W24/04 , H04L29/14
摘要： A resolution resiliency application performs robust domain name system (DNS) resolution. In operation, the resolution resiliency application determines that an authoritative name server that is responsible for a domain name specified in a DNS query is unavailable. In response to determining that the authoritative name server is unavailable, the resolution resiliency application performs operation(s) that modify one or more DNS records stored in a cache based on one or more resiliency policies associated with the authoritative name server. The resolution resiliency application then generates a DNS response to the DNS query based on a DNS record stored in the modified cache. Notably, the disclosed techniques increase the likelihood of providing clients with DNS responses that accurately provide requested information.

33. 发明申请

US20180343229A1 DETECTION OF ABERRANT DOMAIN REGISTRATION AND RESOLUTION PATTERNS 审中-公开
公开(公告)号：US20180343229A1
公开(公告)日：2018-11-29
申请号：US15602563
申请日：2017-05-23
申请人： VERISIGN, INC.
发明人： Yannis Labrou , Tomofumi Okubo , Eric Osterweil , Matthew Thomas
IPC分类号： H04L29/12 , H04L29/06
摘要： A method for detecting a predetermined behavior during a domain name registration or a domain resolution activity includes identifying one or more dimensions to be tracked. One or more metrics for each dimension is/are identified. A first time series for each of the metrics is generated. One or more first outliers in at least one of the first time series is detected. One or more sets of metrics is generated, each set including a combination of two or more of the metrics. A second time series for each of the metrics in the one or more sets of metrics is generated. One or more second outliers in at least one of the second time series is/are detected.

34. 发明授权

US10110614B2 Strengthening integrity assurances for DNS data 有权
公开(公告)号：US10110614B2
公开(公告)日：2018-10-23
申请号：US15221867
申请日：2016-07-28
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, Jr. , Eric Osterweil
IPC分类号： H04L9/32 , H04L29/06 , H04L29/12
摘要： One or more DNS services are provided that are configured to not only tolerate some commonly observed DNSSEC misconfigurations (while still providing DNSSEC's security guarantees), but also provide a more intelligent DNS resolution process informed by DNSSEC.

35. 发明申请

US20180176248A1 ANYCAST-BASED SPOOFED TRAFFIC DETECTION AND MITIGATION 审中-公开
公开(公告)号：US20180176248A1
公开(公告)日：2018-06-21
申请号：US15385977
申请日：2016-12-21
申请人： VERISIGN, INC.
发明人： Ashkan Nikravesh , Matthew Thomas , Danny McPherson , Eric Osterweil , Gautam Gudavalli , Tomofumi Okubo
IPC分类号： H04L29/06 , H04L12/733 , G06F17/30
CPC分类号： H04L63/1466 , G06F17/30864 , H04L45/20 , H04L47/286 , H04L63/1408 , H04L63/1416 , H04L63/1425 , H04L63/1441 , H04L63/1458
摘要： Systems and methods for detecting spoofed traffic include determining a first hop count of a first data query from a first transmitting device to a first server, determining a second hop count of a second data query from the first transmitting device to a second server, determining a third hop count of a third data query appearing to be from the first transmitting device to the first server, and determining a fourth hop count of a fourth data query appearing to be from the first transmitting device to the second server. The third and fourth hop counts are compared to the first and second hop counts, respectively. It is determined whether the third hop count differs from the first hop count by more than a predetermined amount.

36. 发明申请

US20180034827A1 STRENGTHENING INTEGRITY ASSURANCES FOR DNS DATA 审中-公开
公开(公告)号：US20180034827A1
公开(公告)日：2018-02-01
申请号：US15221867
申请日：2016-07-28
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, Jr. , Eric Osterweil
IPC分类号： H04L29/06 , H04L29/12
CPC分类号： H04L63/126 , H04L61/1511 , H04L61/6004 , H04L63/123
摘要： One or more DNS services are provided that are configured to not only tolerate some commonly observed DNSSEC misconfigurations (while still providing DNSSEC's security guarantees), but also provide a more intelligent DNS resolution process informed by DNSSEC.

37. 发明授权

US09762556B2 Registering, managing, and communicating with IOT devices using domain name system processes 有权
公开(公告)号：US09762556B2
公开(公告)日：2017-09-12
申请号：US14593919
申请日：2015-01-09
申请人： Verisign, Inc.
发明人： Stephen Daniel James , Daniel Schonfeld , Andrew Fregly , Eric Osterweil
IPC分类号： H04L29/06 , H04L29/12
CPC分类号： H04L63/0442 , H04L9/006 , H04L61/1511 , H04L63/061 , H04L63/0823 , H04W4/70 , H04W12/04
摘要： Provided herein is a method for registering an IoT device with a DNS registry. The method can include obtaining, at a DNS server, an identifier, IP address, and a public key of an asymmetric key pair associated with the IoT device from a network gateway device that is in communication with the IoT device, wherein the asymmetric key pair is provisioned onto the IoT device and an associated private key stored within a memory of the IoT device at a time that IoT device is manufactured or during a predetermined time window after manufacturing; creating at least one DNS record for the IoT device; assigning a domain name associated with the internet protocol (“IP”) address to the IoT device; storing the identifier, IP address, the domain name, and the public key in the at least one DNS record; and providing confirmation of the registration to the IoT device.

38. 发明授权

US09705851B2 Extending DNSSEC trust chains to objects outside the DNS 有权
公开(公告)号：US09705851B2
公开(公告)日：2017-07-11
申请号：US14814792
申请日：2015-07-31
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, Jr. , Eric Osterweil , Glen Wiley
IPC分类号： H04L29/06 , H04L29/12
CPC分类号： H04L63/0428 , H04L61/1511 , H04L61/1552 , H04L61/305 , H04L63/0823 , H04L63/123 , H04L67/42
摘要： The present invention generally relates to systems and methods for extending a chain of trust beyond the DNS. Some embodiments provide a verifier with the ability to validate a chain of trust starting with the trust anchor at the DNS root all the way to a service or object of interest outside the DNS.

39. 发明申请

US20170085380A1 METHODS AND SYSTEMS FOR BOOTSTRAPPING 有权
公开(公告)号：US20170085380A1
公开(公告)日：2017-03-23
申请号：US14860885
申请日：2015-09-22
申请人： VERISIGN, INC.
发明人： Ramakant Pandrangi , Eric Osterweil , Paul Livesay
IPC分类号： H04L9/32 , H04L29/06
CPC分类号： H04L9/321 , H04L9/3263 , H04L61/1511 , H04L63/123 , H04L63/126 , H04L63/20
摘要： The disclosure is directed to securely bootstrapping devices in a network environment. Methods and systems include hardware and/or operations for receiving, based on an identifier provisioned at a relying entity, instances of a security credential of an information system, wherein the instances are associated with respective certifying entities. The operations also include verifying the authenticity of the instances of the security credential using information of the certifying entities provisioned at the relying entity. The operations further includes determining matches between the instances of the security credential. Additionally, the operations include determining based on the matches that a first instance of the security credential satisfies a policy provisioned at the relying entity. Further, the operations include verifying the authenticity of information requested from the information system using the first instance of the security credential. In various implementations, the information system may be the domain name system.

40. 发明申请

US20160259932A1 SYSTEMS AND METHODS FOR DEVICE DETECTION AND AUTHORIZATION IN A IOT FRAMEWORK 有权
标题翻译：用于在IOT框架中进行设备检测和授权的系统和方法
公开(公告)号：US20160259932A1
公开(公告)日：2016-09-08
申请号：US14640489
申请日：2015-03-06
申请人： Verisign, Inc.
发明人： Ashvatth Lakshmanan , Eric Osterweil , Andrew Fregly
IPC分类号： G06F21/44
CPC分类号： G06F21/44 , H04L61/1511 , H04L61/3025 , H04L61/305 , H04W4/029 , H04W4/04 , H04W4/70 , H04W4/80
摘要： Provided herein are a method, a device, and a computer-readable medium operable to perform a method of automatically admitting a device to a network. The method can include receiving, from the one or more authorized devices in the network, first data that is associated with one or more sensing modalities, wherein the one or more sensing modalities are detected by the one or more of the one or more of the authorized devices during a defined time window; identifying a new device to be admitted to the network; constructing a time sequence of proximity events of the new device, within the defined time window, based on the first data; determining that the time sequence of the proximity events matches an expected time sequence of expected of proximity events; and admitting the new device to the network based on the determining.
摘要翻译：本文提供的方法，设备和计算机可读介质可操作以执行将设备自动接纳到网络的方法。该方法可以包括从网络中的一个或多个授权设备接收与一个或多个感测模态相关联的第一数据，其中所述一个或多个感测模态由所述一个或多个在定义的时间窗口内授权设备; 识别要进入网络的新设备; 基于所述第一数据，在所述定义的时间窗内构建所述新设备的接近事件的时间序列; 确定邻近事件的时间顺序与期望的邻近事件的预期时间顺序相匹配; 并基于确定将新设备接纳到网络。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式