专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11032127B2 Resilient domain name service (DNS) resolution when an authoritative name server is unavailable 有权
公开(公告)号：US11032127B2
公开(公告)日：2021-06-08
申请号：US15633655
申请日：2017-06-26
申请人： VERISIGN, INC.
发明人： Shumon Huque , Burton S. Kaliski, Jr. , Eric Osterweil , Frank Scalzo , Glen Wiley
IPC分类号： H04L12/24 , H04L29/12 , H04W24/04 , H04L29/14
摘要： In one embodiment, a resolution resiliency application performs robust domain name system (DNS) resolution. In operation, the resolution resiliency application determines that an authoritative name server that is responsible for a domain name specified in a DNS query is unavailable. In response to determining that the authoritative name server is unavailable, the resolution resiliency application performs operation(s) that modify one or more DNS records stored in a cache based on one or more resiliency policies associated with the authoritative name server. The resolution resiliency application then generates a DNS response to the DNS query based on a DNS record stored in the modified cache. Notably, unlike conventional techniques that may generate inaccurate DNS responses based on stale DNS records, the disclosed techniques increase the likelihood of providing clients with DNS responses that accurately provide requested information.

2. 发明授权

US09705682B2 Extending DNSSEC trust chains to objects outside the DNS 有权
公开(公告)号：US09705682B2
公开(公告)日：2017-07-11
申请号：US14959052
申请日：2015-12-04
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, Jr. , Eric Osterweil , Glen Wiley
IPC分类号： H04L29/06 , H04L9/32 , H04L29/12
CPC分类号： H04L9/3247 , H04L9/006 , H04L9/3265 , H04L61/1511 , H04L61/1552 , H04L61/305 , H04L63/0428 , H04L63/08 , H04L63/0823 , H04L67/42 , H04L2209/38
摘要： The present invention generally relates to systems and methods for extending a chain of trust beyond the DNS. Some embodiments provide a verifier with the ability to validate a chain of trust starting with the trust anchor at the DNS root all the way to a service or object of interest outside the DNS.

3. 发明授权

US08990356B2 Adaptive name resolution 有权
标题翻译：自适应名称解析
公开(公告)号：US08990356B2
公开(公告)日：2015-03-24
申请号：US13828070
申请日：2013-03-14
申请人： VeriSign, Inc.
发明人： Danny McPherson , Joseph Waldron , Eric Osterweil
IPC分类号： G06F15/16 , H04L29/06 , H04L29/12 , H04L12/14
CPC分类号： H04L63/08 , H04L12/1432 , H04L12/1435 , H04L61/1511 , H04L61/2007 , H04L63/102
摘要： A method, system, and computer-readable memory containing instructions include receiving a DNS request containing information related to user-specific information, device-specific information, and/or authentication information, analyzing the information, determining an appropriate action to take based on analyzing the status, and taking the appropriate action. Actions may include responding with an individualized network layer address or service location address, delaying sending a response message, sending a network layer address or service location address corresponding to a site containing authentication information, and sending a response with a network layer address or service location address with a web address configured to mimic the website related to the requested resource.
摘要翻译：包含指令的方法，系统和计算机可读存储器包括接收包含与用户特定信息有关的信息的DNS请求，设备特定信息和/或认证信息，分析信息，基于分析来确定要采取的适当动作状况，并采取适当的行动。动作可以包括响应于个性化网络层地址或服务位置地址，延迟发送响应消息，发送与包含认证信息的站点相对应的网络层地址或服务位置地址，以及发送具有网络层地址或服务位置的响应地址，配置为模拟与所请求资源相关的网站的网址。

4. 发明授权

US08935744B2 White listing DNS top-talkers 有权
标题翻译：白名单DNS热门话题
公开(公告)号：US08935744B2
公开(公告)日：2015-01-13
申请号：US14037933
申请日：2013-09-26
申请人： Verisign, Inc.
发明人： Eric Osterweil , Danny McPherson
IPC分类号： G06F17/00 , H04L29/06 , H04L29/12
CPC分类号： H04L63/20 , H04L61/1511 , H04L63/0236 , H04L63/126 , H04L63/1416 , H04L63/1458 , H04L2463/142
摘要： Systems and methods for creating a list of trustworthy resolvers in a domain name system. A computer receives a resolver profile for a resolver sending queries to a domain name server. The resolver profile is based on any, or a combination, of a top-talker status of the resolver, a normalcy of distribution of domain names queried, a continuity of distribution of query type, and a RD bit status, and information related to query traffic based on the topology of the domain name server. Resolver profiles can be compared to a trust policy to determine whether the resolver is trustworthy. Resolvers deemed trustworthy can be added to a list of trustworthy resolvers. Embodiments can detect the occurrence of a network-based attack. Embodiments can mitigate the effect of a network-based attack by responding only to queries from resolvers on the list of trustworthy resolvers.
摘要翻译：在域名系统中创建可靠解析器列表的系统和方法。计算机接收解析器的解析器配置文件，该解析器配置文件向域名服务器发送查询。解析器配置文件基于解析器的最高讲话者状态，查询的域名分发的正常性，查询类型的分布的连续性以及RD比特状态的任何或组合，以及与查询相关的信息基于域名服务器拓扑的流量。可以将解析器配置文件与信任策略进行比较，以确定解析器是否可信赖。被认为值得信赖的解决方案可以添加到可靠的解析器列表中。实施例可以检测基于网络的攻击的发生。实施例可以通过仅响应可靠解析器列表上的解析器的查询来减轻基于网络的攻击的影响。

5. 发明授权

US11190479B2 Detection of aberrant domain registration and resolution patterns 有权
公开(公告)号：US11190479B2
公开(公告)日：2021-11-30
申请号：US15602563
申请日：2017-05-23
申请人： VERISIGN, INC.
发明人： Yannis Labrou , Tomofumi Okubo , Eric Osterweil , Matthew Thomas
IPC分类号： G06F15/16 , H04L29/12 , H04L29/06
摘要： A method for detecting a predetermined behavior during a domain name registration or a domain resolution activity includes identifying one or more dimensions to be tracked. One or more metrics for each dimension is/are identified. A first time series for each of the metrics is generated. One or more first outliers in at least one of the first time series is detected. One or more sets of metrics is generated, each set including a combination of two or more of the metrics. A second time series for each of the metrics in the one or more sets of metrics is generated. One or more second outliers in at least one of the second time series is/are detected.

6. 发明授权

US11025482B2 Resilient domain name service (DNS) resolution when an authoritative name server is degraded 有权
公开(公告)号：US11025482B2
公开(公告)日：2021-06-01
申请号：US15881596
申请日：2018-01-26
申请人： Verisign, Inc.
发明人： Shumon Huque , Burton S. Kaliski, Jr. , Eric Osterweil , Frank Scalzo , Duane Wessels , Glen Wiley
IPC分类号： H04L12/24 , H04L29/12 , H04W24/04 , H04L29/14
摘要： In one embodiment, a resolution resiliency application modifies domain name service (DNS) resolution. In operation, the resolution resiliency application determines that an authoritative name server has begun recovering from a degraded state or receives a flush list update from the authoritative name server. In response, the resolution resiliency application performs operation(s) that modify a query rate and/or a cache. The query rate specifies a frequency associated with DNS queries transmitted to the first authoritative name server. The cache stores DNS record(s) received from the first authoritative name server. Finally, the resolution resiliency application generates a DNS response to a DNS query based on the modified query rate and/or the modified cache.

7. 发明申请

US20190044955A1 STRENGTHENING INTEGRITY ASSURANCES FOR DNS DATA 审中-公开
公开(公告)号：US20190044955A1
公开(公告)日：2019-02-07
申请号：US16143232
申请日：2018-09-26
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, JR. , Eric Osterweil
IPC分类号： H04L29/06 , H04L29/12
摘要： One or more DNS services are provided that are configured to not only tolerate some commonly observed DNSSEC misconfigurations (while still providing DNSSEC's security guarantees), but also provide a more intelligent DNS resolution process informed by DNSSEC.

8. 发明授权

US09935771B2 Methods and systems for bootstrapping 有权
公开(公告)号：US09935771B2
公开(公告)日：2018-04-03
申请号：US14860885
申请日：2015-09-22
申请人： VERISIGN, INC.
发明人： Ramakant Pandrangi , Eric Osterweil , Paul Livesay
IPC分类号： H04L29/06 , H04L9/32
CPC分类号： H04L9/321 , H04L9/3263 , H04L61/1511 , H04L63/123 , H04L63/126 , H04L63/20
摘要： The disclosure is directed to securely bootstrapping devices in a network environment. Methods and systems include hardware and/or operations for receiving, based on an identifier provisioned at a relying entity, instances of a security credential of an information system, wherein the instances are associated with respective certifying entities. The operations also include verifying the authenticity of the instances of the security credential using information of the certifying entities provisioned at the relying entity. The operations further includes determining matches between the instances of the security credential. Additionally, the operations include determining based on the matches that a first instance of the security credential satisfies a policy provisioned at the relying entity. Further, the operations include verifying the authenticity of information requested from the information system using the first instance of the security credential. In various implementations, the information system may be the domain name system.

9. 发明申请

US20170019371A1 METHODS AND SYSTEMS FOR DOMAIN NAME DATA NETWORKING 审中-公开
标题翻译：域名数据网络的方法和系统
公开(公告)号：US20170019371A1
公开(公告)日：2017-01-19
申请号：US15147387
申请日：2016-05-05
申请人： VERISIGN, INC.
发明人： Eric Osterweil , G. Craig Murray , Abedelaziz Mohaisen , Danny McPherson
IPC分类号： H04L29/12 , H04L29/08
CPC分类号： H04L61/1511 , H04L63/126 , H04L67/2842
摘要： Systems, devices and methods for a Domain Name Data Networking (DNDN) content delivery system are disclosed. Embodiments perform operations including obtaining a content object having a unique identifier. The operations also include storing a local instance of the content object in association with DNS resource records and the unique identifier. The operations further include providing the local instance of the content to a client in response to receiving a request from the client including the unique identifier.
摘要翻译：公开了域名数据网络（DNDN）内容传送系统的系统，设备和方法。实施例执行包括获得具有唯一标识符的内容对象的操作。这些操作还包括与DNS资源记录和唯一标识符相关联地存储内容对象的本地实例。这些操作进一步包括响应于从客户端接收包括唯一标识符的请求，向客户端提供内容的本地实例。

10. 发明申请

US20170012943A1 EXTENDING DNSSEC TRUST CHAINS TO OBJECTS OUTSIDE THE DNS 有权
公开(公告)号：US20170012943A1
公开(公告)日：2017-01-12
申请号：US14814792
申请日：2015-07-31
申请人： VERISIGN, INC.
发明人： Burton S. Kaliski, JR. , Eric Osterweil , Glen Wiley
IPC分类号： H04L29/06 , H04L29/12
CPC分类号： H04L63/0428 , H04L61/1511 , H04L61/1552 , H04L61/305 , H04L63/0823 , H04L63/123 , H04L67/42
摘要： The present invention generally relates to systems and methods for extending a chain of trust beyond the DNS. Some embodiments provide a verifier with the ability to validate a chain of trust starting with the trust anchor at the DNS root all the way to a service or object of interest outside the DNS.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式