System and method for establishing unique sessions for DNS subscribers

• US 20090043900A1
• Filed: 08/11/2008
• Published: 02/12/2009
• Est. Priority Date: 08/09/2007
• Status: Active Grant

• Current Assignee: Kount Incorporated (Equifax, Inc.)
• Original Assignee: Kount Incorporated (Equifax, Inc.)
• Inventors: Barber, Timothy P.
• Granted Patent: US 7,958,246 B2
• Time in Patent Office: Days
• US Class Current: 709/228
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1027 Persistence of sessions during load balancing
• CPC Class Codes: H04L 67/1036 Load balancing of requests to servers for services different from user content provisioning, e.g. load balancing across domain name servers
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding

Abstract

A method and system for providing service over a communication network. The method includes establishing a plurality of virtual DNS servers that is supported by a DNS server. A plurality of target IP addresses is assigned for the plurality of virtual DNS servers. Each target IP address includes a first IP subaddress identifying the DNS server, and a second IP subaddress identifying a corresponding virtual DNS server. A plurality of network capable devices is uniquely assigned to the plurality of virtual DNS servers for domain name resolution. Each network capable device accesses the communication network through a corresponding network device associated with a corresponding source IP address. A service plan of a client is assigned to a first network capable device used by the client. The service plan is implemented through a DNS request under a session established between the first network capable device and its assigned first virtual DNS server. The session is uniquely identified by a combination of a first source IP address of a first network device used by the first network capable device to access the communication network, and a first target IP address of the first virtual DNS server.

Claims

1. A method of providing service, comprising:

establishing a plurality of virtual DNS servers that is supported by a DNS server;

assigning a plurality of target IP addresses for said plurality of virtual DNS servers, wherein each target IP address comprises a first IP subaddress identifying said DNS server, and a second IP subaddress identifying a corresponding virtual DNS server;

uniquely assigning a plurality of network capable devices to said plurality of virtual DNS servers for domain name resolution, wherein each of said plurality of network capable devices accesses a communication network through a corresponding network device associated with a corresponding source IP address; and

assigning a service plan of a client to a first network capable device being used to access said communication network by said client, said service plan being implemented through a DNS request under a session established between said first network capable device and its assigned first virtual DNS server, said session uniquely identified by a combination of a first source IP address, associated with a first network device used by said first network capable device to access said communication network, and a first target IP address of said first virtual DNS server.

2. The method of claim 1, wherein said assigning a service plan further comprises:

assigning a plurality of service plans of a plurality of clients to said plurality of network capable devices used for accessing said communication network as implemented through a corresponding DNS request of a corresponding session, wherein each session is uniquely identified by a corresponding combination of source IP address and target IP address related to an associated network device used to make said corresponding DNS request.

3. The method of claim 1, wherein said uniquely assigning further comprises:

uniquely assigning a first plurality of network capable devices to said plurality of virtual DNS servers for domain name resolution service, wherein said first plurality of network capable devices accesses said communication network through a second network device associated with a second source IP address, and wherein each service plan, associated with a corresponding network capable device, is uniquely identified through a first combination of said second source IP address and target IP subaddress associated with said corresponding network capable device.

4. The method of claim 1, further comprising:

establishing said session for said client through said first DNS request facilitating the discovery of said combination of first source IP address and said first target IP address.

5. The method of claim 1, wherein said communication network comprises the internet.

6. The method of claim 1, wherein said corresponding network device comprises a router.

7. The method of claim 1, wherein said assigning a plurality of target IP addresses further comprises:

assigning said second IP subaddress a unique number in an octet of a corresponding target IP address.

8. The method of claim 1, wherein said assigning a service plan further comprises:

uniquely identifying said service plan with said first network capable device through said combination comprising said source IP address and an associated second IP subaddress of said first target IP address.

9. The method of claim 1, wherein at least one corresponding network device functions as a network capable device.

10. A method of providing service, comprising:

uniquely identifying a client;

determining a source internet protocol (IP) address of a network device through which a DNS request is made, wherein said DNS request originates from a network capable device used by said client to access a communication network;

determining a target IP address of a virtual DNS server to which said network capable device directs its DNS requests, wherein said virtual DNS server is supported by a DNS server; and

establishing a unique session between said network capable device and said virtual DNS server by uniquely associating said network capable device, that is associated with said client, with a combination of said source IP address of said network device and said target IP address.

11. The method of claim 10, further comprising:

associating a service plan for said client in a DNS request made by said network capable device.

12. The method of claim 10, wherein said uniquely identifying a client further comprises:

receiving a hypertext transfer protocol (HTTP) request for access to a first web site facilitating identification of said client; and

identifying said client from header information in said HTTP request.

13. The method of claim 10, wherein said uniquely identifying a client further comprises:

receiving an HTTP request for access to a first web site facilitating identification of said client;

requesting identifying information from said client; and

receiving said identifying information.

14. The method of claim 10, wherein said determining a source IP address further comprises:

generating a token that is associated with said client;

redirecting said network device to a domain name including said token thereby triggering said DNS request for said domain name, wherein said DNS request comprises said source IP address, said target IP address and said token;

receiving an HTTP request for access to a web site associated with said domain name, wherein said HTTP request includes said domain name;

accessing said token from said domain name;

sending a broadcast request for information associated with said token; and

receiving said source IP address and said target IP address from said virtual DNS server for association with said client.

15. The method of claim 14, further comprising:

configuring said token as a random number.

16. The method of claim 14, further comprising:

sending said combination of source IP address and said target IP address in association with said client and said service plan to said virtual DNS server for implementation of said service plan.

17. The method of claim 10, wherein said determining a target IP address further comprises:

establishing a plurality of virtual DNS servers that is supported by said DNS server;

assigning a plurality of target IP addresses for said plurality of virtual DNS servers, wherein each target IP address comprises a first IP subaddress identifying said DNS server, and a second IP subaddress identifying a corresponding virtual DNS server; and

uniquely assigning a plurality of network capable devices to said plurality of virtual DNS servers for domain name resolution, wherein each of said plurality of network capable devices accesses said communication network through a corresponding network device associated with a corresponding source IP address.

18. The method of claim 17, further comprising:

assigning a plurality of service plans to said plurality of network capable devices used for accessing said communication network as implemented through a corresponding DNS request, wherein each service plan is uniquely assigned through a combination of source IP address and target IP address associated with an associated network device used to make said corresponding DNS request.

19. A system for providing service, comprising:

a DNS server providing service to a plurality of clients;

a plurality of virtual DNS servers supported by said DNS server, wherein said plurality of virtual DNS servers is assigned a plurality of target IP addresses, wherein each target IP address comprises a first IP subaddress identifying said DNS server, and a second IP subaddress identifying a corresponding virtual DNS server;

a header processor supporting said DNS server for determining a source IP address associated with a network capable device providing a DNS request, and for determining a target IP address that is associated with a virtual DNS server to which said DNS request is directed;

a session verifier supporting said DNS server for verifying that a unique session is established between said network capable device and said virtual DNS server, wherein said unique session is uniquely identified with a combination of said source IP address and said target IP address;

a service provider supporting said DNS server for determining a service plan of a client, using said network capable device to access a communication network, based on said combination of said source IP address and said target IP address.

20. The system of claim 19, further comprising:

a session login module comprising;

a client identifier for uniquely identifying said client; and

a token generator for generating a token that is associated with said client; and

a login completion module comprising;

an address identifier for determining a second source IP address associated with said network capable device when making a second DNS request of a domain name including said token, and for determining said target IP address of said virtual DNS server to which said second DNS request is directed; and

a session creator for establishing a unique session between said network capable device and said virtual DNS server by uniquely associating said network capable device with a combination of said second source IP address and said target IP address.

21. The system of claim 19, further comprising:

a plurality of network capable devices, each of which accesses said communication network through a corresponding network device associated with a corresponding source IP address, wherein said each of said plurality of network capable devices is uniquely assigned to said plurality of virtual DNS servers for providing service through a combination of source IP address and target IP address that is associated with said corresponding network device.