Validating change of name server

• US 20090049198A1
• Filed: 08/14/2007
• Published: 02/19/2009
• Est. Priority Date: 08/14/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Blinn, Arnold N., Copparam, Srivaths B., Dent, Stuart James, Gillett, Donald M.
• Granted Patent: US 8,032,632 B2
• Time in Patent Office: Days
• US Class Current: 709/245
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 61/302 Administrative registration, e.g. for domain names at internet corporation for assigned names and numbers [ICANN]
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A Domain Name System (DNS) service provider may be engaged to host DNS service for a domain. Before providing service for a domain, the service provider may wish to verify that the entity that set up the service is the owner, or authorized controller, of the domain. The service provider gives the entity some information, such as a particular pair of name servers, and instructs the entity to have the domain registrar put the information into the name server (NS) record(s) for the domain. The service provider then queries NS for the domain and compares the NS record(s) returned with the information provided to the entity. If the NS records match the information given to the entity, then the service provider concludes that the entity has control over the domain, and uses the DNS records provided by the entity to provide service.

Claims

1. A method of managing a service, the method comprising:

receiving, from an entity, a request to provide the service for a domain;

communicating one or more data to said entity;

obtaining, from a published name record, one or more name server values associated with said domain;

comparing said one or more data with said one or more name server values;

determining, based on said comparing, that the service is to be provided for said domain, where the service is based on a specification provided by said entity; and

after said determining, providing the service.

2. The method of claim 1, wherein said one or more data comprise a set of one or more name server identities, and wherein said comparing comprises:

assessing whether said set matches said one or more name server values.

3. The method of claim 2, wherein said set comprises at least two name server identities.

4. The method of claim 2, further comprising:

selecting said one or more name server identities from identities associated with a group of servers that provide the service.

5. The method of claim 1, wherein the service comprises a Domain Name System (DNS) hosting service.

6. The method of claim 1, wherein said specification comprises a Domain Name System (DNS) record for said domain, and wherein the method further comprises:

receiving said specification prior to said determining.

7. The method of claim 6, further comprising:

receiving a DNS query relating to said domain after said receiving of said specification and prior to said determining; and

declining to provide said Domain Name System (DNS) record in response to said query.

8. The method of claim 1, wherein there is a number of distinct instances of said one or more data, and wherein the method further comprises:

receiving said number of requests to provide the service for said domain;

communicating a different one of said instances in response to each of said requests;

receiving an additional request to provide the service for said domain; and

referring a determination as to whether the service can be provided for said domain to a person for resolution.

9. A system that provides a service, the system comprising:

one or more data remembrance devices;

one or more processors;

software that is stored in at least one of said data remembrance devices and that is executable on at least one of said processors, said software comprising;

a first component that selects a first set of one or more server identities to provide to a first entity;

a second component that receives a first request from said first entity to provide the service for a domain, and that provides said first set of one or more server identities to said first entity, said first request comprising a first specification that comprises a first Domain Name System (DNS) record for said domain;

a third component that issues a query to obtain, from a published name record, one or more name server values associated with said domain and that, based on a first comparison of said first set of one or more server identities with said one or more name server values, makes a determination of whether to use said first specification to provide the service, the system, based on said determination, either using or declining to use said first specification to provide the service.

10. The system of claim 9, wherein said one or more server identities comprise identities of at least two servers.

11. The system of claim 9, wherein the system provides said service through a plurality of servers, and wherein said first component selects said first set of one or more server identities from among the identities of said plurality of servers.

12. The system of claim 9, wherein said comparison comprises an assessment as to whether said first set of one or more server identities match said one or more name server values.

13. The system of claim 12, wherein said comparison takes into account an order of said first set of one or more server identities and said one or more name server values.

14. The system of claim 9, wherein a second entity provides to said system a second specification that comprises a second Domain Name System (DNS) record for said domain, wherein said second component provides a second set of one or more server identities to said second entity, and wherein said third component determines, based on said first comparison and based on a second comparison of said second set of one or more server identities with said one or more name server values, whether to use said first specification or said second specification to provide the service.

15. One or more computer-readable storage media comprising executable instructions to perform a method comprising:

receiving, from an entity, a specification of one or more Domain Name System (DNS) values for a domain;

receiving a first query relating to said domain;

making a determination that said entity has demonstrated control over said domain; and

in response to said determination, communicating, over a network, at least one of said one or more DNS values in response to said first query.

16. The one or more computer-readable storage media of claim 15, wherein the method further comprises:

providing one or more data to said entity; and

obtaining, from a published record associated with said domain, one or more name server values;

wherein said making of said determination comprises;

determining that said one or more name server values include said one or more data.

17. The one or more computer-readable storage media of claim 15, wherein the method further comprises:

providing one or more server identities to said entity; and

obtaining, from a published record associated with said domain, one or more name server values;

wherein said making of said determination comprises;

determining that said one or more name server values match said one or more server identities.

18. The one or more computer-readable storage media of claim 17, wherein the service is provided by one or more of a plurality of servers, and wherein said one or more server identities are selected from identities of said plurality of servers.

19. The one or more computer-readable storage media of claim 15, wherein the method further comprises:

receiving a second query before said making of said determination and after said receiving of said specification; and

in response to said second query, declining to provide said DNS values.

20. The one or more computer-readable storage media of claim 15, wherein the method further comprises:

providing one or more data to said entity;

comparing said one or more data with a published record associated with said domain;

determining that said comparing does not resolve whether said entity controls said domain; and

referring an issue of control over said domain to a person.