SYSTEM AND METHOD TO CUSTOMIZE DNS REPLIES BASED ON CONNECTION IDENTITY

• US 20120215892A1
• Filed: 04/26/2011
• Published: 08/23/2012
• Est. Priority Date: 02/22/2011
• Status: Abandoned Application

• Current Assignee: eCert, Inc.
• Original Assignee: eCert, Inc.
• Inventors: Wanser, Kelly, Costales, Bryan, Fontana, Hilda, Royan, Ajay Gopal
• Application Number:
  US13/094,790
• Publication Number:
  US 20120215892A1
• Time in Patent Office: Days
• US Class Current: 709/222
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories

Abstract

A highly advantageous domain name system and method are disclosed for receiving and replying to queries for information associated with at least one Internet connected domain in which replies to queries are based at least in part on the identity of the querying entity.

Claims

1. In an Internet connected Domain Name System (DNS) configured for receiving and replying to queries for information associated with at least one Internet connected domain from a plurality of querying entities each having an entity indicator, a method comprising:

defining the information associated with the domain to have at least two different subsets of the information associated with the domain; and

designating at least one of the subsets of information for use in replying to a query based at least in part on the entity indicator of the querying entity.

4. The method according to claim 1, wherein the DNS includes a memory cache, said method further comprising:

storing the designated subset of information in the memory cache of the DNS.

5. The method as defined in claim 1, further comprising:

storing the designated subset of information in a memory device that is accessible by the DNS.

6. The method as defined in claim 5, wherein the memory device is accessible by the DNS using a network.

7. The method as defined in claim 5, wherein the memory device is accessible by the DNS using a socket based service.

8. The method as defined in claim 1, further comprising:

storing the designated subset of information in a database.

9. The method as defined in claim 1, further comprising:

storing the designated subset of information in a read/write memory.

10. The method as defined in claim 1, further comprising:

storing the designated subset of information in a read-only memory.

11. The method as defined in claim 1, further comprising:

storing the designated subset of information in a flash-based memory.

12. The method as defined in claim 1, further comprising:

storing the designated subset of information in a disk-based memory.

2. The method according to claim 2, wherein the aforementioned designated subset of information is a first subset of information and further comprising:

configuring the first subset of information for use in replying to queries from querying entities that are designated to receive the first subset of information and configuring at least one other subset of the information for use in replying to queries from all other querying entities.

3. The method according to claim 2, wherein the first subset of information is configured to include at least one preference that is selectable by a domain administrator of the domain.

13. In an Internet connected Domain Name System (DNS) configured to receive and reply to information queries about at least one Internet connected domain from a plurality of querying entities each having an entity indicator that is usable to determine an identity of the querying entity, a method comprising:

configuring information associated with the domain to be used for replying to the information queries about the domain into subsets of information where at least one subset is configured with special response information for replying to at least one querying entity that is predetermined to receive the special response information based on the entity indicator, and at least one other subset is configured with general response information for replying to at least one querying entity that is not predetermined to receive the special response information based on the entity indicator; and

storing the configured information in a memory device.

14. A method as defined in claim 13, said method further comprising:

designating at least one of the plurality of querying entity as predetermined to receive the special response information;

receiving a query for information from the designated querying entity using the DNS, where the received query for information includes the entity indicator of the designated querying entity;

determining that the querying entity is the designated querying entity based on the received entity indicator;

accessing the special response information of the configured information from the memory device; and

replying to the query for information from the designated querying entity including at least the special response information.

15. A method as defined in claim 14, wherein the DNS includes a DNS server and the query for information is received by the DNS server, said method further comprising:

configuring the DNS server to communicate with a different server when determining that the querying entity is the designated querying entity.

16. A method as defined in claim 14, wherein the DNS includes a DNS server and the query for information is received by the DNS server, and wherein storing the configured information includes storing at least the special response information in the memory device in a different server and wherein the DNS server communicates with the different server when accessing the special response information.

17. A method as defined in claim 14, further comprising:

installing a software hook in the DNS to intercept the received query for information and to supply the reply to the query to the DNS.

18. A method as defined in claim 17, wherein the DNS includes a DNS server and the query for information is received by the DNS server and the software hook is installed in the DNS server and wherein at least the special response information is stored in the memory device in a different server and the DNS server communicates with the different server when accessing the special response information.

19. A method as defined in claim 17, wherein the software hook uses a function call to determine that the querying entity is the designated querying entity and to access the special response information.

20. A method as defined in claim 17, wherein the software hook uses a process with at least one command line argument to determine that the querying entity is the designated querying entity and to access the special response information.

21. A method as defined in claim 17, wherein the software hook uses an inter-process communication to determine that the querying entity is the designated querying entity and to access the special response information.

22. A method as defined in claim 17, wherein the software hook uses a semaphore in determining that the querying entity is the designated querying entity and for accessing the special response information.

23. A method as defined in claim 17, wherein the software hook uses a token exchange in determining that the querying entity is the designated querying entity and in accessing the special response information.

24. A method as defined in claim 13, wherein the determination is based on the entity indicator that is an IP address of the designated querying entity.

25. A method as defined in claim 13, wherein the designated querying entity is a domain and the determination is based on the entity indicator that is an IP address of the domain.

26. A method as defined in claim 13, wherein the designated querying entity is a host and the determination is based on the entity indicator that is an IP address of the host.

27. A method as defined in claim 13, wherein the designated querying entity is a host and the determination is based on the entity indicator that is a host name of the host.

28. A method as defined in claim 13, wherein the designated querying entity is a domain and the determination is based on the entity indicator that is a domain name of the domain.

29. A method as defined in claim 13, wherein the special response information is related to email sending policy.

30. A method as defined in claim 29, wherein the email sending policy includes information related to DomainKeys Identified Mail.

31. A method as defined in claim 29, wherein the email sending policy includes information related to Sender Policy Framework.

32. A method as defined in claim 29, wherein the email sending policy includes a text record.

33. A method as defined in claim 29, wherein the email sending policy includes a bit length of an email signing key.

34. A method as defined in claim 13, wherein the memory device is cache of the DNS.

35. A method as defined in claim 34, wherein the DNS cache includes existing information related to the domain, and said method includes modifying the existing information by storing the configured information in the DNS cache.

36. A method as defined in claim 35, wherein existing information included in the DNS cache includes the general response information subset.

37. A method as defined in claim 34, wherein storing the configured information in the memory device includes storing the special purpose information subset in one portion of the DNS cache and storing the general response information subset in a different portion of the DNS cache.

38. A method as defined in claim 13, wherein the configured information is stored remote from the DNS and is accessible by the DNS over a network link.

39. A method as defined in claim 13, wherein the special response subset of information is configured at least partially by an administrator of the domain.

40. In an Internet connected Domain Name System (DNS) configured to receive and reply to information queries about at least one Internet connected domain from a plurality of querying entities each having an entity indicator that is usable to determine an identity of the querying entity, an apparatus comprising:

a memory device storing domain information associated with the domain to be used for replying to the information queries about the domain; and

a computer communicatively connected to the memory device and arranged to allow for configuration of the domain information in the memory device into at least two different subsets, where at least one of the subsets is configured for replying to a query for information about the domain based at least in part on the identity of the querying entity.

41. The apparatus as defined in claim 40 wherein the computer is arranged to be accessible by a domain administrator of the domain to allow the domain administrator to configure the domain information.

42. The apparatus as defined in claim 40 wherein the memory device is a memory cache of the DNS.

43. The apparatus as defined in claim 40 wherein the memory device is a database.

44. The apparatus as defined in claim 40 wherein the memory device is a read/write memory.

45. The apparatus as defined in claim 40 wherein the memory device is a read-only memory.

46. The apparatus as defined in claim 40 wherein the memory device is a flash-based memory.

47. The apparatus as defined in claim 40 wherein the memory device is a disk-based memory.

48. The apparatus as defined in claim 40 wherein the memory device is a network connected memory.

49. The apparatus as defined in claim 40 wherein the memory device includes a socket based service for connection to the computer.

50. The apparatus as defined in claim 40 wherein the computer is a part of the DNS.

51. The apparatus as defined in claim 50 wherein the memory device is a memory cache of the DNS.

52. The apparatus as defined in claim 50, further comprising a network connected between the computer and the DNS for communicating the domain information from the computer to the DNS to allow the DNS to include the domain information in replies to information queries.

53. The apparatus as defined in claim 52, wherein the computer is located remotely from the DNS and the network is the Internet.