RECOVERY OF A FAILED REGISTRY

• US 20120304004A1
• Filed: 05/27/2011
• Published: 11/29/2012
• Est. Priority Date: 05/27/2011
• Status: Active Grant

• Current Assignee: VeriSign, Inc.
• Original Assignee: VeriSign, Inc.
• Inventors: Gould, James, Essawi, Tarik, Craddock, Kenneth Jr., Periasamy, Velmurugan, Balasubramanian, Ramesh
• Granted Patent: US 8,656,209 B2
• Time in Patent Office: Days
• US Class Current: 714/15
• CPC Class Codes: G06F 11/1451 by selection of backup contents
• CPC Class Codes: G06F 11/1469 Backup restoration techniques
• CPC Class Codes: H04L 61/302 Administrative registration, e.g. for domain names at internet corporation for assigned names and numbers [ICANN]
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]

Abstract

A system, method, and computer-readable medium, is described that enables a registry recovery service to retrieve zone files from a target registry, archive the zone files, publish the zone files to a managed DNS server, reconcile ownership of the zone files, and publish the zone files to a provisioning DNS server. The registry recovery service may also implement a WHOIS server for the zone and ownership information and may also implement zone specific features particular to the target registry'"'"'s TLD. The registry recovery service may also enable DNSSEC extensions on the recovered registry DNS services.

Claims

1. A computer-implemented method of recovering a registry comprising:

receiving zone data from the registry;

archiving the zone data into a data repository;

publishing the zone data into a managed DNS service;

reconciling ownership of the zone data; and

launching a provisioning DNS service.

2. The method of claim 1, comprising:

implementing a WHOIS service; and

implementing services specific to the registry.

3. The method of claim 1, wherein the managed DNS service is configured to electronically accept zone updates from an authorized user via an electronic interface, wherein the authorized user is not the zone owner.

4. The method of claim 1, wherein the reconciliation of ownership data is based on at least one of escrow data, WHOIS data, or survey data.

5. The method of claim 1, wherein the provisioning DNS service is configured to electronically accept zone updates from the zone owner via an electronic interface.

6. The method of claim 1, wherein the ownership of the zone data is reconciled by:

receiving from registrars claimed ownership information;

resolving conflicts of ownership based on a predetermined conflict resolution process; and

assigning ownership based on the results of the conflict resolution or claims of ownership.

7. The method of claim 1, comprising:

enabling DNS Security (DNSSEC) extensions on a zone by digitally signing the zone with a Zone Signing Key (ZSK) and updating a root zone server with a corresponding Delegator Signor (DS) key.

8. A system of recovering a registry comprising:

a non-transitory memory storing instructions; and

a processor executing the instructions to cause the system to perform a method comprising;

receiving zone data;

archiving the zone data into a data repository;

publishing the zone data into a managed DNS service;

reconciling ownership of the zone data; and

launching a provisioning DNS service.

9. The system of claim 8, comprising:

implementing a WHOIS service; and

implementing services specific to the registry.

10. The system of claim 8, wherein the managed DNS service is configured to electronically accept zone updates from an authorized user via an electronic interface, wherein the authorized user is not the zone owner.

11. The system of claim 8, wherein the reconciliation of ownership data is based on at least one of escrow data, WHOIS data, or survey data.

12. The system of claim 8, wherein the provisioning DNS service is configured to electronically accept zone updates from the zone owner via an electronic interface.

13. The system of claim 8, wherein the ownership of the zone data is reconciled by:

receiving from registrars claimed ownership information;

resolving conflicts of ownership based on a predetermined conflict resolution process; and

assigning ownership based on the results of the conflict resolution or claims of ownership.

14. The system of claim 8, comprising:

enabling DNSSEC extensions on a zone by digitally signing the zone with a ZSK and updating a root zone server with a corresponding DS key.

15. A non-transitory computer-readable storage medium containing instructions which, when executed on a processor, perform a method comprising:

receiving zone data;

archiving the zone data into a data repository;

publishing the zone data into a managed DNS service;

reconciling ownership of the zone data; and

launching a provisioning DNS service.

16. The computer-readable medium of claim 15, wherein the method comprises:

implementing a WHOIS service; and

implementing services specific to the registry.

17. The computer-readable medium of claim 15, wherein the managed DNS service is configured to electronically accept zone updates from an authorized user via an electronic interface, wherein the authorized user is not the zone owner.

18. The computer-readable medium of claim 15, wherein the reconciliation of ownership data is based on at least one of escrow data, WHOIS data, or survey data.

19. The computer-readable medium of claim 15, wherein the provisioning DNS service is configured to electronically accept zone updates from the zone owner via an electronic interface.

20. The computer-readable medium of claim 15, wherein the ownership of the zone data is reconciled by:

receiving from registrars claimed ownership information;

resolving conflicts of ownership based on a predetermined conflict resolution process; and

assigning ownership based on the results of the conflict resolution or claims of ownership.

21. The computer-readable medium of claim 15, wherein the method comprises:

enabling DNSSEC extensions on a zone by digitally signing the zone with a ZSK and updating a root zone server with a corresponding DS key.

22. A computer-implemented method of recovering a registry comprising:

receiving zone data and ownership information from the registry;

archiving the zone data and ownership information;

publishing the zone data into a provisioning DNS service; and

enabling DNSSEC extensions on a zone by digitally signing the zone with a ZSK and updating a root zone server with a corresponding DS key.

23. The method of claim 22, comprising:

updating root zone servers with an ip address corresponding to the provisioned DNS service.

24. A non-transitory computer-readable storage medium containing instructions which, when executed on a processor, perform a method comprising:

receiving zone data and ownership information from the registry;

archiving the zone data and ownership information;

publishing the zone data into a provisioning DNS service;

enabling DNSSEC extensions on a zone by digitally signing the zone with a ZSK and updating a root zone server with a corresponding DS key.

25. The computer-readable medium of claim 24, wherein the method comprises:

updating root zone servers with an ip address corresponding to the provisioned DNS service.