DNS Package in a Partitioned Network

• US 20130173795A1
• Filed: 12/30/2011
• Published: 07/04/2013
• Est. Priority Date: 12/30/2011
• Status: Active Grant

• Current Assignee: VeriSign, Inc.
• Original Assignee: VeriSign, Inc.
• Inventors: McPherson, Danny
• Granted Patent: US 8,874,790 B2
• Time in Patent Office: Days
• US Class Current: 709/225
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/50 Network service management, e.g. ensuring proper service fulfilment according to agreements
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A Domain Name System (“DNS”) package and a method for providing domain name resolution services in a partitioned network are disclosed. The system may include one or more built-in root name servers; one or more built-in top level domain (“TLD”) name servers; and a recursive name server. The recursive name server may be configured to query the one or more built-in root name servers during domain name resolution. Moreover, the one or more built-in root name servers may be configured to provide a network address corresponding to one of the built-in TLD name servers in response to a domain name resolution query sent by the recursive name server.

Claims

1. A Domain Name System (“

DNS”

) package for providing domain name resolution services in a partitioned network, comprising;

one or more built-in root name servers;

one or more built-in top level domain (“

TLD”

) name servers; and

a recursive name server;

wherein the recursive name server is configured to query the one or more built-in root name servers during domain name resolution; and

wherein the one or more built-in root name servers are configured to provide a network address corresponding to one of the built-in TLD name servers in response to a domain name resolution query sent by the recursive name server.

2. The DNS package of claim 1, further comprising:

one or more built-in secondary level domain (“

SLD”

) name servers, wherein the one or more built-in TLD servers are configured to provide a network address corresponding to one of the built-in SLD name servers in response to the domain name resolution query sent by the recursive name server.

3. The DNS package of claim 1, further comprising:

a registry operation module for managing one or more top level domains, the one or more top level domains including at least one of;

a country code top level domain (“

ccTLD”

);

an internationalized country code top level domain (“

IDN ccTLD”

);

a generic top level domain (“

gTLD”

); and

an infrastructure top level domain.

4. The DNS package of claim 3, wherein the registry operation module is configured to store a copy of top level domain data corresponding to one of the managed top level domains on the one or more built-in TLD name servers.

5. The DNS package of claim 3, wherein the registry operation module is configured to store a subset of top level domain data of the managed top level domains on the one or more built-in TLD name servers, wherein the subset includes records of one or more name servers whose network addresses are within a boundary of the partitioned network.

6. The DNS package of claim 3, further comprising:

a registrar interface configured to communicate with the registry operation module according to a protocol.

7. The DNS package of claim 1, further comprising:

one or more authority servers;

a DNS portal configured to direct a query to the one or more authority servers.

8. The DNS package of claim 1, wherein the recursive name server is configured to block, redirect, wildcard, synthesize, or geo-locate an address associated with, the domain name resolution query.

9. The DNS package of claim 1, further comprising:

a validator configured to valid a response received by the recursive name server based on a Domain Name System Security Extensions (“

DNSSEC”

) certificate,

wherein the recursive name server is configured to perform domain name resolution even when the DNSSEC certificate expires.

10. The DNS package of claim 9, wherein the recursive name server is configured to disregard an expired DNSSEC certificate.

11. The DNS package of claim 9, wherein the recursive name server is configured to bypass DNSSEC certificate validation.

12. A method for providing domain name resolution services in a partitioned network, comprising:

providing one or more built-in root name servers;

providing one or more built-in top level domain (“

TLD”

) name servers;

providing a recursive name server;

querying, by the recursive name server, the one or more built-in root name servers during domain name resolution; and

providing, by the one or more built-in root name servers, a network address corresponding to one of the built-in TLD name servers in response to a domain name resolution query sent by the recursive name server.

13. The method of claim 12, further comprising:

providing one or more built-in secondary level domain (“

SLD”

) name servers; and

providing, by the one or more built-in TLD servers, a network address corresponding to one of the built-in SLD name servers in response to the domain name resolution query sent by the recursive name server.

14. The method of claim 12, further comprising:

providing a registry operation module; and

managing, by the registry operation module, one or more top level domains, the one or more top level domains including at least one of;

a country code top level domain (“

ccTLD”

);

an internationalized country code top level domain (“

IDN ccTLD”

);

a generic top level domain (“

gTLD”

); and

an infrastructure top level domain.

15. The method of claim 14, further comprising:

storing, by the registry operation module, a copy of top level domain data corresponding to one of the managed top level domains on the one or more built-in TLD name servers.

16. The method of claim 14, further comprising:

storing, by the registry operation module, a subset of top level domain data of the managed top level domains on the one or more built-in TLD name servers, wherein the subset includes records of one or more name servers whose network addresses are within a boundary of the partitioned network.

17. The method of claim 14, further comprising:

providing a registrar interface to communicate with the registry operation module according to a protocol.

18. The method of claim 12, further comprising:

providing one or more authority servers; and

providing a DNS portal to direct a query to the one or more authority servers.

19. The method of claim 12, further comprising:

blocking, redirecting, wildcarding, synthesizing, or geo-locating an address associated with, the domain name resolution query.

20. The method of claim 12, further comprising:

providing a validator for validating a response received by the recursive name server based on a Domain Name System Security Extensions (“

DNSSEC”

) certificate;

performing, by the recursive name server, domain name resolution even when a DNSSEC certificate expires.

21. The method of claim 20, further comprising:

disregarding an expired DNSSEC certificate.

22. The method of claim 20, further comprising:

bypassing DNSSEC certificate validation.