System and Method to Generate Secure Name Records

• US 20130198385A1
• Filed: 01/28/2012
• Published: 08/01/2013
• Est. Priority Date: 01/28/2012
• Status: Active Grant

• Current Assignee: A10 Networks Incorporated
• Original Assignee: A10 Networks Incorporated
• Inventors: Han, Liang, Yang, Yang
• Granted Patent: US 10,044,582 B2
• Time in Patent Office: Days
• US Class Current: 709/226
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 2101/69 using geographic information, e.g. room number
• CPC Class Codes: H04L 41/5058 Service discovery by the service manager
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 61/302 Administrative registration, e.g. for domain names at internet corporation for assigned names and numbers [ICANN]
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]

Abstract

A method to generate name records by a service gateway includes: receiving a name service request including a name from a host; creating a name service request using the name; sending the name service request to a name service server; receiving a response from the name service server, the response including a service server name record with one or more service server name entries corresponding to the name; generating and storing service gateway name records using the name and the name entries; and sending a selected service gateway name record to the host as a response to the name service request. When a subsequent name service request including the name is received, the service gateway compares the name against the stored service gateway name records, and in response to finding a match, sending the given service gateway name record as a response to the subsequent name service request.

Claims

1. A method to generate name records by a service gateway comprising a processor, comprising:

(a) receiving a name service request from a host, the request comprising a name;

(b) obtaining a service server name record from a name service server, the service server name record comprising one or more name entries corresponding to the name;

(c) generating and storing a plurality of service gateway name records using the name and the name entries; and

(d) sending a service gateway name record of the plurality of service gateway name records to the host as a response to the name service request.

2. The method of claim 1, wherein the obtaining (b) comprises:

(b1) creating a name service request using the name;

(b2) sending the name service request to the name service server; and

(b3) receiving a response to the name service request from the name service server, the response comprising the service server name record comprising the one or more service server name entries corresponding to the name.

3. The method of claim 1, further comprising:

(e) receiving a subsequent name service request comprising the name;

comparing the name against the stored plurality of service gateway name records; and

(g) in response to determining a match with a given service gateway name record, sending the given service gateway name record as a response to the subsequent name service request.

4. The method of claim 3, further comprising:

(h) in response to determining there is no match with the plurality of service gateway name records, creating a name service request using the name; and

sending the name service request to the name service server.

5. The method of claim 1, wherein the generating (c) comprises:

(c1) determining a number of name entry combinations as N out of the M name entries obtained from the name service server;

(c2) creating a given service gateway name record using the name and a given name entry combination; and

(c3) repeating the creating (c2) according to a storage capacity of the service gateway.

6. The method of claim 5, wherein the creating (c2) comprises:

(c2i) creating the given service gateway name record using the name and the given name entry combination according to a service policy.

7. The method of claim 5, wherein the name entry combinations comprises an ordered number of the name entry combinations.

8. The method of claim 1, wherein the sending (d) comprises:

(d1) determining a status of at least one server corresponding to the service gateway name record;

(d2) in response to determining that the status indicates that the at least one server is available, sending the service gateway name record to the host as the response to the name service request.

9. The method of claim 8, wherein the sending (d) further comprises:

(d3) in response to determining that the status indicates that one or more servers corresponding to the service gateway name record is unavailable, do not send the service gateway name record to the host.

10. The method of claim 1, wherein the sending (d) comprises:

(d1) encrypting the service gateway name record; and

(d2) sending the encrypted service gateway name record to the host as the response to the name service request.

11. A computer program product comprising a computer readable device having a computer readable program, wherein the computer readable program when executed on a computer causes the computer to:

(a) receive a name service request from a host, the request comprising a name;

(b) obtain a service server name record from a name service server, the service server name record comprising one or more name entries corresponding to the name;

(c) generate and store a plurality of service gateway name records using the name and the name entries; and

(d) send a service gateway name record of the plurality of service gateway name records to the host as a response to the name service request.

12. The computer program product of claim 11, wherein the obtain (b) comprises:

(b1) create a name service request using the name;

(b2) send the name service request to the name service server; and

(b3) receive a response to the name service request from the name service server, the response comprising the service server name record comprising the one or more service server name entries corresponding to the name.

13. The computer program product of claim 11, further comprising:

(e) receive a subsequent name service request comprising the name;

(f) compare the name against the stored plurality of service gateway name records; and

(g) in response to determining a match with a given service gateway name record, send the given service gateway name record as a response to the subsequent name service request.

14. The computer program product of claim 13, further comprising:

(h) in response to determining there is no match with the plurality of service gateway name records, create a name service request using the name; and

send the name service request to the name service server.

15. The computer program product of claim 11, wherein the generate (c) comprises:

(c1) determine a number of name entry combinations as N out of the M name entries obtained from the name service server;

(c2) create a given service gateway name record using the name and a given name entry combination; and

(c3) repeat the create (c2) according to a storage capacity of the service gateway.

16. The computer program product of claim 15, wherein the create (c2) comprises:

(c2i) create the given service gateway name record using the name and the given name entry combination according to a service policy.

17. The computer program product of claim 11, wherein the send (d) comprises:

(d1) determine a status of at least one server corresponding to the service gateway name record;

(d2) in response to determining that the status indicates that the at least one server is available, send the service gateway name record to the host as the response to the name service request.

18. The computer program product of claim 17, wherein the send (d) further comprises:

(d3) in response to determining that the status indicates that one or more servers corresponding to the service gateway name record is unavailable, do not send the service gateway name record to the host.

19. The computer program product of claim 11, wherein the send (d) comprises:

(d1) encrypt the service gateway name record; and

(d2) send the encrypted service gateway name record to the host as the response to the name service request.

20. A service gateway, comprising:

a processor; and

a computer readable device having a computer readable program, wherein the computer readable program when executed by the processor, causes the service gateway to;

(a) receive a name service request from a host, the request comprising a name;

(b) obtain a service server name record from a name service server, the service server name record comprising one or more name entries corresponding to the name;

(c) generate and store a plurality of service gateway name records using the name and the name entries; and

(d) send a service gateway name record of the plurality of service gateway name records to the host as a response to the name service request.

21. The service gateway of claim 20, wherein the obtain (b) comprises:

(b1) create a name service request using the name;

(b2) send the name service request to the name service server; and

(b3) receive a response to the name service request from the name service server, the response comprising the service server name record comprising the one or more service server name entries corresponding to the name.

22. The service gateway of claim 20, further causing the service gateway to:

(e) receive a subsequent name service request comprising the name;

compare the name against the stored plurality of service gateway name records; and

(g) in response to determining a match with a given service gateway name record, send the given service gateway name record as a response to the subsequent name service request.

23. The service gateway of claim 22, further causing the service gateway to:

(h) in response to determining there is no match with the plurality of service gateway name records, create a name service request using the name; and

send the name service request to the name service server.

24. The service gateway of claim 20, wherein the generate (c) comprises:

(c1) determine a number of name entry combinations as N out of the M name entries obtained from the name service server;

(c2) create a given service gateway name record using the name and a given name entry combination; and

(c3) repeat the create (c2) according to a storage capacity of the service gateway.

25. The service gateway of claim 24, wherein the create (c2) comprises:

(c2i) create the given service gateway name record using the name and the given name entry combination according to a service policy.

26. The service gateway of claim 20, wherein the send (d) comprises:

(d1) determine a status of at least one server corresponding to the service gateway name record;

(d2) in response to determining that the status indicates that the at least one server is available, send the service gateway name record to the host as the response to the name service request.

27. The service gateway of claim 26, wherein the send (d) further comprises:

(d3) in response to determining that the status indicates that one or more servers corresponding to the service gateway name record is unavailable, do not send the service gateway name record to the host.

28. The service gateway of claim 20, wherein the send (d) comprises:

(d1) encrypt the service gateway name record; and

(d2) send the encrypted service gateway name record to the host as the response to the name service request.