DNS SECURITY SYSTEM AND FAILURE PROCESSING METHOD
First Claim
1. A computing device, comprising:
- a memory having instructions stored thereon;
a processor configured to execute the instructions to perform operations for DNS security, the operations comprising;
initiating a domain name system (DNS) request;
providing authorization information for the DNS request;
storing all DNS requests and corresponding authorization information in a designated area;
invoking corresponding authorization information from the authorization information database when a DNS resolution failure occurs on the root node, to provide a resolution service to a corresponding client.
1 Assignment
0 Petitions
Accused Products
Abstract
The present invention provides a DNS security system and failure processing method. The DNS security system comprises: at least one client, configured to initiate a DNS request; a root node, configured to provide authorization information to the DNS request; an authorization information database, configured to store all DNS requests and corresponding authorization information in a designated area; a virtual root node, configured to invoke corresponding authorization information from the authorization information database when a DNS resolution failure occurs on the root node, and to provide a resolution service to a corresponding client. Using the present invention enhances the security and stability of DNS resolution.
-
Citations
21 Claims
-
1. A computing device, comprising:
-
a memory having instructions stored thereon; a processor configured to execute the instructions to perform operations for DNS security, the operations comprising; initiating a domain name system (DNS) request; providing authorization information for the DNS request; storing all DNS requests and corresponding authorization information in a designated area; invoking corresponding authorization information from the authorization information database when a DNS resolution failure occurs on the root node, to provide a resolution service to a corresponding client. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16)
-
-
17. (canceled)
-
18. A non-transitory computer-readable medium having computer programs stored thereon that, when executed by one or more processors of an electronic device, cause the electronic device to perform operations for failure processing, the operations comprising:
-
obtaining and storing all domain name system (DNS) requests in a designated area and corresponding authorization information, and generating a authorization information database; determining whether a DNS resolution failure occurs in a root node, if yes, initiating a virtual root node, and using the virtual root node to invoke authorization information stored in the authorization information database to provide DNS resolution service for a client. - View Dependent Claims (19, 20, 21)
-
Specification