Validation of domain name control

• US 7,987,251 B2
• Filed: 09/16/2005
• Issued: 07/26/2011
• Est. Priority Date: 09/16/2005
• Status: Expired due to Fees

• Current Assignee: ServiceNow Incorporated
• Original Assignee: Microsoft Corporation
• Inventors: Gillett, Don, Hagan, Cynthia, Blinn, Arnold
• Primary Examiner(s): Chan; Wing F
• Assistant Examiner(s): Baturay; Alicia
• Application Number:
  US11/228,926
• Publication Number:
  US 20070067465A1
• Time in Patent Office: 2,139 Days
• Field of Search: 709/223
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 43/50 Testing arrangements
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 61/3015 Name registration, generation or assignment
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]

Abstract

A system, operable on one or more computers, and a computer-readable media are presented for validating an assertion made by a user that he or she controls a domain name. The system comprises an assertion receiver, authorization code generator, and a validation component. The assertion receiver receives either an explicit or an implicit indication that a particular user exercises control over a domain name. The authorization code generator provides an authorization code, to be electronically published in a Domain Name System (DNS) record associated with the domain name. After the authorization code has been inserted in a DNS record, the validation component accesses the DNS record to determine presence of the authorization code within the DNS records. If the authorization code is present, control of the domain by the user is established.

Claims

1. A system, operable on one or more computers having one or more processors, for validating control of a domain, said system comprising:

an assertion receiver component that receives an indication that a user exercises control a over domain name;

an authorization code generator that in response to said indication provides an authorization code to be electronically published within a record that indicates at least one server that provides Domain Name System services associated with said domain name, and wherein said assertion receiver component is configured to provide said user with said authorization code and instructions to modify said record;

a validation component configured to access, via said one or more processors, said record and to determine whether said authorization code is published within said record, wherein said validation component is configured to observe said record associated with said domain name and to compare said record with said authorization code,

and

an account creation component configured to identify at least one service to be provided by a web service provider and to create one or more user accounts having said domain name, wherein said account creation component is configured to authenticate one or more administrators for control of said at least one service.

2. The system of claim 1, wherein said assertion receiver component further comprises an assertion generator Application Programming Interface configured to automatically modify the Domain Name System record.

3. The system of claim 1, wherein the assertion receiver component is configured to identify at least one service to be provided by a web service provider.

4. The system of claim 1, wherein said account creation component is further configured to create at least one account automatically.

5. One or more non-transitory computer-readable media, operable on one or more computers having one or more processors configured to perform a method for validating control of a domain, said method comprising:

receiving an indication from a user that said user exercises control over a domain name;

in response to receiving said indication, providing an authorization code to be electronically published in a record that indicates at least one server that provides Domain Name System services associated with said domain name;

providing said user with said authorization code and instructions to modify said record;

validating, via said one or more processors, that said authorization code was published within said record, wherein said validating includes observing said record associated with said domain name and comparing said record with said authorization code;

identifying at least one service to be provided by a web service provider;

creating one or more user accounts having said domain name, and authenticating an administrator for control of said at least one service.

6. The non-transitory computer-readable media of claim 5, wherein said method further comprises creating at least one account having said domain name.

7. The non-transitory computer-readable media of claim 6, wherein said creating at least one user account operates automatically according to a predefined policy.