Secure resource name resolution

• US 8,332,487 B2
• Filed: 12/27/2010
• Issued: 12/11/2012
• Est. Priority Date: 08/08/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Trace, Rob M., Meren, Libby
• Primary Examiner(s): Meky, Moustafa M
• Application Number:
  US12/979,202
• Publication Number:
  US 20110162039A1
• Time in Patent Office: 715 Days
• Field of Search: 709200-203, 709217-227, 709/228
• US Class Current: 709/219
• CPC Class Codes: G06F 15/17306 Intercommunication techniques
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

Techniques for securing name resolution technologies and for ensuring that name resolution technologies can function in modern networks that have a plurality of overlay networks accessible via a single network interface. In accordance with some of the principles described herein, a set of resolution parameters may be implemented by a user, such as an end user or an administrator, to be used during a name resolution process for securing the process and/or for conducting the process in an overlay network. In some implementations, the set of resolution parameters may be maintained as a table of rules, and used to govern name resolution processes. For example, resolution parameters may be created that govern a DNSSEC session, or that govern how to communicate with networks implemented with Microsoft'"'"'s Direct Access overlay technologies, or that govern communications using any other networking technology.

Claims

1. A method comprising:

receiving a collection of resolution parameters for a domain controller;

storing the collection of resolution parameters as part of a group policy; and

sending the collection of resolution parameters to a client computer system according to the group policy.

2. The method of claim 1 wherein the collection of resolution parameters comprise additional global parameters that are not part of a particular set of parameters.

3. The method of claim 2 wherein the global parameters relate to all sets of parameters.

4. The method of claim 2 wherein the global parameters relate to fallback parameters.

5. The method of claim 1 wherein sending the collection of resolution parameters to the client computer system according to the group policy comprises sending the collection of resolution parameters at predetermined intervals.

6. The method of claim 1 wherein sending the collection of resolution parameters to the client computer system according to the group policy comprises sending the collection of resolution parameters when the client computer system accesses a network associated with the domain controller.

7. The method of claim 1 wherein each of the resolution parameters in the collection of resolution parameters is associated with a network resource.

8. A computer-readable storage medium encoding computer executable instructions that, when executed by at least one processor, perform a method comprising:

receiving a collection of resolution parameters for a domain controller;

storing the collection of resolution parameters as part of a group policy; and

sending the collection of resolution parameters to a client computer system according to the group policy.

9. The computer-readable storage medium of claim 8 wherein the collection of resolution parameters comprise additional global parameters that are not part of a particular set of parameters.

10. The computer-readable storage medium of claim 9 wherein the global parameters relate to all sets of parameters.

11. The computer-readable storage medium of claim 9 wherein the global parameters relate to fallback parameters.

12. The computer-readable storage medium of claim 8 wherein sending the collection of resolution parameters to the client computer system according to the group policy comprises sending the collection of resolution parameters at predetermined intervals.

13. The computer-readable storage medium of claim 8 wherein sending the collection of resolution parameters to the client computer system according to the group policy comprises sending the collection of resolution parameters when the client computer system accesses a network associated with the domain controller.

14. A system comprising:

one or more processors; and

a memory coupled to the one or more processors, the memory for storing instructions which, when executed by the one or more processors, cause the one or more processors to perform a method comprising;

receiving a collection of resolution parameters for a domain controller;

storing the collection of resolution parameters as part of a group policy; and

sending the collection of resolution parameters to a client computer system according to the group policy.

15. The system of claim 14 wherein the collection of resolution parameters comprise additional global parameters that are not part of a particular set of parameters.

16. The system of claim 15 wherein the global parameters relate to all sets of parameters.

17. The system of claim 15 wherein the global parameters relate to fallback parameters.

18. The system of claim 14 wherein sending the collection of resolution parameters to the client computer system according to the group policy comprises sending the collection of resolution parameters at predetermined intervals.

19. The system of claim 14 wherein sending the collection of resolution parameters to the client computer system according to the group policy comprises sending the collection of resolution parameters when the client computer system accesses a network associated with the domain controller.

20. The system of claim 14, wherein each of the resolution parameters in the collection of resolution parameters is associated with a network resource.